Ethics, Anti-Corruption and Corporate Trade Governance

Introduction

International trade is governed not only by tariffs, customs procedures and market-access rules, but also by expectations concerning integrity, human rights and responsible corporate conduct. A transaction may be commercially attractive and formally documented yet still expose an enterprise to criminal liability, customs penalties, civil claims, loss of licences, exclusion from public procurement and severe reputational harm.

Trade-related ethical risks arise at borders, in government contracting, during licensing and inspection, through third-party agents, within supply chains and in corporate reporting. They are especially significant because international transactions often involve multiple jurisdictions with different laws, languages, enforcement cultures and standards of evidence. A company may therefore be subject simultaneously to the law of the country where conduct occurs, the law of its headquarters, the law governing a public customer and contractual standards imposed by lenders or business partners.

This chapter examines bribery, facilitation payments, fraud, customs misconduct, human-rights due diligence and supply-chain responsibility. It then develops a governance approach involving risk assessment, internal controls, whistleblowing, audit, training and board oversight.

Learning Objectives

By the end of this chapter, students should be able to:

1. Distinguish bribery, facilitation payments, fraud, extortion and legitimate business hospitality.
2. Explain why anti-corruption and trade-compliance laws can apply across borders.
3. Identify customs, documentation, sanctions-screening and third-party risks.
4. Apply a risk-based human-rights due-diligence process to an international supply chain.
5. Design appropriate controls, reporting channels, investigations and remediation measures.
6. Evaluate the responsibilities of management and the board in corporate trade governance.

1. The Ethical Architecture of International Trade

1.1 Law, ethics and corporate responsibility

Law establishes minimum enforceable standards. Ethics asks what an organisation ought to do, including in situations where conduct is technically legal but unfair, deceptive or inconsistent with the organisation’s stated values. Corporate responsibility extends analysis beyond the immediate contracting parties to workers, communities, consumers, public institutions and the environment.

Three dimensions should be separated:

• Legality: Is the conduct permitted by applicable law?
• Integrity: Is the conduct honest, transparent and free from improper influence?
• Responsibility: Does the enterprise identify and address foreseeable harm connected with its operations and business relationships?

A narrow legal approach can fail because laws differ among jurisdictions and because enforcement often follows public scrutiny. A sound governance system therefore treats legal compliance as a baseline and uses ethical principles to guide decisions in uncertain situations.

1.2 Principal sources of obligations

Important sources include domestic anti-bribery statutes, customs legislation, tax and accounting rules, public-procurement law, sanctions and export-control regimes, labour and human-rights law, securities regulation and competition law. International instruments and guidance also influence corporate expectations. Examples include the OECD Anti-Bribery Convention, the United Nations Convention against Corruption, the OECD Guidelines for Multinational Enterprises on Responsible Business Conduct, the UN Guiding Principles on Business and Human Rights, and the International Labour Organization’s fundamental principles and rights at work.

These instruments do not all operate in the same way. A convention may require states to legislate, while a due-diligence guideline may provide an internationally recognised framework rather than a directly enforceable rule. Students must therefore ask: What is the legal source? Who is regulated? What conduct is prohibited? What jurisdictional connection exists? What penalties and reporting duties apply?

2. Bribery, Facilitation Payments and Related Misconduct

2.1 Bribery

Bribery generally involves offering, promising, giving, requesting or accepting something of value in order to influence a person’s conduct improperly. The benefit need not be cash. It may include employment, gifts, travel, discounts, charitable donations, political contributions, commissions, entertainment or benefits provided to a relative.

The central elements are usually:

1. a benefit or promise of a benefit;
2. a recipient or intermediary who can influence a decision;
3. an improper purpose or breach of duty; and
4. a connection between the benefit and the desired action or inaction.

The recipient may be a public official, employee of a state-owned enterprise, private-sector decision-maker, customs broker or agent. In many legal systems, bribery of private persons can be unlawful even where no government official is involved.

A payment to an intermediary is not made safe merely by calling it a “commission.” The enterprise may be responsible for conduct by agents, distributors, consultants or joint-venture partners where it authorised, ignored or failed to control the risk. Commissions should have a legitimate commercial basis, written contractual terms, proportionate value, verified services and payment through traceable accounts.

2.2 Facilitation payments

A facilitation payment is a small payment intended to secure or accelerate a routine governmental action to which the payer is otherwise entitled, such as processing a standard document or connecting a utility. Some legal systems have limited exceptions, while others prohibit such payments entirely. A payment that is described as facilitation may instead be a bribe if it secures preferential treatment, avoids a lawful requirement or influences discretionary decision-making.

Because multinational companies must operate under differing rules, the safest corporate policy is normally prohibition, supported by an escalation procedure. The policy should recognise the exception of an immediate threat to life, health or physical safety. A payment made under coercion should be reported promptly, recorded accurately and investigated; it should not be disguised as a business expense.

2.3 Extortion and coercion

Extortion occurs when a person demands a benefit through threats or abuse of authority. It differs from voluntary bribery, although the practical response may be urgent and complex. Employees should not be expected to risk serious physical harm to comply with a policy. Organisations need emergency guidance, reporting channels and post-incident review.

2.4 Gifts, hospitality and charitable contributions

A gift or meal is not automatically improper. Risk depends on value, timing, frequency, transparency, the recipient’s role and whether a decision is pending. Controls should impose thresholds, pre-approval for higher-risk events, accurate recording and special restrictions during tenders, inspections or licensing decisions. Charitable donations and sponsorships require due diligence because they may conceal benefits to officials or their associates.

3. Fraud, Customs Misconduct and Trade Documentation

3.1 Fraud and books-and-records integrity

Fraud involves intentional deception for gain or to cause loss. In international trade it may include false invoices, fictitious services, duplicate payments, forged certificates of origin, misrepresented product specifications, concealment of beneficial ownership, false shipment records or manipulation of transfer prices.

Accurate books and records are an anti-corruption control. An unlawful payment recorded as “consulting,” “marketing” or “miscellaneous expense” defeats management oversight and may create a separate accounting violation. Records should be sufficiently detailed to show the commercial purpose, counterparties, approving personnel, value, currency, date and supporting evidence.

3.2 Customs misconduct

Customs compliance involves more than declaring the correct tariff. Common risks include:

• incorrect classification of goods;
• undervaluation or overvaluation;
• false country-of-origin claims;
• inaccurate quantity, weight or description;
• unauthorised diversion or transshipment;
• failure to maintain import and export records;
• misuse of duty exemptions or preferential origin schemes; and
• bribery of brokers or officials.

A company can commit misconduct without making a direct payment. Deliberately supplying false information to a customs broker, or ignoring obvious inaccuracies, may create liability. Contracts should define the broker’s responsibilities, require compliance with law, permit audits and provide termination rights. Nevertheless, outsourcing does not transfer the company’s ultimate responsibility for its own declarations and oversight.

3.3 Sanctions and export controls

Sanctions and export controls restrict transactions involving specified countries, persons, sectors, goods, software or end uses. Screening should address customers, suppliers, banks, vessels, beneficial owners and, where relevant, intermediaries and transport routes. A screening result is not self-executing: potential matches require investigation, documented decisions and escalation to specialists.

Trade compliance is interconnected. A company that fails to identify the true end user may breach export-control rules; a company that conceals origin may undermine both customs and sanctions compliance. Product classification, licensing analysis and record retention should be integrated into transaction planning rather than left to the shipping stage.

4. Human-Rights Due Diligence and Supply-Chain Responsibility

4.1 From supplier codes to due diligence

A supplier code of conduct is useful but insufficient. A code states expectations; due diligence is a continuing process of identifying, preventing, mitigating, tracking and communicating how the enterprise addresses actual and potential adverse impacts.

Human-rights risks may include forced labour, child labour, unsafe workplaces, excessive recruitment fees, discrimination, restrictions on freedom of association, confiscation of identity documents, abusive working hours and impacts on indigenous or local communities. Risk may be greatest several tiers away from the direct supplier, where visibility is limited.

The UN Guiding Principles distinguish the company’s responsibility to respect human rights from the state’s duty to protect rights. A company should assess impacts connected with its operations, products and business relationships. It is not automatically liable for every problem in a supply chain, but ignorance is not an adequate governance strategy where risks are foreseeable and the company has leverage.

4.2 A practical due-diligence cycle

A robust cycle contains six linked activities:

1. Embed responsibility: assign board and management accountability and integrate expectations into purchasing and contracting.
2. Identify and assess impacts: examine country, sector, product, supplier, recruitment and logistics risks; consult affected stakeholders where practical.
3. Prevent and mitigate: use contractual terms, responsible purchasing practices, training, supplier development and corrective action.
4. Track effectiveness: use indicators, worker feedback, grievance data, audits and follow-up verification.
5. Communicate: report material risks, actions and limitations accurately.
6. Remediate: provide or cooperate in remedy where the enterprise caused or contributed to harm; use leverage and responsible disengagement where it is linked but cannot secure improvement.

Audits are only one source of evidence. Announced audits can miss abuses, workers may fear retaliation and paperwork may be falsified. Effective programmes combine document review, unannounced or semi-announced visits, worker interviews, grievance channels, purchasing-data analysis and credible local expertise.

4.3 Responsible disengagement

Immediate termination may appear decisive but can harm workers by removing income without addressing the underlying abuse. A proportionate response may include a time-bound corrective plan, increased monitoring and support for remediation. Termination is more appropriate where harm is severe, the supplier refuses to cooperate, evidence is falsified or continued purchasing would materially enable abuse. Decisions should consider worker welfare and responsible exit planning.

5. The Corporate Compliance and Governance Framework

5.1 Risk-based design

A compliance programme should be proportionate to risk rather than identical for every transaction. Relevant risk factors include jurisdiction, government interaction, industry, transaction value, use of intermediaries, ownership structure, customs complexity, product sensitivity, supply-chain opacity and prior incidents.

A useful risk register records the risk, affected process, inherent likelihood and impact, existing controls, control owner, residual risk, action deadline and evidence of review. Qualitative ratings such as low, medium and high are acceptable when definitions are consistent. Numerical scoring can support prioritisation, but it does not transform uncertain judgments into objective facts.

5.2 Internal controls

Core controls include:

• segregation of ordering, receiving, approving and paying functions;
• supplier and intermediary due diligence before engagement;
• beneficial-ownership and sanctions screening;
• written contracts with audit and compliance clauses;
• approval thresholds for gifts, travel, donations and unusual commissions;
• three-way matching of purchase order, receipt and invoice;
• restricted access to master vendor data;
• customs classification and origin review;
• payment through legitimate, traceable accounts;
• reconciliations and exception reporting; and
• retention of records according to legal requirements.

Controls must operate in practice. A policy that employees cannot access, understand or apply is weaker than a shorter policy supported by clear workflows and supervision.

5.3 Speak-up systems and investigations

A whistleblowing system should offer confidential or anonymous reporting where legally permitted, multiple channels, accessibility in relevant languages, non-retaliation protection and clear case-handling procedures. Reports should be triaged according to seriousness, preserved as evidence and assigned to investigators with appropriate independence.

Investigations should establish scope, protect evidence, maintain confidentiality, respect applicable employment and privacy law, interview relevant persons fairly and document conclusions. Management should avoid promising absolute secrecy, because disclosure may be required by law or necessary for a fair process. Retaliation—such as dismissal, demotion, threats or exclusion for making a good-faith report—should itself be treated as a serious violation.

5.4 Audit and monitoring

Internal audit provides independent assurance about governance, risk management and controls. Compliance monitoring is more continuous and may test transactions, approvals, screening alerts, broker files, customs entries and training completion. External assurance may be required by law, investors, lenders or customers, but external certification does not replace management accountability.

Useful indicators include overdue due diligence, exceptions to approval rules, repeat customs corrections, unresolved hotline cases, high-risk suppliers without remediation plans and unusual payments near contract awards. Metrics should not reward concealment—for example, a low number of reports may indicate fear rather than ethical health.

5.5 Training and organisational culture

Training should be role-specific. Sales staff need guidance on public tenders and hospitality; logistics staff need customs and documentation training; procurement staff need supplier and conflict-of-interest controls; finance staff need payment and accounting controls; directors need escalation and oversight information.

Culture is shaped by incentives. Unrealistic sales targets, tolerance of “business necessities” and promotion of high performers who violate controls can undermine every policy. Ethical performance should therefore be included in evaluation, compensation and promotion decisions.

5.6 Board oversight

The board is not expected to manage every shipment, but it must oversee the compliance architecture. Its responsibilities include approving risk appetite, ensuring adequate resources and independence, receiving meaningful reporting, challenging management assumptions, monitoring significant investigations and confirming that remediation is completed.

Board reports should explain trends, severe incidents, root causes, third-party exposure, regulatory developments and the effectiveness—not merely the existence—of controls. A board that receives only favourable summaries cannot exercise meaningful oversight.

6. Applied Case: The Port Meridian Expansion

The following is an illustrative fictional case.

Background

Northstar Components, headquartered in Country A, seeks a government contract in Country B to supply equipment for a port expansion. It appoints Delta Advisory, a local consultant recommended by a senior official. Delta requests a large success fee, refuses to identify its beneficial owners and proposes that part of the fee be paid to a “community foundation.” Northstar’s logistics manager also learns that a broker has been understating the value of imported components to reduce duty.

At the same time, a lower-tier supplier uses migrant workers recruited through debt-inducing fees. A worker hotline report alleges confiscation of passports and unsafe accommodation.

Problem and analysis

The success fee presents bribery and third-party risks: the referral by an official, opaque ownership, disproportionate compensation and a payment connected to a public contract. The foundation may be a concealed channel for an improper benefit. The customs proposal is deliberate misdeclaration, not an acceptable cost-saving technique. The supplier issue creates potential forced-labour and human-rights risks.

Northstar should not ask only whether competitors engage in similar practices. It should identify applicable anti-bribery, procurement, customs, labour, sanctions and accounting obligations in both countries, together with contractual requirements of the public customer.

Approach and solution

Northstar should suspend engagement of Delta pending enhanced due diligence, verify ownership and services, reject unexplained payments and require written approval from legal and compliance personnel. It should disclose the customs concern to the responsible compliance function, correct entries where required, preserve records and investigate whether prior declarations were affected. It should not instruct the broker to destroy or alter records.

For the supplier, Northstar should protect workers from retaliation, arrange an independent assessment, require repayment or elimination of recruitment debts, secure return of documents and address unsafe accommodation. Purchasing personnel should avoid imposing deadlines or price reductions that make remediation impossible. If the supplier refuses access or continues severe abuse, Northstar should use a responsible exit plan.

The audit committee should receive a report describing the risks, decisions, evidence and remediation timetable. Northstar should review whether incentive structures and third-party onboarding controls contributed to the problem.

Outcome and learning points

The case demonstrates that corruption, customs and human-rights risks can arise in the same transaction. A compliance programme must connect procurement, finance, logistics, legal, human resources and sustainability functions. It must also distinguish investigation from premature judgment, preserve evidence and provide remedy rather than relying solely on termination.

7. Contemporary Developments, Technology and Limitations

Digital trade platforms, automated screening, data analytics and artificial intelligence can identify duplicate invoices, unusual payment patterns, high-risk routes and supplier relationships. These tools improve scale but do not eliminate judgment. False positives can delay lawful trade; incomplete or biased data can hide risk; automated decisions may be difficult to explain; and sensitive worker or whistleblower information requires privacy protection and access controls.

Contemporary regulation increasingly expects companies to demonstrate due diligence rather than merely publish aspirational statements. Mandatory human-rights or environmental due-diligence regimes, modern slavery reporting requirements, beneficial-ownership transparency and supply-chain disclosure rules vary substantially by jurisdiction. A company should maintain a legal obligations register and avoid assuming that one global policy automatically satisfies every local requirement.

Important limitations remain. No screening system detects every concealed relationship. No audit provides certainty. Contractual clauses cannot control a supplier that lacks capacity or incentive to comply. Excessive bureaucracy can encourage workarounds, while excessive reliance on local custom can normalise misconduct. Effective governance therefore combines clear rules, proportionate controls, informed human judgment, stakeholder engagement and continuous improvement.

Best-Practice Checklist

Before approving a high-risk international transaction, an enterprise should ask:

1. Have the parties, beneficial owners, agents, end users and jurisdictions been identified?
2. Is there a legitimate, documented commercial purpose for every payment?
3. Are gifts, commissions, donations and hospitality proportionate, transparent and approved?
4. Are classification, valuation, origin, licensing and end-use decisions supported by evidence?
5. Have actual and potential human-rights impacts been assessed beyond the first-tier supplier?
6. Can workers and employees report concerns safely and without retaliation?
7. Are responsibilities, escalation points, records and audit rights clearly assigned?
8. Can senior management and the board explain how they know the controls work?

Chapter Summary

Ethical international trade governance requires more than avoiding obvious bribes. Bribery, facilitation payments, fraud, customs misdeclaration, sanctions breaches and human-rights abuses may be connected through the same intermediary, shipment or supply chain. Companies should distinguish legal minimums from broader integrity and responsibility expectations, identify jurisdictional obligations and apply proportionate controls.

A mature programme includes risk assessment, third-party due diligence, accurate books and records, customs oversight, human-rights due diligence, accessible reporting channels, independent investigation, audit, role-specific training and board oversight. Supplier codes and certifications are useful but cannot replace evidence-based monitoring and remediation. Technology can support detection, but human judgment, privacy protection and accountability remain essential. The strategic objective is not merely to avoid penalties; it is to build trustworthy, resilient and responsible international business relationships.

Key Terms

Bribery: Offering, giving, requesting or accepting something of value to influence conduct improperly.

Facilitation payment: A payment intended to secure or accelerate a routine governmental action.

Extortion: Obtaining a benefit through threats or coercive abuse of authority.

Fraud: Intentional deception for gain or to cause loss.

Books and records: Accounting and business documents that accurately reflect transactions and purposes.

Third-party intermediary: An agent, consultant, distributor, broker or other person acting between an enterprise and another party.

Beneficial owner: The natural person who ultimately owns or controls an entity.

Customs misconduct: Unlawful or inaccurate conduct involving classification, value, origin, description or declarations.

Country of origin: The jurisdiction in which goods satisfy applicable origin rules.

Sanctions: Legal restrictions imposed on specified persons, places, sectors, goods or activities.

Export control: Regulation of exports according to product, destination, end user or end use.

Human-rights due diligence: An ongoing process to identify, prevent, mitigate, track, communicate and remedy adverse impacts.

Supply-chain responsibility: Responsibility to address risks connected with a company’s operations and business relationships.

Remediation: Measures that correct or repair harm and address its causes.

Whistleblowing: Reporting suspected wrongdoing through an internal or external channel.

Retaliation: Adverse treatment imposed because a person raised a concern or participated in an investigation.

Risk-based approach: Allocating attention and resources according to the nature and severity of risk.

Board oversight: The governing body’s supervision of strategy, risk, controls and accountability.

Review Questions

Short Answer Questions

1. What are the principal elements of bribery?
2. Why are facilitation payments controversial in multinational business?
3. Identify four examples of customs misconduct.
4. Why is a supplier code of conduct insufficient by itself?
5. What responsibilities does a board have for trade-compliance governance?

Long Answer Questions

1. Compare bribery, facilitation payments, extortion and legitimate hospitality. Explain how a company should manage each risk.
2. Explain how inaccurate books and records can contribute to both fraud and anti-corruption liability.
3. Describe the six-stage human-rights due-diligence cycle and explain the role of remediation.
4. Design a risk-based compliance programme for a company using agents to obtain public-sector contracts abroad.
5. Evaluate the strengths and limitations of audits, certifications, whistleblowing and data analytics as compliance tools.

Analytical / Application Questions

1. A customs broker proposes undervaluing goods and says that competitors do the same. What should the importer do, and which controls should be reviewed?
2. A supplier is accused of forced labour, but immediate termination would leave workers without income. Analyse the factors relevant to remediation, monitoring and possible disengagement.
3. A sales director authorises expensive hospitality for officials two days before a tender decision. Develop an investigation and governance response, including reporting, evidence preservation and board escalation.

Multiple Choice Questions with Answers

Question 1

Which feature most clearly distinguishes bribery from legitimate business hospitality?

A. The hospitality occurs during normal business hours.

B. The benefit is connected to an intention to influence an improper decision.

C. The recipient works for a private company.

D. The hospitality is recorded in an expense system.

Correct Answer: B. The benefit is connected to an intention to influence an improper decision.

Question 2

What is the safest general policy for a multinational enterprise regarding facilitation payments?

A. Permit all payments below a fixed monetary threshold.

B. Permit payments whenever a broker recommends them.

C. Prohibit them, with emergency guidance for threats to health or safety.

D. Record them as charitable donations.

Correct Answer: C. Prohibit them, with emergency guidance for threats to health or safety.

Question 3

Which practice is most likely to constitute customs misconduct?

A. Reviewing a tariff classification before shipment.

B. Maintaining records of product origin.

C. Deliberately understating import value to reduce duty.

D. Requesting a written ruling from customs authorities.

Correct Answer: C. Deliberately understating import value to reduce duty.

Question 4

Why are accurate books and records important to anti-corruption compliance?

A. They eliminate the need for due diligence.

B. They can reveal or prevent concealed improper payments.

C. They permit all commissions without review.

D. They replace customs declarations.

Correct Answer: B. They can reveal or prevent concealed improper payments.

Question 5

Which activity is part of human-rights due diligence?

A. Identifying and assessing actual and potential adverse impacts.

B. Relying exclusively on a supplier’s advertising.

C. Terminating every supplier after one allegation.

D. Avoiding communication about supply-chain risks.

Correct Answer: A. Identifying and assessing actual and potential adverse impacts.

Question 6

Which statement about outsourcing customs activity to a broker is most accurate?

A. Outsourcing automatically transfers all legal responsibility to the broker.

B. The importer remains responsible for appropriate oversight of its declarations.

C. The importer may approve false information if the broker signs it.

D. Brokers are exempt from anti-corruption laws.

Correct Answer: B. The importer remains responsible for appropriate oversight of its declarations.

Question 7

What is a key requirement of an effective whistleblowing system?

A. A single channel available only in the headquarters language.

B. Guaranteed secrecy in every circumstance.

C. Protection against retaliation and credible case handling.

D. Automatic dismissal of every person named in a report.

Correct Answer: C. Protection against retaliation and credible case handling.

Question 8

Which board practice best demonstrates meaningful compliance oversight?

A. Receiving only reports of successful sales.

B. Approving a policy once and never reviewing it.

C. Reviewing significant risks, incidents, resources and remediation.

D. Managing every individual customs shipment.

Correct Answer: C. Reviewing significant risks, incidents, resources and remediation.

Question 9

Why can immediate termination of a high-risk supplier be problematic?

A. It always violates competition law.

B. It may worsen harm to workers without providing remediation.

C. It prevents the company from keeping any records.

D. It makes due diligence unnecessary.

Correct Answer: B. It may worsen harm to workers without providing remediation.

Question 10

What is the principal limitation of automated compliance screening?

A. It cannot process any large data sets.

B. It guarantees that every unlawful transaction will be detected.

C. It may generate false positives or miss risks in incomplete data.

D. It makes privacy law irrelevant.

Correct Answer: C. It may generate false positives or miss risks in incomplete data.