diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index c644b73..13dc1be 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -94,4 +94,17 @@ When submitting a PR, please keep the following guidelines in mind:
 For an example of a properly formatted PR, take a look at https://github.com/wildfly-security/elytron-web/pull/195
 
 ## Community
-For more information on how to get involved with Elytron Web, check out our [community](https://wildfly-security.github.io/wildfly-elytron/community/) page.
\ No newline at end of file
+For more information on how to get involved with Elytron Web, check out our [community](https://wildfly-security.github.io/wildfly-elytron/community/) page.
+
+## Legal
+
+All contributions to this repository are licensed under the [Apache License](https://www.apache.org/licenses/LICENSE-2.0), version 2.0 or later, or, if another license is specified as governing the file or directory being modified, such other license.
+
+All contributions are subject to the [Developer Certificate of Origin (DCO)](https://developercertificate.org/).
+The DCO text is also included verbatim in the [dco.txt](https://github.com/wildfly-security/.github/blob/main/dco.txt) file in the .github repository of the wildfly-security organization.
+
+## Compliance with Laws and Regulations
+
+All contributions must comply with applicable laws and regulations, including U.S. export control and sanctions restrictions.
+For background, see the Linux Foundation’s guidance:
+[Navigating Global Regulations and Open Source: US OFAC Sanctions](https://www.linuxfoundation.org/blog/navigating-global-regulations-and-open-source-us-ofac-sanctions).
\ No newline at end of file