UK Modern Slavery Act 2015 s.54 — Interactive Investigation
The Tier-2 Problem
A journalist calls about your supplier. What you do next defines whether your modern slavery statement is worth the paper it’s printed on.
Friday, 16:42
The Last Call of the Week
Ashford Electronics, Birmingham. Sarah’s last call of the week was supposed to be a 1-1 with David Chen on Q3 supplier reporting. Instead, an external number is calling.
Reuters London. Supply chain desk.
The number isn’t on the press list. They never call sales.
Case File MSA-2024-001 — Opening
16:45 — Three Minutes Later
“A comment by Monday 17:00.”
“I’ve got documents from a worker named Bharath at Jaya Precision Components. I’m running this on Tuesday. I’d like a comment from Ashford by Monday 17:00.”
Sarah ends the call. Her desk phone is still vibrating with an internal extension. She lets it ring.
How This Works
The Investigation
This is a supply chain investigation. You will be presented with evidence, make decisions, and face their consequences.
The Evidence Panel (left sidebar) tracks your case materials — documents, intelligence, and legal references accumulate as you progress. Review them before making decisions.
The Stakeholder Tracker (top-right) shows how your actions affect four groups: the Board, the workers at Jaya, the media, and regulators. Watch it shift after each decision.
There are no perfect answers. Every choice has a cost. Your final score reflects how well you balanced legal compliance, worker protection, and commercial reality.
Background Briefing
The Visibility Problem
Supply Chain Tiers
Modern supply chains are layered. Your contracts are with Tier 1 — your direct suppliers. But your Tier 1 suppliers buy from Tier 2 sub-suppliers, who buy from Tier 3 raw material providers.
Most companies audit Tier 1. Few audit Tier 2. Almost none audit Tier 3. This is where forced labour hides — in the layers you cannot see and have no contractual relationship with. The ILO estimates 27.6 million people are in forced labour globally. The majority are in private sector supply chains.
🏠
Ashford Electronics
HQ Birmingham — direct control
You
🔍
Tier 1: Meridian Manufacturing (Shenzhen)
4 contract manufacturers — audited annually
Audited
❓
Tier 2: Jaya Precision Components (Penang)
~40 component suppliers — mapped, not audited
❓ Unaudited
🚫
Tier 3: Raw material suppliers
Unknown — unmapped entirely
Unknown
Case File
Investigation Record
Ashford Electronics audits its 4 Tier 1 suppliers annually. Its ~40 Tier 2 suppliers are mapped but unaudited. Tier 3 is unmapped entirely. This is the industry norm. It is also the industry’s greatest liability.
Monday, 09:14 AM
The Phone Call
Grace Hartley, Financial Times
Your desk phone rings. It’s Grace Hartley from the Financial Times. She’s writing a piece on labour conditions in Malaysian electronics component manufacturing. She has photographs of worker dormitories at Jaya Precision Components — a company you’ve never audited but which supplies PCB assemblies to Meridian Manufacturing, your Tier 1 contract manufacturer in Shenzhen.
The photographs show 12-person dormitory rooms. Hartley says she has payslips showing deductions labelled ‘recruitment processing fee’ — between 3 and 6 months’ wages. She has interviewed three workers who say their passports are held by the dormitory supervisor.
She wants a comment from Ashford by Thursday.
Case File
Investigation Record
Jaya Precision Components Sdn Bhd, Penang, Malaysia. Supplies PCB sub-assemblies to Meridian Manufacturing (Shenzhen). Meridian is Ashford’s largest Tier 1 supplier — 34% of total component volume. Jaya does not appear in Ashford’s modern slavery risk register. No audit has been conducted.
Sarah Lim
Supply Chain Compliance Manager
Recruitment fee deductions. Passport retention. Those are ILO forced labour indicators — not ambiguous ones.
Monday, 09:30 AM
ILO Forced Labour Indicators
The Framework
The ILO identifies 11 indicators of forced labour. One is a red flag. Multiple — like Hartley describes — constitute a strong presumption. Click the amber cards for the evidence at Jaya.
Abuse of vulnerability
Exploiting migrant status or language barriers
Confirmed at Jaya
Deception
False promises about conditions, wages, or work
Evidence: Payroll shows legal hours; actual hours exceed legal max
Restriction of movement
Workers cannot freely leave the site or dormitory
Isolation
Cut off from family or support
Physical and sexual violence
Violence or threats used as control
Confirmed at Jaya
Intimidation and threats
Threats of deportation or harm to family
Evidence: Workers told they’ll be ‘sent home’ if they raise concerns
Confirmed at Jaya
Retention of identity documents
Passports or work permits held by employer
Evidence: Passports held by dorm supervisor; 48h advance request to access
Withholding of wages
Non-payment or unauthorised deductions
Confirmed at Jaya
Debt bondage
Debts that bind workers to the employer
Evidence: Recruitment fees of 3–6 months’ wages deducted from pay
Six of eleven. Debt bondage, document retention, intimidation, deception, abusive conditions, overtime. Not borderline.
Monday, 10:00 AM
🔎Investigation Decision1 of 3
The First 24 Hours
Grace Hartley’s deadline is Thursday. You have photographs suggesting forced labour indicators at your Tier 2 supplier. David doesn’t know yet. What is your first action?
Your choice
📄
Brief the board immediately, instruct external counsel, and contact Meridian to request an emergency audit of Jaya
Full escalation. Board awareness, legal guidance, and direct action on the supply chain — simultaneously. You don’t wait for David.
Your choice
📞
Call David first — he manages the Meridian relationship. Ask him to contact Meridian and get their side before escalating
David knows Meridian best. Let him make the initial contact. You’ll escalate once you have both sides of the story.
Your choice
📁
Request a desk-based review of Jaya’s certifications and Meridian’s audit reports before taking any action
You need facts, not panic. Check what documentation exists. Jaya may have SA8000 or SMETA certification. Meridian may have already audited them.
Consequence
+15 Full escalation
Full Escalation
The board is briefed by lunchtime. Amira Osman — external modern slavery counsel — is on the phone by 2 PM: “Don’t contact Jaya directly. Contact Meridian, invoke your contractual audit rights, request an unannounced site visit within 72 hours. If Meridian refuses, that tells you everything.”
David resists: “We’ve worked with Meridian for 8 years. We can’t just accuse them—” Amira: “You’re not accusing them. You’re exercising your contractual right to audit a sub-supplier. If your code doesn’t give you that right, that’s the first thing we fix.”
⚖ Legal Insight — Contractual Leverage
Under UK MSA s.54, organisations must describe their due diligence processes. Due diligence that stops at Tier 1 is increasingly seen as inadequate — Home Office guidance, UNGPs, and the forthcoming EU CSDDD all expect you to look beyond direct suppliers. If your Tier 1 contracts don’t include right-to-audit clauses covering sub-suppliers, that’s a structural gap.
Consequence
+0 Time lost
David Handles It
David calls his contact at Meridian. The response: “Jaya is one of our approved sub-suppliers. They passed our internal assessment last year. We have no concerns.” David relays this to you. “See? Meridian says it’s fine.”
You ask David: “What did the assessment cover? Did it include worker interviews? Recruitment practices? Dormitory conditions?” David doesn’t know. He didn’t ask. He trusted the relationship.
You’ve lost 6 hours. Meridian now knows you’re asking questions — which means Jaya may know too. An unannounced audit is no longer unannounced.
⚖ Legal Insight — Supplier Self-Assessment Is Not Due Diligence
Relying on a Tier 1 supplier’s self-reported assessment of their sub-suppliers is one of the most common compliance failures in modern slavery due diligence. The Australian Modern Slavery Act 2018 explicitly requires reporting entities to describe the actions taken to assess and address risks — not the actions their suppliers claim to have taken. A supplier saying ‘we have no concerns’ is not evidence of no concerns. It is evidence that the supplier has an incentive to report no concerns.
Consequence
−10 24 hours lost
Desk-Based Review
You spend Monday afternoon reviewing documentation. Jaya has no SA8000 or SMETA certification. Meridian’s last audit of Jaya was a questionnaire — 14 questions, all answered ‘compliant.’ No site visit. No worker interviews.
By Tuesday morning you have confirmed that Ashford has zero verified information about conditions at Jaya. The journalist’s photographs are the most detailed intelligence you have about a supplier that feeds 34% of your component volume. You have lost 24 hours and learned only what you should have already known: your Tier 2 due diligence does not exist.
Grace Hartley emails a follow-up: “I note Ashford’s modern slavery statement says you ‘conduct risk assessments across our supply chain.’ Can you confirm what risk assessment was conducted on Jaya Precision Components?”
Tuesday, 08:00 AM
Intelligence Gathering
Building the Picture
Limited time. You can investigate three of the five sources below before Hartley’s Thursday deadline.
Choose carefully. What you don’t investigate stays unknown.
No right-to-audit clause covering Tier 2. Meridian’s code isn’t contractually required to flow down to sub-suppliers. Termination requires 6 months’ notice — no quick exit.
🗣
Confidential worker outreach
Via Amira’s NGO contacts, arrange off-site phone interviews with two ex-Jaya workers.
Worker A (Nepali, 23): paid £1,500 to a Kathmandu agent, passport taken on arrival, 12-hr shifts, 6 days/week. Left after 14 months still owing the agent. Worker B (Indonesian, 28): similar account. Mobile phones confiscated by dorm supervisors at 10 PM nightly.
🌎
Public registry and media
Search Malaysian registry, labour enforcement records, and media archives for Jaya.
Jaya Precision Components Sdn Bhd incorporated 2009. Two director changes in 2022. No public labour enforcement actions. A 2023 Malay Mail article names Jaya’s industrial estate in a piece on Penang migrant-worker conditions.
📊
Industry risk benchmarking
Check the Global Slavery Index, KnowTheChain, and ITUC data for Malaysia electronics.
Malaysia: ‘high risk’ for forced labour in electronics (Global Slavery Index). KnowTheChain 2023 ICT benchmark scores the sector 25/100. US CBP has issued 4 Withhold Release Orders against Malaysian electronics manufacturers in 3 years.
🔍
Meridian’s own audit reports
Request any audits Meridian has run on Jaya in the past 3 years.
Meridian provides one document: a 2-page Self-Assessment Questionnaire completed by Jaya in March 2023. 14 yes/no questions, all answered ‘Yes — compliant.’ No supporting evidence. No site visit. No worker interviews. No question about recruitment fees, passport retention, or overtime.
Tuesday, 5:00 PM
Intelligence Assessment
What You Know — and What You Don’t
You review the evidence you’ve gathered. Some intelligence sources remain uninvestigated — that information is still unknown to Ashford. This is the reality of supply chain due diligence: you make decisions with incomplete information.
Amira Osman
External Counsel — Modern Slavery & Human Rights
You will never have a complete picture. The question regulators will ask is not ‘did you know everything?’ It’s ‘did you take reasonable steps to find out?’ What you chose to investigate — and what you chose to leave uninvestigated — tells the story of your due diligence.
Wednesday, 10:30 AM
Word Highlighting Activity
Reading Meridian’s Response
Meridian Manufacturing sends a formal written response. Read it carefully. Click on any phrase that raises a red flag — the rationalisations, deflections, and gaps. There are five to find.
Flags identified: 0 / 5
Dear Sarah,
Thank you for your enquiry regarding Jaya Precision Components. We take all labour standards concerns seriously.
Jaya is a long-standing supplier and we have never received any complaints about their operations. They were assessed as part of our annual supplier review process. Our assessment is based on a comprehensive self-certification questionnaire which covers all relevant labour standards.
Regarding passport retention, this is common practice in the region for worker welfare purposes — to prevent loss or theft. We understand that dormitory accommodation is provided as a benefit to workers who would otherwise need to find their own housing.
Recruitment fees are a matter between workers and their recruitment agents. Meridian does not involve itself in the private financial arrangements of sub-supplier employees.
We are confident that Jaya operates in accordance with all applicable local laws.
Regards,
Li Wei, Quality Director
Wednesday, 2:00 PM
The Leverage Question
What Leverage Do You Have?
Amira calls. One question: what leverage does Ashford have over a Tier 2 supplier it has no direct contract with?
Amira Osman
External Counsel
Your contract is with Meridian. Meridian’s is with Jaya. Your leverage is indirect — and its strength depends entirely on what your Meridian contract says about sub-supplier standards.
David Hargreaves
Head of Procurement
The Meridian contract doesn’t mention sub-suppliers. We buy finished assemblies — what they do upstream is their problem.
Amira Osman
External Counsel
Under the CSDDD — which catches Ashford from 2029 — that position is untenable. Even under the current UK Act, ‘no visibility of our sub-suppliers’ is an admission of a systemic gap, not a defence.
Sarah Lim
Supply Chain Compliance Manager
So we renegotiate the Meridian contract for sub-supplier audit rights. And Meridian has to cooperate — without them we can’t reach Jaya.
Wednesday, 3:00 PM
Sequencing Activity
Response Sequencing
Amira recommends a structured response sequence. The order matters — doing things out of sequence creates legal and operational risks. Drag the steps to put them in the correct order, then check your answer.
Thursday, 4:00 PM
The Audit Findings
What the Auditors Found
An independent social auditor using ILO methodology conducts an unannounced visit to Jaya. 18 workers interviewed confidentially, off-site, in their first language, without management present.
Finding
Severity
ILO Indicator
Recruitment fees of 3–6 months’ wages paid to labour agents by migrant workers
Critical
Debt bondage — Indicator #9
Passports held by dormitory supervisor. Workers must request access 48 hours in advance
Critical
Retention of identity documents — Indicator #7
Systematic overtime of 14–18 hours/week above legal maximum. Off-the-books — not reflected in payroll records
Serious
Excessive overtime — Indicator #11
Payroll records show legal hours; worker interviews reveal significant discrepancy
Serious
Deception — Indicator #2
Workers report being told they will be ‘sent home’ (deportation threat) if they raise concerns
Critical
Intimidation and threats — Indicator #6
Amira Osman
External Counsel
Three critical findings. Debt bondage, document retention, and intimidation. This is not a grey area. These are forced labour indicators under any framework — ILO, UK Modern Slavery Act, Australian guidance. The question now is what Ashford does about it.
Thursday, 5:30 PM
The Decision Framework
Remediation vs. Exit
Amira walks you through the framework. The hardest decision in supply chain compliance — and the one most companies get wrong.
Amira Osman
External Counsel
Three options: exit (cut the supplier), remediate (stay and fix it), or conditional engagement (stay with hard deadlines). Most pick exit — fast, clean, defensible. But exit has a cost that doesn’t appear on any balance sheet.
Amira Osman
External Counsel
UNGP Principle 19 says disengagement is a last resort — CSDDD makes that a legal obligation from 2029. Reason: when you cut the supplier, the workers stay. Passports still held. Debts still owed. You’ve protected your supply chain, not the people in it.
David Hargreaves
Head of Procurement
But it’s not our factory. Not our workers. We don’t even have a contract with Jaya.
Amira Osman
External Counsel
That’s exactly the argument the Modern Slavery Act was designed to defeat. Your statement says you take responsibility for your supply chain. Exit without remediation, and the next question is: ‘You knew, and you left. What happened to the workers?’
Friday, 9:00 AM
🔎Investigation Decision2 of 3
Remediate or Exit
The audit confirms forced labour indicators at Jaya. David wants to cut Jaya immediately — “we can’t be associated with this.” Amira warns that cutting the supplier without remediation may worsen outcomes for the workers. What do you recommend to the board?
Your choice
🛠
Stay and remediate: require Jaya to implement a corrective action plan — passport return, fee repayment programme, independent monitoring — with a 90-day compliance deadline
Harder, slower, more expensive. But the workers are still there whether Ashford is or not. Remediation changes conditions. Exit changes your supplier list.
Your choice
⏳
Conditional exit: give Jaya 30 days to return passports and begin fee repayment. If they comply, stay. If not, exit and find an alternative supplier.
A middle path. Give Jaya a chance but with a hard deadline. If they won’t change, you leave.
Your choice
⛔
Immediate exit: terminate the relationship through Meridian, source alternative PCB assemblies, and update the modern slavery statement
Clean break. Remove the risk from the supply chain. Update the statement. Move on.
Consequence
+20 Remediation programme
Remediation Programme
Ashford, Meridian and Jaya agree a corrective action plan. Passports returned within 7 days. A 12-month fee repayment programme is funded jointly by Jaya and Meridian (Ashford contributes via a temporary price adjustment).
An independent monitor runs quarterly off-site visits for 2 years. A confidential grievance hotline is set up in Bahasa Malaysia and Nepali.
Cost to Ashford: ~£140,000 over 2 years. The alternative — a Sunday Times headline reading ‘Modern slavery in Ashford’s supply chain’ — costs more.
⚖ Legal Insight — Remediation vs. Exit
UNGP Principle 19: where a company is linked to adverse impacts, it should use its leverage to mitigate — not disengage. CSDDD makes this a legal obligation from 2029. Disengagement is a last resort. Cutting a supplier without remediation protects the statement, not the workers.
Consequence
+5 Conditional exit
Conditional Exit
You give Jaya 30 days. Passports are returned within 10 days — a positive sign. But the fee repayment programme stalls. Jaya’s management argues that recruitment fees were charged by independent agents, not by Jaya. They offer to ‘review’ the arrangement for future hires but will not reimburse existing fees.
After 30 days, the passport issue is resolved but debt bondage continues. You exit the relationship. Meridian finds an alternative sub-supplier within 6 weeks.
Amira Osman
External Counsel
You tried. The passport return is real progress. But the workers at Jaya still owe 3–6 months’ wages to recruitment agents. When Ashford’s orders leave, Jaya has less revenue and less incentive to address the fees. The workers’ position may worsen.
Consequence
−15 Immediate exit
Immediate Exit
David contacts Meridian. “We’re out. Find another PCB supplier.” Meridian complies — they have other customers for Jaya’s capacity. Within 4 weeks, Ashford’s orders are sourced from a different sub-supplier in Thailand.
Grace Hartley publishes her article. The paragraph about Ashford reads: “Ashford Electronics told the FT it had ‘terminated the commercial relationship’ with the supplier. When asked what remediation measures had been taken for the affected workers, Ashford did not respond.”
Amira Osman
External Counsel
Cutting the supplier is not remediation. The workers are still at Jaya. Their passports may or may not have been returned. The recruitment fees are still owed. Ashford’s modern slavery statement will now need to explain what steps were taken to address the impact — and ‘we left’ is not a step. Under the CSDDD, this approach would constitute a failure to mitigate.
6 weeks later
🔎Investigation Decision3 of 3
The Statement
Ashford’s annual modern slavery statement is due. The board wants to know what it should say about the Jaya incident. Amira has provided three drafts. Which do you recommend?
Your choice
📜
Full disclosure: describe the incident, the findings, the remediation actions (or exit), the systemic changes to Tier 2 due diligence, and the gaps this exposed in previous statements
Transparent. Acknowledges the failure. Describes what was done and what will change. The statement becomes evidence of a company that learns.
Your choice
👁
Substantive but anonymised: describe the incident type, findings, and remediation programme in full detail — but do not name Jaya or Meridian while the corrective action plan is ongoing
Detailed and honest about what happened, but protects the identities of suppliers. Naming Jaya publicly could cause them to disengage from remediation entirely.
Your choice
🗐
Minimal update: add a paragraph about ‘enhanced supply chain monitoring’ to the existing statement template. No reference to any specific incident.
The statement stays clean. What happened at Jaya is an operational matter, not a disclosure matter. The statement covers policy and process — not individual incidents.
Consequence
+15 Full disclosure
Full Disclosure
The statement is 14 pages — the longest Ashford has ever published. It names Jaya, describes the audit findings, the remediation programme (or exit and its limitations), and the systemic changes: Tier 2 supplier mapping, risk-based audit programme, contractual right-to-audit clauses in all Tier 1 contracts, confidential grievance mechanism, and a commitment to annual reporting on remediation outcomes.
The Business & Human Rights Resource Centre rates Ashford’s statement as ‘leading practice.’ Two institutional investors contact Ashford’s CFO to say the transparency influenced their ESG assessment positively. Grace Hartley publishes a follow-up noting Ashford’s response as ‘the most substantive corporate response to supply chain labour abuse we have seen in the UK electronics sector this year.’
Amira Osman
External Counsel
Full disclosure carries risk — Jaya’s management is furious. But the statement is now the strongest piece of evidence Ashford has that its due diligence system works. When regulators ask ‘what did you do?’, you have a 14-page answer.
Consequence
+10 Substantive but anonymised
Substantive but Anonymised
The statement describes ‘a Tier 2 supplier in Southeast Asian electronics manufacturing’ where forced labour indicators were identified through investigative journalism. It details the six ILO indicators found, the independent audit methodology, the corrective action plan structure, and the systemic changes to Ashford’s due diligence programme. It does not name Jaya or Meridian.
The Business & Human Rights Resource Centre rates the statement as ‘good practice — substantive on process, limited on specificity.’ One institutional investor asks for more detail; Ashford provides it under NDA. Grace Hartley notes the statement is ‘more detailed than most — but stops short of the transparency that would set a precedent.’
Amira Osman
External Counsel
This is defensible. The CSDDD does not require naming specific suppliers — it requires demonstrating that appropriate measures were taken. The anonymisation protects the remediation relationship. But it also means Ashford cannot claim the full reputational credit for transparency. That is the trade-off — and it is a legitimate one.
Consequence
−15 Minimal update
Minimal Update
The statement reads almost identically to last year’s. ‘Enhanced supply chain monitoring’ is the only new language. Grace Hartley’s article is now 3 months old. An NGO compares Ashford’s statement to the FT article and publishes a blog post: ‘Ashford Electronics: the gap between statement and reality.’
The post is shared 2,400 times on LinkedIn. Ashford’s Head of Communications calls Sarah: “Why does our modern slavery statement not mention the thing the Financial Times wrote about?”
Amira Osman
External Counsel
A modern slavery statement that omits a known, investigated, material supply chain incident is not a compliance document. It is a reputation risk. Under the CSDDD, this level of disclosure would be insufficient — the directive requires reporting on identified impacts and actions taken.
The Cascade
How Your Decisions Compounded
Your three decisions created a cascade. Each choice shaped the next — and the consequences compounded. Below is your path through the case.