Can OFAC enforcement apply retroactively?

Yes, within limits. The statute of limitations for OFAC civil penalties is 5 years from the date of the violation. However, OFAC can investigate older conduct and consider it as part of a pattern. Criminal violations under IEEPA also have their own statutes of limitations.