Website landing page photo_SPDD

At the start of 2019, OFAC agreed to an almost USD 1 million settlement with a US cosmetics company for apparent violations of North Korean-targeted economic sanctions. Notably, this was due to the conduct of the company’s supplier, and not the company itself. This highlights the importance of a robust supply chain due diligence program, covering not only a company’s suppliers, but also those suppliers’ own affiliates and business partners.


The ELF Settlement

On January 31, 2019, the US cosmetics company, e.l.f. Cosmetics, Inc. (“ELF”), agreed to a USD 996,080 settlement for 156 apparent violations of North Korea Sanctions Regulations. ELF received 156 shipments of false eyelash kits from two Chinese suppliers which contained materials sourced from North Korean companies. From April 1, 2012 to January 28, 2017, the total value of these shipments was USD 4,427,019.

ELF’s 2016 reported revenue was over USD 229 million. Considering the total value of the shipments spanning almost five years was less than USD 4.5 million, these shipments make up an extremely small part of the company’s overall business. This shows that the Office of Foreign Assets Control (OFAC) is prepared to penalize companies, even if they themselves do not directly violate sanctions. Companies are also required to ensure all their suppliers and affiliates are compliant.

OFAC reported that at the time of the violations, ELF’s OFAC compliance program was either inadequate or did not exist. ELF’s supply chain review efforts focused on assessing quality assurance issues related to the production process, raw materials, and the end product. In January 2017, the company discovered that most of these shipments of false eyelash kits, which started in April 2012, contained materials sourced from North Korea. According to OFAC’s Economic Sanctions Enforcement Guidelines, the civil monetary penalties for these apparent violations are between USD 2,213,510 and USD 40,833,633.

Penalty Explanation                                                                                                  

OFAC’s penalty was reduced because ELF voluntarily self-reported these apparent violations. Additionally, OFAC reported that ELF’s employees appeared to not have any knowledge of the apparent violations, and the associated product does not appear to be a significant part of ELF’s business.

Since self-reporting the apparent violations, ELF instituted a compliance program to mitigate similar future risks. The company has implemented supply chain audits which aim to verify the origin of products and services that are used in the company’s products. ELF will require their suppliers to sign compliance certificates stating their adherence to all US trade sanctions and export controls. ELF has conducted an advanced supplier audit and hired outside counsel to provide US laws and regulations training for key ELF employees in the US and China. Similar trainings were also expanded to include ELF’s Chinese suppliers.


OFAC, an agency within the US Treasury Department, administers and enforces US imposed economic and trade sanctions which are primarily against countries and groups of individuals, including terrorists and narcotics traffickers. If an entity is found to have violated US sanctions, OFAC is able to levy large penalties, including imposing fines, freezing assets, and banning entities from operating within the US. OFAC publishes a list of entities that US citizens are prohibited from doing business with; the Specially Designated Nationals (SDN) list – which includes companies, organizations, individuals, and vessels.

China’s Involvement

This is not the first time that OFAC has explored possible violations associated with Chinese companies, including cases violating other sanctions regulations. For example, OFAC has investigated both ZTE Corporation and Huawei Technologies Co. Ltd. for potential violations of the Iranian Transactions and Sanctions Regulations. OFAC encourages companies to have an in-depth due diligence program regarding Chinese suppliers, as this is a region that is considered to have a higher risk of violating North Korean Sanctions Regulations.

Significance of This Case

This case is significant as it gives insight into OFAC’s current priorities. While OFAC tends to focus its investigations on US banks and institutions, this recent shift signals the increasing importance for companies to be OFAC-compliant. Additionally, this case shows the necessity for a thorough due diligence program, especially regarding international suppliers. The importance lies, not only with conducting due diligence for every potential supplier, but also each supplier’s affiliates and business partners. In ELF’s case, OFAC highlights that a more robust program might have prevented these apparent violations altogether.

The obligation for a comprehensive supply chain due diligence program goes beyond the risk of OFAC violations. ELF’s supply chain review efforts monitored product quality; however, even for quality assurance purposes, it is essential to conduct all-encompassing and recurring supply chain audits in order to understand all risks (not just quality-related) associated with suppliers – as well as suppliers’ networks.

To learn more about mitigating third-party risks in China with due diligence reporting and advisory services, contact Daniel Skeens in PSA’s Shanghai office at To speak with our North American representative office contact Waleed Magazachi at or +1 (416) 303-6298.

PSA Country Corruption Risk Profiles