Payment raises sanctions compliance concerns where the recipient may be a designated entity, reporting obligations, insurance coverage questions, and no assurance of data recovery or non-publication.
OFAC advisories address sanctions exposure.
Alternative Names:
Ransom Payment|Extortion Payment Issues
Why it Matters?
Sanctions exposure is the legal issue that most constrains payment decisions, since a payment to a designated entity or one in a sanctioned jurisdiction violates OFAC regardless of duress, and the advisory framework encourages law enforcement engagement as a mitigating factor. Payment also does not resolve breach notification obligations, since data was still accessed. Documenting the decision process protects against later criticism.
Frequently Confused with
Related terms
Frequently asked questions
What is the principal legal constraint?
Does payment resolve notification obligations?
