What this risk is, and why it matters
Post-close compliance integration risk is the exposure that an acquired company brings compliance gaps or past misconduct that, once it is part of your group, become your enforcement problem. For a senior executive, the concern is successor liability and standards drift: regulators can pursue the acquirer for the target's historic breaches, and a business that is not promptly brought up to group controls remains a live vulnerability. The deal does not end the risk at closing; it transfers it to the new owner.
Legal and regulatory framework
This risk engages anti-bribery and corruption regimes such as the UK Bribery Act and the US FCPA, sanctions enforced by bodies like OFAC and OFSI, anti-money-laundering and financial-crime rules, data-protection law and sector regulation. Enforcement authorities expect acquirers to conduct compliance diligence and integrate controls, and successor-liability principles can attach the target's past conduct to the buyer. The framework is the body of compliance law applicable to the combined business, applied with a clear expectation of remediation.
Typical scenarios and impact
Scenarios range from a compliant target needing only light harmonisation, to remediation of significant control gaps, to inherited enforcement where the target's past sanctions, bribery or financial-crime breaches surface post-close. Penalties under anti-corruption and sanctions regimes can be very large, sometimes a substantial multiple of any benefit obtained, alongside monitorships, remediation costs and reputational harm. The acquirer's own standing and licences can be jeopardised if inherited misconduct is not addressed.
Mitigation framework and when to engage an expert
Build a post-close compliance plan from diligence findings: assess the target's controls, prioritise high-risk areas such as bribery, sanctions and financial crime, remediate quickly, and integrate the business into group policies, training and monitoring. Where past conduct is found, consider disclosure and self-reporting. Engage compliance counsel to scope obligations and forensic specialists to investigate and remediate. Treat raising the acquired business to group compliance standards as an urgent post-close priority, not a gradual aspiration.