Modern Slavery Act — Interactive Investigation

The Tier-2 Problem

A journalist calls about your supplier. What you do next defines whether your modern slavery statement is worth the paper it’s printed on.

Before You Start

How This Works

This is a choose-your-own-adventure investigation. You’ll make real decisions that a Head of Procurement encounters when a journalist calls about forced labour in your supply chain — and your choices determine the outcome.

Case Quality Score

+ Best practice — what a modern slavery compliance specialist would recommend

~ Reasonable but incomplete — on the right track

− Risky — exposes your company under the Modern Slavery Act & CSDDD

Scores vary by decision weight — higher-stakes choices carry larger point swings.

Case File Panel

The sidebar tracks evidence and legal references as the investigation unfolds. Click any entry to review it. The progress bar shows how far through the investigation you are.

Your Verdict

Your final score determines your verdict tier. Every decision is explained regardless of which path you take — including what the law actually requires.

What You Need to Know

Recognising Forced Labour

The ILO identifies 11 indicators of forced labour. In this scenario, you’ll need to recognise which are present and decide how to respond. Here are the indicators most relevant to supply chain investigations:

🔒 Retention of ID Documents

Employer confiscates passports or work permits. Workers cannot leave freely.

💰 Debt Bondage

Workers owe recruitment fees that are deducted from wages, trapping them in employment.

🏠 Abusive Living Conditions

Overcrowded, employer-controlled housing. Restrictions on movement or communication.

🔓 Restriction of Movement

Workers confined to factory or dormitory. Unable to leave premises during non-working hours.

Your Legal Framework

UK Modern Slavery Act s.54 requires your company to describe its due diligence processes. Due diligence that stops at Tier 1 (direct suppliers) is increasingly seen as inadequate.

The EU CSDDD (adopted 2024, transposition from 2027) will require companies to identify, prevent, and mitigate adverse human rights impacts throughout their value chains — not just direct suppliers. Disengagement (cutting the supplier) is a measure of last resort.

Persons of Interest

Rachel Reyes

Supply Chain Compliance Manager

David Hargreaves

Head of Procurement

Amira Osman

External Counsel — Modern Slavery

Case File

Investigation Record

Case File: 0% Complete

Monday, 09:14 AM

The Phone Call

▶ Your Role

Name:Rachel Reyes

Title:Supply Chain Compliance Manager

Company:Ashford Electronics — £200M turnover, 480 employees, HQ Birmingham

Context:Two years in the role. Built the supplier code of conduct. Tier 2 has always been a known unknown.

Your desk phone rings. It’s Grace Hartley from the Financial Times. She’s writing a piece on labour conditions in Malaysian electronics component manufacturing. She has photographs of worker dormitories at Jaya Precision Components — a company you’ve never audited but which supplies PCB assemblies to Meridian Manufacturing, your Tier 1 contract manufacturer in Shenzhen.

The photographs show 12-person dormitory rooms. Hartley says she has payslips showing deductions labelled ‘recruitment processing fee’ — between 3 and 6 months’ wages. She has interviewed three workers who say their passports are held by the dormitory supervisor.

She wants a comment from Ashford by Thursday.

Case File

Investigation Record

Jaya Precision Components Sdn Bhd, Penang, Malaysia. Supplies PCB sub-assemblies to Meridian Manufacturing (Shenzhen). Meridian is Ashford’s largest Tier 1 supplier — 34% of total component volume. Jaya does not appear in Ashford’s modern slavery risk register. No audit has been conducted.

Rachel Reyes

Supply Chain Compliance Manager

Recruitment fee deductions. Passport retention. Those are ILO forced labour indicators — not ambiguous ones.

Monday, 10:00 AM

The First 24 Hours

Grace Hartley’s deadline is Thursday. You have photographs suggesting forced labour indicators at your Tier 2 supplier. David doesn’t know yet. What is your first action?

⚠

Selected

Brief the board immediately, instruct external counsel, and contact Meridian to request an emergency audit of Jaya

Full escalation. Board awareness, legal guidance, and direct action on the supply chain — simultaneously. You don’t wait for David.

📞

Selected

Call David first — he manages the Meridian relationship. Ask him to contact Meridian and get their side before escalating

David knows Meridian best. Let him make the initial contact. You’ll escalate once you have both sides of the story.

📄

Selected

Request a desk-based review of Jaya’s certifications and Meridian’s audit reports before taking any action

You need facts, not panic. Check what documentation exists. Jaya may have SA8000 or SMETA certification. Meridian may have already audited them.

Monday, 2:00 PM

Full Escalation

The board is briefed by lunchtime. Amira Osman — Ashford’s external modern slavery counsel — is on the phone by 2 PM. She advises: ‘Do not contact Jaya directly yet. Contact Meridian, invoke your contractual audit rights, and request an unannounced site visit to Jaya within 72 hours. If Meridian refuses, that tells you everything you need to know.’

David is resistant: ‘We’ve worked with Meridian for 8 years. We can’t just accuse them—’ Amira interrupts: ‘You’re not accusing them. You’re exercising your contractual right to audit a sub-supplier. If your code of conduct doesn’t give you that right, that’s the first thing we fix.’

⚖ The Contractual Leverage Question

Under the UK Modern Slavery Act s.54, organisations must describe the due diligence processes they undertake. Due diligence that stops at Tier 1 is increasingly seen as inadequate — the Home Office guidance, the UN Guiding Principles on Business and Human Rights, and the EU CSDDD (adopted 2024, transposition from 2027) all expect companies to look beyond direct suppliers. Contractual audit rights over sub-suppliers are the mechanism — if your Tier 1 contracts don’t include right-to-audit clauses covering sub-suppliers, your supply chain due diligence has a structural gap.

Monday, 3:30 PM

David Handles It

David calls his contact at Meridian. The response: ‘Jaya is one of our approved sub-suppliers. They passed our internal assessment last year. We have no concerns.’ David relays this to you. ‘See? Meridian says it’s fine.’

You ask David: ‘What did the assessment cover? Did it include worker interviews? Recruitment practices? Dormitory conditions?’ David doesn’t know. He didn’t ask. He trusted the relationship.

You’ve lost 6 hours. Meridian now knows you’re asking questions — which means Jaya may know too. An unannounced audit is no longer unannounced.

⚖ Supplier Self-Assessment Is Not Due Diligence

Relying on a Tier 1 supplier’s self-reported assessment of their sub-suppliers is one of the most common compliance failures in modern slavery due diligence. The Australian Modern Slavery Act 2018 explicitly requires reporting entities to describe the actions taken to assess and address risks — not the actions their suppliers claim to have taken. A supplier saying ‘we have no concerns’ is not evidence of no concerns. It is evidence that the supplier has an incentive to report no concerns.

Tuesday, 9:00 AM

Desk-Based Review

You spend Monday afternoon reviewing documentation. Jaya has no SA8000 or SMETA certification. Meridian’s last audit of Jaya was a questionnaire — 14 questions, all answered ‘compliant.’ No site visit. No worker interviews.

By Tuesday morning you have confirmed that Ashford has zero verified information about conditions at Jaya. The journalist’s photographs are the most detailed intelligence you have about a supplier that feeds 34% of your component volume. You have lost 24 hours and learned only what you should have already known: your Tier 2 due diligence does not exist.

Grace Hartley emails a follow-up: ‘I note Ashford’s modern slavery statement says you “conduct risk assessments across our supply chain.” Can you confirm what risk assessment was conducted on Jaya Precision Components?’

⚖ Due Diligence Requires Action, Not Documentation

A desk-based review that discovers your Tier 2 due diligence doesn’t exist is not due diligence — it is the discovery that due diligence was never conducted. Under UK Modern Slavery Act s.54(5)(b), organisations must describe their due diligence processes ‘in relation to slavery and human trafficking in its business and supply chains.’ A questionnaire with 14 yes/no answers and no verification is not a process — it is a paper exercise. The 24 hours spent confirming this produced no protective action, while the journalist has now received no response from Ashford for over a day.

Tuesday, 10:30 AM

Reading Meridian’s Response

Meridian Manufacturing sends a formal written response to your enquiry. Read it carefully. Flag the phrases that should raise your concern — the rationalisations, deflections, and gaps.

Click the phrases that should raise your concern. There are 5 to find.

Dear Rachel, Thank you for your enquiry regarding Jaya Precision Components. We take all labour standards concerns seriously. Jaya is a long-standing supplier and we have never received any complaints about their operations. They were assessed as part of our annual supplier review process. Our assessment is based on a comprehensive self-certification questionnaire which covers all relevant labour standards. Regarding passport retention, this is common practice in the region for worker welfare purposes — to prevent loss or theft. We understand that dormitory accommodation is provided as a benefit to workers who would otherwise need to find their own housing. Recruitment fees are a matter between workers and their recruitment agents. Meridian does not involve itself in the private financial arrangements of sub-supplier employees. We are confident that Jaya operates in accordance with all applicable local laws. Regards, Li Wei, Quality Director

Rationalisations flagged: 0 of 5

Thursday, 4:00 PM

The Audit Findings

Amira’s recommended audit firm — an independent social auditor with ILO methodology training — conducts an unannounced visit to Jaya. The findings arrive Thursday afternoon.

The auditor interviewed 18 workers confidentially (off-site, in their first language, without management present). Key findings:

Finding	Severity	ILO Indicator
Recruitment fees of 3-6 months’ wages paid to labour agents by migrant workers	Critical	Debt bondage — ILO Indicator #9
Passports held by dormitory supervisor. Workers must request access 48 hours in advance	Critical	Retention of identity documents — ILO Indicator #7
Systematic overtime of 14-18 hours/week above legal maximum. Off-the-books — not reflected in payroll records	Serious	Excessive overtime — ILO Indicator #11
Payroll records show legal hours; worker interviews reveal discrepancy	Serious	Deception — ILO Indicator #2
Workers report being told they will be ‘sent home’ (deportation threat) if they raise concerns	Critical	Intimidation and threats — ILO Indicator #6

Amira Osman

External Counsel — Modern Slavery & Human Rights

Three critical findings. Debt bondage, document retention, and intimidation. This is not a grey area. These are forced labour indicators under any framework — ILO, UK Modern Slavery Act, Australian guidance. The question now is what Ashford does about it.

Friday, 9:00 AM

Remediate or Exit

The audit confirms forced labour indicators at Jaya. David wants to cut Jaya immediately — ‘we can’t be associated with this.’ Amira warns that cutting the supplier without remediation may worsen outcomes for the workers. What do you recommend?

🛠

Selected

Stay and remediate: require Jaya to implement a corrective action plan — passport return, fee repayment programme, independent monitoring — with a 90-day compliance deadline

Harder, slower, more expensive. But the workers are still there whether Ashford is or not. Remediation changes conditions. Exit changes your supplier list.

⏱

Selected

Conditional exit: give Jaya 30 days to return passports and begin fee repayment. If they comply, stay. If not, exit and find an alternative supplier.

A middle path. Give Jaya a chance but with a hard deadline. If they won’t change, you leave.

🚫

Selected

Immediate exit: terminate the relationship through Meridian, source alternative PCB assemblies, and update the modern slavery statement

Clean break. Remove the risk from the supply chain. Update the statement. Move on.

Week 2

Remediation Programme

Ashford, Meridian, and Jaya agree a corrective action plan. Passports are returned to workers within 7 days. A recruitment fee repayment programme is established — Jaya reimburses fees over 12 months, funded jointly by Jaya and Meridian (Ashford contributes to Meridian’s costs via a temporary price adjustment).

An independent monitor conducts quarterly visits for 2 years. Worker interviews are conducted off-site. A confidential grievance mechanism is established — workers can report concerns via an independent hotline in Bahasa Malaysia and Nepali.

The cost to Ashford: approximately £140,000 over 2 years. The alternative — a Sunday Times headline reading ‘Ashford Electronics: modern slavery in the supply chain’ — would cost significantly more.

⚖ Remediation vs. Exit — The Emerging Standard

The UN Guiding Principles on Business and Human Rights (Principle 19) state that where a company contributes to or is linked to an adverse human rights impact, it should use its leverage to mitigate that impact — not simply disengage. The EU CSDDD (applicable to Ashford from 2029 at current trajectory) will make this a legal obligation: companies must take appropriate measures to prevent, mitigate, and bring to an end adverse impacts. Disengagement is a measure of last resort, to be used only when prevention and mitigation have failed. Cutting a supplier without remediation may protect the company’s statement — but it does not protect the workers.

Week 5

Conditional Exit

You give Jaya 30 days. Passports are returned within 10 days — a positive sign. But the fee repayment programme stalls. Jaya’s management argues that recruitment fees were charged by independent agents, not by Jaya. They offer to ‘review’ the arrangement for future hires but will not reimburse existing fees.

After 30 days, the passport issue is resolved but debt bondage continues. You exit the relationship. Meridian finds an alternative sub-supplier within 6 weeks.

Amira Osman

External Counsel

You tried. The passport return is real progress. But the workers at Jaya still owe 3-6 months’ wages to recruitment agents. When Ashford’s orders leave, Jaya has less revenue and less incentive to address the fees. The workers’ position may worsen.

⚖ Exit Without Remediation Is Not a Safe Harbour

The UN Guiding Principles (Principle 19) distinguish between ‘causing,’ ‘contributing to,’ and being ‘directly linked to’ an adverse impact. Even as a buyer with indirect linkage, Ashford is expected to use its leverage to mitigate harm before considering exit. A 30-day deadline with partial remediation is better than immediate exit — but the workers still owe recruitment fees. Under the EU CSDDD (adopted 2024, transposition from 2027), companies must demonstrate they took ‘appropriate measures’ to address impacts. Partial remediation followed by disengagement may satisfy UK s.54 reporting requirements, but it falls short of the emerging international standard.

Week 4

Immediate Exit

David contacts Meridian. ‘We’re out. Find another PCB supplier.’ Meridian complies — they have other customers for Jaya’s capacity. Within 4 weeks, Ashford’s orders are sourced from a different sub-supplier in Thailand.

Grace Hartley publishes her article. The paragraph about Ashford reads: ‘Ashford Electronics told the FT it had “terminated the commercial relationship” with the supplier. When asked what remediation measures had been taken for the affected workers, Ashford did not respond.’

Amira Osman

External Counsel

Cutting the supplier is not remediation. The workers are still at Jaya. Their passports may or may not have been returned. The recruitment fees are still owed. Ashford’s modern slavery statement will now need to explain what steps were taken to address the impact — and ‘we left’ is not a step. Under the CSDDD, this approach would constitute a failure to mitigate.

⚖ Disengagement as Last Resort

The EU CSDDD Article 8(6) is explicit: terminating a business relationship is a measure of last resort, permitted only when prevention and mitigation have been attempted and failed, or when the adverse impact is severe and no realistic prospect of improvement exists. Immediate exit without remediation attempts is not ‘last resort’ — it is first resort. The workers remain in the same conditions; the only thing that has changed is who profits from their labour. Under the UK Modern Slavery Act s.54, your statement must now explain why you chose exit over remediation — and ‘it was easier’ is not a defensible answer.

6 Weeks Later

The Statement

Ashford’s annual modern slavery statement is due in 6 weeks. The board wants to know what it should say about the Jaya incident. Amira has provided three drafts. Which do you recommend?

📜

Selected

Full disclosure: describe the incident, the findings, the remediation actions (or exit), the systemic changes to Tier 2 due diligence, and the gaps this exposed in previous statements

Transparent. Acknowledges the failure. Describes what was done and what will change. The statement becomes evidence of a company that learns.

📝

Selected

Acknowledge the issue in general terms: ‘risks were identified in our extended supply chain and appropriate actions were taken.’ No specifics about Jaya.

The statement is technically accurate. It doesn’t name Jaya or describe the specific findings. It focuses on the process improvements.

📄

Selected

Minimal update: add a paragraph about ‘enhanced supply chain monitoring’ to the existing statement template. No reference to any specific incident.

The statement stays clean. What happened at Jaya is an operational matter, not a disclosure matter.

Statement Published

Full Disclosure

The statement is 14 pages — the longest Ashford has ever published. It describes the Jaya incident, the audit findings, the remediation programme (or exit and its limitations), and the systemic changes: Tier 2 supplier mapping, risk-based audit programme, contractual right-to-audit clauses in all Tier 1 contracts, confidential grievance mechanism, and a commitment to annual reporting on remediation outcomes.

The Business & Human Rights Resource Centre rates Ashford’s statement as ‘leading practice.’ Two institutional investors contact Ashford’s CFO to say the transparency influenced their ESG assessment positively. Grace Hartley publishes a follow-up noting Ashford’s response as ‘the most substantive corporate response to supply chain labour abuse we have seen in the UK electronics sector this year.’

⚖ s.54 — From Compliance to Competitive Advantage

UK Modern Slavery Act s.54(5) requires organisations to describe: (a) structure and supply chains, (b) due diligence processes, (c) parts of the business with risk, (d) steps taken to assess and manage risk, (e) effectiveness of those steps, and (f) training. A statement that addresses a real incident with specificity — naming the supplier, the findings, the remediation, and the systemic changes — satisfies all six criteria with evidence rather than aspirational language. Under the EU CSDDD (adopted 2024, transposition from 2027), this level of disclosure will be mandatory, not voluntary. Companies that develop the capability now will be ahead when the directive applies.

Statement Published

General Acknowledgement

The statement acknowledges supply chain risks and describes process improvements. It does not name Jaya. Ashford’s legal team is comfortable. The Business & Human Rights Resource Centre rates the statement as ‘adequate — improved from previous years but lacking specificity on identified risks and remediation outcomes.’

Six months later, the Australian government’s Modern Slavery Act review recommends mandatory reporting on specific incidents and remediation outcomes. Ashford’s voluntary Australian statement will need to be more detailed next year.

⚖ Generic Statements Are a Diminishing Shield

Under s.54, a modern slavery statement must describe what the organisation actually did — not what it aspires to do. A statement that acknowledges ‘supply chain risks’ without naming identified incidents is technically compliant today but increasingly scrutinised. The Australian Modern Slavery Act review (2023) recommended mandatory reporting on identified incidents and remediation outcomes. The EU CSDDD will require it. The trend is clear: generic language is becoming insufficient. Companies that disclose voluntarily now build the internal capability to comply when disclosure becomes mandatory.

3 Months Later

Minimal Update

The statement reads almost identically to last year’s. ‘Enhanced supply chain monitoring’ is the only new language. Grace Hartley’s article is now 3 months old. An NGO compares Ashford’s statement to the FT article and publishes a blog post: ‘Ashford Electronics: the gap between statement and reality.’

The post is shared 2,400 times on LinkedIn. Ashford’s Head of Communications calls Rachel: ‘Why does our modern slavery statement not mention the thing the Financial Times wrote about?’ The answer — ‘the board chose not to disclose’ — does not satisfy anyone.

Amira Osman

External Counsel

A modern slavery statement that omits a known, investigated, material supply chain incident is not a compliance document. It is a reputation risk. Under the CSDDD, this level of disclosure would be insufficient — the directive requires reporting on identified impacts and actions taken.

⚖ Omission Is Not a Defence

s.54 does not require disclosure of specific incidents — but it does require an honest description of due diligence and risk. A statement that claims ‘enhanced supply chain monitoring’ while omitting a material incident already reported in the Financial Times creates a credibility gap that is worse than the original incident. The EU CSDDD Article 15 will require companies to publicly report on ‘identified actual adverse impacts and any actions taken to bring those impacts to an end or minimise their extent.’ Under that standard, this statement would be non-compliant. Under the current UK standard, it is technically legal but reputationally indefensible.

Outcome

CASE CLOSED

0

Score — Investigation Rating

Case Assessment