Risk Center

Forced Labour in the Supply Chain: UFLPA & Screening

By Laurits Aae Mouritsen, Founder · July 2026 · 835-word read

This article is general information for procurement and compliance teams, not legal advice. Enforcement thresholds and evidentiary standards (e.g. the UFLPA rebuttable presumption) should be confirmed with qualified counsel for your specific situation.

Key takeaways

  • Forced labour has moved from a reputational concern to an enforced compliance risk: the U.S. UFLPA can block goods at the border on a rebuttable presumption, and the EU's LkSG and CSDDD make human-rights due diligence a legal duty.
  • The risk is usually deep in the supply chain — tier-2 and below — where annual questionnaires have the least reach and the least reliability.
  • Screening that works is continuous and signal-based: it watches local-language media, NGO reports, sanctions and watchlists, and audit findings for forced-labour indicators tied to specific suppliers.
  • Intellens monitors forced-labour, child-labour, modern-slavery, and human-trafficking signals mapped to the frameworks that matter — CSDDD, the OECD Guidelines, and the UN Guiding Principles — and resolves each to a named supplier.

Forced labour used to be treated as a reputational risk — something to manage if a journalist called. It is now an enforced compliance risk with direct commercial consequences. The U.S. Uyghur Forced Labor Prevention Act (UFLPA) lets Customs and Border Protection detain shipments on a rebuttable presumption that goods with links to the Xinjiang region are made with forced labour — the burden is on the importer to prove otherwise. In Europe, Germany's LkSG and the EU's CSDDD make identifying and addressing forced-labour risk a legal duty, and a forthcoming EU forced-labour ban will let authorities remove offending products from the market entirely.

For procurement, that changes the stakes. A forced-labour link is no longer only a brand problem; it can mean detained shipments, blocked market access, fines, and lost customers who have their own due-diligence obligations to satisfy.

Why forced labour is hard to see

The uncomfortable feature of forced labour is that it rarely sits at your tier-1 supplier, the one you have a contract and a questionnaire with. It sits further down — in the cotton, the polysilicon, the cobalt, the fishing vessel, the labour broker two or three tiers away from your purchase order. That is exactly where conventional due diligence is weakest: you may not even know those companies' names, let alone monitor them.

It is also a risk that self-reporting is structurally bad at surfacing. No supplier questionnaire returns "yes, we use bonded labour." The signal, when it exists, shows up somewhere else first: a local-language news report, an NGO investigation, an audit that quietly fails, a labour-broker named in a court filing, an entity added to a withhold-release or sanctions list. If nobody is watching those sources against your specific supplier network, the first time you hear about it is when a shipment is detained.

What effective forced-labour screening looks like

Screening that actually reduces exposure has three properties. It is continuous, because forced-labour findings appear between audit cycles, not on your schedule. It is signal-based, drawing on external sources — media in the local language, civil-society reporting, government watchlists, sanctions data, and adverse audit findings — rather than only on what suppliers say about themselves. And it is supplier-resolved, so a finding about a specific factory or labour broker becomes an alert about your exposure, not a headline you have to manually connect to your network.

This is the model Intellens is built on. It monitors for forced-labour, child-labour, modern-slavery, human-trafficking, and bonded-labour indicators and maps them to the regulatory frameworks that govern them — the OECD Guidelines for Multinational Enterprises, the UN Guiding Principles and Global Compact, and the EU CSDDD — so a signal is not just "bad news" but a flagged position against a duty you have to meet. Each alert resolves to a named supplier, and multi-tier scoring pulls sub-supplier exposure up into the score of the tier-1 you actually buy from.

From detection to a defensible record

Under the UFLPA's rebuttable presumption, and under LkSG and CSDDD due-diligence duties, being able to show what you did about a risk matters as much as detecting it. A screening alert that converts into an owned task — investigated, escalated, resolved, with the evidence and timeline preserved — is the artefact that answers a regulator or a customer's due-diligence questionnaire.

That is why detection and documentation belong in one system. When a forced-labour signal about a supplier is logged, actioned, and closed with the trail intact, the record you need for a UFLPA applicability review or a CSDDD audit already exists, rather than being reconstructed from email under deadline.

Where to start

Map your exposure to the known forced-labour hotspots for your commodities — cotton, polysilicon, cobalt, seafood, electronics — then put continuous, supplier-level monitoring behind those exposures rather than relying on an annual attestation. To see how Intellens surfaces forced-labour and human-rights signals across your supplier network, request a demo, or read related briefings in the Risk Center.

Frequently asked questions

What is the UFLPA and why does it matter for procurement?

The Uyghur Forced Labor Prevention Act is a U.S. law under which Customs and Border Protection can detain imports on a rebuttable presumption that goods linked to the Xinjiang region involve forced labour. The importer must provide clear and convincing evidence to the contrary, so procurement needs traceability and monitoring, not just supplier assurances.

Where in the supply chain does forced-labour risk usually sit?

Typically below tier 1 — in raw materials, components, and labour brokers two or three tiers removed from your direct supplier. That is why multi-tier visibility and continuous monitoring matter more than a tier-1 questionnaire.

How does continuous monitoring detect forced labour?

By watching external signals — local-language media, NGO and civil-society reports, government watchlists and sanctions data, and adverse audit findings — for forced-labour, child-labour, modern-slavery, and human-trafficking indicators, and resolving each to a specific supplier in your network.

Which regulations require forced-labour due diligence?

Among others: the U.S. UFLPA (import enforcement), Germany's LkSG, the EU CSDDD, and the forthcoming EU forced-labour product ban, alongside soft-law frameworks like the OECD Guidelines and the UN Guiding Principles on Business and Human Rights.

About the author

Laurits Aae Mouritsen is the founder of Intellens. His master's thesis at Copenhagen Business SchoolOpen Source Intelligence (OSINT) in Supply Chain Risk Management (Cand.merc.it., 2024) — built software to gather intelligence on hundreds of millions of companies and automatically analyse supplier risk across a supply network. Intellens is that research put into practice. More on the about page · LinkedIn.

Published 2026-07-08 · Back to the Risk Center