A Canadian exporter receives a purchase order from a US-incorporated trading company. The compliance team runs a standard screening check. The buyer clears the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) and the UN Consolidated List. But no one checks the Entity List (the US Bureau of Industry and Security's register of foreign parties subject to licence requirements under the Export Administration Regulations). The shipment moves. The exporter has just made an unlicensed export to a listed entity – a strict-liability offence under the EAR.
Entity list and denied-party screening under OFAC and Canada represents two distinct, partially overlapping systems. OFAC administers financial-sanctions lists that bind any person subject to US jurisdiction, and BIS maintains the Entity List and related restricted-party registers under the EAR. Canada's export-control and sanctions regime, administered by Global Affairs Canada, operates its own denied-party framework. Where the same counterparty triggers both regimes simultaneously, the stricter prohibition governs – and the two regimes diverge significantly on scope, aggregation, and consequence.
This analysis examines where the US and Canadian systems align, where they part, and what a cross-border compliance programme must do to manage exposure under both. As of April 2026, both regimes are actively enforced and both are expanding their restricted-party lists.
What lists does each regime maintain, and who do they bind?
The US regime comprises several distinct restricted-party lists, each carrying different legal consequences. OFAC's SDN List and its related programme lists target persons whose property is blocked; dealing with them is prohibited regardless of the commodity involved. BIS maintains the Entity List, the Denied Persons List, and the Unverified List, each imposing a different licensing standard or transactional constraint under the EAR. The Denied Persons List bars all exports, re-exports, and transfers to named individuals and companies. The Entity List imposes a licence requirement for specified items; BIS routinely sets a "presumption of denial" review policy for listed entities, meaning applications will almost always fail.
Canada's system runs in parallel. Global Affairs Canada administers sanctions lists under the applicable country regimes enacted pursuant to Canada's sanctions legislation. It also maintains a separate set of export-control obligations under the Export and Import Permits Act, which can restrict exports of controlled goods to any destination – listed or not – when a permit has not been issued. Denials under Canadian export-control law appear in administrative decisions rather than in a standalone published denied-party register comparable to the BIS Denied Persons List.
The binding force differs in scope. US lists bind US persons and, through the EAR's extraterritorial reach, non-US persons exporting items containing more than a de minimis proportion of US-origin content or produced using certain US technology. A Canadian exporter shipping goods that incorporate US components above the de minimis threshold is subject to the EAR and must screen against BIS lists as well as OFAC lists. That extraterritorial reach is the dominant risk for Canadian businesses operating in supply chains with US content.
How does BIS extraterritoriality affect Canadian exporters?
BIS asserts jurisdiction over items produced outside the United States when those items contain controlled US-origin components above the applicable de minimis threshold, or when they are produced using controlled US technology or software. For most commercial goods, the relevant threshold is a defined percentage of the value or content, and BIS sets different thresholds for different destination groups. A Canadian manufacturer assembling electronics with US-origin semiconductors must assess whether the finished product clears the threshold before deciding which lists to screen against and which licensing exceptions may apply.
In our experience, this is where Canadian exporters most frequently underestimate their exposure. They screen their counterparties against Canadian and UN sanctions lists, satisfy themselves that no Canadian export permit is needed, and ship – without recognising that the EAR has already attached to the shipment by reason of the US-origin content in the bill of materials. The EAR does not require a transaction to cross the US border; it requires only that the item carry a sufficient US-content footprint.
The practical consequence is that a Canadian business dealing with an Entity List party may be committing an EAR violation even if it holds a valid Canadian export licence. The two regimes are legally independent. A Canadian authorisation does not substitute for a BIS licence. When both regimes apply, both sets of lists must be screened, and any required licences must be obtained under each regime separately.
The position above covers the standard extraterritoriality analysis. Your specific product mix, supply chain structure, and end-customer relationships will determine how far the EAR reaches into your operations.
For a tailored assessment of your EAR exposure as a Canadian exporter, contact Calder & Vance at info@caldervance.com.
Where do the ownership and aggregation tests diverge?
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked, whether the ownership is direct or aggregated through multiple listed persons) is the central ownership test. It is mechanical. A non-listed entity is treated as blocked if one or more SDN-listed persons hold, in the aggregate, 50 percent or more of its ownership interests. Control, management, or operational influence is irrelevant to this calculation.
BIS takes a different approach for the Entity List. Listing targets a specific named entity. There is no statutory rule that automatically extends Entity List status to subsidiaries or affiliates. BIS may list a subsidiary separately, and it frequently does so when the subsidiary is used to procure controlled items on behalf of a listed parent. But absent a separate listing, a subsidiary of an Entity List company is not automatically captured. Screening programmes that rely on this distinction must check each entity in the corporate tree individually against the Entity List, rather than treating a parent listing as automatically extending downward.
Canada's ownership and control test (the UK and EU formulation for whether a non-listed entity is caught through a listed person) in financial-sanctions contexts follows a similar logic to OFAC's 50 percent rule, though the precise threshold and control analysis vary by instrument. For export-control purposes, the identity of the ultimate end-user – not merely the immediate buyer – is the determining question. Canadian export-permit requirements turn on end-use and end-user declarations, making the question "who will ultimately receive and use the goods?" central to permit assessment. This is a different analytical frame from either OFAC's ownership aggregation or BIS's entity-by-entity listing approach.
What is the screening standard each regime expects in practice?
OFAC's enforcement guidance makes clear that a sanctions compliance programme must include a screening function that is calibrated to the risk profile of the business. That means not only screening the immediate counterparty against the SDN List and the relevant programme lists, but also screening beneficial owners, subsidiaries, and intermediary agents where the transaction structure creates opacity. OFAC does not mandate a specific technology or methodology, but it expects the screening logic to match the risk – a bank processing high volumes of cross-border wire transfers is held to a higher standard of automation and hit-rate review than a small exporter shipping domestically manufactured goods to familiar customers.
BIS's expectations for Entity List screening are set out in the EAR. Exporters are required to check each transaction against the Entity List before export. BIS guidance indicates that exporters must check the names of parties to the transaction – buyer, ultimate consignee, intermediate consignee, and end-user – against the list. A match triggers the licence requirement. There is no aggregation test in the BIS context: it is a direct name-match standard, applied party by party.
Canada's Global Affairs Canada expects exporters to screen end-users and consignees against the applicable sanctions lists and to obtain the required permits where controlled goods or destinations are involved. The depth of screening expected tracks the sensitivity of the item being exported: strategic goods carry a higher scrutiny standard than ordinary commercial goods. In our practice, we regularly advise Canadian clients that their screening workflows need to be redesigned to run parallel tracks – one for Canadian and UN sanctions lists, one for OFAC lists, and one for BIS restricted-party registers – because the population of restricted parties on each track is not identical.
What makes dual-regime screening materially harder is the name-variant problem. BIS and OFAC both maintain large lists. Many listed parties appear in transliterated forms, or under multiple trade names, or through shell structures that obscure the ultimate party. A hit on one regime's list does not guarantee that the same party appears under the same name on the other. Screening tools must therefore be configured to run fuzzy-match logic against both US and Canadian list populations, not just exact-match against one.
If a transaction has already been flagged, or if your screening system has generated a potential match you are uncertain how to resolve, an early legal review preserves options. Contact Calder & Vance at info@caldervance.com before the next step in the transaction is taken.
How does enforcement posture differ between OFAC and Canada?
OFAC's civil-enforcement programme is one of the most active among global sanctions authorities. OFAC publishes enforcement actions and has issued civil penalties running into the hundreds of millions of dollars against financial institutions and exporters for systemic screening failures. Importantly, OFAC applies strict liability to most sanctions violations: a business need not know it was dealing with a sanctioned party to be liable, though wilfulness and recklessness elevate the penalty band significantly. Voluntary self-disclosure (VSD – a proactive report of an apparent violation to OFAC before the agency discovers it independently) is a recognised mitigating factor under OFAC's enforcement guidelines and can, in appropriate cases, result in a no-action letter or a substantially reduced penalty.
BIS enforcement, handled through the Office of Export Enforcement, runs on a similar model: strict liability for EAR violations, with mitigation credit for VSD and cooperation, and aggravated penalties for wilful conduct. BIS has authority to impose denial orders – which bar a person from participating in US exports entirely – in addition to civil monetary penalties. A denial order is a serious commercial consequence that effectively removes a business from US-linked supply chains.
Canada's sanctions enforcement posture, by comparison, has historically been less visibly active in terms of published enforcement actions, though Global Affairs Canada and the Royal Canadian Mounted Police have jurisdiction to investigate and prosecute sanctions violations. Canadian export-control violations carry criminal liability under the applicable legislation. Recent policy statements from Global Affairs Canada have signalled an intent to increase enforcement visibility. The asymmetry in published enforcement action between the US and Canada means that many compliance programmes calibrate their screening investment primarily to OFAC and BIS risk, underweighting the Canadian exposure. In our experience, that gap has narrowed faster than many businesses anticipate.
Common risk flags and when to involve counsel
Several transactional patterns consistently generate screening failures in cross-border US-Canada contexts. The first is the use of a third-country intermediary. A Canadian exporter shipping to a third-market distributor – rather than directly to the end-user – may not screen the end-user at all, particularly if the distributor is a familiar trading partner with a clean screening history. BIS requires the exporter to know and screen the ultimate end-user; the intermediary's clean status does not discharge that obligation.
The second risk flag is the commodity-control gap. Exporters who focus their compliance resources on screening people sometimes neglect to classify the goods. An item can be EAR-controlled and require a licence to a particular destination or end-user regardless of whether that party appears on any restricted-party list. Screening a counterparty against the Entity List produces a clean result, but if the item requires a licence to that destination under the Commerce Control List and no licence was obtained, the export is still unlicensed.
The third flag is the technology and software transfer. A Canadian company sharing technical drawings, proprietary code, or manufacturing know-how with a US affiliate, a joint-venture partner, or an end-customer abroad may be making a deemed export (a release of controlled technology to a foreign national, treated as an export to that person's home country under the EAR) without having assessed the EAR classification of the technology or the nationality of the recipient. Deemed-export rules apply to technology disclosures, not only to physical goods shipments.
Counsel should be involved at several points. Before a transaction closes with an unfamiliar counterparty in a sensitive sector – defence, semiconductors, advanced manufacturing, telecoms – an independent review of the screening result and the commodity classification is warranted. When a screening system generates a hit that the compliance team believes is a false positive, legal advice on how to document the disposition decision protects the business if OFAC or BIS later reviews the file. And when an apparent violation has occurred – goods have shipped to a restricted party, a permit was not obtained, or a technology transfer happened without the required assessment – immediate counsel engagement and a structured internal review are the prerequisite to any VSD filing.
A common misconception: one clean list means a clean transaction
A persistent myth among cross-border businesses is that a clean result on one regime's screening system discharges the compliance obligation for the transaction as a whole. It does not. OFAC, BIS, and the Canadian regime each maintain distinct lists. A party that does not appear on the SDN List may nonetheless be on the Entity List. A party that appears on neither US list may still be subject to a Canadian export-permit requirement by reason of the destination country, the commodity, or the end-use. And a party that appears on no list today may be designated tomorrow – particularly in periods of active list-building – leaving the business exposed if ongoing due diligence is not built into the relationship-management process.
We regularly advise compliance teams that the correct model is a parallel multi-list screening workflow, not a sequential one that stops when the first clear result comes back. The operational discipline required – running simultaneous checks against OFAC's consolidated list feed, the BIS lists, and the Canadian sanctions lists, and then applying commodity and destination analysis on top of the clean party result – is achievable with well-configured screening technology and clear escalation protocols. It is not complex once the workflow is designed. The risk lies in the assumption that what was built for one regime is sufficient for all.
Related practices
- Deemed export and technology controls under BIS and the EAR – licensing, classification, and end-use controls for technology transfers
- Entity List and denied-party screening: OFAC and EU compared – how the EU restricted-party framework diverges from the US model
- Entity List and denied-party screening: OFAC and OFSI compared – UK financial sanctions lists and export controls alongside the US regime