A Canadian trading company discovers that a shipment it processed three months ago involved a counterparty now appearing on a restricted-party list maintained under Canada's autonomous sanctions regime. The transaction was already settled. The question is no longer whether to proceed – it is whether the company can present its position effectively when Global Affairs Canada initiates a review. That question turns almost entirely on mitigation.
Under Canada's sanctions enforcement regime, administered primarily by Global Affairs Canada ("GAC") under the Special Economic Measures Act ("SEMA") and related instruments, mitigation factors are not codified in a statutory checklist. They are assessed judgementally, against criteria that parallel – but do not replicate – those applied by OFAC in the United States or OFSI in the United Kingdom. A business that understands what GAC weighs, and prepares accordingly, is in a materially stronger position than one that responds reactively.
This guide sets out the governing regime, the factors that move the analysis, how the Canadian position compares with the approach taken by OFAC and OFSI, the procedural steps a business should take, and the risk flags that most often turn a manageable matter into a serious enforcement outcome.
Who administers Canadian sanctions enforcement and what law applies?
GAC administers Canada's autonomous sanctions regime principally under SEMA and the United Nations Act, with enforcement referrals channelled through the Royal Canadian Mounted Police and the Public Prosecution Service of Canada where criminal proceedings are considered. The legal authority to impose sanctions derives from those statutes and the regulations made under them – collectively, the applicable Canadian regime. There are no fixed penalty bands published in the way that OFAC publishes a statutory civil penalty range. Enforcement can proceed civilly or criminally depending on the gravity of the apparent violation.
Understanding the architecture matters for mitigation planning. The civil track offers greater scope for a co-operative response and for mitigation arguments to influence outcome. The criminal track, once engaged, substantially narrows those options. In our experience advising on cross-border enforcement matters, the earliest decisions – whether to report, what to say, and how to document the position – have the greatest long-run impact on which track an apparent violation follows.
One aspect the Canadian regime shares with most comparable regimes is that the identity of the enforcing authority changes the procedural rules in play. GAC handles the administrative and foreign-policy dimension. The RCMP and prosecutors handle criminal matters. A business that conflates the two – treating a GAC enquiry as purely regulatory when criminal exposure is live – creates unnecessary risk. Early characterisation of the track is therefore a precondition for effective mitigation planning.
What factors does GAC weigh when assessing an apparent violation?
GAC has not published a formal mitigation matrix, but the factors it weighs in practice align with the broader international sanctions-enforcement tradition: wilfulness and recklessness; the duration and frequency of the conduct; the value and nature of the prohibited transaction; the degree of harm; whether the person had prior notice or warnings; and the quality of the compliance programme in place at the time of the apparent violation. These are considered in the round rather than scored mechanically.
Several of these factors deserve particular attention from a practitioner's perspective.
Wilfulness and recklessness carry the greatest weight. A business that took reasonable precautions – screened counterparties, checked the GAC consolidated list, sought legal advice on a borderline transaction – can credibly argue that the violation was neither wilful nor reckless. A business that ignored obvious red flags, or that failed to maintain any screening process, cannot. The factual record is everything. Was screening run? Was it documented? When was it last updated?
The compliance programme in place at the time of the violation is assessed on substance, not form. A policy document that was never implemented, training that was never delivered, or a screening tool whose alerts were routinely overridden without escalation – these undermine a compliance-programme argument rather than supporting it. In our practice we regularly advise clients to conduct a candid gap analysis before they submit any response to GAC, precisely because overstating the programme is one of the most damaging mistakes a respondent can make.
Prompt voluntary self-disclosure – the act of reporting an apparent violation before GAC discovers it independently – is a significant mitigant in the Canadian regime, as it is under OFAC and OFSI. There is no statutory bright-line rule quantifying the benefit of a voluntary self-disclosure ("VSD" – the act of proactively reporting a potential violation to the relevant authority before it is discovered independently), but the practical effect is consistently positive. A VSD filed promptly, with a thorough account of the facts and a credible remediation plan, signals good faith and allows GAC to treat the matter as a compliance failure rather than deliberate evasion.
How does the Canadian approach compare with OFAC and OFSI?
Canada, the United States, and the United Kingdom each recognise broadly similar mitigating factors, but they apply them through distinct procedural structures – and those differences are operationally significant for a business that may face scrutiny across more than one regime arising from the same conduct.
OFAC has published detailed enforcement guidelines, including a specific schedule of aggravating and mitigating factors. Those guidelines create a degree of transparency that the Canadian regime does not formally replicate. OFAC distinguishes between egregious and non-egregious cases, with that distinction influencing the starting penalty base significantly. OFSI in the United Kingdom takes a similar structured approach, with published monetary penalty guidance that sets out the factors considered at each stage of the enforcement process.
GAC's relative lack of published guidance creates both risk and opportunity. The risk is uncertainty: a Canadian respondent cannot point to a published factor list and calculate an approximate outcome range in the way that an OFAC practitioner can. The opportunity is that the assessment remains genuinely fact-sensitive and a well-prepared submission that goes beyond a standard mitigation checklist can carry disproportionate weight.
Where the same apparent violation touches US, UK, and Canadian jurisdiction simultaneously – a not-uncommon scenario for a multinational with US-dollar settlement, a UK parent, and Canadian operations – the co-ordination challenge is real. Admissions made in a VSD to one authority can be seen by another. Remediation steps taken for one regime may not satisfy another. And the sequencing of filings can affect which authority takes the lead. We regularly advise clients on exactly this co-ordination problem, and it is one of the clearest illustrations of why cross-border matters require a co-ordinated strategy rather than three separate responses. For further analysis of the cross-regime dimension, see our cross-border guide to mitigation factors in enforcement.
One specific point of divergence worth noting is the role of the 50 percent rule (the principle that an entity owned 50 percent or more in aggregate by a designated person is itself treated as subject to the same restrictions). OFAC applies this mechanically. The Canadian regime's treatment of ownership and control is functionally similar in outcome but is expressed through different statutory language. A business that has conducted OFAC-standard ownership analysis has done most – but not all – of the work required to satisfy GAC.
What is the procedure for presenting mitigation arguments to GAC?
The procedure for presenting mitigation arguments in Canada does not follow a fixed published sequence of the kind that OFAC's penalty process does, which makes it all the more important to plan the engagement carefully from the outset. The principal stages are: initial notification or voluntary disclosure; the GAC review period; a possible request for further information; the submission of a formal response or representation; and, where appropriate, referral to prosecutors or administrative resolution.
The following steps reflect the sequence in which mitigation arguments are most effectively assembled and presented.
- Internal fact-find. Before any communication with GAC, map the full factual record: the transaction, the counterparties, the dates, the screening steps taken, the individuals involved, and the documents that evidence each of those steps. This is not the time for a narrative – it is the time for a chronology with source documents attached to each entry. The fact-find should be conducted under legal privilege where possible.
- Privilege review. Determine which communications and analyses are properly privileged and which are not. Disclosure of privileged material to GAC – even voluntarily – can waive privilege more broadly. In our experience, this step is frequently handled too loosely in the early phase of an enforcement response.
- Decision on voluntary disclosure. Assess whether the matter has been or is likely to be discovered independently. If not, evaluate whether a VSD is appropriate. A VSD filed before GAC identifies the matter independently is a strong mitigant. A VSD filed after GAC has already started an enquiry is still positive but carries less weight.
- Remediation before submission. Where the compliance gap that produced the apparent violation can be addressed before the formal response is submitted, do so – and document the remediation steps. GAC, like OFAC and OFSI, treats timely and substantive remediation as a significant indicator of good faith. A respondent that identifies a gap and closes it before being asked is in a better position than one that promises to close it after the matter is resolved.
- Preparation of the formal response. The response to GAC should address each of the relevant mitigation factors in turn, support every factual assertion with documentary evidence, acknowledge what went wrong without overstating or understating the seriousness, and present the remediation plan in concrete operational terms. Vague commitments to "improve compliance" carry little weight. Specific steps, with timelines and named owners, carry considerably more.
- Ongoing engagement. GAC may request further information or clarification after receipt of the initial response. The tone and substance of that ongoing engagement contributes to the overall impression of good faith. Delays in responding to requests, or responses that appear to minimise the issue, can undermine an otherwise strong mitigation case.
At each stage, the bridge between the factual record and the legal argument matters. GAC is assessing conduct, not just documents. The response must tell a coherent story – one that explains how the violation occurred, what the business did when it discovered it, and why the same pattern is unlikely to recur.
What are the most common risk flags in Canadian enforcement matters?
Several patterns recur in Canadian enforcement matters that might otherwise have been resolved at a lower level of seriousness. Recognising them in advance is a precondition for avoiding them.
Delayed disclosure. A business that discovers an apparent violation and sits on it – waiting to see whether GAC identifies it independently – sacrifices the most significant mitigant available. The longer the gap between discovery and disclosure, the harder it becomes to characterise the delay as anything other than a deliberate choice. There is no fixed disclosure deadline in the Canadian regime in the way that OFSI requires reporting within a specific number of business days, but delay is consistently treated as an aggravating factor.
Inconsistent statements. Statements made to GAC in an early, informal response that are later contradicted by the formal submission – or by documents GAC obtains through other means – create a credibility problem that is very difficult to recover from. The temptation to present the best possible picture at the first opportunity, before all the facts are known, should be resisted. It is better to describe what is known and flag what is still under investigation than to overstate the position and be corrected by the record.
Cosmetic compliance programmes. A compliance programme that exists on paper but has not been implemented in practice is an aggravating factor, not a neutral one. If a business asserts that it had a compliance programme in place and GAC's review of the facts reveals that the programme was never followed, the assertion of the programme makes the situation worse. In our practice we regularly encounter businesses that have invested in documentation without investing in implementation. The documents create an expectation that the conduct must then meet. Where it does not, the gap is damaging.
Failure to map the full counterparty chain. An apparent violation that involves a counterparty that could have been identified through reasonable ownership analysis – and was not – is difficult to characterise as a good-faith compliance failure. The GAC consolidated list covers direct designations. The ownership-and-control analysis required to identify indirectly caught entities requires additional work. A screening tool that stops at the direct designation is not sufficient. Have you run the counterparty through a full beneficial-ownership analysis, or only checked the name against the list?
Inadequate documentation of the screening process. It is not enough to have screened a counterparty. The screening must be documented in a way that allows the business to demonstrate, after the fact, what was checked, when it was checked, and what the result was. A business that can say "we screened this counterparty on this date and the result was negative" has a fundamentally different position from one that says "we have a screening process and we must have run it." The difference is entirely about documentation discipline.
The EU enforcement context presents a useful contrast here. For analysis of how the EU General Court has treated compliance-programme arguments in designation and enforcement matters, and how that approach informs best practice across regimes, see our guide to mitigation factors in EU enforcement. And for guidance on the assessment of apparent violations as a preliminary step before the enforcement response is filed, see our apparent violation assessment service.
When should a business involve external sanctions counsel?
The answer to this question is almost always: earlier than feels necessary. A business that first consults sanctions counsel after it has already responded informally to a GAC enquiry, made statements to the authority, and taken remediation steps without legal advice has already made choices that constrain the subsequent strategy. Those choices may have been entirely correct. They may have been damaging. The difficulty is that it is not always possible to tell which until the matter has progressed further.
The clearest triggers for immediate involvement of external counsel are these: any communication from GAC that refers to a specific transaction or counterparty; any discovery during internal compliance work of an apparent violation involving a designated person or listed entity; any transaction involving a counterparty with connections to a jurisdiction covered by a Canadian sanctions programme; and any matter where the same conduct may engage US, UK, or EU sanctions jurisdiction simultaneously. The last of those – the multi-regime matter – is where the cost of under-resourcing the legal response is highest.
A common myth in this space is that involving external counsel signals guilt, and that a confident internal response is more persuasive than a lawyered one. The experience of practitioners before GAC, OFAC, and OFSI does not support that view. Enforcement authorities understand that a well-represented respondent is a respondent that takes the matter seriously. A thorough, legally accurate submission carries more weight than an internal response that inadvertently mischaracterises the legal position or overstates the strength of the compliance programme.
The position above covers the standard case. Your facts – the counterparty, the goods, the regime in play, the internal compliance record, and the multi-jurisdictional dimension – will change the analysis materially. An early review can identify the most significant risks before the formal enforcement process begins and preserve options that narrow as the matter progresses.
For a confidential review of a potential breach or an apparent violation under the Canadian regime, contact Calder & Vance at info@caldervance.com.
Related practices
- Apparent violation assessment – structured review of an apparent violation before the enforcement response is filed
- Cross-border mitigation factors guide – how mitigation arguments interact across OFAC, OFSI, and GAC simultaneously
- EU enforcement mitigation guide – the EU General Court's approach to compliance-programme arguments and designation challenges