What Happened
The Justice Department announced Wednesday that its National Security Division declined to prosecute Robert Bosch GmbH after investigating an alleged scheme to send products and software made with equipment tied to U.S. technology to Huawei-linked entities on the Commerce Department's Entity List.
DOJ said Bosch voluntarily self-disclosed the misconduct, cooperated, remediated, and agreed to disgorge $11,430,098 in profits. DOJ also said part of that amount will be credited toward a $36,184,680 fine paid in a parallel civil action by the Commerce Department.
According to DOJ, between September 2020 and September 2024, two non-U.S. Bosch subsidiaries exported more than $70 million worth of foreign-produced sensor products and software to Huawei Technologies Co. Ltd. and affiliates without the required license or authorization. DOJ said the investigation found Bosch's trade compliance personnel were "ill-equipped" to provide accurate guidance on the relevant foreign direct product rule, leading to several years of violations.
Why This Matters
Export-control rules are the government's way of saying: please do not hand sensitive technology supply-chain goodies to companies we have already put on the big red nope list.
Corporate self-disclosure policies can make sense. If companies find violations, report them, cooperate, and fix the machine, prosecutors may decide a criminal case is not the best tool. That is the grown-up legal theory. The stupid part is that the underlying alleged compliance failure still reads like a multinational company discovering the instruction manual after the products already left the building.
The Dumb Part
The phrase "ill-equipped to provide accurate guidance" is doing heroic work here. This was not a corner store accidentally selling fireworks after 9 p.m. DOJ described more than $70 million in exports over several years to Huawei-linked entities, involving a rule specifically designed to control foreign-produced items tied to U.S. technology.
Congratulations to the compliance department for eventually finding the giant flashing sign. Unfortunately, the sign appears to have been behind a four-year pile of invoices.
The Bottom Line
Bosch got the benefit of self-reporting and remediation, which is exactly how DOJ wants the policy to work. Still, when national-security compliance depends on someone noticing the Huawei rule before $70 million in shipments, the system is less Fort Knox and more clipboard with a coffee ring.