A Canadian subsidiary of a European group settles an enforcement matter with Global Affairs Canada. The resolution agreement contains a single sentence that changes everything: the entity must submit to an independent compliance monitorship. The in-house team has three weeks to identify a monitor, agree terms of reference, and stand up a programme that satisfies a regulator it has already disappointed once. What does that actually require?
Managing a compliance monitorship under Canadian sanctions law means operating within a structured oversight relationship imposed or agreed as part of an enforcement resolution under the Special Economic Measures Act ("SEMA") and administered by Global Affairs Canada ("GAC"). As of early 2026, the monitorship model used in Canadian sanctions enforcement borrows procedural elements from both US and UK practice but reflects GAC's own administrative culture. The monitor's mandate, reporting cycle, and the firm's obligations are all set at the outset and are legally binding for the duration of the agreement.
This guide walks through the monitorship lifecycle: what triggers one, how the first ninety days are structured, what the firm must produce, how cross-border obligations interact with the Canadian programme, and when to involve external sanctions counsel.
What triggers a compliance monitorship under GAC?
A compliance monitorship under SEMA most commonly arises from a negotiated settlement in which GAC agrees not to pursue further enforcement action in exchange for the firm committing to a binding, externally supervised remediation programme. The trigger is an apparent violation of SEMA or the regulations made under it – typically a prohibited financial transaction, a supply of goods or technology to a designated person, or a failure to freeze property in which a designated person holds an interest.
Canadian sanctions law does not create a statutory monitorship mechanism equivalent to the deferred prosecution agreement structures in US or UK criminal practice. Instead, the monitorship is typically a contractual instrument: a settlement agreement or undertaking that names an independent third-party monitor, defines the scope of the review, and sets reporting obligations owed to both the monitor and GAC. The absence of a codified statutory route means that the terms are more negotiable than under US Department of Justice or OFAC programmes – but that flexibility also places greater weight on the quality of the drafting at the outset.
In our experience, the decision to propose a monitorship proactively – rather than wait for GAC to impose conditions – materially affects the terms. Firms that come forward with a credible remediation framework, including a proposed monitor mandate, tend to negotiate narrower scope and shorter durations. Have you considered whether a proactive proposal would serve your position better than a reactive response?
How is the monitorship scope defined?
The scope document is the single most consequential piece of paper in the monitorship and should be treated with the same care as the settlement agreement itself. It defines what the monitor may examine, what systems and personnel are accessible, what the reporting cadence is, and what "completion" looks like.
Canadian practice has developed a working model in which the scope is set around three axes: the geographic perimeter (which entities and jurisdictions are in scope), the product or transaction perimeter (which business lines, goods categories, or financial flows), and the temporal perimeter (how far back the review reaches). A firm that allows the scope document to be drafted by the monitor or by GAC without active engagement risks an open-ended mandate that consumes internal resource for years.
Key scope points to negotiate at the outset include the following.
- Whether the monitor's mandate is purely backward-looking (testing historical transactions) or also prospective (approving future transactions before they proceed).
- The information-sharing protocol between the monitor and GAC, including what the monitor is required or permitted to disclose beyond the periodic reports.
- The escalation procedure: what happens when the monitor identifies a new potential violation during the review period.
- The language of completion: what standard the firm must meet – and evidence – to satisfy the monitorship and secure a written discharge from GAC.
We regularly advise on scope negotiations in monitorship matters. The time invested at this stage consistently produces a faster and less disruptive review than a broadly drawn mandate that is later disputed.
What does the first ninety days require?
The opening phase of a monitorship sets the tone for the entire engagement and is disproportionately important. In the first ninety days, the firm typically must appoint the monitor (or confirm a proposed appointment), provide the monitor with an initial data package, and receive and respond to the monitor's preliminary findings on programme design.
The initial data package is rarely defined precisely in the settlement agreement. It is worth agreeing in the scope document what it must contain. Standard components include an organisational chart showing the ownership and control structure of the in-scope entities, a description of the existing sanctions compliance programme, a sample of transactions from the review period, and copies of any prior internal or external audit findings relating to sanctions or export controls.
A practical point that is often underestimated: the monitor will form a view of the firm's culture in the first weeks of access. Firms that are transparent, responsive, and organised in delivering the initial package tend to receive less intrusive follow-on requests. Firms that are slow, fragmentary, or appear to be managing access rather than facilitating it tend to find the monitor expanding the scope of document requests and interviewing more personnel.
The ninety-day window is also when the compliance team should map any cross-border obligations that run in parallel. If the apparent violation also touched OFAC-administered sanctions, BIS export-control matters, or the UK OFSI regime, those programmes may have their own reporting timelines and their own monitors or advisers. Coordination between the parallel tracks is essential and should be agreed with external counsel before the first monitor report is issued.
The position above covers the standard structure. Your facts – the regulated entity, the business line, the designated persons involved, and the jurisdictions – change the analysis materially. For a confidential review of a monitorship mandate or a scope negotiation, contact Calder & Vance at info@caldervance.com.
How does the reporting and testing cycle work?
After the initial assessment, the monitorship enters its testing phase, which is the longest and most resource-intensive period of the engagement. The monitor will typically conduct periodic transaction reviews, test the screening programme against the firm's live counterparty data, interview compliance and business staff, and review any exceptions or escalations raised during the reporting period.
Reporting cadence under Canadian practice is typically quarterly for the first year, moving to semi-annual once the monitor has assessed that the programme has reached a defined remediation milestone. Each report contains a findings section, a remediation-progress section, and a list of recommended actions. The firm is generally required to respond in writing within a defined period – often thirty days – to confirm which recommendations it accepts and to provide a timeline for implementation.
A point of friction that arises repeatedly in our practice: the monitor's recommendations are framed as advisory, but GAC will expect to see them implemented. A firm that consistently declines or delays implementing recommendations risks triggering a breach of the settlement agreement, which returns the matter to active enforcement consideration. The practical message is that the firm should treat monitor recommendations as binding unless there is a clearly reasoned, documented objection.
Record-keeping during the testing phase matters for two reasons. First, the monitor will draw on contemporaneous documentation when assessing remediation progress. Second, if the matter escalates or a parallel jurisdiction opens a review, the firm's records of its own compliance steps will be central to any defence. Firms should maintain a monitorship log that tracks every monitor request, every response, every recommendation, and every implementation step, with dates and responsible persons identified.
How does the Canadian monitorship interact with OFAC, OFSI, and EU programmes?
Cross-border monitorship situations are more common than the single-jurisdiction model suggests. A Canadian entity that also holds a US licence, operates in the EU, or has UK-regulated activities may find that the same underlying conduct has attracted regulatory attention in more than one jurisdiction.
The interaction between the Canadian and US programmes is perhaps the most significant. OFAC's voluntary self-disclosure ("VSD") process – a mechanism under which a firm discloses an apparent violation to OFAC and receives mitigated treatment – runs on a different timeline and different evidential standard from the GAC process. A GAC monitorship does not satisfy OFAC, and vice versa. Firms in this position must manage two separate compliance tracks, which creates a risk of inconsistency: a concession made to the GAC monitor that is recorded in a quarterly report may be read as an admission in the US track if the reports are not handled carefully.
The UK OFSI programme similarly does not accept a Canadian settlement as a substitute for its own enforcement process. OFSI has its own licensing and reporting obligations, its own penalty regime, and its own standard for what constitutes an effective compliance programme. Where the same firm is subject to both OFSI oversight and a GAC monitorship, the compliance programme design must satisfy both sets of requirements simultaneously – which may require different documentation standards, different escalation procedures, and different training records.
The EU position adds a third dimension. EU Council regulations apply to entities incorporated or operating within the EU and to EU persons regardless of where they act. An EU subsidiary of a Canadian group under monitorship may have its own reporting obligations to relevant national competent authorities. The EU does not recognise the GAC settlement as a mitigating factor in its own proceedings, though evidence of a structured remediation effort is generally received positively in any enforcement engagement.
In a recent matter, a logistics business with operations in Canada, the United Kingdom, and the Netherlands found itself managing three parallel compliance reviews following the identification of a pattern of transactions involving a designated-entity counterparty. We mapped the obligations under each regime, identified the points of divergence in reporting standards, and coordinated the evidence package so that each regulator received a consistent factual account while the firm's legal position in each jurisdiction was protected. The matter resolved without additional enforcement action in any of the three jurisdictions.
If a transaction has already been flagged, or a monitorship notice has been received, early multi-jurisdictional advice can preserve options that narrow quickly. Contact Calder & Vance at info@caldervance.com.
What are the most common risk flags during a monitorship?
Risk flags in a monitorship fall into two categories: flags that arise from the compliance programme itself, and flags that arise from conduct during the monitorship period. The second category is the one that most commonly turns a manageable situation into a serious enforcement problem.
Programme-design flags include gaps in counterparty screening (particularly failure to screen against the UN Consolidated List and the GAC Consolidated Canadian Autonomous Sanctions List consistently), absence of a documented ownership and control analysis for corporate counterparties, inadequate training records, and the absence of a functioning escalation procedure. These are structural weaknesses that the monitor will identify in the testing phase and will expect to see remediated on a defined timeline.
Conduct-during-monitorship flags are more serious. They include failing to disclose a new potential violation identified internally during the monitorship period, allowing an existing business relationship with a high-risk counterparty to continue without escalating it to the monitor, and making material changes to the compliance programme without notifying the monitor. Any of these can be characterised as a breach of the settlement agreement and can reopen enforcement consideration.
A myth worth addressing directly: some firms assume that because a monitorship is a civil or administrative matter, the standard of documentation is lower than in criminal proceedings. That is incorrect. The monitor's reports, and the firm's responses to them, create a contemporaneous record that can be used in any subsequent proceedings – including by other regulators in parallel jurisdictions. Every written response to a monitor recommendation should be reviewed by external counsel before it is filed.
A second myth: that completing the monitorship means the matter is closed. In practice, GAC may retain the right to re-open the enforcement file if new information emerges relating to the original conduct. The settlement agreement should be reviewed carefully to understand the scope of any release or discharge, and in our experience the firm should seek the broadest available written discharge at the conclusion of the monitorship.
When should external sanctions counsel be involved?
External sanctions counsel should be involved at every stage where a decision is made that creates a written record: scope negotiation, drafting the firm's initial data submission, responding to monitor recommendations, and preparing any filing to GAC during the monitorship period. The cost of external review at these points is a fraction of the cost of re-opening an enforcement matter.
In terms of timing, the three most critical intervention points are these. First, before the scope document is finalised: counsel can negotiate terms that limit the monitor's access and define completion in a way that is achievable. Second, before the first quarterly report is responded to in writing: the response sets a precedent for the firm's position on each finding, and an unguarded admission in the first response can colour the entire remaining period. Third, at the conclusion: the written discharge or completion certificate should be reviewed against the original settlement agreement to confirm that the release is adequate and that all conditions have been met.
Counsel also adds value in managing the cross-border dimension. Where parallel OFAC, OFSI, or EU obligations exist, a single external adviser coordinating across all tracks produces a more consistent record and reduces the risk of inconsistency between the positions taken in different jurisdictions.
Related practices
- Apparent violation assessment (EU) – identifying and scoping EU sanctions apparent violations for enforcement response
- Cross-border compliance monitorship guide – managing monitorships across multiple jurisdictions simultaneously
- EU compliance monitorship guide – the monitorship process under EU Council regulation enforcement