A logistics company routes a shipment through a Swiss subsidiary. An internal audit surfaces a transaction that may have touched a SECO-designated counterparty. The question arrives on the General Counsel's desk: do we report this, and if so, how? Every day spent without a clear answer is a day the enforcement window shifts.
Voluntary self-disclosure to the State Secretariat for Economic Affairs (SECO – Switzerland's authority for sanctions and export-control enforcement) is a formal process by which a business or individual proactively reports a potential violation of Swiss sanctions law before SECO initiates proceedings. A well-prepared, timely disclosure is the primary tool for managing enforcement exposure under the applicable Swiss regime. The degree of mitigation it achieves depends on the quality of the disclosure package, the timeline, and the steps taken to remediate the underlying issue.
This page sets out how voluntary self-disclosure works under SECO, how it compares to equivalent processes at OFAC, OFSI, and within the EU, and what a business should do before it reports.
What is voluntary self-disclosure under SECO, and who needs it?
Voluntary self-disclosure under SECO is a structured submission to the State Secretariat for Economic Affairs that describes a potential breach of Swiss sanctions obligations, sets out the facts of the matter, and proposes remedial action. Swiss sanctions law – administered by SECO under the applicable national embargo ordinances – establishes criminal and administrative consequences for violations. A voluntary disclosure that meets SECO's expectations in terms of completeness and timeliness can influence the enforcement outcome, although no result is guaranteed.
The businesses that most frequently face this decision include Swiss-incorporated entities that have screened their transaction history and identified a potential hit, foreign companies with Swiss operations or payments routed through Switzerland, financial institutions that have identified a transaction linked to a SECO-listed party, and exporters whose goods may have transited Switzerland in breach of applicable embargo rules. In our experience, the issue reaches us after an internal audit, a merger due-diligence review, or a correspondent bank query – not always at the moment the violation occurred.
The governing legal basis is Switzerland's embargo law and the ordinances issued under it. SECO administers enforcement, and it coordinates with the Federal Department of Economic Affairs, Education and Research. Criminal matters are referred to the prosecuting authorities. That dual-track exposure – administrative and criminal – is one reason early legal advice matters.
How does the SECO enforcement regime compare with OFAC, OFSI, and the EU?
The SECO voluntary-disclosure process sits within a distinct enforcement architecture that diverges from the US, UK, and EU equivalents in several respects, and practitioners advising cross-border businesses must hold all four regimes in view simultaneously.
Under OFAC, voluntary self-disclosure (VSD – a formal, written submission to the Office of Foreign Assets Control describing an apparent violation) is a recognised mitigating factor in the penalty framework. OFAC's guidance treats a timely, complete VSD as a major mitigating factor, and it adjusts the base penalty accordingly. The OFAC process is detailed and document-heavy: it requires a thorough internal investigation, a root-cause analysis, and a remediation plan submitted alongside the disclosure. The disclosure is made to OFAC directly, and OFAC may issue a no-action letter, a cautionary letter, or a civil monetary penalty.
OFSI in the United Kingdom operates a separate reporting duty: a person who knows or suspects that they hold frozen assets or have breached a financial sanction must report to OFSI as soon as practicable. That is a mandatory obligation, distinct from the voluntary self-disclosure question, although the quality and speed of a report is treated as a factor in enforcement. OFSI's penalty regime sets its own base amounts and mitigation methodology. The UK legal basis derives from SAMLA – the Sanctions and Anti-Money Laundering Act – and the thematic regulations made under it.
The EU does not have a single voluntary-disclosure mechanism. Enforcement sits with member-state competent authorities, each with its own procedures. An entity operating across EU member states may face divergent enforcement expectations depending on which authority picks up the matter. Practitioners advising EU-connected businesses regularly manage parallel tracks across two or more member states, while also addressing any Swiss or US exposure.
Switzerland's position under SECO is closer to the administrative-criminal model than to OFAC's purely civil penalty system. The proximity to criminal referral means the internal legal-privilege question is particularly acute: materials prepared in anticipation of a SECO disclosure must be managed carefully to preserve whatever protection applies under Swiss and – where cross-border counsel is involved – other applicable legal-professional privilege rules.
The cross-border point matters for another reason. A business that discloses to SECO but has not assessed its US or EU position may find that the Swiss disclosure triggers scrutiny in a second jurisdiction. We regularly advise on this sequencing question before any disclosure is made.
The position above covers the standard case. Your facts – the counterparty, the goods, the payment route, the regime in play – change the analysis. For a confidential review of your exposure under SECO and any parallel regimes, contact Calder & Vance at info@caldervance.com.
What is the procedure for making a voluntary self-disclosure to SECO?
A SECO voluntary disclosure follows a defined sequence, and the quality of each step conditions the one after it. There is no standard SECO form for voluntary self-disclosure; the submission is a free-form document, which means its structure and content become the main levers available to the disclosing party.
The process in practice unfolds as follows:
- Internal scoping: Identify the transactions, parties, and goods or funds at issue. Establish whether the potential violation falls under a SECO embargo ordinance, a UN-derived measure, or Switzerland's autonomous sanctions. Map the ownership and control chain of any counterparty flagged as potentially listed.
- Privilege and document management: Before any document is produced in connection with the investigation, determine which materials are prepared for the purpose of legal advice. Commingling business records and privileged analysis is a common and costly error.
- Root-cause analysis: Identify why the apparent violation occurred – a screening failure, a policy gap, a data error, or a compliance process that did not capture the transaction type at issue. SECO's enforcement posture takes the quality of this analysis into account.
- Remediation: Implement corrections before, or in parallel with, the disclosure. A disclosure that arrives without any remediation steps in place is treated less favourably than one that demonstrates the problem has been fixed.
- Drafting the disclosure package: Prepare a clear factual chronology, a legal analysis of the applicable regime, a root-cause explanation, a description of remediation steps taken, and a statement of any ongoing monitoring arrangements.
- Submission to SECO: File the disclosure with the competent unit at SECO. Timing relative to any SECO inquiry already underway is legally significant; a disclosure made after SECO has opened an inquiry may not qualify for the same treatment as a genuinely voluntary submission.
- Post-submission engagement: SECO may request further information, documentation, or meetings. The response phase is not merely administrative; it is a further opportunity to demonstrate cooperation and the quality of the remediation.
One critical question practitioners face at Step 1 is whether the matter also requires notification to a correspondent bank or a counterparty under contractual or regulatory obligations. The answer varies with the transaction structure and the governing law of the underlying agreement. Do not assume that a decision to self-disclose to SECO closes the question of what must be reported elsewhere.
What are the risk flags that change the disclosure analysis?
Not every apparent violation carries the same enforcement risk, and a careful triage of the facts before disclosure shapes the strategy significantly. Several factors consistently elevate risk in SECO matters.
Intentional or repeated conduct is the most significant aggravating factor in any enforcement system. A one-off screening error corrected on discovery is categorically different from a pattern of transactions that post-date a compliance warning. SECO, like OFAC and OFSI, treats wilfulness and repetition as materially aggravating.
The nature of the sanctioned party matters. A transaction that involves a listed person connected to a programme targeting financial crime or weapons proliferation is treated more seriously than one involving an indirect, technical breach at the margins of an embargo.
The value and nature of the goods or funds is relevant. Cash transactions, wire transfers, and high-value goods attract closer scrutiny than low-value administrative contacts. Export-control violations – where goods may have been delivered – carry the additional question of end-use and end-user accountability.
A prior disclosure to SECO or a prior enforcement interaction changes the calculus for a repeat disclosure. Prior violations are an aggravating factor in virtually every regime's penalty methodology. In our practice, we see this issue arise in post-merger situations where the acquired entity had an earlier SECO interaction that the buyer's due diligence did not surface.
The question of concurrent US exposure is consistently underweighted by businesses that think of Switzerland as their only relevant jurisdiction. A Swiss company that processes US-dollar payments, uses a US-based correspondent bank, or deals in goods of US-origin or with US-person involvement has OFAC exposure that runs in parallel with any SECO matter. The same transaction can give rise to an obligation to report in two or more jurisdictions, with potentially different sequencing requirements. If a transaction has already been flagged internally, or a report has been refused or returned incomplete, an early review can preserve options that narrow with time. Reach out to us at info@caldervance.com.
When does a voluntary disclosure become mandatory rather than voluntary?
Swiss sanctions law and the applicable embargo ordinances impose positive reporting duties in certain circumstances, and the line between a voluntary disclosure and a mandatory report is not always obvious on the face of the facts. Businesses should not assume that a decision not to disclose voluntarily means they have no obligation at all.
Financial institutions operating in Switzerland are subject to anti-money-laundering reporting requirements that may trigger a duty to report suspected transactions independently of the SECO voluntary-disclosure question. An apparent SECO violation that also involves funds connected to a listed party will frequently intersect with the AML reporting framework administered by FINMA – the Swiss Financial Market Supervisory Authority. Managing these two reporting streams in sequence, rather than concurrently, is a structural error we see in businesses that handle the SECO question without a full view of the regulatory picture.
For non-financial businesses, the threshold question is whether the apparent violation involves a strict-liability offence under the applicable ordinance. Some embargo provisions create automatic criminal exposure regardless of intent. In those cases, the voluntary-disclosure strategy is not about whether to report but about the terms, timing, and form of the report. Counsel should be engaged before any submission is made.
The interaction with the UN Consolidated List is a further complexity. SECO administers Switzerland's implementation of UN Security Council asset-freeze and travel-ban measures. A matter that touches a UN-listed person may engage obligations under both the Swiss national implementing measures and, where other jurisdictions are involved, their own UN-derived requirements. The practical question of which authority to approach first, and in what sequence, deserves specific legal analysis in each case.
A common misconception: "we are too small to matter to SECO"
In our experience, one of the most persistent myths in Swiss sanctions enforcement is that SECO focuses exclusively on large financial institutions and that small or mid-sized businesses have nothing to worry about from a voluntary-disclosure perspective. That is not an accurate reading of SECO's enforcement posture.
SECO's mandate extends across all Swiss-regulated persons and entities, regardless of size, sector, or transaction volume. Smaller businesses can and do receive enforcement attention, particularly where the apparent violation involves a goods or technology export, a payment through the Swiss banking system, or a commercial relationship with a listed party. The absence of a dedicated sanctions compliance programme is not a defence; in some respects it is itself a factor in the enforcement assessment.
The practical point for mid-market businesses is that the decision not to investigate and disclose carries its own risk. A SECO inquiry that begins without a prior voluntary disclosure is a harder position to manage than one that starts from a candid, well-prepared submission. SECO's enforcement framework, like those of OFAC and OFSI, rewards transparency and penalises concealment. The appropriate question for a business in doubt is not whether its size puts it below the SECO radar; it is whether the apparent violation, if discovered by SECO independently, would be treated more seriously than it would have been had the business come forward.
Related practices
- Apparent violation assessment – EU – scoping EU sanctions enforcement exposure and identifying disclosure obligations
- Voluntary self-disclosure – Singapore – managing voluntary disclosure under Singapore's sanctions and export-control regime
- EU vs SECO apparent violation assessment – analysis – a comparative look at how EU and SECO enforcement differ in practice
How Calder & Vance assists with voluntary self-disclosure to SECO
Our enforcement and investigations team advises businesses and individuals at every stage of the SECO voluntary-disclosure process, from the initial triage of an internal finding to post-submission engagement with SECO and any parallel-jurisdiction considerations.
In a recent matter, a mid-sized trading business identified a series of historical payments that appeared to involve an entity with links to a SECO-listed party. The business had not made any prior disclosure to SECO and was uncertain whether the payments fell within the scope of the applicable embargo ordinance. We scoped the apparent violation, mapped the ownership and control chain of the relevant counterparty, assessed the parallel US-dollar exposure, and prepared a structured disclosure package. The matter concluded without criminal referral, though no specific outcome is guaranteed in any future engagement.
Specifically, we:
- scope the apparent violation against the applicable SECO ordinance and the UN Consolidated List, to establish whether a disclosure obligation exists and what its scope is
- advise on privilege, document management, and the internal investigation structure to preserve legal-professional protection
- conduct the root-cause analysis and document the remediation steps in a form that supports the disclosure package
- prepare and submit the voluntary-disclosure package to SECO, including the factual chronology, legal analysis, and remediation narrative
- manage SECO's post-submission queries and the ongoing cooperation phase
- assess and coordinate any parallel disclosure obligations at OFAC, OFSI, or within EU member-state authorities
We work at the pace the matter demands. SECO voluntary-disclosure timelines are not standardised, but in our practice, early and decisive action consistently produces better outcomes than delayed responses to enforcement pressure. We offer a fixed-fee entry point for the initial scoping and assessment phase, with clear fee parameters for the disclosure itself.
To discuss a voluntary self-disclosure matter under SECO, or to assess whether a potential violation requires disclosure, contact Calder & Vance at info@caldervance.com.
Frequently asked questions: voluntary self-disclosure under SECO
How long does voluntary self-disclosure take under SECO?
There is no fixed statutory timetable for a SECO voluntary-disclosure process. The internal investigation, root-cause analysis, and preparation of the disclosure package typically take several weeks to a few months, depending on the volume of transactions at issue and the complexity of the ownership structure. Post-submission, SECO may take additional time to assess the matter and respond. Businesses that have identified an apparent violation should begin the scoping process immediately, as delay before submission can itself be treated as a negative factor in enforcement.
What are the main risks in voluntary self-disclosure under SECO?
The primary risks are: submitting an incomplete or inaccurate disclosure, which can undermine the mitigating value of the submission and expose the business to additional scrutiny; disclosing to SECO without first assessing parallel obligations at OFAC, OFSI, or EU member-state authorities; failing to manage privilege around internal investigation materials; and disclosing after SECO has already opened an inquiry, at which point the submission may not qualify as genuinely voluntary. Remediation steps that are incomplete or cosmetic are also treated unfavourably.
Do we need specialist counsel for voluntary self-disclosure?
Specialist counsel is strongly advisable, not only to prepare the disclosure package but to manage the range of legal questions that arise before any submission is made. These include the privilege analysis, the root-cause and remediation work, the parallel-jurisdiction assessment, and the sequencing of any mandatory reporting obligations under FINMA's AML framework. A self-prepared disclosure that overlooks one of these elements can complicate, rather than resolve, the enforcement position. The fixed-fee entry point we offer for an initial assessment makes the decision to engage counsel straightforward.
About the author
Claire Dubois advises on EU sanctions, including Council-regulation analysis, ownership-and-control questions, and annulment actions before the EU General Court. She also advises on Switzerland's SECO regime, including voluntary self-disclosure, apparent-violation assessments, and cross-border enforcement matters where EU and Swiss obligations intersect. Calder & Vance – International Sanctions & Export Control Counsel.
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.