UFLPA & Forced-Labour Compliance: Due Diligence for Importers Buying from China

Forced-labour enforcement does not behave like the rest of customs. A tariff question has an answer you can look up: find the code, read the rate, price it in. A forced-labour question has no lookup. It asks you to prove something about a supply chain you have never seen, on a timetable set by whoever stopped your container.

This guide covers what the Uyghur Forced Labor Prevention Act requires of a US importer, what the rebuttable presumption means when it lands on your cargo, how supply-chain tracing works, and what a mid-size importer can do before a shipment is detained rather than after.

This is practitioner guidance, not legal advice, and UFLPA enforcement posture changes — the published guidance, the priority sectors and the entity list have all been revised since the Act came into force. Treat it as a working framework and confirm the current position with trade counsel.

1. What the UFLPA is

The Uyghur Forced Labor Prevention Act was signed into law in December 2021 and applies to goods entered into the United States on or after 21 June 2022. It sits on top of a much older provision — Section 307 of the Tariff Act of 1930, codified at 19 U.S.C. § 1307 — which has always prohibited the import of goods mined, produced or manufactured wholly or in part by forced labour.

What the UFLPA added was not a new prohibition. It added a presumption, and that is the whole of the difference.

Under Section 307 alone, US Customs and Border Protection had to build the case: investigate a producer, issue a Withhold Release Order against it, detain goods traceable to it. Under the UFLPA, for goods connected to the Xinjiang Uyghur Autonomous Region, CBP does not have to build that case. The connection is sufficient, and the evidentiary burden moves to you — before your goods are released, not after.

2. The rebuttable presumption in practice

The presumption is that goods mined, produced or manufactured wholly or in part in Xinjiang — or by an entity on the UFLPA Entity List — were made with forced labour, and are therefore prohibited from entry.

"Rebuttable" means the statute leaves a door open. It is a narrow door, and it opens from your side only. Two quite different responses get confused constantly:

Applicability. You demonstrate the goods are outside the scope of the Act — no Xinjiang input, no listed entity anywhere in the chain. That is a documentation exercise rather than a legal argument, and it is the one you can prepare for in advance.

Exception. You accept the goods are in scope and ask for the presumption to be overcome. The statutory standard is high: full compliance with CBP's published guidance, complete and substantive responses to CBP's inquiries, and clear and convincing evidence that the goods were not produced with forced labour. Exceptions that are granted are reported to Congress.

Documentation assembled before a shipment moves is therefore worth far more than any argument constructed after a detention notice — neither route is really open to a company that has never mapped its chain.

3. The obligation attaches to the importer, not the supplier

The importer of record answers for this. Not the factory, not the trading company, not the freight forwarder, not the sourcing agent. If a container is stopped, the party asked to produce a supply-chain map is the party whose name is on the entry — for most small and mid-size brands, the brand itself.

• A supplier's assurance is evidence, not a defence. A letter saying "we use no Xinjiang cotton" belongs in the file. If it is wrong, the goods are still inadmissible and the problem is still yours.
• An intermediary does not move the obligation. A Hong Kong trading company or a sourcing agent adds a tier between you and the information you will be asked for. It does not add a tier between you and the liability.
• Incoterms do not reassign it. DDP allocates cost and risk between buyer and seller; it does not transfer a statutory obligation resting on the importer of record. (See the China import tariffs guide for what Incoterms do shift.)
• Indemnities compensate; they do not clear goods. An indemnity against a Chinese supplier is worth what you can enforce, and enforcing one does not release a detained container.

4. Any input, any tier — the problem is upstream

The most common misunderstanding is that this is a question about where your factory is. It is not — it is a question about where the material came from. "Wholly or in part" means a single input, at any depth in the chain, brings the finished good into scope.

The exposure concentrates in commodity inputs traded, blended and resold several tiers below the assembler: cotton and cotton yarn in apparel, home textiles and packaging; polysilicon in solar modules; aluminium in extrusions, castings and hardware. Xinjiang is a significant producing region for several of these. The statute named cotton, tomatoes and polysilicon as high-priority enforcement sectors, and the Department of Homeland Security has since added others — check the current published strategy, not a list you saved two years ago.

These inputs are also fungible. Cotton is baled, blended and spun; aluminium ingot is melted and cast. By the time material reaches your tier-1 factory it may have passed through a spinner, a trader and a mill your supplier has no relationship with and cannot compel to answer questions.

Why "our factory is in Guangdong" is not an answer

Ask a supplier about forced-labour exposure and, in our experience, the first reply is geographic: our factory is in Guangdong, we have never been to Xinjiang, here is our BSCI report. Every part of that can be true, and none of it answers the question.

The question is not where the sewing happens. It is where the yarn came from, and before that the cotton. A social-compliance audit of the tier-1 site — BSCI, SMETA, ICTI — covers conditions at that site, not a spinning mill three tiers upstream. A geographic answer usually means the supplier has not yet been asked in a form they can act on, rather than being a red flag in itself.

5. The UFLPA Entity List as a mechanism

The UFLPA Entity List is maintained by the Forced Labor Enforcement Task Force, chaired by the Department of Homeland Security, and published in the Federal Register, with a consolidated version available from DHS. It is a live document: the list you screened against last quarter is not necessarily the list in force today.

It is organised around statutory categories rather than industries — broadly: entities in Xinjiang that mine, produce or manufacture goods with forced labour; entities working with the regional authorities to recruit or transfer workers out of Xinjiang; entities exporting goods produced by those entities to the United States; and entities sourcing material through state labour-transfer or "poverty alleviation" programmes.

Two practical points — and we deliberately do not reproduce entries here, so screen against the published source. First, a listed entity anywhere in your chain triggers the presumption, not only a listed tier-1 supplier, which helps you only if you know who is in your chain. Second, absence from the list proves nothing: it is a signal of risk, not a clearance. A Xinjiang input from an unlisted producer is still in scope, because scope is geographic as well as entity-based.

6. What supply-chain tracing actually means

Tracing is the part importers underestimate. It is not a questionnaire but a documentary chain connecting the finished good in your container back to the raw material, tier by tier, with a transaction record at each hop.

Start from the bill of materials. For every material line, answer three questions: who supplied it to my tier-1 factory, who supplied them, and where was the raw input produced. Typical chains:

• Textiles: garment factory → fabric mill → spinning mill → gin → farm or growing region
• Metals: assembler → extruder or caster → smelter → refinery → mine
• Solar: module assembler → cell maker → wafer → ingot → polysilicon plant

At each hop the evidence is ordinary commercial paperwork, not certificates:

• purchase orders, commercial invoices and payment records between the two tiers
• packing lists, bills of lading, warehouse in/out records
• production records reconciling input quantity to output quantity for the batch
• mill, lot or heat certificates identifying the material and its origin
• a signed declaration from each tier naming its own upstream source

The reconciliation carries the weight. Documents showing a mill bought the right material are weaker than documents showing it bought enough of it, in the right period, to have produced your order — with the quantities tying out.

7. What an evidence package generally contains

There is no single official template, and packages are built around the specific commodity. What they tend to have in common:

• A supply-chain map for the product, naming every entity from your tier-1 supplier back to the raw material, with addresses and roles.
• The tracing documents themselves, at every hop, tied to the specific purchase order and shipment rather than offered as generic samples.
• Your own compliance programme, in writing: policy, supplier code of conduct, the contract clauses you use, questionnaire responses, screening records, training, and your process for handling a supplier that fails.
• Third-party evidence where it exists: audit reports whose scope explicitly covers forced-labour indicators, and — where the commodity supports it — isotopic or genetic origin testing, used for cotton in particular.
• Facility-level evidence for sites in scope: wage and hours records, recruitment practices, freedom of movement, retention of identity documents, and whether workers were placed through a state labour-transfer scheme.

Two honest points. Chinese-language records need certified translation, and the volume is larger than people expect: one detained style can require records from several upstream companies with no contract with you and no obligation to help. That is why the work belongs before shipment.

8. Due diligence a mid-size importer can actually run

You are not going to build a tier-4 map of every SKU. You can do the following, and it is meaningful:

1. Triage by input, not by supplier. Catalogue your range by material. Anything containing cotton, polysilicon or aluminium — plus whatever the current DHS priority sectors are — goes into the high-attention group. Effort follows material, not order value.
2. Ask a specific written question. Not "do you use forced labour", which invites a one-word answer. Per product: name your fabric mill, name their spinner, state the growing region of the cotton. A vague answer is itself a finding.
3. Put it in the contract. A warranty that no input at any tier originates in Xinjiang or from a listed entity; an obligation to disclose upstream sources on request and flow the same terms down; audit rights; a termination right for breach. See the purchase order essentials guide.
4. Collect the paperwork on ordinary orders, while nothing has gone wrong and the supplier wants your next order. Mill certificates and upstream invoices are easy to get before a dispute and hard afterwards.
5. Screen the entity list for every supplier and every upstream name you learn, dated, so you can show what you knew and when.
6. Extend your audit scope. A standard social audit does not cover tracing. Ask for a scope adding upstream material declarations and labour-transfer questions to the ethical checkpoints in our factory audit checklist. Our factory audit service runs that scope; supplier verification establishes who you are actually contracting with.
7. Keep it as a live file per product, dated and versioned, so a request finds a package rather than starting one.

None of that makes a shipment immune. It makes you a company that can answer quickly, with documents — the only position worth being in.

9. The EU's parallel track — and the honest limits

The direction of travel is not only American. The EU adopted a forced-labour regulation in 2024 that will bar products made with forced labour from the single market, with obligations biting after a multi-year transition. Its design differs from the UFLPA in ways that matter:

• It is not geographic. No presumption attaches to a named region; it covers forced labour anywhere, including inside the EU.
• The burden sits with the authorities. A competent authority investigates and must establish that forced labour was used, rather than the importer disproving it up front.
• It reaches exports as well as imports, and attaches to the product rather than to a company designation.

Alongside it, the Corporate Sustainability Due Diligence Directive puts process obligations on larger companies that flow down as contractual requirements — which is how a mid-size supplier ends up inside a regime that never names it. The UK's duty remains a transparency statement under the Modern Slavery Act rather than a border prohibition; Canada and Mexico run import prohibitions of their own. Our European importers guide covers the wider EU picture.

Now the limits. Everything above makes you defensible, not safe. Detentions turn on specific facts, guidance is revised, the entity list grows, and the priority sectors have changed more than once since 2022. If you import in a high-attention commodity, retain trade counsel before you need them — the moment a container is stopped is the wrong moment to start looking for a lawyer. And keep this separate from duty planning: classification and tariffs are a different discipline, covered in our China import tariffs guide.

If you want these questions asked properly of a specific supplier, or an audit scope that reaches upstream material declarations rather than stopping at the factory floor, get a quote — or start with a free supplier check.

Related: Factory audit checklist · Factory audits service · Purchase order essentials · European importers guide · China import tariffs 2026