With discussions to lift the coronavirus lockdown beginning, compliance considerations are becoming more important again. Below we have summarised what companies operating in Russia can do to manage some of the additional compliance risks caused by the coronavirus crisis:
Cautious approach to procurement procedures. To procure the equipment which is urgently needed to fight the coronavirus, the Federal Antimonopoly Service (FAS) has relaxed state procurement rules. In particular, such equipment can be procured from a single supplier if the usually required tender procedure would be time-consuming and unsuitable in the current situation1. In these cases, time pressure and vague requirements significantly increase the risk of violations of the law. There are already first reports of prohibited arrangements between suppliers of medical equipment2. Should there be mounting evidence of such violations, a wave of post-crisis investigations by the authorities is to be expected. Companies would therefore be well advised to perform at least brief compliance checks of sales under the simplified procurement procedures.
Carry out omitted KYC due diligence. Already prior to the coronavirus crisis, KYC checks of Russian companies were a time-consuming exercise, for example due to the regularly used offshore holding structures and the restriction of access to information relating to persons on the US or EU sanctions lists3. In many cases where companies had been forced to enter swiftly into agreements with new partners (e.g. to maintain a supply chain) KYC due diligence, in Russian practice widely regarded as a box-ticking exercise, may have been omitted. Omitted or incomplete KYC checks should be conducted now and properly documented. If results are unsatisfactory, measures to mitigate the risks for the company should be taken on a case-by-case basis.
Instruct home office employees. After the Russian President declared the time period from 30 March 2020 as non-working days4 and now that restrictive measures have been imposed at regional level5, many employees in Russia can only work from home. The working processes in Russia, which are typically based on strict control of employees and compliance with formal requirements, are not designed for remote work. Working from home creates new leeway which may not only affect efficiency but also considerably increase the risk of compliance violations. To address this risk, companies should expressly instruct their employees to comply with all compliance requirements when working from home. In addition, crucial control elements of the compliance management system (e.g. the issue of documents based on the four-eyes principle) should be adjusted to the new conditions.
Update employment documentation. Neither Russian labour law with its focus on compliance with formal requirements nor typical Russian employment agreements provide for the option of temporarily working from home6. In many cases, the current practice of working from home therefore violates mandatory Russian labour law. Such legal considerations may not have been top priority during the hectic shift to working from home at the beginning of the lockdown. Now, however, employment documentation should, to the extent possible, be brought in line with applicable law following the recently issued recommendations of the Russian Labour Ministry7 (adopting regulation for working from home, amending employment agreements etc.). Otherwise, a company may not be able to take appropriate disciplinary measures should employees working from home commit violations.
Prepare for whistleblower activity. Even though the Russian authorities have threatened to punish employers for salary cuts and redundancies during the coronavirus crisis8, the upcoming recession9 may force companies on the ground to take such measures. Since, based on our experience, such measures are often the main trigger for Russian employees to report violations10, the number of whistleblower reports will likely increase. The Russian authorities have reporting channels in place to receive such information11 and have been authorised to pay whistleblower rewards12. Companies should try to receive these whistleblower reports themselves through internal reporting channels. Cross-border reporting channels should be set-up in compliance with the Russian data localisation rules as the fines for violations of these rules have been significantly increased recently13.
Conduct urgent investigations. Currently, it cannot be predicted how long office premises in Russia will be closed due to non-working days and restrictive measures. Therefore, the question arises of to what extent internal investigations in Russian companies which are urgent can also be conducted remotely. The need for urgency may arise, for example, from Russian labour law which requires companies to take disciplinary measures against their employees within a certain time period after becoming aware of the violation14. Most of the typically required investigation steps, such as data collection, e-searches, interviews etc., can probably be conducted remotely, even though they may involve practical difficulties. Problems can be caused by Russian data protection law, according to which in certain cases the employee's consent to the processing of his or her personal data must be issued in writing (ink on paper).
Footnotes
1. https://fas.gov.ru/publications/20617.
3. See Corporate liability for corruption in Russia: Enforcement and developments 2018/2019.
4. http://www.kremlin.ru/events/president/news/63065 and http://kremlin.ru/events/president/news/63134.
5. E.g. for Moscow https://www.mos.ru/upload/documents/docs/39-YM(4).pdf.
6. See Russia: legal requirements for home office work.
7. https://rosmintrud.ru/employment/employment/785.
8. https://www.rbc.ru/society/21/03/2020/5e75e3619a79474c3ea1d877.
9. https://www.rbc.ru/economics/05/04/2020/5e889d2f9a79478c8de8f34e?from=from_main.
10. See Pitfalls during corporate investigations in Russia.
11. See https://rosmintrud.ru/uploads/magic/ru-RU/Ministry-0-106-src-1568817692.8748.pdf.
12. According to Resolution of the Ministry of Interior dated 6 June 2018 No. 356.
13. See Russian data localisation: welcome increased fines.
14. See Pitfalls during corporate investigations in Russia.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
