1 hour ago
2
Robert Bosch GmbH just wrote one of the more expensive apology letters in recent corporate memory. The German engineering conglomerate has agreed to pay $36.18 million in civil penalties to the US Department of Commerce’s Bureau of Industry and Security after shipping products to Huawei Technologies without the required licenses.
The shipments totaled approximately $72.4 million in value and included Micro-Electro-Mechanical Systems (MEMS) sensors and automotive software. They occurred on more than 100 separate occasions between September 16, 2020, and September 26, 2024.
What Bosch actually did
Huawei has been on the US Entity List since 2019, which means any company shipping US-origin technology, or technology produced using certain US tools and know-how, needs an explicit license from BIS.
The violations fall under the Foreign Direct Product Rule, a regulation that extends US export controls beyond American borders. Even if Bosch is a German company making products in non-US facilities, the rule can still apply if the underlying technology has a sufficient American nexus.
The company maintains the violations were unintentional. Given that they happened over 100 times across four years, “unintentional” is doing quite a bit of heavy lifting in that sentence.
The full cost of compliance failure
The $36.18 million civil penalty to BIS is only part of the financial damage. Bosch also settled with the Department of Justice for disgorgement of profits totaling roughly $11.43 million. Combined, the company is on the hook for approximately $47.6 million.
The DOJ chose not to pursue criminal charges, marking the first corporate declination under its relatively new Corporate Enforcement Policy. That policy is designed to incentivize companies to self-disclose violations, cooperate fully with investigators, and demonstrate meaningful remediation efforts.
Bosch voluntarily disclosed the violations to regulators and subsequently hired 66 additional trade compliance staff to bolster its internal controls.
Why this matters beyond Bosch
The math here is instructive. Bosch shipped $72.4 million worth of products and is now paying back roughly $47.6 million in penalties and profit disgorgement. That’s a 66% haircut on the revenue generated from those transactions, before accounting for the cost of hiring 66 new compliance employees, the legal fees, the reputational damage, and the executive attention consumed by a multi-year investigation.
The Foreign Direct Product Rule makes geography largely irrelevant. A German company, shipping from non-US facilities, still fell within the regulatory perimeter.
The DOJ’s Corporate Enforcement Policy creates a formal incentive structure for self-disclosure, effectively turning companies into their own enforcement mechanisms. Firms that discover violations now face a stark choice: disclose and cooperate for leniency, or risk criminal prosecution if the government finds out on its own.
Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.
English (US) · 