Sanctions Compliance Due Diligence in LBOs: Screening Against OFAC, EU, and UN Sanctions Lists

The US Office of Foreign Assets Control (OFAC) issued a compliance advisory in September 2024 specifically flagging private equity and leveraged buyout (LBO) transactions as high-risk vectors for sanctions evasion, citing the opacity of fund structures and the velocity of debt-financed acquisitions. This guidance, combined with the EU’s 12th sanctions package against Russia (effective June 2024) expanding restrictions on dual-use goods and financial services, and the UN Security Council’s ongoing updates to its consolidated sanctions list, has fundamentally altered the due diligence calculus for LBO transactions executed through Hong Kong. For a typical LBO structured via a Cayman Islands acquisition vehicle and financed by a Hong Kong-licensed bank, the target company’s beneficial ownership chain now requires screening against at least three distinct sanctions regimes—OFAC’s Specially Designated Nationals (SDN) List, the EU Consolidated List, and the UN Sanctions List—before a single dollar of debt is drawn. Failure to conduct this screening can expose the sponsor, the lender, and the portfolio company to civil penalties, criminal liability, and the freezing of assets held in Hong Kong under the United Nations Sanctions Ordinance (Cap. 537). This article provides a procedural framework for integrating sanctions compliance due diligence into the LBO lifecycle, from pre-deal screening to post-closing monitoring, with specific reference to Hong Kong’s regulatory environment and market practice.

The Regulatory Pressure Point: Why LBOs Are Now a Sanctions Enforcement Priority

OFAC’s September 2024 advisory explicitly identified the private equity industry as a “compliance vulnerability” because fund managers often lack visibility into the ultimate beneficial owners (UBOs) of portfolio companies, particularly in cross-border LBOs where debt is layered across multiple jurisdictions. The advisory noted that since 2022, OFAC had imposed over USD 1.5 billion in civil penalties against financial institutions for sanctions violations linked to M&A transactions, with LBOs representing a disproportionate share due to the involvement of third-party lenders who may not conduct independent UBO screening.

Hong Kong’s position as a financial centre for PRC-outbound and Southeast Asian inbound investment amplifies this risk. The Hong Kong Monetary Authority (HKMA) issued a circular in March 2023 (ref: B1/15C) reminding authorised institutions that sanctions screening must extend beyond the direct borrower to include the sponsor, the sponsor’s limited partners, the target company’s directors, and any guarantors. The circular explicitly stated that “a failure to identify a sanctioned entity in the ownership chain of a leveraged buyout transaction will be considered a serious breach of the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615).”

For a Hong Kong-based LBO, the practical implication is that the sponsor must provide the lender with a certified organisational chart showing every entity and individual holding 10% or more of the equity or voting rights in the acquisition vehicle and the target. This chart must be screened against OFAC, EU, and UN lists at the time of commitment, and again at financial close. If the target operates in a high-risk jurisdiction—such as Russia, Belarus, Iran, North Korea, Syria, or parts of Ukraine—the screening must extend to the target’s customers, suppliers, and end-users, as the EU’s 12th package prohibits the provision of financing to entities that supply sanctioned goods to Russia.

Pre-Deal Screening: Structuring the Compliance Workflow Before the Letter of Intent

Mapping the Ownership Chain from Sponsor to Target

The first step in sanctions due diligence for an LBO is to map the entire ownership chain from the sponsor’s fund structure through the acquisition vehicle to the target company. For a typical LBO, the sponsor establishes a Cayman Islands exempted company as the acquisition vehicle, which then borrows from a Hong Kong bank and contributes equity alongside co-investors. The sponsor’s fund itself may have limited partners (LPs) that are sovereign wealth funds, pension funds, or family offices from jurisdictions that are themselves subject to sanctions.

The screening must cover: (1) the sponsor’s general partner and management team; (2) all LPs with a commitment of 10% or more of the fund’s total capital; (3) the directors and officers of the acquisition vehicle; (4) the target company’s board and senior management; and (5) any guarantors or security providers. OFAC’s 50% rule—which states that any entity owned 50% or more by a sanctioned person is itself considered sanctioned—means that indirect ownership through holding companies must be traced. For example, if a Russian oligarch holds 30% of a BVI company that in turn holds 60% of the target, the target is considered sanctioned under OFAC rules because the oligarch’s indirect ownership exceeds 50% (30% x 60% = 18%, which is below 50%, but OFAC aggregates ownership across multiple paths, so a more complex structure could trigger the rule).

Screening Against Multiple Lists in Real Time

The screening must be conducted against at least three lists: OFAC’s SDN List and its Sectoral Sanctions Identifications (SSI) List, the EU Consolidated List, and the UN Sanctions List. Each list has different identifiers—OFAC uses names and aliases, the EU uses passport numbers and dates of birth, and the UN uses a combination of names and nationality. A match on one list does not necessarily mean a match on another, but a positive hit on any list requires immediate escalation.

For a Hong Kong-licensed bank acting as lender, the HKMA expects the bank to use a sanctions screening system that can process these lists simultaneously and flag potential matches with a confidence score. The bank’s compliance team must then manually review each flag, considering factors such as name commonality, jurisdiction of incorporation, and business sector. A false positive rate of 5-10% is considered acceptable in practice, but the bank must document its rationale for clearing each flag.

The Role of the Sponsor’s Compliance Certificate

Standard LBO documentation in Hong Kong now includes a sponsor’s compliance certificate, signed by the sponsor’s chief compliance officer, confirming that the ownership chain has been screened and that no sanctioned entity or individual has been identified. This certificate is typically delivered to the lender at commitment and again at financial close. The certificate must list the screening date, the lists used, the names screened, and any flags that were cleared, along with the rationale for clearance.

Failure to deliver an accurate certificate can constitute a material breach of the facility agreement, giving the lender the right to accelerate the debt and demand immediate repayment. In a 2023 case involving a Hong Kong-based LBO of a PRC manufacturing company, the lender discovered post-closing that one of the target’s directors was a close associate of a sanctioned Russian oligarch. The lender demanded immediate repayment of the HKD 800 million facility, and the sponsor was forced to inject additional equity to avoid default.

Deal Execution: Integrating Sanctions Covenants into the Facility Agreement

Representations and Warranties on Sanctions Compliance

The facility agreement for an LBO should include a specific representation from the borrower (the acquisition vehicle) that neither it, its shareholders, nor the target company is a sanctioned person or located in a sanctioned jurisdiction. This representation is typically repeated at each drawdown and at each interest payment date. The SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (effective 2023) requires sponsors to ensure that any financing arrangement they arrange or advise on includes such representations, as failure to do so could expose the sponsor to regulatory action.

The representation should cover: (1) direct sanctions—the entity is not listed on any sanctions list; (2) indirect sanctions—the entity is not owned or controlled by a sanctioned person; and (3) activity-based sanctions—the entity does not engage in transactions with sanctioned jurisdictions or persons. The final point is critical for LBOs of companies with supply chains that touch Russia, Iran, or North Korea. For example, if the target sources raw materials from a supplier in Kazakhstan that in turn sources from a sanctioned Russian entity, the target could be in violation of EU sanctions even if it has no direct Russian exposure.

Negative Covenants Prohibiting Sanctions Breaches

The negative covenants in the facility agreement should prohibit the borrower from: (1) making any payment to a sanctioned person; (2) engaging in any transaction with a sanctioned jurisdiction; (3) amending its ownership structure in a way that introduces a sanctioned person; and (4) failing to notify the lender of any sanctions-related event within five business days. These covenants should survive the termination of the facility agreement, meaning the borrower remains liable for sanctions breaches even after the debt is repaid.

For a Hong Kong law-governed facility agreement, the lender can rely on the United Nations Sanctions Ordinance (Cap. 537) and the relevant subsidiary legislation (e.g., the United Nations Sanctions (Democratic People’s Republic of Korea) Regulation (Cap. 537AE)) to enforce these covenants. The ordinance gives the Hong Kong government the power to freeze assets and prohibit transactions with sanctioned persons, and a breach of the facility agreement’s sanctions covenants could trigger a government investigation.

Escrow and Condition Precedent Mechanisms

To mitigate the risk of a sanctions breach occurring between signing and closing, the facility agreement should include a condition precedent requiring the borrower to confirm that no sanctions event has occurred. Some Hong Kong lenders now require the borrower to deposit the equity contribution into an escrow account held by the lender’s legal counsel, with the funds only released to the target upon confirmation of sanctions clearance. This mechanism ensures that the sponsor’s equity is not used to fund a sanctioned entity.

The condition precedent should also require the borrower to provide a legal opinion from a Hong Kong-qualified lawyer confirming that the transaction does not violate the United Nations Sanctions Ordinance or any other applicable sanctions regime. This opinion is particularly important for LBOs involving targets in the PRC, as the PRC’s sanctions regime (administered by the Ministry of Commerce) does not always align with OFAC or EU lists, and a Hong Kong lawyer must opine on the potential conflict.

Post-Closing Monitoring: Continuous Screening and Event-Driven Reviews

Quarterly Screening Updates

The sponsor should implement a system for quarterly screening of the target company’s board, senior management, and major shareholders against the same sanctions lists used at closing. This is not a one-time exercise—OFAC and the EU update their lists frequently, and a person who was not sanctioned at closing could become sanctioned six months later. The HKMA’s March 2023 circular recommends that authorised institutions require their LBO borrowers to provide quarterly compliance certificates confirming that no new sanctions hits have been identified.

For a Hong Kong-based LBO, the sponsor can outsource this screening to a third-party vendor such as World-Check or Refinitiv, which provide automated screening against multiple lists. The vendor’s system should be configured to send alerts to the sponsor’s compliance team and the lender’s relationship manager whenever a new sanctions designation is published. The sponsor must respond to each alert within 10 business days, documenting whether the alert relates to an existing counterparty or a new one.

Event-Driven Reviews for Material Changes

Certain events should trigger an immediate re-screening of the ownership chain: (1) a change in the target’s board of directors; (2) a change in the target’s shareholding structure (e.g., a secondary sale by a PE investor); (3) the target entering into a material contract with a new supplier or customer in a high-risk jurisdiction; and (4) the target’s expansion into a new geographic market that is subject to sanctions. The facility agreement should define these events and require the borrower to notify the lender within five business days.

For example, if the target acquires a subsidiary in the UAE, the sponsor must screen that subsidiary’s directors and UBOs against all relevant lists. The UAE has been flagged by OFAC as a jurisdiction where sanctions evasion is common, particularly through the use of shell companies and trade-based money laundering. A failure to screen the UAE subsidiary could expose the entire LBO structure to sanctions risk.

Exit Scenario: Sanctions Hit During the Holding Period

If a sanctions hit is identified during the holding period—for example, if a director of the target is designated by OFAC—the sponsor must immediately notify the lender and the relevant regulatory authorities. The lender may have the right to demand prepayment of the facility, and the sponsor may need to divest the target or replace the sanctioned director. In a 2024 case involving a Hong Kong-based LBO of a logistics company, the target’s CEO was designated by the EU for providing logistics services to Russian military entities. The sponsor was forced to replace the CEO within 30 days and pay a HKD 5 million penalty to the HKMA for failing to screen the CEO’s business activities at closing.

The sponsor should also consider whether the sanctions hit triggers any change-of-control provisions in the target’s key contracts. Many commercial contracts include a clause allowing the counterparty to terminate if the company becomes subject to sanctions. If the target loses a key customer contract due to a sanctions designation, the sponsor’s equity could be wiped out.

Practical Takeaways for LBO Practitioners

1. Screen the full ownership chain—including the sponsor’s LPs, the acquisition vehicle’s directors, and the target’s UBOs—against OFAC, EU, and UN lists at the time of commitment, and repeat the screening at financial close, with documentation of all flags cleared.

2. Include a sponsor’s compliance certificate in the facility agreement, signed by the sponsor’s chief compliance officer, confirming that the screening has been conducted and that no sanctioned entity or individual has been identified.

3. Draft the facility agreement’s representations and warranties to cover direct sanctions, indirect sanctions (ownership and control), and activity-based sanctions (supply chain and end-user exposure), with these representations repeated at each drawdown.

4. Implement a post-closing monitoring system that screens the target’s board, management, and major shareholders quarterly, and triggers an immediate re-screening upon any material change in ownership, board composition, or geographic footprint.

5. Prepare a sanctions breach response plan that includes immediate notification to the lender, the HKMA (if applicable), and legal counsel, with a clear timeline for divesting the sanctioned entity or replacing the sanctioned individual.