InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
Special Alert: NYDFS guidance on cybersecurity and virtual currency responds to events in Ukraine
The New York Department of Financial Services last week issued guidance on its cybersecurity and virtual currency regulations in response to the Russian military actions in Ukraine and recently imposed sanctions. NYDFS specifically raised the specter of elevated cyber risk due to ongoing cyberattacks against Ukraine, which could spill over to other networks, as well as potential direct attacks against U.S. critical infrastructure.
Updated cybersecurity regulation guidance
NYDFS suggested that regulated entities with programs pursuant to its cybersecurity regulation (23 NYCRR 500) have the potential to mitigate increased cyber threats and should take the following steps:
- Review cybersecurity programs for compliance, with particular attention to certain safeguards and core cybersecurity hygiene measures, including access control, vulnerability management, and privileged access review
- Review, update, and test incident-response and business-continuity plans and ensure they address ransomware events
- Review and implement practices pursuant to the June 2021 Ransomware Guidance
- Re-evaluate plans to maintain essential services and protect critical data in the event of an extended outage or service disruption
- Conduct a full test of backup and recovery abilities
- Provide additional cybersecurity awareness training and reminders for all employees
NYDFS also advised that regulated entities should keep track of known threat actors and take extra precautions when doing business in Russia and Ukraine, including segregating Russian and Ukrainian networks. Regulated entities must report cybersecurity events that meet the criteria of 23 NYCRR 500.17(a) as promptly as possible and within 72 hours, and should also report cybersecurity events immediately to law enforcement, including the FBI and the Cybersecurity and Infrastructure Security Agency.
Guidance in response to recent sanctions
In the last week, the Biden administration imposed significant new sanctions targeting Russian assets, the Russian financial market, and Russian business dealings in response to Russia’s invasion of Ukraine. (See InfoBytes coverage here.) NYDFS reiterated that regulated entities should fully comply with U.S. sanctions on Russia, as well as Part 504 of its regulations regarding transaction monitoring and filtering. In order to comply with the new sanctions, NYDFS recommended that regulated entities take the following steps immediately:
- Monitor all communications from NYDFS, the U.S. Department of the Treasury, the Office of Foreign Assets Control (OFAC), and other federal agencies on a real-time basis to keep tabs on the latest developments
- Modify transaction monitoring and filtering programs as necessary to capture new sanctions as they are proposed
- Monitor all transactions, particularly trade finance transactions and funds transfers, and identify and interdict transactions prohibited by U.S. sanctions.
- Update OFAC compliance policies and procedures on a continuous basis to incorporate the recent sanctions and any new sanctions that may be imposed.
Updated virtual currency regulation guidance
NYDFS also cautioned that sanctioned entities may attempt to use virtual currency to evade sanctions. It said regulated entities must ensure they have “tailored policies, procedures, and processes to protect against the unique risks that virtual currency present” and are complying with the relevant state and federal laws, including the OFAC Sanctions Compliance Guidance for the Virtual Currency Industry and New York virtual currency regulation (23 NYCRR 200). Additionally, regulated entities should monitor the effectiveness of virtual currency-specific control measures, including sanctions lists, geographic screening, geolocation tools/IP address identification and blocking capabilities, and transaction monitoring and investigative tools, including blockchain analytics tools.
Buckley will continue to monitor the ongoing situation in Ukraine and provide updates in conjunction with significant developments.
If you have any questions regarding the NYDFS guidance or the recent Ukraine-related sanctions against Russia, please visit our Privacy, Cyber Risk & Data Security or Bank Secrecy Act/Anti-Money Laundering & Sanctions practice pages, or contact a Buckley attorney with whom you have worked in the past.
Special Alert: Russian invasion of Ukraine triggers significant sanctions (updated)
Over past few days, and following weeks of clear signals that sanctions would be imposed in response to military activity, the Biden administration issued significant new sanctions in response to the Russian Federation’s military invasion of Ukraine and its recognition of Ukraine’s separatist regions. The recent measures:
- Freeze the U.S. assets of numerous Russian banks and their subsidiaries, including Russia’s second largest bank, VTB, the company behind the Nord Stream 2 pipeline and multiple Kremlin-connected individuals
- Cut off Sberbank, Russia’s largest bank, from the U.S. financial system by prohibiting transactions involving Sberbank and imposing correspondent account-related prohibitions
- Prohibit transactions in new debt and equity of 13 large Russian enterprises
- Target secondary market dealings in Russian government debt
- Impose a near complete prohibition on dealings with the separatist regions of Ukraine
OFAC sanctions network connected to Houthis in Yemen
On February 23, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order (E.O.) 13224 against members of an international network for funding the Houthis’ war against Yemen and threatening civilians and infrastructure in neighboring states. According to OFAC, the group is led by Iran’s Islamic Revolutionary Guard Corps-Qods Force (IRGC-QF) and a Houthi financier, which has transferred money to Yemen via a complex international network of intermediaries in support of the Houthis’ attacks. As previously covered by InfoBytes, in June 2021, OFAC designated the Houthi financier and members of his network pursuant to E.O. 13224, for their role in generating revenue through the sale of commodities such as petroleum to fund the Houthis. OFAC also noted that “the Houthis continue their destructive campaign inside Yemen, and have repeatedly launched ballistic missiles and unmanned aerial vehicles that have struck civilian infrastructure in neighboring states, resulting in civilian casualties.” As a result of the sanctions, all property and interests in property belonging to the sanctioned individuals, and “any entities that are owned, directly or indirectly, 50 percent or more” by the individuals that are subject to U.S. jurisdiction are blocked and must be reported to OFAC. OFAC’s announcement further noted that OFAC regulations “generally prohibit” U.S. persons from participating in transactions with designated persons or their blocked property, and foreign financial institutions that knowingly participate in significant transactions related to the designated individuals risk exposure to sanctions that could discontinue their access to the U.S. financial system or block their property or interests in property under U.S. jurisdiction.
Special Alert: Russian invasion of Ukraine triggers significant sanctions
On February 21 and 22, following weeks of clear signals that sanctions would be imposed in response to military activity, the Biden administration issued significant new sanctions in response to the Russian Federation’s recognition of separatist regions of Ukraine and incursions of Russian troops. The new measures impose property-blocking sanctions on two state-owned banks (including their subsidiaries), target secondary market dealings in Russian debt, and impose a near complete prohibition on dealings with the separatist regions of Ukraine. Additionally, the Department of the Treasury took steps that enable it to impose sanctions on any person determined to be operating in Russia’s financial services sector. This appears to be an initial phase of sanctions activity and should military activity continue or escalate, it is likely that sanctions would similarly increase in stringency.
The evolving nature of the U.S. sanctions response is evidenced by a recent announcement that the Biden administration will soon impose sanctions targeting Nord Stream 2 AG, the company behind the $11.3 billion pipeline project that was intended to carry gas from Russia to Germany. Buckley will continue to monitor the situation and provide updates.
SEC announces $6.3 million FCPA settlement with largest South Korean telecommunications company
On February 17, the SEC announced that South Korea’s largest telecommunications company agreed to pay $6.3 million to settle the SEC’s claims that the company violated the books and records and internal accounting controls provisions of the FCPA. According to the SEC, the company “lacked sufficient internal accounting controls over expenses, including executive bonuses and purchases of gift cards, which enabled managers and executives to generate slush funds.” This allegedly allowed company employees to provide improper benefits and payments to government officials in Korea and Vietnam and to seek business from government customers.
With respect to the company’s conduct in Korea, the SEC alleged that from “at least 2009 through 2017, high-level [company executives] maintained slush funds, comprised of both off-the-books accounts and physical stashes of cash, in order to provide items of value to government officials, among others.” These slush funds were then allegedly used for gifts and entertainment, as well as illegal political contributions to Korean government officials who had the ability to influence company business. The SEC also stated that between 2015 and 2016, the company allegedly made more than $1.6 million in payments to three organizations at the request of high-level government officials. All these payments were recorded as either charitable donations or sponsorships, and the company took no measures to determine whether the payments were legitimate donations, the SEC said.
Concerning the company’s conduct in Vietnam, the SEC alleged that between 2014 and 2018, company employees “internally discussed providing money to third parties connected to government officials in Vietnam in order to obtain contracts for two projects.” The company allegedly arranged with a construction company to pay roughly $95,000 to a high-level official in 2014 in order to obtain a contract, and then later allegedly falsely booked a $200,000 payment to the construction company as “[s]upport/consulting for performance of the business (completed).” During this time, the SEC claimed the company “lacked sufficient internal accounting controls regarding third parties and no relevant compliance policies regarding due diligence,” and allegedly “took no meaningful steps in response to allegations of improper payments in connection with the contracts.”
Without admitting or denying wrongdoing, the company consented to a cease and desist order, and agreed to pay approximately $3.5 million in civil penalties and $2.8 million in disgorgement and prejudgment interest. The company and 14 executives were indicted by South Korean authorities in November 2021 for criminal violations related to political contributions.
OFAC sanctions additional Mexican national linked to narcotics trafficking
On February 17, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order 14059 against a Mexican national for his role in facilitating various illicit activities in Puerto Vallarta, Jalisco, Mexico on behalf of the Cartel de Jalisco Nueva Generacion (CJNG). CJNG “uses this renowned tourist destination as a strategic stronghold not only for drug trafficking but also money laundering, extortion, kidnappings, and assassinations,” Under Secretary of the Treasury for Terrorism and Financial Intelligence Brian E. Nelson stated. “Treasury will continue working with U.S. partners and the Mexican government to expose and disrupt CJNG, from its leadership to its facilitators.” The designated individual joins other previously designated businesses and individuals linked to CJNG for playing “critical roles in CJNG’s drug trafficking activities, including money laundering.” As a result of the sanctions, the designated individual’s property located in the U.S. or held by U.S. persons is blocked and must be reported to OFAC. Additionally, OFAC regulations generally prohibit U.S. persons from participating in transactions with the designated individual.
OFAC adds regulations on Chinese military companies and WMDs
On February 15, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced that it is adding regulations to implement a November 2020 Executive Order (E.O.), which is related to securities investments that finance Communist Chinese military companies, as amended by a June 2021 E.O. related to the Chinese military-industrial complex and Chinese surveillance technology. As previously covered by InfoBytes, President Biden issued E.O. 14032, “Addressing the Threat from Securities Investments that Finance Communist Chinese Military Companies.” The E.O. took additional steps pursuant to the national emergency declared pursuant to E.O. 13959 (covered by Infobytes here), including the threat posed by the military-industrial complex of the People’s Republic of China (PRC) and “its involvement in military, intelligence, and security research and development programs, and weapons and related equipment production under the PRC’s Military-Civil Fusion strategy.” According to OFAC, with respect to the recent regulations, the agency “intends to supplement these regulations with a more comprehensive set of regulations, which may include additional interpretive guidance and definitions, general licenses, and other regulatory provisions.” The regulations took effect February 16.
Additionally, OFAC announced that it is publishing an amendment to the Weapons of Mass Destruction Proliferators Sanctions Regulations “to revise an existing general license authorizing the provision of certain legal services and add a general license authorizing payments for legal services from funds originating outside the United States.” (Covered by InfoBytes here.) The amendment also took effect February 16.
OFAC removes Burundi sanctions regulations
On February 10, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced a final rule to remove the Burundi Sanctions Regulations. According to OFAC, the action is being taken “because the national emergency on which part 554 was based was terminated by the President on November 18, 2021.” The final rule took effect on February 11.
E.O. blocks property of Afghan bank
On February 11, President Biden issued an Executive Order (E.O.) on Protecting Certain Property of Da Afghanistan Bank [DAB] for the Benefit of the People of Afghanistan. The E.O. generally blocks “[a]ll property and interests in property of DAB that are held, as of the date of this order, in the United States by any United States financial institution, including the Federal Reserve Bank of New York.” The E.O. establishes that “[a]ny transaction that evades or avoids, has the purpose of evading or avoiding, causes a violation of, or attempts to violate any of the prohibitions set forth in this order is prohibited.” Among other things, the order's prohibitions “apply except to the extent provided by statutes, or in regulations, orders, directives, or licenses that may be issued pursuant to this order, and notwithstanding any contract entered into or any license or permit granted before the date of this order.” The E.O. also prohibits any transactions by U.S. persons—or within the U.S—that evade or avoid, have the purpose of evading or avoiding, cause a violation of, or attempt to violate the provisions set forth in the order, as well as any conspiracy to violate any of these prohibitions. Additionally, the Secretary of the Treasury—after consulting with heads of other executive departments as deemed appropriate—is authorized to take actions, including promulgating rules and regulations, to carry out the purposes of the E.O.
OFAC sanctions drug traffickers
On February 10, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) announced sanctions pursuant to Executive Order 14059 against two individuals for materially contributing to the illicit activities of major Mexican cartels to traffic drugs into the U.S. According to OFAC, the action, which was the result of collaboration between OFAC and the Drug Enforcement Administration, provides that all property and interests in property of sanctioned individuals in the U.S. or in the possession or control of U.S. persons must be blocked and reported to OFAC. OFAC notes that its regulations generally prohibit all transactions by U.S. persons that involve any property or interests in property of designated or otherwise blocked persons.