Supply Chain Compliance for U.S. Importers and Global Businesses

A supplier relationship that was acceptable when established can develop new regulatory risks.

Warning signs can include:

Refusal to disclose upstream sourcing;

Discrepancies between invoices and production records;

Unexplained ownership changes;

Newly inserted intermediaries;

A restricted-party screening match;

Movement of production to another facility or country;

Inconsistent origin documentation;

A CBP detention or information request.

The company should identify the affected products and transactions before deciding whether sourcing can continue, whether additional diligence is needed, or whether a regulatory response should be considered.

The Uyghur Forced Labor Prevention Act creates a rebuttable presumption against the importation of goods mined, produced, or manufactured wholly or in part in Xinjiang or by an entity on the UFLPA Entity List.

CBP enforces that presumption alongside the broader forced-labor prohibition in 19 U.S.C. §1307.

For importers, compliance depends heavily on supply-chain tracing. Relevant evidence may need to connect the finished product to its components, raw materials, manufacturing facilities, and upstream suppliers.

A supplier certificate can support that analysis, but it does not replace underlying traceability evidence when CBP questions whether the merchandise is admissible.

Companies facing this risk may require a separate UFLPA compliance analysis.

Section 307 enforcement is broader than UFLPA. CBP can also use Withhold Release Orders and Findings against merchandise associated with forced labor outside the UFLPA framework.

An importer of record must exercise reasonable care concerning matters such as classification, valuation, country of origin, admissibility, and entry documentation.

Supplier information should therefore be tested against the facts underlying the import declaration.

For example, a stated country of origin may need to be compared with where manufacturing occurred and where critical components or materials were sourced.

A product's country of origin for customs purposes does not necessarily resolve its UFLPA exposure. Materials or components sourced from Xinjiang or an entity on the UFLPA Entity List can trigger the UFLPA presumption even when the finished product has a different country of origin for customs purposes.

A broader customs compliance review may be appropriate when supply-chain questions also affect classification, valuation, origin, or admissibility.

OFAC screening should extend beyond checking whether a supplier's name appears on the SDN List.

Under OFAC's 50 Percent Rule, an entity is generally treated as blocked when one or more blocked persons directly or indirectly own 50% or more of the entity in the aggregate.

That can require review of:

Parent entities;

Indirect ownership;

Beneficial owners;

Intermediaries;

Counterparties;

Persons acting for a supplier;

Countries and payment channels involved.

Control without 50% ownership does not automatically block an entity under OFAC's 50 Percent Rule.

However, transactions involving a blocked person acting on behalf of a nonblocked company can still be prohibited. For example, a U.S. .erson generally cannot avoid sanctions merely because the company itself is nonblocked if a blocked individual is directly participating in the prohibited transaction.

Companies facing an ownership or counterparty concern may require a separate OFAC sanctions compliance assessment.

Supply chains can also create Export Administration Regulations issues when items, software, or technology are exported, reexported, or transferred in-country.

Relevant questions can include:

Whether an item is subject to the EAR;

Its classification;

Destination;

End user;

End use;

Restricted-party status;

Applicable license requirements.

OFAC's ownership-based blocking rule should not be treated as interchangeable with BIS Entity List restrictions.

BIS adopted an expanded Affiliates Rule in 2025 that would extend certain end-user controls to some foreign entities owned 50% or more by listed entities. As of October 2026, however, those expanded provisions remain suspended through November 9, 2026, absent a further extension. Under the existing rulemaking schedule, they are set to return on November 10, 2026.

The suspension does not eliminate other EAR restrictions or the need to investigate red flags involving an affiliate of a restricted party.

Transactions involving controlled items or higher-risk counterparties may need a separate export compliance analysis.

For higher-risk goods, the company may need to establish a traceable path such as:

Finished Product → Component → Raw Material → Production Facility → Ownership

That map can expose an intermediary, subcontractor, or upstream facility that does not appear in the direct supplier agreement.

Supporting evidence can include purchase records, bills of materials, invoices, production records, shipping documents, origin information, and factory data.

The purpose of collecting those records is to connect each critical step in the product's production path rather than simply accumulate documents.

Supplier screening should account for the identity and regulatory status of the parties behind the transaction.

Depending on the issue, the company may need to compare information against:

The UFLPA Entity List;

OFAC sanctions lists;

Applicable BIS restricted-party lists;

Other Federal screening resources relevant to the transaction.

A screening match must be evaluated against the party's identity, applicable restrictions, ownership, and transaction before the company determines whether a prohibition or license requirement applies.

Aliases, addresses, ownership percentages, product involvement, and end-user information can determine whether a match is genuine and what regulatory consequences follow.

Contracts can make upstream information easier to obtain before an enforcement problem occurs.

Relevant provisions may address:

Origin and sourcing representations;

Forced-labor compliance;

Sanctions and export-control compliance;

Subcontractor disclosure;

Production-record access;

Audit rights;

Notice of sourcing or ownership changes;

Document-production obligations;

Remediation or termination rights.

A supplier representation is a due-diligence tool, not immunity from government enforcement.

When a discrepancy appears, the response may progress from targeted document requests to enhanced diligence, remediation, supplier replacement, suspension of a transaction, or assessment of government reporting obligations.

Mergers, acquisitions, manufacturing relocations, and supplier replacements can also require renewed diligence rather than reliance on the previous company's or supplier's compliance process.

After a forced-labor detention, the importer must identify which authority CBP invoked. A UFLPA detention, a Section 307 WRO or Finding, and a CAATSA action can involve different evidentiary requirements and response procedures.

For a UFLPA detention, the importer should also distinguish an applicability review from an exception review.

An applicability review addresses whether the shipment falls within the UFLPA presumption. The importer may submit traceability evidence showing that the goods were not sourced from Xinjiang or an entity on the UFLPA Entity List.

An exception review seeks to rebut an applicable UFLPA presumption. The importer must fully comply with the relevant guidance, respond completely and substantively to CBP's inquiries, and provide clear and convincing evidence that the goods were not produced with forced labor.

The clear-and-convincing standard that applies to a statutory exception should not be described as the general evidentiary standard for an applicability review.

For a WRO or Finding, the governing Section 307 procedures differ again. The applicable CBP procedure and requested documentation should be identified before the importer prepares an admissibility submission.

Different agencies examine different parts of the supply chain.

CBP may request evidence regarding import admissibility, sourcing, or forced labor. OFAC issues can concern sanctioned parties, blocked property, or prohibited transactions. BIS inquiries can focus on controlled items, exports or reexports, end users, end uses, or restricted parties.

The response should therefore be organized around the actual regulatory trigger.

For a CBP matter, production and traceability evidence may be central. An OFAC investigation may require transaction and ownership records. A BIS matter may turn on classification, licensing, destination, end-user diligence, and communications concerning the transaction.

A red flag or possible violation does not lead automatically to the same response.

Depending on the Federal regime and facts, a company may need to:

Preserve relevant evidence;

Suspend a questionable transaction;

Identify affected products or suppliers;

Determine the scope of past transactions;

Correct screening or diligence controls;

Change sourcing or contract terms;

Evaluate a voluntary disclosure or other agency submission.

OFAC and BIS have distinct voluntary-disclosure and enforcement frameworks. CBP forced-labor detention procedures are different again.

The company should identify the legal regime and available procedural route before deciding whether a disclosure, admissibility submission, corrective action, or supplier remediation is appropriate.