CCB Cross-Border Compliance Issues 5 ā Questions and Answers
Question 1: Which treaty framework governs mutual legal assistance (MLAT) requests between the US and foreign governments in cross-border criminal compliance investigations?
- World Trade Organization Dispute Settlement Understanding
- Bilateral Mutual Legal Assistance Treaties (MLATs) and the CLOUD Act (Correct answer)
- United Nations Convention Against Corruption (UNCAC) dispute panels
- OECD Anti-Bribery Convention enforcement protocols
Correct answer: Bilateral Mutual Legal Assistance Treaties (MLATs) and the CLOUD Act
MLATs are bilateral treaties that formalize cross-border cooperation in criminal investigations, while the CLOUD Act provides a framework for US law enforcement to access data held abroad.
Question 2: A company's cross-border whistleblower hotline receives a complaint about potential violations in a country where local law prohibits anonymous reporting. The compliance officer should:
- Disable the hotline in that country immediately and permanently
- Consult local counsel to implement a legally compliant reporting mechanism adapted to local requirements (Correct answer)
- Ignore local law since US parent company policy supersedes foreign regulations
- Require the employee to report directly to local police instead
Correct answer: Consult local counsel to implement a legally compliant reporting mechanism adapted to local requirements
Local counsel must advise on how to adapt whistleblower channels to comply with local privacy and labor laws while preserving the spirit of the reporting mechanism.
Question 3: Transfer pricing documentation requirements under OECD guidelines typically include which three-tiered approach?
- Global report, regional report, and divisional report
- Master file, local file, and Country-by-Country Report (Correct answer)
- Consolidated accounts, statutory accounts, and management accounts
- Group policy, subsidiary policy, and transaction policy
Correct answer: Master file, local file, and Country-by-Country Report
The OECD's BEPS Action 13 transfer pricing documentation framework consists of a Master File (group overview), Local File (entity-level transactions), and Country-by-Country Report (jurisdictional data).
Question 4: An EU company receives a legal hold notice from a US court requiring preservation of data that includes EU citizens' personal data. Under GDPR Article 48, transferring this data to US courts:
- Is automatically permitted under the law enforcement exception
- Requires either a mutual legal assistance framework or a GDPR-compliant transfer mechanismācourt orders alone are insufficient (Correct answer)
- Is prohibited in all circumstances with no exceptions
- Only requires the data subject's verbal consent
Correct answer: Requires either a mutual legal assistance framework or a GDPR-compliant transfer mechanismācourt orders alone are insufficient
GDPR Article 48 provides that international transfers based solely on foreign court judgments or orders are not automatically recognizedāa GDPR-compliant transfer basis is still required.
Question 5: What is the primary purpose of a 'jurisdictional nexus analysis' in cross-border compliance?
- To determine which country's currency should be used for financial reporting
- To assess which countries' laws apply to a company's conduct based on connections like territory, nationality, and effects (Correct answer)
- To identify tax havens where the company can incorporate subsidiaries
- To map out logistics routes for international shipments
Correct answer: To assess which countries' laws apply to a company's conduct based on connections like territory, nationality, and effects
A jurisdictional nexus analysis identifies which countries can assert legal authority over a company's activities based on factors like where conduct occurred, the nationality of parties involved, and where effects were felt.
Question 6: Under the Corporate Sustainability Due Diligence Directive (CSDDD) adopted by the EU, which obligation does it impose on large companies?
- Mandatory carbon-neutral operations by 2030
- Conducting due diligence to identify, prevent, and mitigate adverse human rights and environmental impacts across their value chains (Correct answer)
- Publishing annual diversity statistics for all global subsidiaries
- Obtaining EU certification before exporting goods to non-EU countries
Correct answer: Conducting due diligence to identify, prevent, and mitigate adverse human rights and environmental impacts across their value chains
The EU CSDDD requires large companies operating in the EU to conduct due diligence across their entire value chain to address adverse human rights and environmental impacts.
Question 7: A compliance officer at a US bank discovers that a foreign correspondent bank is transmitting funds for a sanctioned entity through nested accounts. Under FinCEN guidance, the bank should:
- Continue processing transactions while alerting the correspondent bank privately
- File a Suspicious Activity Report (SAR), exit the correspondent relationship if necessary, and implement enhanced due diligence on correspondent accounts (Correct answer)
- Freeze all funds globally associated with the correspondent bank
- Report exclusively to the local police in the correspondent bank's country
Correct answer: File a Suspicious Activity Report (SAR), exit the correspondent relationship if necessary, and implement enhanced due diligence on correspondent accounts
FinCEN guidance requires banks to file SARs for suspected sanctions evasion and to conduct enhanced due diligence or exit high-risk correspondent banking relationships.
CCB Cross-Border Compliance Issues 5
Which treaty framework governs mutual legal assistance (MLAT) requests between the US and foreign governments in cross-border criminal compliance investigations?