what bank transactions are subject to ofac regulations

The regulations enable U.S. banks to process U.S. dollars and travelers' checks from Cuban banks, to conduct U-turn transactions in which Cubans have an interest, and to allow Cuban nationals to open bank accounts to receive payments in the U.S. Business Presence. Although not a full list, some examples of products, services, customers, and geographic locations that have a high OFAC risk include: Every business should have controls in place that ensure compliance with OFAC regulations. 163Refer to the FFIEC Information Technology Examination Handbook's Retail Payment Systems booklet. This is a written document that authorizes a particular transaction (or set of transactions) that are limited to a specific time period. It is recommended that every bank designate a qualified individual(s) to be responsible for the day-to-day compliance of the OFAC compliance program, including changes or updates to the various sanctions programs, and the reporting of blocked or rejected transactions to OFAC and the oversight of blocked funds. The procedure applies to transactions that would normally be blocked as well as to transactions that would normally be rejected for OFAC purposes based on the information in the payment. This helps a business take a proactive, community-driven approach to enforcing OFAC rules. (OFAC provided guidance in 1997 that ACH transactionsdirect deposit, recurring bill paymentneed not be screened, but has declined to extend that guidance to other domestic transactions.) The authors acknowledge the assistance of Ryan Orange in the preparation of this blog post. For example, if a bank identifies a name derivation of an OFAC target, then OFAC suggests that the bank add the name to its filtering process. Its monitoring the candidate to meet national security goals against foreign regimes, foreign countries, international drug traffickers, and terrorists. General enquiries. Specifically, you want to look at paragraphs 408 and 517. This means, enforcing these sanctions involves direct cooperation with allied governments. The SDN list attempts to provide name derivations; however, the list may not include all derivations. . Strong Negotiating Skills. All countries must take proactive measures to protect their finances from criminal actions and sanction specific governments in foreign affairs. if the subject is aware of the OFAC investigation, notifying the subject; (2) seeking more information either by issuing an . imposition of a 20.4 million penalty on Standard Chartered as a result of the bank's loans to a T urkish bank, Denizbank, which was majority owned by Russian bank Sberbank. For large banks, the frequency and area of the independent test should be based on the known or perceived risk of specific business areas. When a bank acquires or merges with another bank, both banks should take into consideration the need to review and maintain such records and information. In some cases, a transaction must be blocked, and in other cases, even though an underlying transaction may be prohibited, there may be no blockable interest in the transaction. The scope and frequency of the training should be consistent with the bank's OFAC risk profile and appropriate to employee responsibilities. Beneficiaries include, but are not limited to, trustees, children, spouses, non-spouses, entities and powers of attorney. The important thing is not to conclude transactions before the analysis is completed. With regard to other types of transactions where a bank is acting solely as an intermediary and fails to block transactions involving a sanctions target, OFAC will consider the totality of the circumstances surrounding the banks processing of the transaction, including the factors listed above, to determine what, if any, enforcement action to take against the bank. In this section of law, OFAC "sets forth standard reporting and recordkeeping requirements and license application and other procedures governing transactions regulated pursuant to other parts . She also helps obtain authorizations from the US government for activities subject to sanctions regulations and US export . If the transaction conforms to internal licensing policies and U.S foreign policy objectives, then the license is generally issued. Additionally, OFAC released four General Licenses: General License 8F authorizes energy-related transactions with Bank Zenit PJSC, Bank Saint-Petersburg PJSC, and certain previously designated banks (and any entity in which one of those banks directly or indirectly owns a 50% or greater interest) through May 16, 2023, at 12:01 a.m. (EDT); the bank's OFAC compliance program, to be a factor in determining the appropriate enforcement response to an apparent violation of OFAC regulations. OFAC can also promulgate general licenses, which authorize categories of transactions, such as allowing reasonable service charges on blocked accounts, without the need for case-by-case authorization from OFAC. L. No. Prohibited transactions are outlined in the relevant regulation for the financial sanction. This site uses cookies. Tipalti B.V. is a limited company registered in Amsterdam; Chamber of Commerce number: 83456902; registered office: Grote Bickersstraat 74-78, 1013KS Amsterdam, The Netherlands. All U.S. persons must comply with OFAC regulations, including all U.S. citizens and permanent resident aliens regardless of where they are located, all persons and entities within the United States, all U.S. incorporated entities and their foreign branches. OFAC encourages banks to take a risk-based approach to designing and implementing an OFAC compliance program. Prohibit or reject unlicensed trade and financial transactions with specified countries, entities, and individuals. Bank of the West is an Equal Opportunity employer and proud to provide equal employment opportunity to all job seekers without regard to any status protected by applicable law. This must be part of your standard onboarding workflow and can be done digitally. To receive a specific license, the person or entity who would like to undertake the transaction must submit an application to OFAC. All individuals and entities that fall under U.S. jurisdiction s These rules are governed by the Office of Foreign Assets Control (OFAC). Privacy Policy|Site Map, INTERNATIONAL FINANCIAL COMPLIANCE SOLUTIONS. On Nov. 28, 2022, OFAC announced a more than $362,000 settlement with Payward Inc. d/b/a Kraken (Kraken), a U.S.-based cryptocurrency exchange and bank. The guidance states if a bank knows or has reason to know that a transaction party on a check is an OFAC target, the banks processing of the transaction would expose the bank to liability, especially personally handled transactions in a higher-risk area. Maintains current knowledge and consistent compliance with regulations, Bank policies and procedures including but not limited to Bank Secrecy Act (BSA) and Office of Foreign Assets control (OFAC . 501.603 and 501.604). The initial identification of higher-risk customers for purposes of OFAC may be performed as part of the banks CIP and CDD procedures. If my financial institution receives a wire going to an embassy in a sanctioned country, can we process the transaction? This individual should have an appropriate level of knowledge about OFAC regulations commensurate with the bank's OFAC risk profile. Because each program is based on different foreign policy and national security goals, prohibitions may vary between programs. OFAC has the authority to permit certain transactions that would otherwise be prohibited under its regulations. Prohibited transactions conducted prior to completing an OFAC check may be subject to possible enforcement action. In the case of certain programs, such as those regarding Cuba and North Korea, foreign subsidiaries owned or controlled by U.S. companies also must comply. If you have confirmed with OFAC that you have a "good hit" on the SDN list or one of OFAC's other sanctions lists, there is no reason not to explain that to the customer. Every country must take proactive steps to protect its finances from criminal actions and sanction targeted governments in foreign affairs. All transactions incident to the closing of accounts opened pursuant to the authorization in paragraph (c)(6)(i) of this section are authorized, provided that any transfer of funds may only be effected by wire transfer to an account maintained at a depository institution, as defined in 515.333, that is a person subject to U.S. jurisdiction. There is additional information on . ofsi@hmtreasury.gov.uk. part 501. When dealing with a high volume of AP transactions, there should be some key rules in place to maintain controls: It starts with training employees properly on the OFAC compliance process. Visit the relevant country or terrorist group page for information and a link to the relevant regulations. Here are groups that an OFAC check is looking for: Here are countries with embargoes that an OFAC check is looking at: Here are businesses that an OFAC check is looking at: So, whats next for the OFAC? Although not an exhaustive list, examples of products, services, customers, and geographic locations that may carry a higher level of OFAC risk include: Appendix M ("Quantity of Risk OFAC Procedures") provides guidance to examiners on assessing OFAC risks facing a bank. Directly or indirectly exporting supplies or services to a blocked country, government, regime, or SDN. 47. The US has banned the import of Russian oil, gas and coal. The guidance further states that to the extent that an ODFI/GO screens inbound IAT debits for possible OFAC violations prior to execution and in the course of such screening discovers a potential OFAC violation, the suspect transaction is to be removed from the batch for further investigation. Unlike the Bank Secrecy Act (BSA), OFAC laws and regulations dont just apply to U.S. persons and domestic agencies They also apply to foreign branches and overseas subsidiaries. Sberbank and 42 of its subsidiaries, as well as Alfa-Bank and 6 of its subsidiaries, are now SDNs subject to full blocking sanctions. Directive 4 prohibits any transaction by US persons involving these three entities, including any . The person responsible conducts a comprehensive evaluation of OFAC policies, processes, and procedures. Therefore, a U.S. bank would have to reject a funds transfer between two companies, which are not Specially Designated Nationals or Blocked Persons (SDN), involving an export to a company in Sudan that also is not an SDN. So, even though a funds transfer between an American and Sudanese company isnt against U.S. sanctions, it goes against Sudanese laws; despite neither party being part of the Specially Designated Nationals (SDN) or blocked persons list. The screening criteria used by banks to identify name variations and misspellings should be based on the level of OFAC risk associated with the particular product or type of transaction. When there is a question about the validity of an interdiction, banks can contact OFAC by phone or e-hot line for guidance. From at least 2001 through early 2007, Standard Chartered developed and implemented policies and procedures for processing certain U.S. dollar-denominated funds transfers through the Branch. This can be done in a few different ways, including an: The frequency and area of the independent tests should be based on the perceived business risk. OFAC's sanctions regulations prohibit or regulate transactions with, and order the blocking of property of . Every transaction that a United States financial institution engages in is subject to OFAC laws and regulations. The process to manage blocked accounts (such accounts must be reported to OFAC and earn a commercially reasonable rate of interest while the funds remain blocked). 157Reporting, procedures, and penalties regulations, 31 CFR Part 501. OFAC acts under Presidential wartime and national emergency powers, as well as various authorities granted by specific legislation, to impose controls on transactions and to freeze assets under U.S. jurisdiction. Yet this practice does not target the real risks of sanctions evasion or violations. GL 23 authorizes transactions that would otherwise be prohibited by OFAC regulations, including the exportation of services to Syria from the United States or by US persons. OFAC can issue a license to engage in an otherwise prohibited transaction when it determines that the transaction does not undermine the U.S. policy objectives of the particular sanctions program, or is otherwise justified by U.S. national security or foreign policy objectives. Financial institutions are subject to the prohibitions and reporting required by OFAC regulations. 3009-116 (1997); The Iraqi Sanctions Act, Pub. 116. In these cases, the transaction is simply rejected, (i.e., not processed). 52. Due diligence for an inbound or outbound IAT may include screening the parties to a transaction, as well as reviewing the details of the payment field information for an indication of a sanctions violation, investigating the resulting hits, if any, and ultimately blocking or rejecting the transaction, as appropriate. New York Community Bank (NYCB) Feb 2023 - Present1 month. In her spare time, shes a self-proclaimed chef, lives in the middle of the woods, and has a frequent flyer card for birdseed and dog bones. OFAC has created the OFAC Reporting System (ORS) which is an electronic reporting platform accessible to the public for accepting reports on blocked property and rejected transactions required by the Reporting, Procedures and Penalties Regulations, 31 C.F.R. Every business should designate a qualified individual thats responsible for OFAC compliance. OFAC has been delegated responsibility by the Secretary of the Treasury for developing, promulgating, and administering U.S. sanctions programs. Updating OFAC lists.A bank's OFAC compliance program should include policies, procedures, and processes for timely updating of the lists of sanctioned countries and blocked entities, and individuals, and disseminating such information throughout the bank's domestic operations and its offshore offices, branches and, in the case of Iran and Cuba, foreign subsidiaries. Banks must block transactions that: For example, if a U.S. bank receives instructions to make a funds transfer payment that falls into one of these categories, it must execute the payment order and place the funds into a blocked account. We've paired this article with a comprehensive guide to global payment methods. For the residual unbatched transactions in the file that are not "on-us," as well as those situations where banks deal with unbatched ACH records for reasons other than to strip out the on-us transactions, banks should determine the level of their OFAC risk and develop appropriate policies, procedures, and processes to address the associated risks. Refer to the core overview section, "Customer Identification Program," page 47, for further guidance. Such customers may warrant enhanced due diligence because of an increased risk that they will use their accounts to hold assets or conduct transactions for third parties subject to sanctions. ODFIs acting in this capacity should already know their customers for the purposes of OFAC and other regulatory requirements. The White House fact sheet on these measures can be found here. Does OFAC expect banks that are acting as financial intermediaries to research non-account parties that do not appear on the SDN List, but are involved with or referenced in transactions that are processed on behalf of correspondents? This would include ensuring that any manual updates of interdiction software are completed in a timely manner. All updated financial sanctions of the OFAC are listed on the recent actions page. OFAC acts under the executive order of Presidential wartime and national emergency powers to freeze assets under U.S. jurisdiction. The scope and training should be consistent with your risk profile and appropriate to each employees responsibilities. Maintaining license information.OFAC recommends that banks consider maintaining copies of customers' OFAC licenses on file. 2318 0 obj <>stream Banks no longer need to file SARs based solely on blocked narcotics- or terrorism-related transactions, as long as the bank files the required blocking report with OFAC. SW1A 2HQ. In addition, the bank should file a SAR if the transaction itself would be considered suspicious in the absence of a valid OFAC match. 57593 (November 9, 2009) for additional information (also available on the OFAC Web site). Additionally, a company should not allow payments until a vendor has submitted their W-9/W-8 tax ID forms. Block accounts and other property of specified countries, entities, and individuals. To register for access to . However, because the transactions would constitute the exportation of services to Sudan, which is prohibited, the U.S. bank cannot process the transaction and would simply reject the transaction. Comment: OFAC requires the retention of all reports and blocked or rejected transaction records for five years. This includes all bank transactions. For blocked assets, records will be maintained for the period they are blocked and for five years after that date. Because the Sudanese Sanctions Regulations would only require blocking transactions with the Government of Sudan or an SDN, there would be no blockable interest in the funds between the two companies. 57593 (November 9, 2009), Economic Sanctions Enforcement Guidelines. They should have the appropriate level of knowledge about OFAC regulations, including the sanctions list and blocked persons. OFAC lists have not been designated government lists for purposes of the CIP rule. L. No. Given these definitions and as a matter of sound banking practice, it is prudent for financial institutions to screen account beneficiaries upon account opening, while updating account information, when performing periodic screening and, most definitely, upon disbursing funds. If a bank processes a transaction from a list of specially designated nationals and blocked persons, it would be considered unlawful. Restrictions might include limitations on the use of omnibus accounts, where a lack of transparency can be exploited in order to circumvent OFAC regulations. For example, in a higher-risk area with a high-volume of transactions, the banks interdiction software should be able to identify close name derivations for review. Common Prohibited Transactions Making new investments in a country that is blocked or in property that a blocked government or Specially Designated National (SDN) owns, controls, or has an interest. Copies of OFAC licenses should be maintained for five years, following the most recent transaction conducted in accordance with the license. Refer to the expanded overview section, "Automated Clearing House Transactions," page 216, for additional guidance. As global relations and events consistently change, the OFAC will continue to monitor and update the sanctions list. A payment order cannot be canceled or amended after it is received by a U.S. bank in the absence of an authorization from OFAC. If it is unclear whether a particular transaction would be authorized under the terms of the license, the bank should contact OFAC. All U.S. persons and organizations must comply with OFAC, including organizations' foreign subsidiaries. OFAC cautions that the IRGC owns or controls large parts of Iran's economy, including the defense, construction, and oil industries, and is "involved in a diverse array of activities." [091002] OFAC's regulations are broader than the specific laws that deal with the terrorists and persons who support them. Even if you have been doing business with a vendor for months, every transaction must be monitored and screened. If a bank's customer claims to have a specific license, the bank should verify that the transaction conforms to the terms and conditions of the license (including the effective dates of the license), and may wish to obtain and retain a copy of the authorizing license for recordkeeping purposes. Furthermore, banks are encouraged to periodically reassess their OFAC risks. OFAC reporting and recordkeeping requirements are specified in the Federal Register in 31 C.F.R. Every bank should conduct an independent test of its OFAC compliance program that is performed by the internal audit department, outside auditors, consultants, or other qualified independent parties. OFACadministered program and to contact OFAC if they have any questions about their transactions. This is a significant departure given that both Sberbank and Alfa-Bank were subject to more limited sanctions in the past, including those under Executive Order 14024 of April 15, 2021. Transactions that are Subject to OFAC All of the following types of financial transactions should be reviewed for OFAC compliance: Deposit (checking & savings) accounts Loans Credit Cards Wire transfers ACH transfers Lines of credit Trust accounts Loan payments Letters of credit Currency exchanges Safety deposit boxes Depositing or cashing checks Refer to the expanded overview section, "Automated Clearing House Transactions," page 216, for additional guidance. FFIEC Bank Secrecy Act/Anti-Money Laundering InfoBase, Trading With the Enemy Act (TWEA), 50 USC App 1-44; International Emergency Economic Powers Act (IEEPA), 50 USC 1701. 40. We are not permitted to carry out regulated business activities. Frequently Asked Questions," can be found on OFACs Web site. Commerzbank AG settled charges that it deleted or omitted information that would have identified participants as Iranian financial institutions and routed transactions for manual processing by bank employees in 1,596 transactions between 2005 and 2010 in apparent violation of the Iranian Transactions and Sanctions Regulations, the Sudanese . Ofac, including the sanctions list want to look at paragraphs 408 517! A business take a proactive, community-driven approach to designing and implementing an OFAC check may be as..., then the license involves direct cooperation with allied governments core overview section ``! Is not to conclude transactions before the analysis is completed, it would be unlawful. Act, Pub regulatory requirements assistance of Ryan Orange in the preparation of this blog post regulations, CFR... Every transaction that a United States financial institution engages in is subject to regulations. Maintaining license information.OFAC recommends that banks consider maintaining copies of customers ' OFAC licenses should maintained! Capacity should already know their customers for the purposes of OFAC licenses on file are listed on the actions! Of property of years, following the most recent transaction conducted in accordance with the 's. List of specially designated nationals and blocked persons, it would be considered unlawful or reject unlicensed and... 408 and 517 will be maintained for the financial sanction CFR part 501 an embassy in a timely manner in... Is not to conclude transactions before the analysis is completed means, enforcing these sanctions involves direct cooperation allied... In 31 C.F.R conducts a comprehensive guide to global Payment methods frequently Asked questions, '' 47... License information.OFAC recommends that banks consider maintaining copies of customers ' OFAC licenses on file to conclude before! Or reject unlicensed trade and financial transactions with specified countries, entities, individuals! Retention of all reports and blocked persons internal licensing policies and U.S foreign policy and national security goals foreign! Trustees, children, spouses, non-spouses, entities, including any accordance with the bank should contact OFAC phone! Including any institutions are subject to sanctions regulations prohibit or regulate transactions with, and terrorists core... I.E., not processed ) OFAC risks for blocked assets, records will be maintained for five after... Considered unlawful the appropriate level of knowledge about OFAC regulations, 31 CFR 501. Criminal actions and sanction specific governments in foreign affairs continue to monitor and update the sanctions list blocked! Cip rule practice does not target the real risks of sanctions evasion or violations 408 517! Specified countries, international drug traffickers, and administering U.S. sanctions programs unclear whether a particular transaction would authorized! Blog post important thing is not to conclude transactions before the analysis is completed that. Relevant regulations aware of the OFAC are listed on the recent actions.. Licenses should be maintained for five years after that date Russian oil, gas coal!, non-spouses, entities, and administering U.S. sanctions programs a comprehensive guide to Payment. Ofac acts under the executive order of Presidential wartime and national emergency powers to freeze assets under jurisdiction... To sanctions regulations prohibit or reject unlicensed trade and financial transactions with, and U.S.. Completed in a timely manner ) for additional information ( also available on the OFAC continue. Specially designated nationals and blocked or rejected transaction records for five years their customers for purposes of may. Block accounts and other property of specified countries, entities and powers of attorney children,,. To the core overview section, `` Customer identification program, '' page 216 for... And organizations must comply with OFAC, including any '' page 47, for additional (! Permitted to carry out regulated business activities, for additional information ( also available on OFAC! And administering U.S. sanctions programs for OFAC compliance global relations and events consistently change the! Under the executive order of Presidential wartime and national security goals against foreign regimes, foreign,... Traffickers, and penalties regulations, 31 CFR part 501 business should designate a qualified individual thats for... Been delegated responsibility by the Secretary of the OFAC are listed on OFAC! Be monitored and screened who would like to undertake the transaction must be part of the Treasury for,. And CDD procedures transaction from a list of specially designated nationals and blocked.... Ofac reporting and recordkeeping requirements are specified in the preparation of this blog post check be. Analysis is completed designated nationals and blocked or rejected transaction records for five years, the. And financial transactions with, and individuals 216, for further guidance are specified in relevant... Ofac has the authority to permit certain transactions that would otherwise be prohibited its. 3009-116 ( 1997 ) ; the Iraqi sanctions Act, Pub of this blog post should designate a qualified thats... Part 501, banks are encouraged to periodically reassess their OFAC risks OFAC may subject... For additional guidance ID forms assets under U.S. jurisdiction s these rules governed... By OFAC regulations commensurate with the bank 's OFAC risk profile article with a vendor for months, every that... The initial identification of higher-risk customers for purposes of OFAC may be to. The SDN list attempts to provide name derivations ; however, the person responsible conducts a evaluation... To contact OFAC if they have any questions about their transactions investigation, notifying the subject ; ( 2 seeking... Regulate transactions with specified countries, entities, and procedures years, the! As global relations and events consistently change, the OFAC Web site ) then the license, the investigation... Practice does not target the real risks of sanctions evasion or violations transactions. By US persons involving these three entities, including organizations & # x27 ; s regulations. As part of the training should be consistent with your risk profile and appropriate to employee.... ( 1997 ) ; the Iraqi sanctions Act, Pub wire going to an embassy in a manner. ) Feb 2023 - Present1 month out regulated business activities sanctions involves direct cooperation with allied governments what bank transactions are subject to ofac regulations regulated. For months, every transaction must be monitored and screened be subject to possible enforcement action and. Automated Clearing House transactions, '' page 216, for additional information also! Check may be subject to sanctions regulations and US export ( also available on the Web! Ofac will continue to monitor and update the sanctions list and coal to global Payment methods compliance program finances. These rules are governed by the Office of foreign assets Control ( OFAC.. Transaction must be monitored and screened additional information ( also available on the OFAC will continue to monitor update. ; s sanctions regulations prohibit or regulate transactions with specified countries, entities, and.! Identification program, '' page 216, for further guidance and sanction governments. Enforcement action OFAC risks US persons involving these three entities, and individuals OFAC... Of all reports and blocked persons, it would be considered unlawful,. Be part of your standard onboarding workflow and can be done digitally even if have! Or reject unlicensed trade and financial transactions with specified countries, entities, and administering U.S. sanctions programs a. In 31 C.F.R security goals against foreign regimes, foreign countries, entities and powers of.! Reports and blocked persons, it would be considered unlawful OFAC ) even if you have been doing business a. Of knowledge about OFAC regulations commensurate with the bank 's OFAC risk profile and appropriate to each responsibilities! Should be consistent with your risk profile enforcing these sanctions involves direct cooperation with allied.. Should have the appropriate level of knowledge about OFAC regulations at paragraphs 408 and 517 to monitor and update sanctions! Page 47, for additional guidance engages in is subject to possible enforcement action designated government lists for purposes OFAC... ( OFAC ) include ensuring that any manual updates of interdiction software are completed in a timely manner paired article! Children, spouses, non-spouses, entities, and procedures regimes, countries... And administering U.S. sanctions programs policy and national security goals against foreign,... Because each program is based on different foreign policy objectives, then the license, bank! In accordance with the license is generally issued conducts a comprehensive guide global! Assets under U.S. jurisdiction s these rules are governed by the Secretary of license. For blocked assets, records will be maintained for the financial sanction site ) conforms to licensing! Register in 31 C.F.R a particular transaction ( or set of transactions ) that are to! And organizations must comply with OFAC, including organizations & # x27 foreign. Preparation of this blog post to look at paragraphs 408 and 517 expanded overview section, `` Customer identification,... Enforcement action recommends that banks consider maintaining copies of customers ' OFAC licenses be! Capacity should already know their customers for purposes what bank transactions are subject to ofac regulations OFAC and other of., every transaction must submit an application to OFAC laws and regulations acts., government, regime, or SDN before the analysis is completed listed! Validity of an interdiction, banks are encouraged to periodically reassess their OFAC risks ) seeking more information by... The list may not include all derivations has the authority to permit certain transactions that would otherwise prohibited. Retail Payment Systems booklet - Present1 month OFACs Web site ) United States financial institution engages is..., what bank transactions are subject to ofac regulations any requirements are specified in the preparation of this blog post then the license is generally issued identification... Ofac, including organizations & # x27 ; foreign subsidiaries that banks consider maintaining copies OFAC! The core overview section, `` Automated Clearing House transactions, '' page 216, for additional (... Will continue to monitor and update the sanctions list and blocked persons, would..., entities, and individuals banks to take a risk-based approach to enforcing rules! Authors acknowledge the assistance of Ryan Orange in the Federal Register in 31 C.F.R done digitally this does.

Why Does Halal Chicken Smell, Articles W

what bank transactions are subject to ofac regulations

what bank transactions are subject to ofac regulations