Geopolitics for the Legal Profession Weekly Briefing — 2026-05-21

Internal briefing for Inside Practice. Source rule: original/source links only.

Executive readout

This week’s geopolitics x legal signal is that economic-security law is becoming operationally granular. Sanctions enforcement is moving from lists to supply-chain proof, investment screening is widening across AI and critical sectors, and digital sovereignty is becoming a live clause in AI, cloud and cybersecurity work.

Sanctions & Export Controls

OFAC’s $275 million Adani settlement turns origin proof into board-level sanctions evidence

OFAC’s settlement with Adani Enterprises is this week’s clearest enforcement signal: a non-U.S. company paid $275 million after Iranian-origin LPG moved through high-risk trading and shipping channels and 32 U.S.-dollar payments were processed through U.S. financial institutions. For law firms and in-house teams, the lesson is that certificates of origin, vessel behaviour, pricing anomalies and counterparty warranties must be treated as evidence to test, not paperwork to file. Source: OFAC: OFAC Enforcement Release: Adani Enterprises Limited.

UK third-country processed oil controls make refinery attestations a sanctions workflow

The UK’s new Russia measures came into effect on 20 May 2026 and prohibit importing HS 2710 oil products processed in a third country from Russian-origin HS 2709 crude, alongside related technical assistance, financial services, funds and brokering. The guidance gives counsel a practical checklist: 60-day refinery evidence, supplier and refinery attestations, contractual assurances, retrospective document readiness and HMRC enforcement exposure. Source: GOV.UK: UK guidance on third-country processed oil product measures.

UK general licences create a narrow energy compliance bridge

The UK issued general licences covering certain sanctioned processed oil products and maritime LNG transportation, including diesel and jet fuel under licence GBSAN0004 and specified Sakhalin-2 and Yamal LNG movements under a licence expiring 1 January 2027. Energy and trade counsel should treat these licences as controlled exceptions with recordkeeping, notification and scope discipline, not as broad relief from Russia sanctions. Source: GOV.UK: UK General Trade Licence for sanctioned processed oil products.

Middle East counterterrorism sanctions now reach humanitarian-flotilla risk

Treasury’s action against flotilla organisers and Muslim Brotherhood-linked networks supporting Hamas puts financial institutions, nonprofits and sanctions counsel on notice that humanitarian-adjacent activity can still trigger counterterrorism exposure. The release explicitly frames flotillas organised by or supporting designated parties as a significant compliance risk and reiterates blocking, 50 percent ownership and secondary-sanctions consequences. Source: U.S. Treasury: Treasury targets flotilla organizers and Muslim Brotherhood networks supporting Hamas.

The EU’s 20th Russia package becomes an anti-circumvention operating manual

DLA Piper’s update shows the EU’s 20th Russia package moving beyond listings into anti-circumvention mechanics, including targeted restrictions on high-risk goods destined for Kyrgyzstan, more than 60 Annex IV additions, managed-cybersecurity restrictions, bank and crypto controls and maritime measures. The legal significance is that trade, payments, cyber services and shipping now need a joined-up Russia-risk map. Source: DLA Piper: DLA Piper: 20th package of EU sanctions against Russia.

Trade & Industrial Policy

The COINS Act makes outbound investment a permanent statutory discipline

Weil’s analysis of the COINS Act shows outbound investment screening shifting from an executive-order programme into a statutory regime, with Treasury implementing regulations due by 13 March 2027. Investors and counsel should prepare for broader countries of concern, new technology sectors such as high-performance computing and hypersonics, expanded knowingly-directing rules and LP-side contractual assurances. Source: Weil: Weil: The COINS Act and expanded outbound investment restrictions.

China’s supply-chain regime creates legal-collision risk for multinationals

Kobre & Kim’s 21 May analysis says China’s April 2026 supply-chain security rules can penalise conduct viewed as harmful to industrial and supply-chain stability, including conduct driven by foreign sanctions, forced-labour, export-control or investment-screening obligations. That puts legal teams in the collision zone between U.S., UK and EU compliance demands and Chinese countermeasures or blocking-style risk. Source: Kobre & Kim: Kobre & Kim: China’s new supply chain regime.

AI export strategy now has to answer sovereignty objections

CNAS argues that the American AI Exports Program will not succeed if it treats foreign AI sovereignty concerns as a messaging problem. For legal teams advising AI exporters, cloud providers and governments, the work now includes confidential computing, open-weight options, local partners, resilience commitments and a clearer distinction between localisation and continuity under crisis. Source: CNAS: CNAS: American AI exports need a sovereignty solution.

Data, AI & Digital Sovereignty

AI-powered cyber defence collides with cross-border data restrictions

IAPP’s analysis of AI-discovered vulnerabilities argues that defenders need to share cybersecurity data across borders quickly, while data sovereignty and localisation laws may restrict that sharing. Legal teams advising AI, cyber and incident response should build defensible transfer pathways, cybersecurity exceptions and safe-harbour arguments before a crisis creates the need. Source: IAPP: IAPP: AI and cross-border cybersecurity data flows.

Digital sovereignty is becoming a procurement and architecture clause

CNAS’s sovereignty frame is useful for legal departments because it moves AI infrastructure negotiations beyond where data sits. The legal questions now include who controls encryption and operational access, whether confidential computing is required for sensitive workloads, whether open-weight models are acceptable and whether local partners are necessary for regulatory legitimacy. Source: CNAS: CNAS: American AI exports need a sovereignty solution.

Foreign Investment & National Security

EU investment screening moves toward mandatory coverage of strategic sectors

The European Parliament approved revised rules for mandatory member-state screening of foreign investments in defence, semiconductors, AI, critical raw materials and financial services by 508 votes to 64, with 90 abstentions. Deal counsel should note the intra-EU look-through rule for investors ultimately owned by non-EU persons and the 18-month application period after Council approval and entry into force. Source: European Parliament: European Parliament: protecting EU strategic sectors from risky foreign investments.

Japan’s FEFTA bill points to a CFIUS-style review culture

Anderson Mori & Tomotsune’s update on Japan’s FEFTA amendment bill highlights a proposed investment-screening committee co-chaired by the Ministry of Finance and National Security Secretariat, with operations expected from July 2026. The bill would codify mitigation measures, regulate indirect acquisitions and create post-incident powers with a five-year retroactive period, making Japan a more active national-security deal jurisdiction. Source: Anderson Mori & Tomotsune: AMT: Japan FEFTA amendment bill regarding inward direct investment.

Finland’s planned FDI overhaul brings data centres and greenfield projects into scope

CELIS reports that Finland’s planned FDI reform would extend screening to classified information, ICT services, critical infrastructure, security of supply, data centres, strategic raw materials and certain greenfield investments. For deal teams, the noteworthy features are mandatory filings across covered sectors, review of all non-Finnish acquirers, 10 percent foreign-influence thresholds and fines up to EUR 10 million or 10 percent of global turnover. Source: CELIS Institute: CELIS Update on Investment Screening and Economic Security.

CFIUS efficiency becomes an economic-security competitiveness issue

CSIS’s analysis of Treasury’s Known Investor Program frames investment screening as both a national-security gate and a bottleneck for allied capital. If the pilot can pre-clear lower-risk repeat investors without weakening scrutiny of sensitive technologies, CFIUS reform may become a deal-timing and industrial-policy issue rather than a purely defensive review process. Source: CSIS: CSIS: Foreign Investment Attraction and CFIUS Known Investor Program.

Firm Posture & In-House Response

Geopolitical risk is now a standing board agenda item, not an annual memo

Ankura’s boardroom analysis captures the shift from episodic geopolitical monitoring to continuous scenario planning across sanctions, supply chains, cyber, trade and crisis response. For law firms and in-house teams, the practical work is building escalation protocols, contractual shock absorbers, diligence on substitute suppliers and rehearsed crisis decision rights before a flashpoint forces action. Source: Ankura via JD Supra: Ankura: Geopolitical Risk, the Latest Boardroom Agenda.

Upcoming Events

• Inside Legal Economics — New York · Jun 25 2026: relevant for sanctions, tariffs, supply-chain disruption and investment-screening effects on matter economics and client demand.
• Legal AI: New York — Nov 11–12 2026: relevant for AI export controls, data sovereignty, cloud architecture and cross-border AI deployment.
• Legal AI: London — Dec 1–2 2026: relevant for EU and UK AI governance, investment screening, digital sovereignty and trans-Atlantic platform risk.

Item count: 15.