Cross-Border Compliance Issues Flashcards

Which treaty framework governs mutual legal assistance (MLAT) requests between the US and foreign governments in cross-border criminal compliance investigations?

Answer: Bilateral Mutual Legal Assistance Treaties (MLATs) and the CLOUD Act

MLATs are bilateral treaties that formalize cross-border cooperation in criminal investigations, while the CLOUD Act provides a framework for US law enforcement to access data held abroad.

A company's cross-border whistleblower hotline receives a complaint about potential violations in a country where local law prohibits anonymous reporting. The compliance officer should:

Answer: Consult local counsel to implement a legally compliant reporting mechanism adapted to local requirements

Local counsel must advise on how to adapt whistleblower channels to comply with local privacy and labor laws while preserving the spirit of the reporting mechanism.

Transfer pricing documentation requirements under OECD guidelines typically include which three-tiered approach?

Answer: Master file, local file, and Country-by-Country Report

The OECD's BEPS Action 13 transfer pricing documentation framework consists of a Master File (group overview), Local File (entity-level transactions), and Country-by-Country Report (jurisdictional data).

An EU company receives a legal hold notice from a US court requiring preservation of data that includes EU citizens' personal data. Under GDPR Article 48, transferring this data to US courts:

Answer: Requires either a mutual legal assistance framework or a GDPR-compliant transfer mechanism—court orders alone are insufficient

GDPR Article 48 provides that international transfers based solely on foreign court judgments or orders are not automatically recognized—a GDPR-compliant transfer basis is still required.

What is the primary purpose of a 'jurisdictional nexus analysis' in cross-border compliance?

Answer: To assess which countries' laws apply to a company's conduct based on connections like territory, nationality, and effects

A jurisdictional nexus analysis identifies which countries can assert legal authority over a company's activities based on factors like where conduct occurred, the nationality of parties involved, and where effects were felt.

Under the Corporate Sustainability Due Diligence Directive (CSDDD) adopted by the EU, which obligation does it impose on large companies?

Answer: Conducting due diligence to identify, prevent, and mitigate adverse human rights and environmental impacts across their value chains

The EU CSDDD requires large companies operating in the EU to conduct due diligence across their entire value chain to address adverse human rights and environmental impacts.

A compliance officer at a US bank discovers that a foreign correspondent bank is transmitting funds for a sanctioned entity through nested accounts. Under FinCEN guidance, the bank should:

Answer: File a Suspicious Activity Report (SAR), exit the correspondent relationship if necessary, and implement enhanced due diligence on correspondent accounts

FinCEN guidance requires banks to file SARs for suspected sanctions evasion and to conduct enhanced due diligence or exit high-risk correspondent banking relationships.