Competition, Anti-Corruption, ESG and Corporate Compliance

Introduction and Context

International business increasingly operates through networks of subsidiaries, agents, distributors, joint ventures, contractors, digital platforms and global supply chains. These arrangements create commercial opportunities but also expose firms to competition-law, anti-bribery, anti-money-laundering (AML), human-rights, environmental and reporting risks. A compliance failure may produce fines, exclusion from public procurement, loss of licenses, civil liability, director liability, reputational damage and disruption of market access.

Compliance is therefore not merely a legal-control function. It is a strategic capability through which an organization identifies obligations, evaluates risk, allocates responsibility, makes informed decisions and demonstrates that it acted reasonably. The appropriate system is risk-based: resources should be concentrated where the probability and consequences of misconduct are greatest.

This chapter uses “ESG” to refer to environmental, social and governance considerations, while recognizing that ESG is not a single legal regime. Applicable requirements arise from legislation, regulations, treaties, listing rules, contractual commitments, administrative guidance, lender expectations and voluntary standards. Because rules differ across jurisdictions and change frequently, organizations must obtain jurisdiction-specific advice rather than treating this chapter as legal advice.

Learning Objectives

By the end of this chapter, students should be able to:

1. Explain the relationship between competition law, anti-corruption, AML, human-rights, environmental and governance obligations.
2. Distinguish major forms of prohibited competition conduct and identify high-risk commercial situations.
3. Design a proportionate compliance-management system based on risk assessment.
4. Apply due diligence to third parties, investments and supply chains.
5. Design reporting, investigation, remediation and board-oversight processes.
6. Evaluate the strategic and ethical limitations of compliance programs, including the risks of superficial “box-ticking.”

1. The Compliance Landscape in International Business

1.1 Multiple legal bases and overlapping jurisdiction

A multinational enterprise may be subject simultaneously to the law of its place of incorporation, the country where conduct occurs, the jurisdiction where effects are felt, and legislation asserting extraterritorial reach. A payment made by a local agent may implicate the law of the agent’s country, the principal’s home country and the law governing a public customer. Competition authorities may investigate conduct affecting their markets even when agreements were negotiated elsewhere.

The central practical questions are:

• What conduct, people, entities and transactions fall within the relevant jurisdiction?
• Which obligations are mandatory, and which are contractual or voluntary?
• Who owns the decision and who must approve it?
• What evidence will demonstrate reasonable prevention and response?

1.2 Compliance as a governance system

A mature compliance system has six connected functions:

The board sets direction and oversees material risk. Senior management supplies resources and establishes incentives. Legal and compliance functions advise and monitor, but operational managers remain responsible for lawful business decisions. Internal audit independently evaluates the design and operation of controls. This “three lines” approach is useful, but it does not eliminate the need for clear accountability.

2. Competition Law and Cross-Border Markets

Competition law seeks to protect the competitive process, although jurisdictions differ in terminology, enforcement priorities and available defenses. Common categories include agreements between competitors, abuse of dominance, anticompetitive mergers and certain vertical restraints.

2.1 Cartels and collusion

The most serious horizontal conduct commonly includes price fixing, market or customer allocation, bid rigging and output restriction. Competitors may violate the law through explicit agreements or informal coordination. An exchange of competitively sensitive information can also reduce uncertainty and facilitate coordination.

Examples of sensitive information include future prices, discounts, costs, capacity, bids, customer-specific strategy and production plans. Trade associations and industry conferences are legitimate in many circumstances, but they require agendas, minutes, legal guidance and controls against inappropriate discussion.

A compliance rule should be simple: employees must not agree with competitors on prices, customers, territories, bids, production or commercially sensitive information. If an inappropriate discussion occurs, the employee should object clearly, leave if necessary, document the event and promptly report it.

2.2 Dominance and unilateral conduct

A large market share is not automatically unlawful. The legal inquiry generally considers market definition, market power, barriers to entry, countervailing buyer power, duration and effects. Conduct may become problematic when a dominant firm uses exclusionary or exploitative strategies, such as predatory pricing, tying, exclusive dealing, discriminatory access, refusal to deal or loyalty rebates, depending on jurisdiction and facts.

Managers should seek advice before introducing exclusivity, rebates, platform access restrictions, interoperability limits or differential terms. The commercial justification, duration, scope and likely effects matter. A legitimate efficiency may not excuse conduct whose design or effect is exclusionary under applicable law.

2.3 Mergers, joint ventures and information exchange

Transactions may require notification before closing. “Gun jumping”—coordinating competitive decisions before legal closing—can create serious exposure. Parties should maintain separate decision-making, limit exchanged information, use clean teams where appropriate and observe standstill obligations.

Joint ventures require similar care. Cooperation may be lawful when necessary to achieve efficiencies, but the parties must not use the venture as a vehicle for coordinating unrelated competitive conduct. Due diligence should examine prior antitrust issues, dawn-raid procedures, distribution arrangements and information-sharing practices.

3. Anti-Corruption and Bribery Risk

Anti-corruption laws generally prohibit offering, promising, authorizing, giving, requesting or accepting an undue advantage to influence a decision or obtain an improper benefit. The relevant benefit may be money, gifts, travel, employment, charitable support, internships, discounts or other valuable consideration. Public-sector interactions are often especially sensitive, but private-sector commercial bribery can also be unlawful.

3.1 Core risk factors

Risk increases where transactions involve:

• public officials, state-owned enterprises or politically exposed persons;
• customs, permits, licenses, inspections or public procurement;
• intermediaries paid by commission or success fee;
• opaque ownership or unexplained beneficial owners;
• cash, unusual bank accounts or payments through unrelated entities;
• high-risk countries or sectors such as extractives, defense, health and infrastructure;
• charitable contributions, sponsorships or hiring requests connected to a decision-maker.

“Facilitation payments,” sometimes described as small payments to secure routine governmental action, are prohibited or restricted in many systems and create accounting and control risks even where a narrow legal exception exists elsewhere. A global policy normally prohibits them, subject to carefully defined emergency safety procedures.

3.2 Books, records and internal controls

Anti-corruption compliance includes accurate accounting. A bribe concealed as a consulting fee, marketing expense or charitable donation can create a separate books-and-records violation. Controls should require documented business purpose, appropriate approval, reliable invoices, segregation of duties, payment to verified accounts and monitoring of unusual transactions.

Gifts and hospitality policies should address value, frequency, timing, recipient, legitimate purpose and transparency. A modest meal may be acceptable in one context but improper during a procurement decision. The question is not only monetary value; intention and influence matter.

4. AML, Sanctions and Financial Crime Controls

Money laundering involves disguising the origin, ownership or control of proceeds of crime. A common analytical model describes placement, layering and integration, although real transactions may not follow these stages neatly. Terrorist financing may involve lawful funds used for unlawful purposes. Sanctions regimes restrict transactions with designated persons, entities, sectors or territories and may apply to indirect dealings and ownership or control.

A risk-based AML program usually includes:

1. customer and counterparty identification;
2. beneficial-ownership verification;
3. risk classification and enhanced due diligence for higher-risk relationships;
4. transaction monitoring and escalation;
5. record retention;
6. suspicious-activity reporting where legally required;
7. employee training and independent testing.

Customer due diligence should not be reduced to collecting an identity document. The organization should understand the purpose of the relationship, expected activity, source of funds where appropriate and ownership structure. Screening tools are imperfect: false positives, spelling variations, outdated data and evasion techniques require human review and documented judgment.

Privacy and data-protection law constrain the collection, transfer and retention of personal information. A compliance program must therefore balance financial-crime prevention with necessity, proportionality, security and lawful international data transfers.

5. Human Rights and Supply-Chain Due Diligence

International enterprises may be connected to adverse human-rights impacts through their own operations, subsidiaries, suppliers, contractors, customers or business partners. Relevant issues include forced labor, child labor, discrimination, unsafe working conditions, freedom of association, excessive working hours, land rights, indigenous peoples’ rights, privacy and security-related abuses.

The UN Guiding Principles on Business and Human Rights frame corporate responsibility around policy commitment, human-rights due diligence and remediation. The OECD Guidelines for Multinational Enterprises and OECD Due Diligence Guidance similarly emphasize identifying, preventing, mitigating and accounting for adverse impacts. Some jurisdictions impose mandatory supply-chain reporting or due-diligence duties, with requirements varying by company size, sector, turnover and location.

5.1 Effective due diligence

A credible process is continuous and risk-based:

1. establish a policy and governance responsibility;
2. map operations, suppliers, products, materials and geographic exposure;
3. prioritize actual and potential severe impacts;
4. integrate expectations into contracts and purchasing decisions;
5. prevent or mitigate harm;
6. track performance using evidence rather than assurances;
7. communicate results accurately;
8. provide or cooperate in remediation.

Supplier questionnaires are useful but insufficient. They should be supplemented by document review, worker interviews, credible audits, grievance data, media research and site visits where proportionate. Audits may miss abuses because workers fear retaliation or facilities are prepared in advance. Purchasing practices also matter: unrealistic prices, sudden orders and short lead times can contribute to labor violations.

Grievance mechanisms should be accessible, predictable, legitimate, rights-compatible, transparent and protective against retaliation. They do not replace judicial remedies. A company should distinguish between terminating a supplier and responsibly addressing harm; abrupt disengagement may worsen conditions for affected workers.

6. Environmental Compliance and ESG Claims

Environmental obligations may concern emissions, waste, water, biodiversity, hazardous substances, land use, product stewardship and climate-related disclosures. A company may also assume environmental duties through permits, financing agreements, customer contracts or public commitments.

Environmental compliance requires identifying the legal entity responsible for permits and reporting, monitoring actual performance, preserving data integrity and escalating exceedances. Supply-chain assessment may include deforestation, mining impacts, chemical inputs, energy use and end-of-life product responsibility.

6.1 ESG disclosure and greenwashing

ESG statements can create liability when they are false, incomplete, misleading or unsupported. Claims such as “carbon neutral,” “sustainable,” “ethical” or “deforestation-free” should have a defined scope, methodology, baseline, evidence and explanation of limitations. Marketing, investor relations, procurement and sustainability teams should use a controlled review process.

A useful distinction is:

• Compliance claim: states what the law requires or what the company has done.
• Target: states an intended future outcome and should identify time frame and measurement.
• Performance claim: reports measured results and should identify boundaries and methodology.
• Value judgment: expresses aspiration but should not imply verified performance.

Climate and sustainability reporting frameworks can improve comparability, but voluntary reporting does not immunize an organization from securities, consumer-protection or fraud liability. Assurance should be independent where materiality and law justify it.

7. Designing a Risk-Based Compliance Program

A useful risk model considers inherent risk, control effectiveness and residual risk. In qualitative practice, organizations may classify risk as low, medium or high. A numerical score can support prioritization but should not create false precision.

One illustrative prioritization model is:

Here, likelihood is an ordinal or quantitative estimate of occurrence, impact reflects legal, financial, human, environmental and reputational consequences, and exposure represents the scale or duration of affected activity. The model is a management aid, not a legal rule. Scores are meaningful only if definitions, scales and assessment evidence are consistent. A severe human-rights risk should not be treated as acceptable merely because its probability is uncertain.

A strong program normally includes:

• board-approved policies and a code of conduct;
• documented risk assessment refreshed after material change;
• role-specific training and communications;
• third-party and transaction due diligence;
• approval and payment controls;
• confidential reporting channels;
• investigation protocols;
• disciplinary and remediation standards;
• monitoring, testing and internal audit;
• reliable records and management information;
• periodic independent review.

7.1 Proportionality and incentives

Controls should be proportionate to risk, but proportionality does not mean weak controls in difficult markets. Compensation systems should reward sustainable performance and include consequences for misconduct. Unrealistic sales targets, promotion of rule-breakers and tolerance of “rainmakers” undermine written policies.

Compliance officers need independence, access to information, adequate resources and a direct escalation route to the board or an appropriate committee. Legal privilege may protect some communications, but privilege is not automatic and should not be used to obstruct legitimate investigation or reporting.

8. Reporting, Investigation and Remediation

A reporting system should offer multiple channels, including managers, compliance personnel, hotlines and, where appropriate, external channels. Reports should be triaged according to seriousness, credibility, urgency, risk of evidence destruction and potential conflicts of interest.

An investigation plan should define scope, allegations, custodians, documents, interviews, applicable law, privilege strategy, data-protection constraints and reporting authority. Investigators must preserve independence and avoid promising absolute confidentiality where disclosure may be legally required. They should protect against retaliation and maintain a documented chain of custody for important evidence.

The response should be evidence-based and consistent. Possible outcomes include no finding, policy breach, legal violation, control failure or unresolved allegation. Remediation may include discipline, contract action, repayment, customer or regulator notification, control redesign, training, self-disclosure and cooperation with authorities. The organization should analyze root causes, not merely punish the individual who was detected.

9. Technology, Data and Artificial Intelligence

Technology can improve transaction monitoring, third-party screening, whistleblower triage, supply-chain mapping and ESG data collection. Machine-learning tools may identify anomalies that rule-based systems miss. However, automated systems can produce discriminatory outcomes, inaccurate alerts, explainability problems and privacy risks. A model does not convert uncertain data into reliable fact.

Governance should address data provenance, access rights, retention, validation, human review, testing for bias, model drift, vendor accountability and escalation. Generative AI requires special controls against confidential-data leakage, fabricated legal analysis, unsupported ESG claims and automated decisions without professional review. AI may assist analysis; accountable officers remain responsible for decisions and disclosures.

10. Illustrative Case: Meridian Infrastructure Group

Background

Meridian Infrastructure Group, a fictional multinational, seeks a public transport contract in Country A. It plans to use a local consultant, acquire a minority stake in a logistics company and source electrical components from three suppliers. Country A presents elevated corruption and labor-risk indicators. Meridian’s sales team proposes a success fee, expedited hospitality for officials and a statement that the project will be “fully sustainable.”

Problem

The consultant refuses to disclose its beneficial owners and requests payment to an offshore account. A director of the logistics target is related to a procurement official. One supplier has excellent audit scores but former workers report recruitment-fee debt and excessive overtime. Meridian’s sustainability team lacks verified emissions data but wants to publish the sustainability claim before bidding.

Analysis

The consultant presents corruption, AML and sanctions risks: opaque ownership, unusual payment instructions and a contingent fee connected to public procurement. The proposed hospitality raises bribery concerns. The related director creates conflict-of-interest and influence risk. Supplier audits are not sufficient to resolve credible forced-labor indicators. The sustainability claim risks greenwashing because its scope and evidence are undefined.

Approach and solution

Meridian should pause the consultant appointment and conduct enhanced due diligence, including ownership verification, qualifications, conflicts, references, fee benchmarking, written services, bank-account verification and anti-corruption certification. Approval should come from compliance and senior management, with payment controls and audit rights.

The company should require a conflict disclosure and independent review of the logistics investment, including beneficial ownership, political exposure, competition effects and post-closing controls. It should prohibit pre-closing coordination that could constitute gun jumping.

For suppliers, Meridian should investigate worker allegations through credible interviews and records, engage suppliers on remediation and prioritize severe impacts. Contracts should include labor standards, audit and access rights, non-retaliation expectations and termination or suspension mechanisms, while avoiding sudden disengagement that abandons affected workers.

Finally, Meridian should replace the absolute sustainability statement with a precise, evidence-based disclosure describing the project boundary, current data, target, methodology and unresolved limitations. The board committee should receive a consolidated risk report and approve the decision only after documented mitigation.

Outcome

In this illustrative case, Meridian declines the consultant until due diligence is satisfactory, restructures the investment review, places the highest-risk supplier on a corrective-action plan and delays the public claim until verified data exists. The company preserves the commercial opportunity while reducing legal and ethical exposure. It also discovers that aggressive sales incentives encouraged employees to bypass controls, leading to a redesign of compensation and approval processes.

Learning points

The case demonstrates that risks are interconnected. A third-party payment may be both bribery and AML risk; a supply-chain issue may be both human-rights and disclosure risk; and a transaction may raise competition, corruption and governance concerns simultaneously. Effective compliance requires coordinated judgment rather than isolated checklists.

11. Critical Challenges and Limitations

First, legal standards are fragmented. A policy that is lawful in one jurisdiction may be prohibited in another. Second, enforcement is selective and uncertain; absence of enforcement does not establish legality. Third, audits and certifications may provide false comfort. Fourth, excessive controls can delay legitimate commerce and encourage workarounds. Fifth, global supply chains contain limited visibility, subcontracting and data-quality problems. Sixth, reporting can become symbolic if the company rewards revenue while disciplining only visible misconduct.

A further challenge is the tension between transparency and privacy. Organizations need sufficient information to investigate and report, but must respect data minimization, confidentiality, labor rights and due process. Compliance decisions should be documented with attention to proportionality, consistency and human impact.

12. Contemporary Strategic Implications and Best Practices

Boards should treat compliance and ESG as enterprise risks connected to strategy, capital allocation, market entry and resilience. Before entering a market or acquiring a business, leadership should ask whether the proposed model is supportable under realistic controls, not merely whether a legal argument can be constructed.

Leading practice includes:

1. conduct an integrated, regularly refreshed risk assessment;
2. map legal obligations to accountable owners and measurable controls;
3. use enhanced diligence for high-risk third parties, transactions and jurisdictions;
4. align incentives with lawful, sustainable performance;
5. make reporting channels trusted, accessible and retaliation-free;
6. investigate promptly and independently;
7. use evidence-based ESG claims with clear boundaries;
8. monitor suppliers beyond paper audits;
9. test controls through scenarios, data analytics and independent review;
10. report material deficiencies honestly to appropriate governance bodies;
11. preserve evidence and maintain reliable records;
12. learn from incidents and update the system.

The strategic value of compliance lies not only in avoiding penalties. It can improve partner selection, procurement quality, investor confidence, operational continuity and the legitimacy of international business. Its success is measured by decisions made under pressure, including decisions to decline attractive but unacceptable opportunities.

Chapter Summary

International compliance is a governance and strategic capability, not a collection of disconnected policies. Competition law restricts collusion, abusive exclusion and unlawful transaction coordination. Anti-corruption controls address improper advantages, intermediaries, gifts, hospitality and accurate books and records. AML and sanctions systems require identification, beneficial-owner analysis, monitoring and escalation. Human-rights and environmental due diligence require continuous risk-based assessment, prevention, mitigation, credible monitoring, accurate communication and access to remedy.

An effective compliance program assigns responsibility, assesses risk, prevents misconduct, detects concerns, investigates fairly, remediates root causes and learns from experience. Third-party diligence, incentives, data governance and board oversight are especially important. ESG claims must be specific and evidence-based, while technology and AI require human accountability, privacy safeguards and validation. The central managerial challenge is to integrate legal requirements with commercial decisions without reducing ethics and human impacts to a checklist.

Key Terms

Competition law: Rules protecting the competitive process and restricting anticompetitive conduct.

Cartel: Coordination among competitors to restrict competition, such as price fixing or bid rigging.

Abuse of dominance: Anticompetitive conduct by a firm with substantial market power.

Gun jumping: Improper coordination or implementation before merger closing or regulatory clearance.

Bribery: Offering, promising, giving, requesting or accepting an undue advantage to influence conduct.

Facilitation payment: A payment intended to secure routine governmental action, often prohibited or restricted.

Beneficial owner: The natural person who ultimately owns or controls an entity or arrangement.

Money laundering: Concealing or disguising criminal proceeds or their origin.

Sanctions: Legal restrictions on dealings with specified persons, entities, sectors or territories.

ESG: Environmental, social and governance considerations relevant to business conduct and performance.

Human-rights due diligence: A continuous process to identify, prevent, mitigate and account for human-rights impacts.

Supply-chain traceability: The ability to identify entities, materials and processes through a supply network.

Greenwashing: Misleading environmental or sustainability representation.

Residual risk: Risk remaining after controls are applied.

Third-party risk: Exposure arising from agents, suppliers, distributors, consultants or other external parties.

Whistleblower: A person who reports suspected wrongdoing through an internal or external channel.

Remediation: Action to correct misconduct, control failure or adverse impact and address its causes.

Three lines model: Governance arrangement distinguishing operational ownership, oversight functions and independent assurance.

Review Questions

Short Answer Questions

1. What is the difference between inherent risk and residual risk?
2. Identify four examples of competitively sensitive information.
3. Why is beneficial-ownership verification important in AML and anti-corruption programs?
4. What is greenwashing?
5. Why are supplier questionnaires alone insufficient for human-rights due diligence?

Long Answer Questions

1. Explain how a multinational should design a risk-based compliance program covering competition, anti-corruption, AML and ESG obligations.
2. Analyze the governance responsibilities of the board, senior management, compliance, operations and internal audit.
3. Discuss the legal and ethical risks of using third-party agents in public-sector procurement.
4. Explain how a company should investigate and remediate a credible supply-chain forced-labor allegation.
5. Evaluate the benefits and limitations of AI-enabled compliance monitoring.

Analytical / Application Questions

1. A distributor requests a large success fee, refuses to disclose its owners and asks for payment to a personal account. Identify the risks, controls and decision points that should apply.
2. A dominant digital platform introduces exclusive contracts with key suppliers. Design an analysis addressing market power, possible efficiencies, exclusionary effects and governance safeguards.
3. A company intends to advertise a product as “carbon neutral” using unverified offsets. Prepare a decision memorandum identifying evidence, disclosure, consumer-protection and governance issues.

Multiple Choice Questions with Answers

Question 1

Which conduct is most clearly a horizontal cartel practice?

A. A supplier improving its production efficiency

B. Competitors agreeing to divide customers by territory

C. A retailer independently reducing its price

D. A company auditing its own emissions

Correct Answer: B. Competitors agreeing to divide customers by territory

Question 2

Why can a payment to an intermediary create anti-corruption risk?

A. Intermediaries are always prohibited

B. The intermediary may pass an improper advantage to a decision-maker

C. Commissions are never commercially legitimate

D. Third parties cannot sign contracts

Correct Answer: B. The intermediary may pass an improper advantage to a decision-maker

Question 3

Which item is central to beneficial-ownership due diligence?

A. The company’s advertising slogan

B. The ultimate natural person who owns or controls the entity

C. The employee vacation schedule

D. The supplier’s preferred color scheme

Correct Answer: B. The ultimate natural person who owns or controls the entity

Question 4

What is the main purpose of a grievance mechanism in human-rights due diligence?

A. To replace all courts and regulators

B. To provide an accessible channel for concerns and remedy

C. To guarantee that suppliers never change

D. To eliminate the need for worker interviews

Correct Answer: B. To provide an accessible channel for concerns and remedy

Question 5

Which statement best describes residual risk?

A. Risk before any controls exist

B. Risk remaining after controls are applied

C. Risk that is legally impossible

D. Risk found only in financial statements

Correct Answer: B. Risk remaining after controls are applied

Question 6

What is gun jumping?

A. A cybersecurity breach during a merger

B. Improper coordination before a transaction legally closes or receives clearance

C. A lawful post-closing integration plan

D. A routine customs inspection

Correct Answer: B. Improper coordination before a transaction legally closes or receives clearance

Question 7

Which ESG claim is most defensible?

A. Our product is perfectly sustainable

B. Our product has zero impact everywhere

C. Our measured emissions declined 12% within the stated organizational boundary and methodology

D. Our product is ethical because our supplier says so

Correct Answer: C. Our measured emissions declined 12% within the stated organizational boundary and methodology

Question 8

Which response best reflects risk-based compliance?

A. Apply identical controls regardless of circumstances

B. Focus enhanced controls on higher-probability or higher-impact risks

C. Ignore risks that have not yet produced enforcement

D. Delegate all responsibility to external auditors

Correct Answer: B. Focus enhanced controls on higher-probability or higher-impact risks

Question 9

Why can an audit fail to detect forced labor?

A. Audits always create forced labor

B. Workers may conceal concerns because of fear or retaliation

C. Labor conditions cannot be investigated

D. Contracts prevent any audit activity

Correct Answer: B. Workers may conceal concerns because of fear or retaliation

Question 10

Which principle should govern AI-assisted compliance monitoring?

A. Automated output is conclusive evidence

B. Human accountability, validation and privacy safeguards remain necessary

C. Model accuracy eliminates legal responsibility

D. Confidential information may always be uploaded to public tools

Correct Answer: B. Human accountability, validation and privacy safeguards remain necessary