How Extraterritorial Jurisdiction Shapes Modern Anti-Corruption Law

Anti-corruption laws that reach across borders have become a defining feature of the global compliance landscape. Where once bribery and corruption were largely treated as local crimes prosecuted by local authorities, prosecutors now routinely pursue conduct that occurred halfway around the world. Companies in Sydney, Melbourne, or Perth can find themselves investigated by agencies in Washington, London, or Brasilia for transactions involving third parties on another continent. This jurisdictional expansion, often referred to as extraterritorial reach, has reshaped how multinational corporations structure their compliance programs and assess third-party relationships.

For Australian businesses, the implications are particularly significant given the country's deep commercial ties to Southeast Asia, the Pacific, and Africa. Resource companies operating out of Western Australia frequently engage counterparties in jurisdictions with higher corruption risks, while financial services firms in Sydney and Melbourne maintain correspondent banking relationships and investment portfolios that span the globe. Understanding how extraterritorial principles operate helps compliance teams anticipate enforcement patterns rather than react to them, which is the difference between a measured response and a full-blown crisis that brings the AFP or ASIC knocking on the door.

The legal doctrines underpinning extraterritorial jurisdiction are not uniform across jurisdictions, and that patchwork creates both complexity and opportunity. Some regimes assert jurisdiction over any act that touches their financial system, others over any act by their nationals or residents, and still others over any act that causes harm within their territory. Compliance officers who grasp these distinctions are better equipped to design controls that satisfy multiple regulators at once, and to advise executives on the realistic exposure tied to a specific deal.

Defining extraterritorial jurisdiction in anti-corruption law

Extraterritorial jurisdiction, in plain terms, refers to a state's authority to prescribe and enforce rules against conduct occurring outside its physical borders. In the anti-corruption context, this typically means prosecuting companies and individuals for bribery of foreign public officials that takes place overseas, even when the bribe is paid in local currency to a local official. The legal hook varies: nationality-based jurisdiction covers acts by the state's own citizens, territorial-based jurisdiction covers acts that produce effects within the state's territory, and protective jurisdiction covers acts that threaten the state's interests, such as the integrity of its financial markets.

A useful illustration is the difference between passive and active bribery. Passive bribery occurs when a foreign official solicits or accepts a bribe on the soil of the prosecuting state, even if the underlying commercial transaction is overseas. Active bribery, which is the focus of most anti-corruption statutes, involves an offer or payment made abroad. Both can trigger liability under a regime with extraterritorial reach, provided the statute explicitly contemplates such application or has been judicially interpreted to do so. Compliance counsel reading a new statute should look first for language about conduct "outside [the state]" or "by or to a national of [the state]," because those phrases typically signal the legislature's intent to project authority beyond its territory.

A practical point worth flagging is that extraterritorial application does not require the prosecuting authority to coordinate with local authorities. In practice, regulators often share evidence and coordinate informally, but the legal basis for prosecution remains the prosecuting state's own statute. That independence is what makes the doctrine so consequential for multinationals: a single act of bribery can simultaneously create exposure in several countries, each of which may pursue its own enforcement action. Companies that document their internal response carefully position themselves to argue for credit or cooperation across overlapping investigations.

The major international regimes shaping the field

Several flagship statutes have defined the modern extraterritorial landscape, and most Australian businesses with international operations will encounter at least one of them. The United States Foreign Corrupt Practices Act remains the most aggressive in geographic reach, asserting jurisdiction over any issuer listed on a US exchange, any domestic concern, and any act that uses US dollars or involves the US financial system. The United Kingdom Bribery Act 2010 extends even further, covering failure to prevent bribery by any associated person, anywhere in the world, where the relevant commercial organisation has a UK nexus.

Beyond these two, several other regimes have sharpened their extraterritorial tools. Brazilian authorities have increased scrutiny of foreign companies operating through Brazilian subsidiaries or joint ventures, and enforcement teams routinely conduct red flag analysis to determine whether historical misconduct will trigger successor liability. France's Sapin II and similar European frameworks assert jurisdiction over French nationals and certain cross-border conduct tied to French operations. Each regime carries different definitions, defences, and penalty structures, which means that a single transaction may be lawful in one country and a criminal offence in another. Layered onto these national regimes are international instruments such as the OECD Anti-Bribery Convention, which obliges signatory states to criminalise foreign bribery and has been instrumental in driving legislative reform across more than forty jurisdictions.

For Australian-listed entities, the interaction between domestic law and these foreign regimes is particularly important. Under section 70.2 of the Criminal Code Act 1995, the offence of bribing a foreign public official applies extraterritorially to Australian citizens, residents, and bodies corporate incorporated in Australia. A company listed in Sydney but operating in Lagos, Manila, or Port Moresby can therefore face Australian prosecution in addition to any local enforcement action, even if no part of the underlying conduct occurred on Australian soil. That dual exposure is a recurring theme in the prosecution files kept by the Commonwealth Director of Public Prosecutions.

Australia's approach to overseas bribery and corruption

Australia's domestic framework rests primarily on Division 12 of the Criminal Code, which covers bribery of foreign public officials, and on related offences dealing with money laundering and false accounting. The Australian Federal Police and the Commonwealth Director of Public Prosecutions have built a credible track record over the past decade, securing convictions against both individuals and corporate entities for conduct that occurred offshore. Recent enforcement priorities have focused on the resources sector, infrastructure projects, and the conduct of Australian intermediaries operating in high-risk markets.

Enforcement is not, however, solely a matter of federal prosecution. The Australian Securities and Investments Commission pursues civil penalty proceedings against listed companies and their officers for misleading disclosures tied to overseas misconduct, while the Australian Transaction Reports and Analysis Centre monitors suspicious transaction reports that may surface bribery through banking channels. State-level bodies, including the Independent Commission Against Corruption in New South Wales and its equivalents in other states, focus on domestic integrity but can interact with federal investigations where offshore funds flow back through Australian intermediaries. Many companies turn to practical resources, such as a structured due diligence checklist, to ensure their third-party screening holds up under scrutiny from any of these agencies.

A fair dinkum compliance posture in this environment looks beyond the letter of Division 12. It accounts for parallel exposure under the FCPA, the UK Bribery Act, and other regimes that Australian companies can fall foul of through their US listings, UK offices, or use of dollar-clearing banks. Companies should treat their Australian obligations as a floor rather than a ceiling, layering on stricter internal controls where the highest-risk regime demands them.

Spotting red flags in cross-border transactions

Effective third-party risk identification is the cornerstone of any defensible compliance program, especially where extraterritorial exposure is concerned. The most common enforcement actions against Australian companies have involved intermediaries, agents, and joint venture partners whose conduct the principal company either overlooked or chose not to examine too closely. A disciplined approach to red flags reduces both the likelihood of misconduct and the company's culpability when misconduct does occur.

Common warning signs to investigate during onboarding and contract renewal include:

Requests for payment to be routed through offshore accounts in jurisdictions with strict banking secrecy laws.
Vague or inflated commission structures that cannot be reconciled to documented services.
Reluctance by a counterparty to provide standard anti-corruption representations or audit rights.
Indications that an agent or consultant has personal or family ties to a foreign public official with decision-making authority over the relevant transaction.

Beyond the immediate transaction, companies should map the broader integrity context of each operating market. Country risk ratings shift over time, and a jurisdiction that seemed routine five years ago may have deteriorated. Regulatory frameworks change too; recent updates to corporate liability in Ukraine have introduced new exposure for international groups with subsidiaries in that country. Compliance teams that integrate these external shifts into their internal risk assessments demonstrate the kind of forward-looking diligence that regulators expect to see.

Building a compliance program that stands up anywhere

A program that holds up under extraterritorial scrutiny rests on a handful of practical pillars. Each pillar should be embedded in policy, evidenced in training records, and tested through monitoring and assurance. Compliance leaders in Australia often find that the hardest pillar is consistency, because the program must apply the same way in a Sydney office, a Perth warehouse, and a project site in a remote location overseas.

Core elements of an extraterritorially robust program include:

A written anti-corruption policy applicable to all directors, officers, employees, and contractors.
Risk-based due diligence on every third party, with enhanced procedures for higher-risk relationships.
Confidential reporting channels accessible from every operating location and feeding a centralised intake function.
Tailored training that reflects each role's risk profile, from procurement teams to government affairs.

Beyond these pillars, internal investigations should be conducted promptly, with findings reported up to the board or a dedicated committee. None of these elements is novel, but the discipline with which they are applied separates companies that receive cooperation credit from those that face maximal penalties. Treat each enforcement action as a stress test of the program, and use the lessons to tighten controls rather than to file them away.

A practical takeaway for compliance leaders across Australia, whether they're based in a Sydney head office or running regional operations from Perth or Brisbane, is to map their extraterritorial exposure before regulators do. Walk through the company's footprint, identify every jurisdiction where a single act of bribery could trigger multiple prosecutions, and prioritise controls where the risk stack is highest. The cost of preparation is always lower than the cost of remediation, and a documented program is the single strongest evidence of good faith that a company can put before a court.