U.S. Treasury Department’s Office of Foreign Assets Control

2021 continued the trend of increased regulatory focus on privacy and cybersecurity for private investment funds in the U.S. and abroad. There are no signs of the trend leveling off any time soon.

One of the topics that captured our attention last year was the rise of ransomware. As previously shared, ransomware has evolved from merely encrypting files/disabling networks in solicitation of ransom, to sophisticated attacks penetrating data systems and debilitating entities.  Thus, while money continues to be an obvious motivator for these attacks, increasingly so is the pursuit of intellectual property and data.  Regulatory agencies have responded to combat the increase in attacks. For example, in October 2020, OFAC issued an Advisory declaring that any payment made to a sanctioned entity on OFAC’s list would be a violation of federal sanctions regulations and the paying entity would be strictly liable. Importantly, this means that the intent of the victim, and the knowledge as to whether the entity is on OFAC’s list, is no defense. While OFAC intends to decrease ransomware attack compliance through the issuance of its list of sanctioned entities, the nature of ransomware makes it difficult for the victim of an attack to be able to identify what entity is actually being paid.  This ambiguity may cause victims of ransomware attacks to unintentionally violate OFAC’s sanctions and be held strictly liable despite the publication of a list of sanctioned entities.

Sanctions continue to be a dynamic area of regulation and enforcement. In its first year, the Biden Administration has already undertaken a number of different sanctions initiatives. The three examples below highlight the range of strategies employed and their potential ramifications for private investment funds.

Over the past few weeks, the U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has issued further guidance in the form of Frequently Asked Questions (FAQs) and General Licenses that clarify the terms of the Order and its Chinese Military Sanctions Program. To a large degree, OFAC’s guidance confirms