Negotiating OFAC and BIS Enforcement Settlements in the USA (2026): a Practical Playbook for Minimising Civil Penalties and Criminal Exposure

OFAC BIS settlements USA present some of the most consequential decisions a company will ever face, and 2026 has sharpened the stakes considerably. Renewed enforcement activity from both the Office of Foreign Assets Control (OFAC) and the Bureau of Industry and Security (BIS), combined with updated public guidance and closer coordination with the Department of Justice, has turned settlement strategy into an urgent operational priority for general counsel, chief compliance officers and export control officers. When an inquiry lands, the choices made in the first days, whether to disclose, how to preserve privilege, what to submit, and when to bring in criminal defence counsel, often determine whether a matter resolves as a civil penalty or escalates into criminal exposure.

This article is a practitioner-first, litigation-aware playbook for navigating that terrain: it explains how each agency calculates penalties, when voluntary self-disclosure helps and when it hurts, how to build a persuasive mitigation submission, and how to negotiate a resolution while protecting against parallel criminal risk. Throughout, every material assertion is anchored to authoritative government and statutory sources so that in-house teams can act with confidence.

OFAC vs BIS: Enforcement Landscapes and Settlement Basics

To negotiate effectively, counsel must first understand that OFAC and BIS operate under different statutory mandates, employ different enforcement offices, and apply different penalty frameworks, even though their cases often overlap. Sanctions enforcement settlement work frequently touches both agencies simultaneously, because a single transaction can implicate both a sanctions program administered by OFAC and an export control requirement enforced by BIS. Recognising where the authorities diverge, and where they converge, is the foundation of any credible settlement strategy for OFAC BIS settlements USA.

Both agencies pursue civil administrative resolutions as their primary tool, reserving criminal referral for conduct that appears wilful or deliberately evasive. That structural feature, civil first, criminal by referral, is what makes settlement negotiation possible, and what makes early strategic decisions so important.

OFAC: Authority, Typical Violations and the Civil Penalty Framework

OFAC administers and enforces U.S. economic and trade sanctions based on national security and foreign policy goals. Its authority derives principally from the International Emergency Economic Powers Act (IEEPA) and a range of program-specific sanctions statutes, with implementing regulations codified across 31 C.F.R. Chapter V. Typical violations include processing prohibited transactions with sanctioned jurisdictions or parties, dealing in blocked property, failing to block or reject transactions, and evading or causing violations of sanctions prohibitions.

OFAC’s Enforcement function evaluates apparent violations and, where appropriate, negotiates settlements or issues penalties. The methodology is set out in OFAC’s Economic Sanctions Enforcement Guidelines (Appendix A to 31 C.F.R. Part 501), which identify the General Factors OFAC weighs, including wilfulness or recklessness, awareness of the conduct, harm to sanctions program objectives, the sophistication of the party, the existence and quality of a compliance program, remedial response and cooperation. Understanding these factors is essential, because they are the levers a mitigation submission must pull. Every argument for OFAC penalty mitigation should map directly to one or more of these enumerated General Factors.

BIS (EAR): Authority, Typical Violations and Administrative vs Criminal Enforcement

BIS administers the Export Administration Regulations (EAR), codified at 15 C.F.R. Parts 730–774, which govern the export, reexport and transfer of dual-use and certain other items. Enforcement is handled principally by the Office of Export Enforcement (OEE), which investigates suspected violations and pursues administrative resolution. Typical export control enforcement matters involve unlicensed exports, misclassification of controlled items, transfers to prohibited end users or end uses, evasion of licensing requirements, and dealings with parties on BIS restricted-party lists.

BIS’s civil administrative toolkit is broader than a monetary penalty. In addition to administrative fines, OEE can pursue denial of export privileges and other administrative sanctions, measures that can be commercially devastating and are frequently more consequential than the dollar figure. BIS penalty negotiation therefore often centres on the non-monetary terms as much as the fine. Where conduct appears wilful, BIS coordinates with prosecutors, and export control violations can be charged criminally under the applicable statutes, making early risk assessment critical.

Commonalities and Practical Implications for Negotiators

Despite their differences, OFAC and BIS share several practical features that shape negotiation strategy. Both give substantial weight to the existence and effectiveness of a compliance program. Both reward timely, thorough voluntary self-disclosure with mitigation credit. Both value genuine cooperation and demonstrable remediation. And critically, neither agency’s civil resolution guarantees protection from a criminal referral or prosecution, the civil and criminal tracks are distinct, and a favourable settlement on one does not bind the other.

For negotiators, the practical implication is that OFAC BIS settlements USA must be approached as a single, coordinated exercise even when only one agency has opened a file. Facts disclosed to one regulator may reach the other and may reach the DOJ. Every submission, every interview and every remediation representation should be prepared with all three audiences in mind.

Mapping Risk: Civil Penalties, Criminal Exposure and Who Decides

Before choosing a strategy, counsel must map the full universe of exposure. A matter that looks like a straightforward civil penalty can carry latent criminal risk, and the decision-makers on each track are different. This risk-mapping exercise should be one of the first steps in any OFAC BIS settlements USA engagement.

IEEPA and the Criminal Statutes

IEEPA, codified at 50 U.S.C. Chapter 35 (sections 1701 et seq.), is the statutory backbone of many OFAC sanctions programs and supplies both civil and criminal penalty provisions. It authorises civil monetary penalties for violations and provides for criminal liability where a violation is committed wilfully. Because IEEPA criminal exposure turns on wilfulness, the factual question of what the company and its personnel knew, and when, is the fault line between a civil settlement and a criminal case.

Export control violations under the EAR carry their own criminal provisions for wilful conduct, principally under the Export Control Reform Act of 2018 (codified at 50 U.S.C. Chapter 58). The presence of facts suggesting knowledge, concealment, false statements or deliberate circumvention should immediately elevate a matter from routine civil handling to a coordinated civil-criminal defence posture. This is the single most important triage decision in the early stage of a case.

DOJ Charging Considerations and Sentencing Exposure

Where conduct may be criminal, the DOJ, not the regulatory agency, decides whether to charge. DOJ’s charging decisions in corporate matters are informed by the quality of the company’s compliance program, the timeliness and completeness of its cooperation, and its remediation, factors articulated in the DOJ’s guidance on the Evaluation of Corporate Compliance Programs and in the Justice Manual’s Principles of Federal Prosecution of Business Organizations. Corporate and individual sentencing exposure, if a matter proceeds criminally, is governed by the U.S. Sentencing Guidelines, including the organizational sentencing provisions that reward effective compliance programs and self-reporting while penalising obstruction and the involvement of high-level personnel.

The practical takeaway is that the same evidence that strengthens a civil mitigation submission, a robust compliance program, prompt remediation, senior-level accountability, also mitigates criminal exposure. Building the record correctly serves both tracks at once, which is precisely why coordination is essential.

Voluntary Self-Disclosure: When It Helps, When It Hurts

Voluntary self-disclosure is often the most important early decision in a matter, and it is rarely a purely legal question. It is a strategic judgment that balances the mitigation credit on offer against the reality that disclosure surfaces conduct that might otherwise remain undetected, and does not preclude a criminal referral. In OFAC BIS settlements USA, the voluntary self-disclosure mitigation decision should be made only after a preliminary internal investigation has scoped the likely violations, the probable severity and the strength of any wilfulness facts.

OFAC Voluntary Self-Disclosure: Process and Benefits

Under OFAC’s Economic Sanctions Enforcement Guidelines, a qualifying voluntary self-disclosure is a significant mitigating factor and can substantially reduce the base amount of a proposed civil penalty. To qualify, the disclosure generally must be genuinely voluntary, made before OFAC or another government agency has discovered the conduct, or before it is required to be reported, and must be complete, providing a full account of the apparent violations along with supporting documentation. Timeliness, thoroughness and accompanying remediation all bear on the weight of the credit.

The benefit is real, but bounded. A voluntary self-disclosure can meaningfully lower a civil penalty and can position a company favourably in negotiation, but it does not confer immunity and does not prevent OFAC from referring egregious or wilful conduct for criminal investigation. Counsel should therefore treat every disclosure as a document that could later be read by prosecutors.

BIS Voluntary Disclosures: EAR Processes and Likely Outcomes

BIS similarly treats voluntary self-disclosure as a strong mitigating factor in its enforcement decisions under the EAR’s penalty guidelines (15 C.F.R. Part 764, Supplement No. 1), and OEE guidance encourages disclosure of EAR violations. A well-prepared BIS disclosure typically includes an initial notification followed by a full narrative account with supporting records, a description of the items and transactions involved, the applicable controls, and the remedial steps taken. Cooperation and disclosure can reduce administrative penalties and can influence whether BIS pursues denial of export privileges or other non-monetary remedies.

As with OFAC, a BIS voluntary disclosure reduces exposure without eliminating the possibility of a separate criminal referral where the facts warrant it. In some matters, BIS penalty negotiation begins effectively with the disclosure itself, because the disclosure frames the agency’s understanding of the conduct and the company’s culpability.

Coordinating Disclosures Across Agencies and Law Enforcement

Because a single transaction can implicate OFAC, BIS and potentially the DOJ, disclosures must be coordinated. Disclosing to one agency without a plan for the others can create inconsistent narratives, waive protections inadvertently, or trigger a referral the company did not anticipate. Before any disclosure, counsel should determine which agencies have jurisdiction, sequence any filings deliberately, and ensure the factual account is consistent across every audience. Where wilfulness facts are present, criminal counsel should be involved in the disclosure decision from the outset.

Mitigation Submissions: What to Include, Evidence, and Common Mistakes

The mitigation submission is where a case is won or lost. It is the company’s structured argument, supported by evidence, that the conduct warrants reduced penalties and non-egregious treatment. A persuasive submission is not a plea for leniency; it is a disciplined mapping of the facts to the agency’s enumerated mitigation factors, backed by exhibits. In OFAC BIS settlements USA, the quality of this submission often correlates directly with the size of the eventual penalty reduction.

A strong mitigation submission generally follows a consistent architecture: a narrative statement of facts; a root-cause analysis; a description of the compliance program at the time and as improved; a remediation account with metrics; a cooperation summary; and a mapping to the agency’s General Factors, all supported by an indexed exhibit set. Certification and representation language should be carefully drafted and, where appropriate, reviewed by criminal counsel before submission.

Essential Documentary Evidence: A Sample Exhibit List

The credibility of a mitigation submission depends on the exhibits that support it. A well-organised submission typically includes the following documentary evidence:

• Transaction records. Complete documentation of the transactions at issue, including dates, counterparties, values and screening records.
• Internal investigation materials. A summary of the investigation scope, methodology and findings, with attention to privilege protection over underlying work product.
• Compliance program documentation. The written policies, procedures, screening tools and training records in effect at the relevant time.
• Remediation evidence. Records of corrective actions, program enhancements, new controls and disciplinary measures, with dated implementation milestones.
• Organisational accountability records. Evidence of senior management and board engagement in the remediation response.
• A chronological timeline. A single, consistent timeline of the conduct, discovery, investigation, disclosure and remediation.

Remediation and Compliance Program Evidence: What Regulators Value

Both OFAC and BIS give significant credit for effective compliance and genuine remediation, and their expectations align closely with OFAC’s published Framework for Compliance Commitments and the DOJ’s Evaluation of Corporate Compliance Programs. Regulators look for programs that are well designed, adequately resourced and empowered, and that work in practice. A remediation account is far more persuasive when it demonstrates root-cause analysis rather than superficial fixes, when it shows measurable improvements, reduced false-negative screening rates, expanded training coverage, new escalation pathways, and when it evidences that senior leadership owns the outcome.

Regulators are sceptical of remediation that appears to have been assembled only after enforcement attention arrived. The strongest submissions show a compliance function that identified the issue, escalated it and corrected it as part of an ongoing program, not a reactive scramble. Metrics matter: quantify the before-and-after wherever possible.

Common Mistakes to Avoid

Several recurring errors undermine otherwise strong submissions:

• Incomplete or inconsistent timelines. A timeline that conflicts with other exhibits invites scepticism and can suggest concealment.
• Absence of root-cause analysis. Describing fixes without explaining why the failure occurred signals a superficial response.
• Unquantified remediation. Claims of improvement without metrics carry little weight.
• Overclaiming. Characterising conduct in a way the evidence does not support damages credibility across the entire submission.
• Privilege missteps. Sharing investigation materials without a deliberate privilege strategy can waive protections that matter later.

Practical Playbook, This week / 30 days / 90 days. This week: preserve documents, issue a litigation hold, and scope a privileged internal investigation. Within 30 days: complete a preliminary factual assessment, decide on voluntary self-disclosure, and draft the timeline. Within 90 days: finalise the mitigation submission, implement priority remediation with metrics, and prepare the negotiation strategy.

OFAC BIS Settlements USA Negotiation Playbook: Stages, Tactics and Sample Exchanges

Once the factual record and mitigation file are built, negotiation begins in earnest. Effective negotiation in OFAC BIS settlements USA follows a recognisable sequence: initial contact and scoping with the agency; in OFAC matters, often a pre-penalty notice or cautionary letter stage; agreement on a statement of facts; submission of the mitigation file; and negotiation of a proposed resolution covering penalty amount, non-monetary terms and any reporting or monitoring obligations. Understanding this sequence lets counsel control pacing and preserve leverage.

Tactical Negotiation Levers

Several levers can shift outcomes, and skilled negotiators deploy them deliberately:

• Cooperation credit. Timely, proactive cooperation, beyond the minimum required, is a recognised mitigating factor and can be traded for reduced penalties.
• Remediation commitments. Concrete, verifiable program upgrades can reduce both the penalty and the intrusiveness of ongoing oversight.
• Non-monetary terms. In BIS matters especially, negotiating the scope and duration of any denial of export privileges can be more valuable than the fine itself.
• Structure of the resolution. How a penalty is characterised and paid, and what admissions accompany it, has downstream consequences for civil litigation and reputational risk.

Ranges of likely penalties should be assessed against the applicable framework and comparable published resolutions, and counsel should be cautious about promising outcomes, each matter turns on its facts and on the agency’s assessment of the General Factors.

Parallel Criminal Investigations: Negotiating While Protecting Privilege

When a criminal investigation runs alongside a civil matter, negotiation becomes considerably more delicate. Statements and documents provided to civil regulators can be obtained by prosecutors, and cooperation representations must be consistent across both tracks. Counsel should maintain a deliberate privilege strategy: assert attorney-client privilege and work-product protection over internal investigation materials, make privilege waiver decisions consciously rather than by default, and avoid disclosures that inadvertently expose the company on the criminal side. Where IEEPA criminal exposure is realistic, criminal defence counsel should lead or closely coordinate the civil negotiation to avoid creating admissions that damage the criminal position.

Comparison Table: OFAC vs BIS, Penalties, Mitigation Levers and Disclosure Effects

The table below summarises the key differences and similarities that shape settlement strategy. It is intended as an orientation aid; specific outcomes depend on the facts and the applicable frameworks.

Post-Settlement Remediation: Monitoring, Reporting and Public Disclosures

A settlement is not the end of the matter; it is the start of a compliance obligation that must be met credibly. Common settlement terms include enhanced compliance undertakings, periodic reporting to the agency, internal or external audits, and, in more serious matters, ongoing monitoring. The design of the post-settlement program should reflect the root causes identified during the investigation and should generate the metrics the agency expects to see. Consistent, honest reporting is essential: a company that fails to meet its post-settlement commitments risks further enforcement, and any misrepresentation in reporting can convert a resolved civil matter into a new and more serious exposure.

Where public disclosure obligations apply, counsel should coordinate messaging carefully to satisfy regulators while managing reputational and litigation risk.

Conclusion and Recommended Next Steps

Successfully resolving OFAC BIS settlements USA depends on disciplined, coordinated decision-making from the very first day of an inquiry. The company that preserves evidence, investigates under privilege, decides on voluntary self-disclosure with a clear-eyed view of both civil and criminal consequences, and then builds a rigorous mitigation submission mapped to each agency’s stated factors will consistently achieve better outcomes than one that reacts piecemeal. The recurring themes are constant: protect privilege deliberately, involve criminal defence counsel the moment wilfulness facts emerge, quantify remediation, and treat OFAC, BIS and the DOJ as a single coordinated audience even when only one has opened a file.

For decision-makers, a practical checklist follows. Preserve documents and issue litigation holds immediately. Scope a privileged internal investigation. Assess civil and criminal exposure in parallel. Make the disclosure decision on an informed factual basis. Build the mitigation submission around evidence and metrics. Coordinate every filing across agencies. And where the facts warrant it, bring criminal counsel into the negotiation strategy before, not after, the first substantive contact with a regulator. Handled this way, even serious OFAC BIS settlements USA can be resolved on terms that protect the enterprise. This article is general information and does not constitute legal advice; specific matters require tailored counsel.

Sources

1. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
2. OFAC, Economic Sanctions Enforcement Guidelines (Appendix A to 31 C.F.R. Part 501)
3. U.S. Department of Commerce, Bureau of Industry and Security (BIS) Enforcement
4. Export Administration Regulations (EAR), eCFR, Title 15, Chapter VII
5. International Emergency Economic Powers Act (IEEPA), Cornell Legal Information Institute (50 U.S.C. Chapter 35)
6. U.S. Department of Justice, Evaluation of Corporate Compliance Programs
7. U.S. Sentencing Commission, Guidelines Manual (including organizational sentencing provisions)
8. United Nations, Security Council Sanctions
9. American Bar Association, International Law Section