Should We Voluntarily Self-Disclose? What BIS Enforcement Actually Shows

Decision: Should we voluntarily self-disclose to BIS?

Who faces it: GC or outside export controls counsel -- within days of discovering a potential EAR violation, before BIS initiates its own investigation

The paths:

• Disclose to BIS under 15 CFR § 764.5 (voluntary self-disclosure)
• Manage the violation internally without disclosure

What the record shows: In four BIS enforcement actions (2023–2026): VSD → $500,000 (GlobalFoundries, Nov. 2024) and $1,000,000 (Teledyne FLIR, Feb. 2026). No VSD → $252,500,300 (Applied Materials, Feb. 2026) and $300,000,000 (Seagate Technology, Apr. 2023). Conduct severity differs across all four cases -- the penalty gap reflects both the VSD decision and the underlying facts.

The Moment

Your team has just confirmed a violation. You exported controlled items to a restricted party, or your compliance system failed to flag a shipment to an Entity List company, or your distributor was routing goods to a restricted end user without your knowledge. The question on the table: do you tell BIS before they find out on their own?

This is a binary decision with a measured outcome. The enforcement record shows what happened when companies chose each path.

What the Rules Say

15 CFR § 764.5 establishes the voluntary self-disclosure framework. BIS treats timely, complete, and accurate VSD as a mitigating factor in penalty calculation. The regulation does not quantify what 'mitigating' means in dollar terms. Three requirements control the benefit: the disclosure must be timely (before BIS initiates its own investigation), complete (covering all discovered violations, not a curated subset), and accurate (inaccurate disclosure, even inadvertently, can undermine the cooperation narrative VSD is designed to establish).

What the Enforcement Record Shows

Four cases from 2023–2026 have clear VSD or no-VSD data.

VSD filed — no intent (GlobalFoundries, Nov. 2024):

GlobalFoundries exported 74 shipments of semiconductor wafers to SJS Semiconductor, an affiliate of SMIC on the Entity List. Root cause: a data entry error caused SJS to appear in the address field in Oracle GTM but not in the 'ship to' field that triggered screening. The compliance program worked correctly for every other SJS transaction — the error was invisible precisely because the program was functioning.

Goods value: approximately $17.1 million. VSD filed April and November 2023 (before any BIS investigation). Cooperation: full. Penalty: $500,000 — approximately 2.9% of goods value.

VSD filed — screening gap (Teledyne FLIR, Feb. 2026):

Teledyne FLIR shipped eight thermal cameras to a Russia-diversion hub in Hong Kong that had been added to the Entity List as an address-only entry in June 2024. FLIR had specifically contacted its screening vendor asking whether the vendor's system screened for address-only entries. The vendor said it was 'being addressed internally.' Between June and December 2024, eight shipments went through the unimplemented screen. A FLIR employee identified the first notification in February 2025; VSD followed shortly.

19 total violations. Penalty: $1,000,000 — approximately 13.9% of per-violation statutory maximum.

No VSD — deliberate scheme (Applied Materials, Feb. 2026):

Applied Materials received an is-informed letter from BIS requiring a license for SMIC transactions. The next day, an AMAT executive directed employees to go 'into hyper drive on [South] Korea.' AMAT developed the 'dual-build' scheme: partially manufacture equipment in Massachusetts, ship to its South Korean subsidiary (AMK), complete assembly in Korea, ship finished equipment to SMIC. AMAT believed the South Korea assembly 'substantially transformed' the items into foreign-made goods. BIS ruled explicitly: 'substantial transformation does not appear anywhere in the EAR.'

VSD filed: No. BIS investigated. 56 violations. Goods value: approximately $126.25 million. Penalty: $252,500,300 — approximately twice the goods value. Additional consequences: three-year suspended Denial Order, two mandatory annual compliance audits.

No VSD — escalation during violation period (Seagate Technology, Apr. 2023):

When the Huawei Foreign Direct Product Rule took effect in August 2020, Seagate's main HDD competitors publicly announced they had ceased sales to Huawei. Seagate did not. Seagate became Huawei's sole HDD supplier — and then built out the relationship: signing a Strategic Cooperation Agreement naming Seagate 'Huawei's strategic supplier' (December 2020), extending over $1 billion in credit lines to Huawei (one approval came within minutes of the request), and redirecting supply away from U.S. customers to fill Huawei orders.

In January 2021, one of Seagate's equipment suppliers sent Seagate written notice that its manufacturing equipment was made from U.S.-controlled technology subject to the FDP rule — meaning a BIS license was required for Huawei shipments. Seagate continued shipping for eight more months.

VSD filed: No. BIS investigated. 429 violations. Approximately 7.4 million hard disk drives. Goods value: approximately $1.1 billion. Penalty: $300,000,000 — BIS framed it as 'more than twice what BIS estimates to be the company's net profits for the alleged illegal exports.' This was the largest standalone BIS administrative penalty in the agency's history at time of issuance. Additional consequences: five-year suspended Denial Order, three compliance audits, admission of conduct.

One day before the Seagate settlement was announced, BIS issued an enforcement policy memo explicitly making a company's failure to file a VSD an aggravating factor. BIS Director Sonderman's statement at the announcement: 'Companies that discover violations should submit voluntary self-disclosures to OEE.' Seagate was the object lesson.

What This Tells You About the Decision

The gap between VSD and no-VSD outcomes in these cases is large. GlobalFoundries paid roughly 3 cents on the dollar of goods value. Applied Materials paid roughly two dollars on the dollar.

Several caveats apply:

The conduct was different in each case, and you cannot perfectly isolate the VSD variable. GlobalFoundries's violation was a data entry error with no intent. Applied Materials developed a deliberate routing scheme after receiving an is-informed letter. Seagate continued during a violation period it could see was accumulating — with escalation, not remediation. The penalty difference reflects both the VSD and the conduct.

The penalty calculation theory varies. Applied Materials: approximately twice goods value. Seagate: more than twice net profit (different anchor, because $1.1B in goods at hardware margins produces a different calculation than $126M at equipment margins). BIS has discretion in how to frame the penalty. The relevant question is not just what percentage of goods value you're facing — it is what theory of harm BIS will use.

Cooperation is a separate factor from VSD. Full cooperation after disclosure is credited separately.

Timing is threshold, not just a factor. If BIS is already investigating, you are no longer choosing between voluntary and involuntary disclosure — only between cooperative and uncooperative.

The Three-Agency Trap

15 CFR § 764.5 is one of three parallel disclosure frameworks that the same underlying facts can trigger simultaneously:

• BIS voluntary self-disclosure: for EAR/export control violations (15 CFR § 764.5)
• OFAC voluntary self-disclosure: separate process, different timing requirements, administered by Treasury
• DOJ/NSD voluntary disclosure: applies when criminal exposure exists

The same shipment that triggers BIS civil exposure may simultaneously trigger OFAC sanctions exposure and DOJ criminal exposure. Disclosing to BIS without evaluating OFAC and DOJ exposure is not a complete response to the problem. This is why the VSD decision requires qualified export controls counsel — not just to prepare the submission, but to assess which agencies need to be included before the first letter goes out.

This page addresses the voluntary self-disclosure (VSD) decision under BIS civil enforcement (15 CFR § 764.5), drawing on publicly available BIS civil enforcement settlements at bis.gov/enforcement/settlements. Case data is from BIS Final Orders and Proposed Charging Letters for GlobalFoundries (Nov. 2024), Teledyne FLIR (Feb. 2026), and Applied Materials (Feb. 2026).

This page does not cover OFAC voluntary self-disclosure procedures (administered by Treasury) or DOJ/National Security Division voluntary disclosure (applicable when criminal exposure exists). It does not address ITAR voluntary disclosure to DDTC.

For background on the regulatory landscape this decision sits within:

• BIS Entity List, Affiliates Rule, and diversion red flags: /bis-entity-list/
• How advanced AI chip export controls are structured (the four-lane framework): /bis-semiconductor-framework/

This page is practitioner-facing orientation based on publicly available enforcement records. It is not legal advice. VSD decisions require qualified export controls counsel.