An aid organisation operating across a conflict-affected region discovers that its local delivery partner has indirect links to a designated entity. The funds are committed. The programme timeline is tight. Under Australia's autonomous sanctions regime, the question is whether the organisation can proceed lawfully – and, if so, how fast.
Australia's autonomous sanctions regime, administered by the Department of Foreign Affairs and Trade (DFAT), permits humanitarian and NGO activities in sanctioned environments through a permits and exemptions mechanism. The governing instruments are the Autonomous Sanctions Act and the sanctions regulations made under it for each designated country or thematic programme. There is no standing general authorisation equivalent to those issued under OFAC or OFSI; each case requires direct engagement with DFAT, and the procedural window is finite.
This guide walks through the authorisation procedure step by step, flags the risk points that most frequently cause delays, and identifies where the Australian position diverges from the OFAC, OFSI, and EU approaches – differences that matter for any organisation also operating under those regimes.
Step 1 – Understand the legal basis and DFAT's role
Australia's sanctions system is grounded in the Autonomous Sanctions Act and the thematic regulations made under it, each of which implements a distinct sanctions programme. DFAT administers the regime, processes permit applications, and issues exemptions or authorisations. Unlike OFAC and OFSI, which publish standing general licences or general permissions covering broad categories of humanitarian activity, DFAT's authorisation mechanism is more case-specific. An NGO that holds an OFAC general licence for its US-nexus transactions cannot assume equivalent cover under the Australian regime.
The distinction matters immediately for multi-jurisdiction operators. In our cross-border practice, we regularly advise organisations that have correctly mapped their OFAC and EU exposures but have treated Australia as a footnote. The Autonomous Sanctions Act carries civil and criminal penalties, and DFAT enforces. Identifying which sanctions programme applies – the relevant thematic regulations for the country of operation, or a cross-cutting thematic programme – is the first task before any application is filed.
DFAT maintains a consolidated list of designated persons and entities. It also maintains the permit and exemptions framework within which humanitarian authorisations sit. Practitioners should be clear: the permitting gateway and the exemption gateway are distinct, and the analysis of which applies depends on the transaction structure and the nature of the activity.
Step 2 – Map your activity against the prohibitions in the applicable sanctions regulations
Before preparing an application, the organisation must establish precisely which prohibition its planned activity engages. The applicable sanctions regulations typically prohibit a defined set of dealings: making assets available to designated persons, supplying sanctioned goods or services, and facilitating prohibited transactions. Not every humanitarian activity engages every prohibition, and identifying the exact mismatch between the planned activity and the operative prohibition determines the form of authorisation needed.
In practice this mapping exercise involves three questions.
- Does the activity involve making funds or assets available, directly or indirectly, to a designated person or entity?
- Does it involve the supply, transfer, or provision of sanctioned goods or services?
- Does it involve a facilitation component that itself constitutes a prohibited dealing?
Where the answer to any of these is yes – or arguably yes – an authorisation is required before the activity proceeds. Proceeding without one is not a grey-area risk: it is a potential criminal offence under Australian law. The mapping exercise is also the moment to identify any ownership and control (the test for whether a non-designated entity is nonetheless caught through a designated person's interest) exposure among implementing partners. Australia applies a broadly consistent ownership analysis, though the precise statutory formulation differs from the US 50 percent rule and the EU's own-or-control formulation.
A cross-regime note: if the organisation also has a US nexus – US-dollar flows, US-person staff, US-origin goods – the OFAC analysis runs in parallel. The Australian authorisation gives no protection against OFAC liability, and vice versa. We have acted for organisations whose Australian permit was in order but whose US-dollar payment cleared through a correspondent bank that flagged an OFAC issue. Both analyses must be completed independently.
Step 3 – Determine whether an exemption applies before filing for a permit
Some humanitarian activities are carved out of the prohibitions by the regulations themselves, without any application to DFAT. These statutory exemptions typically cover: basic food and medicine for civilian populations; activities of UN specialised agencies and bodies operating under a Security Council authorisation; and, in some programmes, Red Cross and Red Crescent activities. If one of these exemptions applies on its face, no permit is needed – but the organisation should document its reliance on the exemption and retain that record.
The important discipline here is not to assume the exemption is available. In our experience, the wording of the Australian exemptions is tighter than the equivalent carve-outs under some other regimes. The EU's humanitarian exemption under many of its sanctions regulations is broader in scope; OFSI in the United Kingdom has, in recent programme cycles, issued general licences with comparatively expansive humanitarian coverage. Australia's exemptions, by contrast, tend to be narrowly drafted and programme-specific. Reading the applicable thematic regulation – not a summary of it – is essential.
If no statutory exemption applies, the next step is the permit route. Attempting to rely on an exemption that does not clearly apply, rather than seeking a permit, is one of the more common mistakes we see in this practice area. It exposes the organisation to enforcement risk and, if the position later proves wrong, the organisation will have proceeded without authorisation.
Step 4 – Prepare and submit the permit application to DFAT
Where a permit is required, the application is made directly to DFAT's sanctions unit. DFAT has published guidance on the information it requires, and the application is substantive: it is not a form-filling exercise. The elements DFAT typically requires include a description of the activity, identification of the sanctions programme engaged, identification of the designated persons or entities with whom the activity involves a dealing, an explanation of the humanitarian purpose, details of implementing partners and their sanctions-screening status, and supporting documentation demonstrating the nature and scope of the programme.
Completeness at the point of submission matters. DFAT will return incomplete applications. Each round-trip exchange adds time, and humanitarian programmes are rarely time-unlimited. The practical approach is to prepare a draft application, review it against DFAT's published guidance, and then conduct a further review for completeness before submitting. We regularly assist applicants in preparing permit applications for DFAT – drafting the factual narrative, structuring the legal analysis of the prohibitions engaged, and reviewing supporting documentation – because the quality of the initial submission is the single largest determinant of processing speed.
DFAT does not publish fixed processing timelines for humanitarian permits. The timeline depends on the complexity of the application, the sanctions programme in question, and whether DFAT requires further information. Applicants should not assume a rapid turnaround. Planning the submission well ahead of the programme start date is not optional.
The position above covers the standard path. Your facts – the counterparty structure, the programme geography, the goods or services involved, the funding source – may alter the analysis materially. For a preliminary assessment of your application, contact Calder & Vance at info@caldervance.com.
Step 5 – Manage the permit conditions and ongoing compliance obligations
A DFAT permit is not a blank authorisation. Permits are typically issued subject to conditions: reporting requirements, restrictions on the scope of the permitted activity, requirements to notify DFAT of material changes, and record-keeping obligations. The conditions are part of the legal instrument, and breaching them is itself a potential offence.
The record-keeping discipline is one that organisations frequently underestimate. Under Australian law, as under most major sanctions regimes, the organisation must be able to demonstrate – not merely assert – that its activities remained within the permitted scope. That means maintaining contemporaneous records of: the persons and entities dealt with, the funds transferred and their destination, the goods or services supplied, and the steps taken to screen implementing partners at each stage of the programme.
Material changes in the programme – a new implementing partner, a change in the geographic scope, a significant increase in funding – should be reported to DFAT promptly. Whether a change requires a new permit or a modification of the existing one is a question for DFAT, not for the organisation to decide unilaterally. Organisations that proceed with a materially changed programme on the assumption that their existing permit covers it take a real compliance risk.
How does Australia compare with OFAC, OFSI, and the EU on humanitarian authorisations?
The Australian position is distinct from its major-regime counterparts in two respects that affect practice immediately. First, Australia does not issue standing general licences covering broad humanitarian activity in the way that OFAC does for certain sanctions programmes. OFAC has, in multiple programme contexts, issued general licences that permit categories of NGO and humanitarian activity without a case-by-case application. Australia's approach requires direct engagement with DFAT in all cases where no statutory exemption applies. For an organisation with OFAC general-licence coverage, this means the Australian authorisation is an additional step – not a duplication of the same process.
Second, the UK's OFSI has, in a number of its licence categories, adopted a general licence model with meaningful humanitarian scope. The EU, similarly, has embedded humanitarian exemptions directly into many of its Council regulations, and the scope of those exemptions has expanded in certain programmes. Australia's statutory exemptions exist but are more narrowly drawn. This means that an organisation planning a programme under Australian sanctions should not use its OFSI or EU analysis as a proxy for its Australian position.
What Australia shares with those regimes is the extraterritorial concern. Australia's sanctions apply to Australian persons and entities wherever they are located, and to conduct occurring wholly or partly in Australia. For a programme managed from an Australian headquarters but implemented through overseas partners, the Australian analysis applies even if no Australian-held assets are directly involved. That is a common misconception: the question is the identity of the actor, not only the location of the funds.
A further cross-regime consideration is the UN layer. Where the Security Council has itself authorised a humanitarian programme under Chapter VII, that authorisation creates an obligation on UN member states to permit the activity. Australia implements UN Security Council sanctions through the Charter of the United Nations Act and the regulations made under it. Where a UN Security Council authorisation is in place, the Australian DFAT permit requirement may be displaced or modified – but this is not automatic, and the interaction between the UN instrument and the Australian domestic regime must be verified in each case.
If a permit has already been refused, or an application is at risk of refusal, an early conversation with sanctions counsel preserves options that narrow with time. Contact Calder & Vance at info@caldervance.com.
Risk flags and when to involve sanctions counsel
Certain characteristics in a proposed programme should trigger immediate legal review before the application is submitted – or before the activity begins.
- Layered implementing partners: where the funds will pass through more than one intermediary before reaching the end beneficiary, each layer requires screening and the ownership-and-control analysis must reach the ultimate principal behind each intermediary.
- In-kind transfers of dual-use goods: humanitarian programmes that supply equipment – communications technology, vehicles, generators, medical devices – may engage Australia's export-control obligations under the Defence Export Controls framework, separately from the sanctions regime. The two analyses are independent.
- Multi-currency payment flows: where programme funds are moved in US dollars or euros, the OFAC and EU analyses run concurrently with the Australian analysis, regardless of whether the paying entity is Australian.
- Government co-financing: programmes co-financed by a government donor may carry additional conditions imposed by the donor's own sanctions compliance requirements. Those requirements sit alongside, not in place of, the Australian regime obligations.
- Rapidly changing programme scope: humanitarian situations are dynamic. A permit granted for one geographic scope or beneficiary population may become inadequate within weeks. The absence of a mechanism to modify the permit rapidly is itself a risk that organisations should plan for before the programme begins.
Counsel should be involved at the programme-design stage, not only when a problem has already arisen. The cost of a pre-application review is a fraction of the cost of a permit refusal, a delayed programme, or an enforcement investigation. The myth we encounter most often is that humanitarian organisations are implicitly exempt from sanctions scrutiny. They are not. DFAT applies the same legal framework to NGOs as to commercial entities. The exemptions and permits available to NGOs exist because the regulations created them – not because the regime contains an inherent carve-out for good intentions.
Related practices
- Frozen account management under BIS / EAR – managing frozen accounts and applying for release under US export-control licensing.
- Humanitarian authorisation under Australia – advanced guide – deeper analysis of permit conditions, multi-programme scenarios, and DFAT enforcement posture.
- Humanitarian authorisation under BIS / EAR – step-by-step guide to OFAC and BIS humanitarian licensing for US-nexus programmes.