
Using BHRRC Guides for assessing sanctions-related human rights risks in mining operations
Identify the sanctions regimes affecting your mining project, then apply BHRRC Guides to flag sanctions-related human rights risks across operations and partner networks.
Use the guides to structure a due diligence workflow that screens contractors, suppliers, and joint ventures, and to log findings in a risk matrix with clear owners and evidence trails.
The Guides cover areas such as freedom of association, forced labor, child labor, land rights, and consent of affected communities, plus security practices and community impacts.
Integrate sanctions screening into procurement and risk-management processes by tying each finding to a remedy plan, setting deadlines, and assigning responsibility to a named owner.
Maintain a single, continually updated repository that links policy references from the Guides to evidence collected on site, supplier attestations, and monitoring results, enabling fast escalation when a red flag appears.
Implications of Rio Tinto–Rusal move for Queensland-based assets with sanctions compliance
Recommendation: Immediately map all Queensland-based assets for sanctions exposure linked to the Rio Tinto–Rusal move and remove any relationships with sanctioned entities or their affiliates.
Rio Tinto's shift with Rusal heightens sanctions risk across Queensland's mining operations, especially for alumina refining, bauxite supply chains, logistics, and finance. Conduct a full inventory of assets, contracts, and counterparties to identify direct or indirect ties to sanctioned persons or jurisdictions.
Focus areas include procurement networks, transport and shipping arrangements, financial channels (letters of credit, payments, insurance), and joint ventures or license-based activities that could connect to sanctioned entities. Map these links for every site, from ore supply points to shipping hubs along the Great Barrier Reef corridor.
Controls include implementing strict sanctions-screening for all new and existing counterparties. Use automated screening against US, UK, EU, and Australian sanctions lists, plus other relevant prohibitions. Require that any counterparty flagged for sanctions be suspended from onboarding and existing contracts paused pending legal guidance.
Contracts should include explicit termination rights if counterparties become sanctioned or their ownership changes to a sanctioned entity; require ongoing compliance attestations and limit payments to licensed, verifiable transactions. Maintain auditable records for at least five years.
Financing requires reviewing all lines of credit and payment rails; require confirmations that suppliers are not under sanctions or tied to sanctioned individuals. Consider shifting to alternative, compliant suppliers and maintaining buffer stock to avoid potential disruptions.
Operations and human rights risk management demand ensuring worker safety and supplier compliance with labor standards; require suppliers to uphold grievance mechanisms and freedom of association. Audit for labor-rights risks in the supply network and ensure community rights are respected in affected regions.
Governance should appoint a sanctions-compliance lead at the asset level and report to the risk committee quarterly; align controls with internal risk-management frameworks and external reporting. In Queensland, coordinate with state regulators and national sanctions regimes where applicable to ensure consistent enforcement.
Implementation milestones include mapping assets and counterparties within 30 days; implementing screening rules within 60 days; training procurement and logistics staff within 90 days; conducting the first internal audit within 120 days; and presenting findings to the board with documented mitigation actions guided by BHRRC templates.
Guidance from the BHRRC Guides helps identify potential human rights risks tied to sanctions navigation in mining. Document risk assessments, mitigation actions, and stakeholder engagement steps to support responsible operation and community trust.
Remediation steps if exposure is confirmed involve reworking contracts, divesting or terminating ties with sanctioned affiliations, and reallocating materials to compliant suppliers. Maintain a crisis communication plan to address investor and community concerns while coordinating with legal and compliance teams for timely decisions.
Step-by-step approach for mapping plus mitigate supply chain risks under sanctions
Begin with a live map of tier-1 suppliers and contractors, then screen each entity against sanctions lists from OFAC, EU, UK, and UN, recording hits in a central risk register. Build the map in a spreadsheet or a lightweight database, with fields: legal name; aliases; country of operation; product or service; role in the supply chain; sanctions status; license requirement; last screening date; and risk score. Set a monthly refresh for high-risk jurisdictions and quarterly checks for others, with automated alerts for new designations.
Mapping steps
Identify critical inputs used in mine operations: ore concentrate, chemical reagents, equipment, transport services, and logistics providers.
Collect core data from internal systems: supplier legal name, tax ID, country of incorporation, parent entity, and site locations.
Cross-check each entity against sanction lists: OFAC SDN and blocked entities, EU consolidated list, UK Sanctions List, UN Sanctions List, and sectoral measures tied to mining and metals. Record match type and licensing status.
Assess geographic and product risk: map supplier origins to the country risk profile, consider export controls, and track whether inputs originate from areas with documented human rights concerns in mining. Compute a risk score per supplier (range 1-5) and aggregate at product level.
Verify data with primary sources: corporate registry filings, license documents, and direct confirmations from suppliers. Update the risk register with screening date and responsible owner.
Define screening rules and actions: if a match is confirmed, suspend purchase orders until a license is obtained or supplier divests the sanctioned connection; flag near-miss scenarios for senior review.
Integrate with procurement and finance systems: enable automatic alerts on new sanctions designations and enforce blocking in ERP or e-procurement for affected lines of business. Maintain an auditable trail for audits and due diligence.
Mitigation actions
Develop alternative sourcing plans for high-risk inputs: pre-qualify a finite set of compliant suppliers with transparent ownership and traceable origin. Maintain capacity to switch within 30-60 days for metals and consumables used in critical processes.
Strengthen supplier due diligence: implement enhanced due diligence for new vendors, including beneficial ownership checks, sanctions screening at onboarding, and ongoing monitoring every quarter.
Improve traceability: require provenance documentation for key minerals, establish chain-of-custody records, and require suppliers to report material origin and processing steps.
Enhance license and exemption management: track license requirements, renewal dates, and authorized volumes; build a workflow that pauses procurement if license limits are reached or if not granted.
Engage with regulators and industry bodies: participate in sanctioned-entity alerts, request updates on designation changes, and align with BHRRC guides for human rights risk indicators in mining.
How to evaluate plus triangulate news with BHRRC resources alongside databases
Use a three-source triangulation workflow: pull the latest BHRRC news and sanctions alerts, compare NGO and company disclosures, and verify items against government sanctions databases.
Define scope and timing: a 90-day window for new items, focus on mining operations and principal jurisdictions; prioritize signals tied to copper, cobalt, or lithium supply and to facilities in high-risk areas.
Source gathering: extract from BHRRC News and Alerts, BHRRC Sanctions guides, and related company statements; collect NGO reports, regulatory filings, and court actions; retrieve sanctions entries from official databases.
Triangulation method: for each item, capture the core facts: date, country, company, facility, alleged impact on rights; compare details across sources; assign corroboration level (single, dual, or multi-source); document any discrepancies.
Reliability criteria: prefer primary documents (sanctions lists, court orders); when relying on media or NGO reports, require at least two independent sources and check dates; flag items with gaps or conflicting facts for follow-up.
Databases alignment: link BHRRC notes to sanctions IDs; maintain a simple field for source credibility and last check date; export a concise data line per incident with fields: incident_id, date, country, commodity, company, facility, sanction_id, source_summary, corroboration_count, data_quality; update weekly.
Workflow example: if BHRRC reports a new enforcement action against a mining operator in Country X, pull OFAC, EU, and UK lists; check UN actions; search local court records; compare with NGO investigation; rate risk and propose actions such as enhanced due diligence or supplier substitution.
Practical tips: keep a citation trail; create a shared data map that links each incident to its sources; use BHRRC export features to populate your risk register; schedule a quarterly reconciliation with the compliance and procurement teams.
This approach strengthens sanctions-related human rights risk assessment by linking verified events to documented controls, enabling proactive risk mitigation and informed decision-making in mining operations.
Available tools: checklists, templates, and practical contact points
Start with the BHRRC Sanctions Risk Snapshot checklist and tailor it to your mining site, then add templates and contact points as you expand the assessment.
Checklists and templates
- Sanctions-screening of counterparties and service providers: verify names against sanction lists, watchlists, and involved entities; note any positive hits and required actions (temporary suspension, enhanced due diligence, or termination).
- Beneficiary ownership and control: confirm ultimate beneficial owner information for suppliers and contractors; flag opaque ownership structures.
- Trade controls and dual-use goods: confirm end-use and end-user clarity; validate export controls compliance for items on dual-use lists.
- Financial flows and payment risks: screen for restricted financial channels, correspondent banks, or restricted jurisdictions; document red flags.
- Supply-chain and site exposure: map critical suppliers to sites and assess exposure to sanctioned regions or individuals.
- Contract clauses and documentation: ensure sanctions clauses, termination rights, and cure periods are present in key agreements.
Templates
- Sanctions risk assessment template: fields for site, supplier, country, product, risk rating, controls, owner, and review date; use a 5-point risk scale aligned with your policy.
- Vendor due diligence questionnaire: standard questions on ownership, licensing, supply chain traceability, and past sanctions issues; request supporting documents and audit rights.
- Sanctions clause template for contracts: include compliance with sanctions lists, duties to notify changes, and termination for sanctions violations; provide a sample clause and guidance notes.
- Training record template: track participant names, dates, topics covered, and proficiency; attach certificates and refresh reminders.
- Incident report form: capture potential sanctions breaches, root cause, corrective actions, and follow-up deadlines; route to governance for decision.
Practical contact points
- BHRRC platform Help Center: use the Guides relevant to mining sanctions to navigate the tools and ask questions via the integrated support widget.
- Regional sanctions focal points: contact the compliance lead in your country or region; keep their details in your risk register for updates on lists and policy changes.
- Legal counsel and in-house compliance: maintain a standing list of who handles sanctions queries and how to escalate issues.
- Industry associations and NGOs: join coalitions focused on human rights and supply chain transparency to access shared resources and peer support.
- Regulatory authorities: consult national trade or export control agencies for jurisdiction-specific requirements; log inquiries and responses for audit trails.
Regulatory expectations for extractives under sanctions alongside human rights duties
See also: Deal Scope.
See also: Christodoulos Patsalides.
Screen all counterparties and projects against current sanctions lists before engagement, and embed this check in a formal policy with quarterly refreshes and automated alerts.
Regulatory framework for sanctions and human rights duties
Regulatory framework reinforces the obligation to avoid sanctioned entities and blocked funds, with licensing conditions and reporting duties. Operators screen against OFAC's Specially Designated Nationals (SDN) list, the EU Consolidated List, the UK Sanctions List, Canada's Consolidated List, and Australia's consolidated sanctions lists. Prohibited activities include facilitating restricted transactions, conducting business with designated persons, or moving blocked assets. Licenses may require ongoing due diligence, contractual restrictions, and immediate suspension of work if a match is found; regulators may revoke licenses or impose fines for failures, and corporate leadership can face penalties.
Human rights duties align with UN Guiding Principles on Business and Human Rights and OECD Guidelines. Mines and suppliers must identify and assess rights risks linked to sanctions exposures, such as impacts on communities' access to water, health services, housing, livelihoods, and freedom of assembly. Due diligence should be risk-based, proportionate, and time-bound, with remediation commitments and grievance mechanisms. Documentation and audit trails support accountability and demonstrate alignment with rights-based standards across procurement, financing, and contract management.
Practical steps for compliance in mining operations
See also: Cyprus IP Box Regime: Complete Guide to Qualifying IP.
Policy and governance: Establish a board-approved sanctions-compliance policy that integrates with environmental and human rights policies, designate a senior compliance owner, and set clear escalation paths for matches to designated entities.
Screening and onboarding: implement automated screening against official lists (OFAC, EU, UK, Canada, Australia); refresh data weekly or more frequently; require third-party attestations that they are not designated; maintain a sanctions-log with timestamped checks.
Contracts and licensing: insert sanctions representations and warranties; include right to suspend operations and terminate contracts for matches; require suppliers to notify of any designation and provide evidence of compliance; seek licenses where applicable before continuing work in high-risk jurisdictions.
Human rights due diligence integration: embed sanctions risk into the UNGPs-based due diligence at each project phase; use BHRRC Guides to identify rights at risk; align with EITI reporting requirements; set remediation commitments for affected workers and communities.
Training and awareness: run targeted training for procurement, contracts, and field teams; refresh content annually and after list updates; provide quick-reference materials describing sanctions triggers and steps.
Incident response and remediation: maintain a sanction-match incident protocol, including notification to authorities, halt of relevant activities, supplier remediation plans, and worker protection measures; document root causes and preventive actions.
Documentation, audits, and reporting: keep screening logs, due diligence files, license copies, contracts, and remediation records for the period required by law; prepare annual compliance reports for internal governance and regulators; conduct periodic third-party assurance where feasible.
Using BHRRC Guides: apply the BHRRC Guides to map sanctions exposures to specific human rights risks in mining operations, then update risk assessments when sanctions lists change; integrate findings into due diligence and remediation plans.
How to report concerns plus escalate issues through the Business Human Rights Resource Centre
Submit your concern via the BHRRC online form and flag it for urgent review if there is an immediate risk to people or communities.
Prepare a concise description in plain language, attach supporting documents (photos, contracts, internal communications), and include precise identifiers: the mining company name, site location (lat/long if available), country, incident date range, and affected groups.
In your report, specify the type of impact: safety hazards, forced labor, child labor, environmental harm, or community rights violations; list stakeholders affected and any actions already taken by the company or local authorities.
Submission and escalation process
After submission, you will receive an automated confirmation with a unique case reference. A BHRRC reviewer will triage the report and decide on next steps; you will be notified of any changes to the case status and may be asked to provide additional evidence.
To escalate, mark the report as urgent and request direct outreach to the mining sector team; if the issue remains unresolved, request escalation to senior researchers or the organization’s governance team. Parallel options include sharing the report with local regulators, labor inspectorates, or human rights ombudspersons where applicable, and consulting with your own legal counsel on data protection and witness safety.
Key data to track and a sample table of steps
| Step | Action and data to include | Timing and notes |
|---|---|---|
| Prepare evidence | Company name, site, country, incident dates, description, evidence types (photos, documents, emails), contact details | Keep originals; translate if needed |
| Submit report | Online form data, attachments, explicit request for urgent review if risk exists | Obtain case reference immediately |
| Acknowledgement and triage | Case reference, initial assessment, requested clarifications | Within 1–3 business days |
| Follow up | Additional evidence, updates on status, liaison contacts | Check regularly; document all interactions |
| Escalation if needed | Rationale for escalation, authorities or stakeholders identified | Within policy timelines; escalate responsibly |
Ready to set up your Cyprus company?
Our specialists guide you through the entire process — registration, tax setup, and bank account opening.
Request a consultation →