Compliance Briefing — June 21, 2022
CBP’s 21 June 2022 enforcement of the Uyghur Forced Labor Prevention Act imposes a rebuttable presumption against goods tied to Xinjiang or the UFLPA Entity List, forcing importers to evidence granular tracing, independent audits, and rapid detention response programs.
Executive briefing: On U.S. Customs and Border Protection (CBP) began enforcing the Uyghur Forced Labor Prevention Act (UFLPA), applying a statutory presumption that goods mined, produced, or manufactured wholly or in part in China’s Xinjiang Uyghur Autonomous Region—or by entities on the UFLPA Entity List—are made with forced labor. Importers must now present “clear and convincing evidence” to rebut detention and seizure, supported by extensive supply-chain documentation, independent audits, and traceability data.
The enforcement launch followed the interagency UFLPA Strategy delivered to Congress on 17 June 2022, which outlines priority sectors (cotton, tomatoes, polysilicon, and apparel), lists prohibited entities, and details guidance for due diligence, supply-chain tracing, and supply-chain management. The law supplements Section 307 of the Tariff Act of 1930 and builds on earlier Withhold Release Orders (WROs). Companies shipping electronics, solar panels, automotive components, agricultural products, and textiles with inputs sourced anywhere in China must verify that upstream materials are free from Xinjiang links.
Understanding the compliance standard
CBP’s Operational Guidance for Importers makes clear that rebutting the presumption requires a multi-layer evidence package:
- Due diligence systems. Written forced labor policies, supplier codes of conduct, independent risk assessments, management accountability, grievance mechanisms, and training covering international labor standards.
- Supply-chain tracing. Complete mapping from raw materials to finished goods, including bills of material, purchase orders, invoices, transportation records, and production orders showing each tier and the date and location of processing.
- Supply-chain management. Evidence of controls such as unannounced audits, digital traceability tools, supplier termination procedures, and remediation plans when violations occur.
- Proof of origin. Laboratory test results (e.g., isotopic analysis for cotton), GPS or geolocation data, and time-stamped photographs to confirm harvest or production sites outside Xinjiang.
Importers that cannot produce this level of detail should expect CBP to detain, exclude, or seize shipments. The agency may demand evidence within as little as 30 days and can expand reviews to other entries by the same importer. CBP also shares information with the Department of Labor and Department of State, increasing reputational and legal exposure.
Governance and accountability
Executive teams must treat UFLPA compliance as an enterprise risk. Boards should request quarterly updates on forced labor risk mitigation, emphasising sectors identified in the UFLPA Strategy. Establish a cross-functional steering committee with leaders from procurement, logistics, trade compliance, sustainability, legal, and internal audit. Assign a senior executive as the accountable owner for forced labor prevention, with authority to halt shipments when evidence is insufficient.
Integrate UFLPA obligations into existing environmental, social, and governance (ESG) reporting. Public companies should evaluate whether enhanced disclosures are necessary in Form 10-K risk factors, sustainability reports, or supply-chain transparency statements. Align board oversight with frameworks such as the UN Guiding Principles on Business and Human Rights, the Responsible Business Alliance (RBA) Code of Conduct, and the OECD Due Diligence Guidance for Responsible Supply Chains.
Operational priorities
- Comprehensive supply-chain mapping. Develop end-to-end visualisations of material flows, capturing manufacturer identification numbers, facility addresses, and ownership data. Prioritise high-risk commodities: polysilicon wafers and ingots, cotton lint, yarn, fabric, tomato paste, garlic, peppers, and rare earth metals. Use third-party databases, customs records, and satellite imagery to validate supplier disclosures.
- Traceability technology. Deploy digital tools—blockchain-based ledgers, ERP trace modules, or specialised forced labor compliance platforms—to log transactions, custody changes, and supporting documentation. Ensure systems can generate chain-of-custody reports quickly when CBP issues a detention notice.
- Supplier engagement. Update contracts to require cooperation with UFLPA investigations, including access to sub-tier suppliers, consent to announced and unannounced audits, and obligations to provide employee rosters, wage statements, and recruitment fee records. Include termination clauses for non-compliance and remediation plans outlining restitution for affected workers.
- Independent verification. Partner with accredited auditors, NGOs, or industry consortia to perform social compliance audits and forensic tracing. For solar supply chains, leverage traceability service providers capable of linking polysilicon back to quartz mines and metallurgical-grade silicon producers.
- Import documentation readiness. Establish a central repository for customs entry packets, including CBP Form 7501, shipping documents, affidavits, audit reports, and traceability evidence. Prepare template cover letters summarising compliance programs, risk assessments, and corrective actions.
- Incident response. Build escalation workflows that trigger immediate action when CBP detains goods, media reports identify at-risk suppliers, or NGOs publish credible allegations. Ensure legal, communications, and investor relations teams have playbooks for public statements and stakeholder engagement.
Sector-specific considerations
Solar and electronics. Polysilicon supply chains often pass through Xinjiang producers such as Xinjiang Daqo, East Hope, or GCL-Poly subsidiaries. Solar manufacturers must document quartz sourcing, metallurgical-grade silicon smelting, polysilicon refining, ingot/wafer production, cell fabrication, and module assembly. Provide supplier attestations, production records, and laboratory analyses (e.g., trace element signatures) demonstrating alternative sourcing. Electronics firms should map printed circuit board laminates, batteries, wiring harnesses, and packaging suppliers.
Apparel and textiles. Cotton tracing requires bale-level data. Importers need gin certificates, spinning mill documentation, fabric finishing records, and finished-garment production logs. DNA or isotopic testing can corroborate origin claims. Brands should revisit sourcing strategies, potentially shifting to Better Cotton Initiative (BCI) or U.S./Australian suppliers and investing in nearshoring to reduce risk.
Automotive. Wire harnesses, aluminum alloys, magnesium, and lithium-ion batteries can involve Xinjiang raw materials. Tier-1 suppliers must cascade requirements to mining, smelting, and chemical processing partners. Adopt the Automotive Industry Action Group (AIAG) supply-chain sustainability guidance and integrate UFLPA checks into production part approval processes (PPAP).
Integration with global regulations
UFLPA enforcement aligns with broader forced labor initiatives: Canada’s Fighting Against Forced Labour and Child Labour in Supply Chains Act (effective 2024), the EU’s proposed Forced Labour Regulation, and Germany’s Supply Chain Due Diligence Act. Multinationals should harmonise due diligence, using the ILO indicators of forced labor and OECD guidelines as a baseline. Maintain documentation that can satisfy multiple jurisdictions, including risk heat maps, mitigation plans, and stakeholder engagement records.
For U.S. federal contractors, consider overlap with Federal Acquisition Regulation (FAR) requirements on combating trafficking in persons (FAR 52.222-50) and the Department of Energy’s solar procurement rules. Financial institutions financing trade should evaluate whether clients have UFLPA compliance programs; failure could trigger enhanced anti-money laundering (AML) scrutiny or reputational risk.
Metrics and reporting
Develop KPIs/KRIs to measure program effectiveness:
- Percentage of suppliers mapped to raw-material level.
- Number of high-risk suppliers with completed third-party audits in the last 12 months.
- Average time to respond to CBP detention requests.
- Incidents of forced labor allegations and remediation outcomes.
- Share of procurement spend covered by contractual UFLPA clauses.
Report results to executive leadership and the board quarterly, highlighting trends, corrective actions, and regulatory developments (e.g., updates to the Entity List or priority sector designations).
Training and culture
Design role-based training modules for procurement, logistics, finance, and quality teams. Cover international labor standards, recruitment fee prohibitions, red flags (e.g., state-sponsored labor transfers, excessive security presence, retention of identity documents), and documentation requirements. Train customs brokers and third-party logistics providers (3PLs) on evidence packages and detention response protocols. Encourage anonymous reporting channels for employees and suppliers to flag potential violations.
Timeline and next steps
- 0–30 days: Finalise governance structure, update supplier communications, and launch a rapid supply-chain mapping sprint focused on priority commodities.
- 30–90 days: Deploy traceability technology pilots, complete baseline audits for top-risk suppliers, and assemble documentation binders for key product lines.
- 90–180 days: Conduct tabletop exercises simulating CBP detentions, refine remediation protocols, and integrate forced labor KPIs into ESG reporting and executive scorecards.
CBP’s strict enforcement posture leaves minimal room for error. Organisations that invest in granular traceability, credible third-party verification, and cross-functional governance will be best positioned to keep goods flowing while upholding human rights commitments.
Continue in the Compliance pillar
Return to the hub for curated research and deep-dive guides.
Latest guides
-
Third-Party Risk Oversight Playbook — Zeph Tech
Operationalize OCC, Federal Reserve, EBA, and MAS outsourcing expectations with lifecycle controls, continuous monitoring, and board reporting.
-
Compliance Operations Control Room — Zeph Tech
Implement cross-border compliance operations that satisfy Sarbanes-Oxley, DOJ guidance, EU DORA, and MAS TRM requirements with verifiable evidence flows.
-
SOX Modernization Control Playbook — Zeph Tech
Modernize Sarbanes-Oxley (SOX) compliance by aligning PCAOB AS 2201, SEC management guidance, and COSO 2013 controls with data-driven testing, automation, and board reporting.