A trading company based in Germany receives a compliance query from its bank. The bank has flagged a counterparty in a third market. One of the counterparty's shareholders appears on an EU consolidated list. The transaction is frozen pending review. Is the counterparty itself restricted? Does the restriction turn on ownership, on control, or on both? The answer determines whether the deal can proceed – and under what conditions.
Under EU sanctions, the ownership and control test works differently from the mechanical 50 percent or more threshold that OFAC applies in the United States. EU regulations treat an entity as caught when a listed person owns or controls it – and control can exist even where the ownership stake falls well below 50 percent. As of mid-2026, that divergence remains one of the most consequential points of difference between the major sanctions regimes, and it is the point that cross-border businesses most frequently misread.
This analysis sets out the EU test in full, compares it with the OFAC and UK OFSI positions, maps the gaps that produce compliance failures, and identifies when specialist counsel should be involved.
What is the EU ownership and control test, and how does it differ from the OFAC rule?
The EU test for whether a non-listed entity is caught by financial sanctions has two distinct limbs: ownership (a direct or indirect stake of 50 percent or more) and control (the ability of a listed person to direct the entity's decisions, regardless of the size of the stake). Both limbs are operative; either alone is sufficient to bring the entity within the prohibition.
OFAC's rule, by contrast, is mechanical. The 50 percent rule (OFAC's rule treating entities owned 50 percent or more by one or more blocked persons as themselves blocked) focuses on aggregate ownership stakes. Control, in the EU sense, does not independently trigger the US prohibition. That difference matters in practice. A listed person holding 45 percent of a company with board appointment rights will not automatically trigger the OFAC threshold. Under EU rules, the control analysis may well catch that entity.
UK OFSI applies a test that is structurally closer to the EU position. Ownership and control under UK financial-sanctions regulations covers both the percentage stake and the ability to exercise control. OFSI's guidance treats the two elements as cumulative routes to the same result: an entity owned or controlled by a designated person is itself subject to the financial-sanctions prohibition.
In our cross-border practice, the OFAC-EU divergence creates the most friction in M&A screening and in correspondent-banking relationships. A clean OFAC assessment does not clear the EU position. These are independent analyses that must each be run to completion.
How does the EU control test actually work in practice?
The EU control test turns on whether a listed person has the practical ability to direct or decisively influence the entity's decisions. That is a facts-and-circumstances assessment, not a formula. Several factors recur across the analysis.
Board appointment rights are the most straightforward indicator. If a listed person can appoint or remove a majority of directors – or the directors responsible for a material area of the business – control is likely present. Voting arrangements that deliver a blocking minority on key resolutions can also satisfy the test. Contractual control through supply or off-take arrangements, where the entity's commercial existence depends on a relationship the listed person dictates, has also been treated as a form of control in the guidance of EU member-state competent authorities.
What the test does not require is day-to-day operational management by the listed person. A passive blocking stake paired with a shareholders' agreement that restricts the sale of assets above a defined value may be enough. The question is whether the listed person holds a structural position from which they can prevent, or compel, decisions of commercial significance.
Aggregation matters here as well. Two listed persons each holding 20 percent of the same entity, but together exercising rights sufficient to block a special resolution, may satisfy the control limb together. We regularly advise on exactly this scenario, where no single listed person would independently trigger either limb but the combined position brings the entity within reach of the prohibition.
Is your screening tool testing for control? Most automated systems test for the ownership threshold only. The control analysis requires a manual, legal assessment of the governance documents – and that is where compliance gaps most commonly arise.
Where does aggregation create compliance exposure that businesses overlook?
Aggregation is the mechanism by which individually sub-threshold holdings combine to produce a restricted position. Under the EU ownership limb, holdings by different listed persons in the same entity are aggregated to determine whether the 50 percent or more combined stake is reached. Under the control limb, the rights of different listed persons can be combined if they act in concert or their positions structurally reinforce each other.
The practical consequence is significant. A counterparty with three listed-person shareholders, each holding 18 percent, crosses the ownership threshold on aggregation. A screening tool that processes each shareholder individually – and flags none of them as independently triggering the threshold – misses this result entirely.
The indirect layer adds a further dimension. If Company A is owned 60 percent by a listed person, and Company A owns 30 percent of Company B, Company A is itself caught (ownership limb). The question then is whether Company A's stake in Company B, combined with any other listed-person positions in Company B, crosses the 50 percent threshold when Company A is treated as a listed entity. The chain propagates.
In a recent matter, a financial institution screening a prospective trade-finance counterparty identified no first-tier listed-person ownership. The compliance team's tool did not look beyond the first ownership layer. When we mapped the structure to the second and third tiers, two listed persons collectively held above 50 percent through intermediate holding companies incorporated in different EU member states. The institution had been providing financing that was prohibited under the applicable EU regulations. Early discovery preserved the ability to make a voluntary report; had the position not been identified when it was, the institution's exposure would have been considerably wider.
How do EU competent authorities interpret and enforce the ownership and control test?
EU sanctions are implemented through Council regulations that apply directly in all member states, but day-to-day enforcement and licensing are handled at the national level by each member state's designated competent authority. That creates a regime in which the legal text is uniform but the interpretive guidance and enforcement posture differ by jurisdiction.
Several member-state competent authorities have issued guidance that takes a broader view of the control concept than the plain text of the Council regulations alone might suggest. Where that guidance is not public, practitioners advising on EU sanctions matters must rely on the pattern of licensing decisions and enforcement actions, which are themselves inconsistently published. That interpretive variability means that the EU ownership and control analysis is materially more uncertain than the OFAC mechanical ownership test – and that uncertainty is itself a compliance risk.
The EU General Court provides a further layer of interpretive authority through annulment proceedings. Where a designation is challenged, the Court's analysis of the legal basis and the evidence required to sustain it can, over time, shape the understanding of which entities are within scope. Practitioners in our EU practice monitor that caselaw closely, because shifts in the evidentiary standard for a designation can have downstream implications for the ownership and control analysis applied to related entities.
Enforcement consequences for getting the analysis wrong range from administrative penalties – which vary significantly in severity across member states – to criminal referrals in the most serious cases. The position is not symmetric: a business that relies in good faith on a well-documented analysis is in a materially better position than one that applies no analysis at all or relies solely on automated screening results.
How does the EU position compare with OFSI, the UN, and other major regimes?
The divergence between the EU and OFAC positions has been described above. The cross-regime picture is wider, and businesses operating across multiple jurisdictions must map each independently.
OFSI's ownership and control test is, as noted, structurally aligned with the EU approach: both ownership (at or above 50 percent) and control (without a fixed percentage threshold) are operative routes to the prohibition. In our experience, the UK and EU tests produce similar results in most cases. The differences tend to emerge at the margins – in the interpretation of contractual control, in the treatment of rights held through nominee arrangements, and in the guidance issued on specific sectors.
The United Nations Consolidated List operates differently. The UN list is a designations register, but the test for whether an entity connected to a listed person is itself caught depends on the implementing legislation of the member state applying the UN resolution. There is no single UN ownership-and-control rule equivalent to the EU or OFAC positions. Each national implementation must be assessed.
Canada's sanctions regime, administered by Global Affairs Canada, applies both an ownership and a control test broadly comparable to the EU and UK approaches. The details of what constitutes control, and how indirect chains are traced, require jurisdiction-specific legal analysis.
Singapore, Japan, and the UAE apply domestic sanctions instruments that interact with UN Security Council obligations. Control tests in those regimes are less developed in published guidance than the EU and UK positions, and the analysis in those jurisdictions often requires engagement with local counsel in the relevant jurisdiction.
The golden rule for cross-border compliance is that the strictest applicable prohibition governs. Where OFAC clears a counterparty but the EU catches it through the control limb, the business is still restricted. Running only the OFAC analysis – because the OFAC SDN List is the most visible starting point – leaves a material gap.
For a detailed comparison of the OFAC ownership test against other regimes, see our analysis at OFAC 50 percent rule and ownership analysis. For a comparison of the OFAC and Canadian positions, see OFAC and Canada: 50 percent rule compared.
What are the most common mistakes businesses make in the EU ownership analysis?
The pattern of compliance failures in this area is consistent across sectors and entity sizes. Five mistakes recur with notable frequency.
Relying on automated screening without a legal control assessment. Screening tools test for names against lists. They do not assess governance documents or shareholders' agreements. The control limb is invisible to a tool that has not been instructed to look for it.
Stopping at the first ownership tier. The EU analysis requires the full indirect chain to be mapped. A clean first-tier result gives no assurance where the ultimate beneficial owners are not yet identified. Intermediate holding companies that are themselves caught propagate the restriction downward.
Applying the OFAC analysis and treating it as sufficient for EU purposes. This is the single most common misconception we encounter. A business that operates in or through the EU, or that processes euro-denominated transactions, is subject to EU sanctions independently of any OFAC assessment. The tests are different. Both must be run.
Failing to update the analysis when ownership structures change. A counterparty that was unrestricted at the time of initial screening may become restricted following a new designation, a share transfer, or an amendment to governance rights. Due diligence is not a one-time exercise; it must track changes in the counterparty's structure over the life of the relationship.
Underestimating contractual control indicators. A business that treats the ownership analysis as purely a shareholding exercise may miss control arrangements embedded in commercial contracts – particularly in joint-venture, franchise, and long-term supply structures.
There is a related myth worth addressing directly. Some compliance officers believe that because the EU ownership threshold and the OFAC threshold are both stated as 50 percent or more, the two regimes are equivalent and a single analysis can serve both. That is incorrect. The EU control limb adds an entire separate route to restriction that has no direct equivalent in the OFAC regime. The tests share a number, not a logic.
When should a business involve specialist counsel, and what does that review look like?
The ownership and control analysis under EU sanctions is a legal question that requires legal analysis. It is not a task that can be outsourced to a screening provider or resolved by reference to a compliance checklist. Several situations require counsel to be instructed without delay.
First, any transaction or relationship in which a listed person holds any interest – even below 50 percent – in the counterparty warrants a formal control analysis before the business proceeds. The presence of any listed-person position creates a residual control risk that only a governance-document review can resolve.
Second, where a screening result flags a potential match anywhere in the ownership chain – even at a remote tier – the analysis must trace the chain to its source and apply the aggregation test fully.
Third, where the counterparty's ownership structure is complex, opaque, or subject to change, periodic re-screening is insufficient. An annual legal review of the full structure, benchmarked against current designation lists, is the appropriate standard for a significant commercial relationship.
Fourth, where a business has identified an apparent breach – a payment made to a restricted counterparty, a supply contract performed for an entity caught by the control test – early legal advice determines whether a voluntary disclosure is appropriate and preserves options that narrow rapidly with time. A VSD (voluntary self-disclosure to a regulator) is not automatic protection from penalty, but it is a material factor in how competent authorities approach enforcement.
The position above covers the standard case. Your facts – the counterparty's jurisdiction of incorporation, the nature of the listed person's rights, the route of the funds, the applicable member-state authority – change the analysis materially. Calder & Vance assists by mapping the ownership chain, assessing both limbs of the EU test, preparing the formal legal opinion required for compliance-committee or board approval, and advising on the most appropriate route where a restriction is confirmed.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment of your exposure under the EU regime.
Related practices
- Sanctions compliance audit and testing – assessing screening logic and ownership-chain mapping across jurisdictions
- OFAC 50 percent rule and ownership analysis – how the US mechanical test compares with the EU control approach
- OFAC and Canada: 50 percent rule compared – cross-regime divergence in the North American context