Sanctions Compliance in the Pharmaceutical Industry

The pharmaceutical sector sits at an uncomfortable intersection of humanitarian obligation and sanctions risk. Medical goods must reach patients, including in sanctioned countries, but the channels through which they travel, the distributors who handle them, the contract manufacturers who produce them, and the clinical trial sites where products are tested can all carry sanctions that general licenses do not automatically resolve. 

The result is a compliance environment where the answer to most questions is "it depends on which regime, which license, and which party," and where enforcement actions against pharmaceutical companies have produced some of the largest sanctions penalties in any industry over the past decade.

The Regulatory Regimes That Apply

OFAC

OFAC is the primary sanctions authority for US pharmaceutical companies and for non-US companies with US-nexus activities. OFAC administers comprehensive sanctions programs against Cuba, Iran, and North Korea, and targeted programs against Russia, Belarus, Venezuela, Syria, and others. Syria's comprehensive sanctions were lifted effective July 1, 2025, following Executive Order of June 30, 2025, so US-origin food or medicine can now be sent to Syria without a specific license from OFAC. The position for Iran, Cuba, and North Korea remains unchanged.

For Iran, OFAC provides a general license under Section 560.530(a)(3)(i) of the Iranian Transactions and Sanctions Regulations, authorizing US persons and other covered persons to export or re-export qualified medicine and medical supplies to any individual or entity in Iran, including for resale to Iranian individuals or entities. The general license covers medicines and medical devices but does not extend to items on OFAC's excluded medical devices list, which requires a specific license, and does not cover services related to the operation of excluded devices without separate authorization. 

For Cuba, similar general licenses under the Cuban Assets Control Regulations permit the export and re-export of humanitarian goods, including medicines and medical devices. OFAC has confirmed that humanitarian donations, including the donation of medications to relieve human suffering, are generally exempt from US sanctions on Iran, and that broad exemptions and authorizations exist for the commercial sale and export of humanitarian goods including medicine and medical devices. 

The critical limitation on all general licenses is that they do not exempt transactions involving Specially Designated Nationals. A pharmaceutical shipment to Iran that is routed through an SDN-designated distributor, or that involves a financial institution on the SDN list for payment processing, is not covered by the general license regardless of the nature of the goods. This is where most pharmaceutical enforcement risk arises in practice.

Bureau of Industry and Security (BIS)

BIS administers export controls under the Export Administration Regulations (EAR), including controls on dual-use items. Pharmaceutical companies that manufacture products with potential military applications, certain precursor chemicals, biotechnology tools, or equipment that appears on the Commerce Control List must assess export licensing requirements independent of OFAC sanctions analysis. Drugs and medical devices are generally not themselves on the Commerce Control List, but manufacturing equipment, certain chemical precursors, and research tools can be. Companies conducting clinical trials in high-risk jurisdictions or transferring technology to contract manufacturers in controlled-country destinations need BIS analysis alongside OFAC analysis.

EU Dual-Use Regulation and Russia/Belarus Sanctions

The EU's revised Dual-Use Regulation (EU) 2021/821 covers the export of goods and technology that can be used for both civilian and military purposes. For pharmaceutical companies, the EU framework intersects with Russia and Belarus sanctions, where the EU has created specific carve-outs for medicines, medical devices, and agricultural products in its Russia sanctions packages. These carve-outs permit transactions that would otherwise be prohibited under the broad Russia export restrictions, but they come with end-use and end-user documentation requirements that create practical compliance obligations for shipments and for monitoring downstream distribution.

UK Strategic Export Controls

The UK maintains its own strategic export controls through the Export Control Joint Unit (ECJU) and the UK Sanctions List maintained by OFSI. Post-Brexit, UK pharmaceutical companies must comply with UK sanctions that broadly mirror EU designations but are administered separately. The UK's humanitarian carve-outs for medical goods align with OFAC's general license approach in most sanctioned-country scenarios, but the specifics differ and require separate legal analysis.

How OFAC General Licenses Actually Work in Practice

The existence of a general license does not eliminate compliance obligations. It shifts the structure of those obligations from seeking permission to documenting compliance. For pharmaceutical companies exporting to Iran or Cuba under the general licenses, the compliance requirements include:

• End-user and end-use documentation. The general license applies to goods destined for civilian end use. Documentation confirming the identity and nature of the receiving entity, confirmation that goods will not be re-exported to a third prohibited destination, and records showing that the transaction does not involve SDN-designated parties are required.
• Financial channel scrutiny. Payment processing for Iran-related transactions under the general license remains complex because most international banks will not process Iran-related payments regardless of license status. The Swiss Humanitarian Trade Arrangement (SHTA), established to facilitate licensed humanitarian trade with Iran, provides a pathway, but it requires meeting specific documentation standards and working with participating Swiss banks.
• Excluded items list. OFAC maintains a list of medical devices that require a specific license rather than the general license for export to Iran. Pharmaceutical companies should confirm that each product in their Iranian supply chain falls within the general license scope, not on the excluded list.
• SDN screening at every step. The general license does not authorize transactions with SDN-designated entities. Every party in the supply chain, including distributors, freight forwarders, financial institutions processing payments, and local agents, must be screened against the SDN list.

{{snippets-guide}}

Screening Distributors, Clinical Trial Sites, and Contract Manufacturers

Distributors

Distribution networks in sanctioned or high-risk countries are the highest-risk point in the pharmaceutical supply chain for OFAC purposes. A distributor that is SDN-designated, that is owned or controlled by an SDN (triggering the 50 percent rule), or that operates as a front company for a sanctioned entity converts an otherwise licensed transaction into an OFAC violation.

Pharmaceutical companies should conduct CDD-equivalent screening on all in-country distributors, including corporate registry verification, UBO identification, SDN list screening, adverse media review, and assessment of any government connections that might raise sanctions risk in comprehensively sanctioned jurisdictions. In markets where distributors frequently change ownership or where government-connected entities dominate distribution, the screening should be repeated at annual intervals and upon any change in distributor ownership or control.

Clinical Trial Sites

Clinical trial sites in high-risk jurisdictions present a dual compliance challenge. The trial itself may involve the transfer of investigational drugs and data to a country where sanctions apply, and the site personnel may include individuals who are PEPs, sanctioned parties, or connected to sanctioned entities. OFAC generally does not license clinical trial activity in comprehensively sanctioned countries without a specific license, and companies conducting trials in targeted-sanctions environments should obtain a legal opinion on whether the activity is covered by available licenses.

Contract Manufacturers

Contract manufacturing relationships in high-risk jurisdictions require the same screening diligence as distributor relationships, plus an assessment of whether the manufacturing activity involves any goods, technology, or equipment that is separately controlled under BIS regulations. Contract manufacturers in China, India, and certain other markets that have significant exposure to Russia or DPRK supply chains have drawn OFAC and BIS scrutiny as potential transshipment or diversion risks.

{{snippets-case}}

Enforcement Lessons

The enforcement record in pharmaceutical sanctions cases consistently demonstrates the same root cause: insufficient screening of the financial and distribution channels surrounding an otherwise licensed transaction.

A recurring pattern involves a company with a valid general license for humanitarian exports that fails to screen the intermediaries, financial institutions, or sub-distributors involved in the transaction chain. The goods may be legitimate medicines and the ultimate recipient may be a legitimate hospital, but a flagged entity somewhere in the transaction chain converts the shipment into a sanctions violation. OFAC's strict liability standard means that intent is not a defense. The company that failed to screen its agent's sub-distributors is liable for the same penalty as a company that deliberately structured a transaction to evade sanctions.

The practical lesson is that a general license authorization does not reduce the obligation to screen. It changes the structure of the obligation. Every party that touches the transaction, including sub-distributors, freight forwarders, insurance providers, correspondent banks, and local agents, must be screened at the time of the transaction and documented as having been screened.

Conclusion

Pharmaceutical sanctions compliance requires integrating OFAC general license analysis, BIS dual-use assessment, and country-specific sanctions carve-out structures into a compliance program that can run at the speed of commercial operations. The compliance teams that manage this well are those that have documented their license reliance clearly, built screening into every step of the supply chain rather than just the first contractual relationship, and maintained the audit trail that demonstrates each transaction was reviewed against current designation status at the time it was executed.

sanctions.io is a highly reliable and cost-effective solution for real-time screening. AI-powered and with an enterprise-grade API with 99.99% uptime are reasons why customers globally trust us with their compliance efforts and sanctions screening needs. To learn more about how our sanctions, PEP, and criminal watchlist screening service can support your organisation's compliance program: Book a free Discovery Call. We also encourage you to take advantage of our free 7-day trial to get started with your sanctions and AML screening (no credit card is required).

‍

‍