Modern Slavery Act 2018 (Cth) s.16 — Interactive Investigation
The Tier-2 Problem
A journalist calls about your supplier. What you do next defines whether your modern slavery statement is worth the paper it’s printed on.
Friday, 16:42
The Last Call of the Week
Ashford Electronics, Sydney. Sarah’s last call of the week was supposed to be a 1-1 with David Chen on Q3 supplier reporting. Instead, an external number is calling.
AFR Sydney. Supply chain desk.
The number isn’t on the press list. They never call sales.
Case File MSA-2024-001 — Opening
16:45 — Three Minutes Later
“A comment by Monday 17:00.”
“I’ve got documents from a worker named Bharath at Jaya Precision Components. I’m running this on Tuesday. I’d like a comment from Ashford by Monday 17:00.”
Sarah ends the call. Her desk phone is still vibrating with an internal extension. She lets it ring.
How This Works
The Investigation
This is a supply chain investigation. You will be presented with evidence, make decisions, and face their consequences.
The Evidence Panel (left sidebar) tracks your case materials — documents, intelligence, and legal references accumulate as you progress. Review them before making decisions.
The Stakeholder Tracker (top-right) shows how your actions affect four groups: the Board, the workers at Jaya, the media, and regulators. Watch it shift after each decision.
There are no perfect answers. Every choice has a cost. Your final score reflects how well you balanced legal compliance, worker protection, and commercial reality.
Background Briefing
The Visibility Problem
Supply Chain Tiers
Modern supply chains are layered. Your contracts are with Tier 1 — your direct suppliers. But your Tier 1 suppliers buy from Tier 2 sub-suppliers, who buy from Tier 3 raw material providers.
Most companies audit Tier 1. Few audit Tier 2. Almost none audit Tier 3. This is where forced labour hides — in the layers you cannot see and have no contractual relationship with. The ILO estimates 27.6 million people are in forced labour globally. The majority are in private sector supply chains.
🏠
Ashford Electronics
HQ Sydney — direct control
You
🔍
Tier 1: Meridian Manufacturing (Shenzhen)
4 contract manufacturers — audited annually
Audited
❓
Tier 2: Jaya Precision Components (Penang)
~40 component suppliers — mapped, not audited
❓ Unaudited
🚫
Tier 3: Raw material suppliers
Unknown — unmapped entirely
Unknown
Case File
Investigation Record
Ashford Electronics audits its 4 Tier 1 suppliers annually. Its ~40 Tier 2 suppliers are mapped but unaudited. Tier 3 is unmapped entirely. This is the industry norm. It is also the industry’s greatest liability.
Monday, 09:14 AM
The Phone Call
Grace Hartley, Australian Financial Review
Your desk phone rings. It’s Grace Hartley from the Australian Financial Review. She’s writing a piece on labour conditions in Malaysian electronics component manufacturing. She has photographs of worker dormitories at Jaya Precision Components — a company you’ve never audited but which supplies PCB assemblies to Meridian Manufacturing, your Tier 1 contract manufacturer in Shenzhen.
The photographs show 12-person dormitory rooms. Hartley says she has payslips showing deductions labelled ‘recruitment processing fee’ — between 3 and 6 months’ wages. She has interviewed three workers who say their passports are held by the dormitory supervisor.
She wants a comment from Ashford by Thursday.
Case File
Investigation Record
Jaya Precision Components Sdn Bhd, Penang, Malaysia. Supplies PCB sub-assemblies to Meridian Manufacturing (Shenzhen). Meridian is Ashford’s largest Tier 1 supplier — 34% of total component volume. Jaya does not appear in Ashford’s modern slavery risk register. No audit has been conducted.
Sarah Lim
Supply Chain Compliance Manager
Recruitment fee deductions. Passport retention. Those are ILO forced labour indicators — not ambiguous ones.
Monday, 09:30 AM
ILO Forced Labour Indicators
The Framework
The International Labour Organization identifies 11 indicators of forced labour. Any single one is a red flag. Multiple, as Hartley describes, constitute a strong presumption. Click the amber cards for evidence at Jaya.
Abuse of vulnerability
Exploiting migrant status or language barriers
Confirmed at Jaya
Deception
False promises about conditions, wages, or work
Evidence: Payroll shows legal hours; actual hours exceed legal maximum
Restriction of movement
Cannot leave the workplace or dormitory freely
Isolation
Cut off from family or outside support
Physical and sexual violence
Violence or threats used as control
Confirmed at Jaya
Intimidation and threats
Threats of deportation or harm to family
Evidence: Workers told they will be ‘sent home’ if they speak up
Confirmed at Jaya
Retention of identity documents
Passports or work permits held by employer
Evidence: Passports held by dorm supervisor; 48hr advance request to access
Withholding of wages
Non-payment, delays, or unauthorised deductions
Confirmed at Jaya
Debt bondage
Recruitment fees or debts that bind workers to employer
Evidence: Recruitment fees of 3–6 months’ wages deducted from pay
Grace Hartley’s deadline is Thursday. You have photographs suggesting forced labour indicators at your Tier 2 supplier. David doesn’t know yet. What is your first action?
Your choice
📄
Brief the board immediately, instruct external counsel, and contact Meridian to request an emergency audit of Jaya
Full escalation. Board awareness, legal guidance, and direct action on the supply chain — simultaneously. You don’t wait for David.
Your choice
📞
Call David first — he manages the Meridian relationship. Ask him to contact Meridian and get their side before escalating
David knows Meridian best. Let him make the initial contact. You’ll escalate once you have both sides of the story.
Your choice
📁
Request a desk-based review of Jaya’s certifications and Meridian’s audit reports before taking any action
You need facts, not panic. Check what documentation exists. Jaya may have SA8000 or SMETA certification. Meridian may have already audited them.
Consequence
+15 Full escalation
Full Escalation
The board is briefed by lunchtime. Amira Osman, Ashford’s external modern slavery counsel, is on the phone by 2 PM. Her advice: “Don’t contact Jaya yet. Go to Meridian, invoke your audit rights, request an unannounced visit within 72 hours. If they refuse, that tells you everything.”
David resists: “We’ve worked with Meridian eight years. We can’t just accuse them—” Amira cuts in: “You’re not accusing. You’re exercising your contractual right to audit a sub-supplier. If the contract doesn’t give you that right, that’s the first thing we fix.”
⚖ Legal Insight — The Contractual Leverage Question
Under the Modern Slavery Act 2018 (Cth) s.16, reporting entities must describe how they assess and address modern slavery risks. Action that stops at Tier 1 is now treated as inadequate by the Attorney-General's Department, the McMillan Review, the UN Guiding Principles, and the forthcoming EU CSDDD. The mechanism is contractual: if your Tier 1 contracts don’t include audit rights covering sub-suppliers, your due diligence has a structural gap.
Consequence
+0 Time lost
David Handles It
David calls his contact at Meridian. The response: “Jaya is one of our approved sub-suppliers. They passed our internal assessment last year. We have no concerns.” David relays this to you. “See? Meridian says it’s fine.”
You ask David: “What did the assessment cover? Did it include worker interviews? Recruitment practices? Dormitory conditions?” David doesn’t know. He didn’t ask. He trusted the relationship.
You’ve lost 6 hours. Meridian now knows you’re asking questions — which means Jaya may know too. An unannounced audit is no longer unannounced.
⚖ Legal Insight — Supplier Self-Assessment Is Not Due Diligence
Relying on a Tier 1 supplier’s self-reported assessment of their sub-suppliers is one of the most common compliance failures in modern slavery due diligence. The Modern Slavery Act 2018 (Cth) explicitly requires reporting entities to describe the actions taken to assess and address risks — not the actions their suppliers claim to have taken. A supplier saying ‘we have no concerns’ is not evidence of no concerns. It is evidence that the supplier has an incentive to report no concerns.
Consequence
−10 24 hours lost
Desk-Based Review
You spend Monday afternoon reviewing documentation. Jaya has no SA8000 or SMETA certification. Meridian’s last audit of Jaya was a questionnaire — 14 questions, all answered ‘compliant.’ No site visit. No worker interviews.
By Tuesday morning you have confirmed that Ashford has zero verified information about conditions at Jaya. The journalist’s photographs are the most detailed intelligence you have about a supplier that feeds 34% of your component volume. You have lost 24 hours and learned only what you should have already known: your Tier 2 due diligence does not exist.
Grace Hartley emails a follow-up: “I note Ashford’s modern slavery statement says you ‘conduct risk assessments across our supply chain.’ Can you confirm what risk assessment was conducted on Jaya Precision Components?”
Tuesday, 08:00 AM
Intelligence Gathering
Building the Picture
Limited time, limited resources. You can investigate three of the five sources below before Hartley’s Thursday deadline. Each reveals different information.
Choose carefully. What you don’t investigate stays unknown.
Investigations remaining:
3
📄
Meridian contract review
Pull the master supply agreement. Check sub-supplier audit rights, code flow-down, and termination clauses.
No right-to-audit clause covers Tier 2. The code of conduct doesn’t flow down to sub-suppliers. Termination needs 6 months’ notice — Ashford can’t exit quickly.
🗣
Confidential worker outreach
Via Amira’s NGO contacts: phone interviews with two Jaya workers who left in the past 6 months.
Worker A (Nepali, 23): paid MYR 8,400 (~AUD $2,800) to a Kathmandu agent. Passport taken on arrival. 6 days/wk, 12-hour shifts. Still owes MYR 3,200. Worker B (Indonesian, 28): similar. Mobile phones confiscated at 10 PM nightly.
🌎
Public registry and media search
Search Malaysian registry, enforcement records, and media archives for Jaya.
Incorporated 2009. Two director changes in 2022. No public enforcement actions. A 2023 Malay Mail article names Jaya’s industrial estate in a story on Penang migrant worker conditions.
📊
Industry risk benchmarking
Global Slavery Index, KnowTheChain, ITUC Global Rights Index for Malaysia electronics risk data.
Global Slavery Index rates Malaysia ‘high risk’ for forced labour in electronics. KnowTheChain’s 2023 ICT benchmark scores the sector 25/100 on due diligence. US CBP has issued 4 Withhold Release Orders against Malaysian electronics makers in 3 years.
🔍
Meridian’s own audit reports
Request all Meridian audits of Jaya from the past 3 years.
One document: a 2-page Supplier Self-Assessment from March 2023. 14 yes/no questions, all marked ‘Yes’. No evidence, no site visit, no interviews. Doesn’t ask about recruitment fees, passports, or overtime.
Tuesday, 5:00 PM
Intelligence Assessment
What You Know — and What You Don’t
You review the evidence you’ve gathered. Some intelligence sources remain uninvestigated — that information is still unknown to Ashford. This is the reality of supply chain due diligence: you make decisions with incomplete information.
Amira Osman
External Counsel — Modern Slavery & Human Rights
You will never have a complete picture. The question regulators will ask is not ‘did you know everything?’ It’s ‘did you take reasonable steps to find out?’ What you chose to investigate — and what you chose to leave uninvestigated — tells the story of your due diligence.
Wednesday, 10:30 AM
Word Highlighting Activity
Reading Meridian’s Response
Meridian Manufacturing sends a formal written response. Read it carefully. Click on any phrase that raises a red flag — the rationalisations, deflections, and gaps. There are five to find.
Flags identified: 0 / 5
Dear Sarah,
Thank you for your enquiry regarding Jaya Precision Components. We take all labour standards concerns seriously.
Jaya is a long-standing supplier and we have never received any complaints about their operations. They were assessed as part of our annual supplier review process. Our assessment is based on a comprehensive self-certification questionnaire which covers all relevant labour standards.
Regarding passport retention, this is common practice in the region for worker welfare purposes — to prevent loss or theft. We understand that dormitory accommodation is provided as a benefit to workers who would otherwise need to find their own housing.
Recruitment fees are a matter between workers and their recruitment agents. Meridian does not involve itself in the private financial arrangements of sub-supplier employees.
We are confident that Jaya operates in accordance with all applicable local laws.
Regards,
Li Wei, Quality Director
Wednesday, 2:00 PM
The Leverage Question
What Leverage Do You Have?
Amira calls. One question: what leverage does Ashford have over a Tier 2 supplier it has no direct contract with?
Amira Osman
External Counsel
Your contract is with Meridian. Meridian’s contract is with Jaya. Your leverage is indirect, and its strength depends entirely on what your Meridian contract says about sub-supplier standards.
David Hargreaves
Head of Procurement
The contract doesn’t mention sub-suppliers. Never needed to. We buy finished assemblies. Upstream is their process.
Amira Osman
External Counsel
Under the CSDDD, which applies from 2029, that position is untenable. Due diligence has to cover the entire value chain. Even under the Modern Slavery Act 2018, saying ‘we have no visibility’ is an admission of a gap, not a defence.
Sarah Lim
Supply Chain Compliance Manager
So we renegotiate the Meridian contract for sub-supplier audit rights. And we need Meridian to cooperate. Without them, we can’t reach Jaya.
Wednesday, 3:00 PM
Sequencing Activity
Response Sequencing
Amira recommends a structured response sequence. The order matters — doing things out of sequence creates legal and operational risks. Drag the steps to put them in the correct order, then check your answer.
Thursday, 4:00 PM
The Audit Findings
What the Auditors Found
An independent social auditor using ILO methodology conducts an unannounced visit to Jaya. 18 workers interviewed confidentially, off-site, in their first language, without management present.
Finding
Severity
ILO Indicator
Recruitment fees of 3–6 months’ wages paid to labour agents by migrant workers
Critical
Debt bondage — Indicator #9
Passports held by dormitory supervisor. Workers must request access 48 hours in advance
Critical
Retention of identity documents — Indicator #7
Systematic overtime of 14–18 hours/week above legal maximum. Off-the-books — not reflected in payroll records
Serious
Excessive overtime — Indicator #11
Payroll records show legal hours; worker interviews reveal significant discrepancy
Serious
Deception — Indicator #2
Workers report being told they will be ‘sent home’ (deportation threat) if they raise concerns
Critical
Intimidation and threats — Indicator #6
Amira Osman
External Counsel
Three critical findings. Debt bondage, document retention, and intimidation. This is not a grey area. These are forced labour indicators under any framework — ILO, the Modern Slavery Act 2018 (Cth), UK guidance. The question now is what Ashford does about it.
Thursday, 5:30 PM
The Decision Framework
Remediation vs. Exit
Amira walks you through the framework. This is the hardest call in supply chain compliance, and the one most companies get wrong.
Amira Osman
External Counsel
Three options when forced labour is found: exit (cut the supplier), remediate (stay and fix), or conditional engagement (stay with hard deadlines). Most pick exit because it’s fast and clean to put in a statement. But exit has a cost that never shows on a balance sheet.
Amira Osman
External Counsel
The UN Guiding Principles, Principle 19 says disengagement is a last resort. The EU CSDDD makes it a legal obligation from 2029. The reason: when you cut a supplier, the workers stay. Passports still held. Debts still owed. You’ve protected your supply chain, not the people in it.
David Hargreaves
Head of Procurement
But it’s not our factory. It’s not our workers. We don’t employ them. We don’t even have a contract with Jaya.
Amira Osman
External Counsel
That’s the argument the Modern Slavery Act was designed to defeat. Your statement says you take responsibility. If you exit without remediation, the next journalist question is: ‘You knew about forced labour and walked away. What happened to the workers?’
Friday, 9:00 AM
🔎Investigation Decision2 of 3
Remediate or Exit
The audit confirms forced labour indicators at Jaya. David wants to cut Jaya immediately — “we can’t be associated with this.” Amira warns that cutting the supplier without remediation may worsen outcomes for the workers. What do you recommend to the board?
Your choice
🛠
Stay and remediate: require Jaya to implement a corrective action plan — passport return, fee repayment programme, independent monitoring — with a 90-day compliance deadline
Harder, slower, more expensive. But the workers are still there whether Ashford is or not. Remediation changes conditions. Exit changes your supplier list.
Your choice
⏳
Conditional exit: give Jaya 30 days to return passports and begin fee repayment. If they comply, stay. If not, exit and find an alternative supplier.
A middle path. Give Jaya a chance but with a hard deadline. If they won’t change, you leave.
Your choice
⛔
Immediate exit: terminate the relationship through Meridian, source alternative PCB assemblies, and update the modern slavery statement
Clean break. Remove the risk from the supply chain. Update the statement. Move on.
Consequence
+20 Remediation programme
Remediation Programme
Ashford, Meridian, and Jaya agree a corrective action plan. Passports returned within 7 days. A 12-month fee repayment programme funded jointly by Jaya and Meridian, with Ashford contributing via a temporary price adjustment.
An independent monitor runs quarterly off-site interviews for 2 years. A confidential grievance hotline in Bahasa Malaysia and Nepali goes live.
Cost to Ashford: ~AUD $250,000 over 2 years. A Four Corners segment titled ‘Ashford Electronics: modern slavery in the supply chain’ would cost a lot more.
⚖ Legal Insight — Remediation vs. Exit
The UN Guiding Principles, Principle 19 say that where a company is linked to harm, it should use its leverage to mitigate, not just disengage. The EU CSDDD makes this law from 2029. Disengagement is a last resort. Cutting a supplier without remediation protects your statement, not the workers.
Consequence
+5 Conditional exit
Conditional Exit
You give Jaya 30 days. Passports are returned within 10 days — a positive sign. But the fee repayment programme stalls. Jaya’s management argues that recruitment fees were charged by independent agents, not by Jaya. They offer to ‘review’ the arrangement for future hires but will not reimburse existing fees.
After 30 days, the passport issue is resolved but debt bondage continues. You exit the relationship. Meridian finds an alternative sub-supplier within 6 weeks.
Amira Osman
External Counsel
You tried. The passport return is real progress. But the workers at Jaya still owe 3–6 months’ wages to recruitment agents. When Ashford’s orders leave, Jaya has less revenue and less incentive to address the fees. The workers’ position may worsen.
Consequence
−15 Immediate exit
Immediate Exit
David contacts Meridian. “We’re out. Find another PCB supplier.” Meridian complies — they have other customers for Jaya’s capacity. Within 4 weeks, Ashford’s orders are sourced from a different sub-supplier in Thailand.
Grace Hartley publishes her article. The paragraph about Ashford reads: “Ashford Electronics told the AFR it had ‘terminated the commercial relationship’ with the supplier. When asked what remediation measures had been taken for the affected workers, Ashford did not respond.”
Amira Osman
External Counsel
Cutting the supplier is not remediation. The workers are still at Jaya. Their passports may or may not have been returned. The recruitment fees are still owed. Ashford’s modern slavery statement will now need to explain what steps were taken to address the impact — and ‘we left’ is not a step. Under the CSDDD, this approach would constitute a failure to mitigate.
6 weeks later
🔎Investigation Decision3 of 3
The Statement
Ashford’s annual modern slavery statement is due. The board wants to know what it should say about the Jaya incident. Amira has provided three drafts. Which do you recommend?
Your choice
📜
Full disclosure: describe the incident, the findings, the remediation actions (or exit), the systemic changes to Tier 2 due diligence, and the gaps this exposed in previous statements
Transparent. Acknowledges the failure. Describes what was done and what will change. The statement becomes evidence of a company that learns.
Your choice
👁
Substantive but anonymised: describe the incident type, findings, and remediation programme in full detail — but do not name Jaya or Meridian while the corrective action plan is ongoing
Detailed and honest about what happened, but protects the identities of suppliers. Naming Jaya publicly could cause them to disengage from remediation entirely.
Your choice
🗐
Minimal update: add a paragraph about ‘enhanced supply chain monitoring’ to the existing statement template. No reference to any specific incident.
The statement stays clean. What happened at Jaya is an operational matter, not a disclosure matter. The statement covers policy and process — not individual incidents.
Consequence
+15 Full disclosure
Full Disclosure
The statement is 14 pages — the longest Ashford has ever published. It names Jaya, describes the audit findings, the remediation programme (or exit and its limitations), and the systemic changes: Tier 2 supplier mapping, risk-based audit programme, contractual right-to-audit clauses in all Tier 1 contracts, confidential grievance mechanism, and a commitment to annual reporting on remediation outcomes.
The Business & Human Rights Resource Centre rates Ashford’s statement as ‘leading practice.’ Two institutional investors contact Ashford’s CFO to say the transparency influenced their ESG assessment positively. Grace Hartley publishes a follow-up noting Ashford’s response as ‘the most substantive corporate response to supply chain labour abuse we have seen in the Australian electronics sector this year.’
Amira Osman
External Counsel
Full disclosure carries risk — Jaya’s management is furious. But the statement is now the strongest piece of evidence Ashford has that its due diligence system works. When regulators ask ‘what did you do?’, you have a 14-page answer.
Consequence
+10 Substantive but anonymised
Substantive but Anonymised
The statement describes ‘a Tier 2 supplier in Southeast Asian electronics manufacturing’ where forced labour indicators were identified through investigative journalism. It details the six ILO indicators found, the independent audit methodology, the corrective action plan structure, and the systemic changes to Ashford’s due diligence programme. It does not name Jaya or Meridian.
The Business & Human Rights Resource Centre rates the statement as ‘good practice — substantive on process, limited on specificity.’ One institutional investor asks for more detail; Ashford provides it under NDA. Grace Hartley notes the statement is ‘more detailed than most — but stops short of the transparency that would set a precedent.’
Amira Osman
External Counsel
This is defensible. The CSDDD does not require naming specific suppliers — it requires demonstrating that appropriate measures were taken. The anonymisation protects the remediation relationship. But it also means Ashford cannot claim the full reputational credit for transparency. That is the trade-off — and it is a legitimate one.
Consequence
−15 Minimal update
Minimal Update
The statement reads almost identically to last year’s. ‘Enhanced supply chain monitoring’ is the only new language. Grace Hartley’s article is now 3 months old. An NGO compares Ashford’s statement to the AFR article and publishes a blog post: ‘Ashford Electronics: the gap between statement and reality.’
The post is shared 2,400 times on LinkedIn. Ashford’s Head of Communications calls Sarah: “Why does our modern slavery statement not mention the thing the Australian Financial Review wrote about?”
Amira Osman
External Counsel
A modern slavery statement that omits a known, investigated, material supply chain incident is not a compliance document. It is a reputation risk. Under the CSDDD, this level of disclosure would be insufficient — the directive requires reporting on identified impacts and actions taken.
The Cascade
How Your Decisions Compounded
Your three decisions created a cascade. Each choice shaped the next — and the consequences compounded. Below is your path through the case.