Humanities › Issues OFAC Compliance Facts Every Business Should Know Guidelines help companies avoid doing business with terrorist organizations Share Flipboard Email Print Caiaimage / Robert Daly / Getty Images Issues Terrorism History & Causes Groups & Tactics The U. S. Government U.S. Foreign Policy U.S. Liberal Politics U.S. Conservative Politics Women's Issues Civil Liberties The Middle East Race Relations Immigration Crime & Punishment Animal Rights Canadian Government View More By Amy Zalman, Ph.D. Global Security Expert Ph.D., Middle Eastern Studies, New York University B.A., English Literature, Columbia University Amy Zalman, Ph.D., is a global security expert and the CEO of Prescient, a management consulting firm that helps organizational leaders anticipate and manage critical global changes. our editorial process Amy Zalman, Ph.D. Updated August 06, 2019 OFAC is the acronym for the Office of Foreign Asset Control. OFAC compliance is critical for U.S. businesses working with overseas partners; the regulations are in place in part to ensure that companies don't unwittingly do business with terrorist organizations or other unsanctioned entities. The increasing possibility that US businesses, no matter how small, will have foreign suppliers or clients, makes it imperative that they understand the role of Office of Foreign Asset Control Compliance. Businesses are responsible for following OFAC regulations designed to halt terrorist and other illegal funds from circulating. If you are in an industry with significant foreign business, a small business owner, or an individual doing business, here are the top five areas to familiarize yourself with. What OFAC Compliance Means The Office of Foreign Assets Control administers and enforces economic sanctions programs primarily against countries and groups of individuals, such as terrorists and narcotics traffickers. The sanctions can be either comprehensive or selective, using the blocking of assets and trade restrictions to accomplish foreign policy and national security goals. All U.S. persons (which by legal definition includes firms) must abide by these sanctions — this is the meaning of compliance. Who Must Be in Compliance? All U.S. persons must comply with OFAC regulations, including all U.S. citizens and permanent resident aliens regardless of where they are located, all persons and entities within the United States, all U.S. incorporated entities and their foreign branches. In the cases of certain programs, such as those regarding Cuba and North Korea, all foreign subsidiaries owned or controlled by U.S. companies also must comply. Certain programs also require foreign persons in possession of U.S. origin goods to comply. Industry Specific Information OFAC provides downloadable guidelines and FAQs for specific industries, including: Financial SectorMoney Service BusinessesInsurance IndustryExporters and ImportersTourism / TravelCredit ReportingNon-Governmental Organizations (NGOs) / Non-profitCorporate Registration OFAC Country and List-Based Sanctions OFAC Country Sanctions and List-Based Sanctions, including general licenses for exceptions; related documents; and laws, rules and regulations authorizing the sanctions are available on the OFAC Sanctions webpage. Included in the Country Sanctions List Are: The BalkansBelarusBurmaCote d'Ivoire (Ivory Coast)CubaThe Democratic Republic of the CongoIranIraqLiberiaNorth KoreaSudanSyriaZimbabwe List-Based Sanctions Programs Include: Anti-TerrorismCounter Narcotics TraffickingNon-proliferationDiamond Trading Specially Designated Nationals (SDN) List OFAC publishes a list of Specially Designated Nationals and Blocked Persons ("SDN list") which includes over 3,500 names of companies and individuals connected with the sanctions targets. A number of the named individuals and entities are known to move from country to country and may end up in unexpected locations. U.S. persons are prohibited from dealing with SDNs wherever they are located and all SDN assets are blocked. It is important to check OFAC's website on a regular basis to ensure that your SDN list is current.