A logistics company operating between the United States and Europe closes a supply agreement with a counterparty whose parent is the subject of an OFAC programme. The in-house team identifies a general licence (a standing authorisation that permits a defined category of transactions without a separate application) that appears to cover the payment leg. But does the same standing authority exist under the EU regime? Is the scope identical? These are not academic questions. Getting the answer wrong means a blocked transaction at best and an enforcement referral at worst.
General licence eligibility under OFAC and the EU operates from different legal foundations, uses different scope definitions, and imposes different conditions on the authorised party. OFAC general licences are issued under IEEPA or other statutory authority, are published in the relevant programme regulations, and are self-executing once a person satisfies the stated conditions. EU autonomous authorisations under the applicable Council regulations follow a comparable self-executing logic in some programmes, but the substantive scope, expiry mechanics, and re-authorisation paths diverge materially – and where the two regimes run in parallel, the stricter prohibition governs.
This analysis maps those divergences across six practical dimensions: the legal basis and issuing authority, the scope and eligibility tests, the transaction-level conditions, the cross-border overlay when OFAC and EU rules both apply, the most common eligibility errors, and when to involve counsel before relying on a standing authorisation.
What is the legal foundation of each regime's standing authorisations?
OFAC general licences draw their authority from IEEPA, the Trading with the Enemy Act, or the relevant programme statute, and are codified in each programme's regulations. They are self-executing: a person who meets the stated eligibility conditions may act without contacting OFAC, provided the conditions are satisfied in full and the transaction is documented to the standard the regulations require. The authorisation belongs to the category, not to the applicant.
The EU equivalent sits in each autonomous-sanctions Council Regulation. The Council – advised by the European External Action Service – embeds derogations directly into the operative regulation or adopts implementing acts that extend, amend, or restrict them. Some EU derogations are genuinely self-executing on the face of the text; others require a prior notification to, or authorisation from, the relevant national competent authority of the member state where the regulated person is established. That distinction is programme-specific and cannot be assumed from reading one regulation and applying the logic to another.
The practical divergence this creates is substantial. Under OFAC, a US financial institution relying on a general licence for the processing of certain transactions knows, with reasonable certainty, that self-execution is the operating model: read the conditions, satisfy them, document the analysis, proceed. Under the EU regime, the first question is whether the relevant derogation is truly self-executing or whether a national authority must first be notified or consulted. We regularly advise clients who have assumed the EU derogation mirrors the OFAC model – and discovered, at the point of transaction, that a prior step was required.
How do the eligibility tests compare across the two regimes?
OFAC general licences state eligibility in one of three ways: by the nature of the person (US persons, certain foreign subsidiaries), by the nature of the transaction (ordinarily incident payments, emergency medical transactions, certain journalistic activities), or by a combination of both. The conditions are conjunctive: all stated criteria must be met simultaneously, and the failure of any single condition withdraws the authorisation in its entirety.
EU autonomous authorisations use a structurally similar approach but the criteria themselves differ. The EU tends to attach more weight to the purpose or destination of the transaction and less to the identity of the authorised person. A derogation for humanitarian activities, for instance, will in many EU regulations require that the transaction be carried out by or for the benefit of a recognised humanitarian body, whereas the analogous OFAC authorisation may extend to any US person engaged in a broadly defined humanitarian activity. The practical gap can be significant for a company that is not itself a humanitarian organisation but is a commercial supplier to one.
Ownership and control is a further divergence point. OFAC's general licences are premised on the programme's blocked-person definition, which incorporates the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked). If a counterparty is owned 50 percent or more in aggregate by blocked persons, it is itself blocked, and the general licence analysis must address whether the licence authorises dealings with blocked entities of that type. EU regulations do not employ the same bright-line 50 percent rule: they require an assessment of ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person), which is a broader concept and can capture entities where the factual indicators of control are present even below that ownership threshold. A company might fall outside the OFAC test but inside the EU test – or vice versa.
The position above covers the standard analysis. Your facts – the programme, the counterparty's ownership chain, the type of transaction, and the jurisdictions involved – will change the outcome materially.
For an initial assessment of your eligibility position under OFAC or EU rules, contact Calder & Vance at info@caldervance.com.
What transaction-level conditions does each regime attach?
Transaction-level conditions in OFAC general licences typically address four variables: the parties to the transaction, the nature of the goods or services, the routing or intermediary chain, and the record-keeping obligation. Record-keeping under OFAC requires that all parties maintain records of licensed transactions, as a general principle of the programme regime – the exact period to be verified against the current regulations, though a five-year record-keeping period is standard across OFAC's published guidance for parties relying on general licences.
The EU imposes comparable record-keeping obligations on parties relying on derogations, and member state competent authorities can request evidence of compliance at any time. What differs is the granularity of the conditions. EU regulations frequently include positive-obligation language requiring the regulated person to take steps before the transaction is completed: notifying the competent authority, obtaining a supporting document from the counterparty, or ensuring that the funds do not ultimately benefit a designated person. OFAC general licences, by contrast, tend to state what is permitted and to attach documentary conditions retrospectively – meaning the analysis focuses on what must be recorded, not what must be done before proceeding.
Intermediary routing is an area where both regimes impose conditions but in different ways. OFAC extends certain general licences to US financial institutions processing authorised transactions as an incidental matter, but explicitly carves out transactions routed through specific blocked entities. EU regulations address this through the prohibition on making funds available, which applies to any link in the payment chain and requires each intermediary to make its own assessment of the derogation's applicability. A payment that is authorised at the originator level may still be blocked at a correspondent bank under a different member state's interpretation of the same regulation.
What happens when OFAC and EU rules both apply?
When a transaction falls within the scope of both OFAC and an EU sanctions programme, both sets of conditions must be satisfied simultaneously, and where they conflict, the stricter prohibition governs. This is not a legal rule written anywhere in a single instrument: it is the practical result of each regime applying its own tests independently and without regard to the other's outcome.
The more common problem in practice is not a direct conflict but an asymmetry of coverage. OFAC may have issued a general licence covering a category of transactions that the EU has not yet authorised, or the EU may have adopted a derogation that OFAC has not matched. A US-based company with EU-incorporated subsidiaries, or a European company with US-dollar clearing requirements, must work through both analyses and act only on what both authorise.
In our cross-border practice, we see this asymmetry most sharply in the context of wind-down transactions. OFAC regularly issues time-limited general licences authorising parties to conclude pre-existing contracts with a newly designated person over a defined period. The EU rarely adopts an equivalent mechanism at the same time, and when it does, the scope and duration frequently diverge. A company winding down a commercial relationship in reliance on an OFAC wind-down authority may find that the EU position requires it to stop immediately or to apply for a specific derogation from the relevant national competent authority.
Secondary-sanctions risk adds a further layer. Certain OFAC programmes carry secondary-sanctions provisions that can reach non-US persons who engage in significant transactions with designated persons, even where those transactions are not subject to primary OFAC jurisdiction. A European company complying with EU authorisations for a transaction involving a party on a US secondary-sanctions list may still face OFAC scrutiny depending on the nature and value of the transaction and the US nexus involved. The EU Blocking Regulation adds a further complication: it is designed to counter certain US extraterritorial measures, creating a position where a European company may face competing legal obligations. This is an area where early counsel is not optional.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com.
Where do businesses most commonly miscalculate general licence eligibility?
The most frequent eligibility error is programme-switching: assuming that a general licence in one OFAC programme applies to a transaction that is caught by a different programme. OFAC maintains separate programmes, each with its own set of general licences. A licence issued under one programme does not authorise a transaction prohibited by a different programme, even if the factual subject matter overlaps. Companies managing multiple programme exposures – for instance, a business with counterparties touching more than one designated region or sector – must run the analysis for each applicable programme independently.
The second common error is a failure to check for subsequent amendments. OFAC general licences are published in the Federal Register and can be amended, narrowed, or withdrawn. A compliance team that documents a general licence analysis at the start of a transaction must verify the current position before each subsequent step in that transaction, not only at the outset. We have acted for businesses that relied on a general licence they had correctly identified at inception, only to find that it had been amended during the transaction's execution.
Third, and perhaps the most practically damaging, is the failure to satisfy the documentary conditions. A general licence is self-executing only if its conditions are met. If the regulations require a party to obtain a representation from its counterparty, to route the transaction through a specific type of institution, or to avoid using specified intermediaries, those conditions must be satisfied and evidenced. An otherwise valid reliance on a general licence will not protect a party that cannot demonstrate, in a subsequent review, that it met every condition at the time of the transaction.
The EU equivalent error is treating a derogation as a unilateral permission when it is in fact a permission subject to national authority oversight. A company that proceeds without the required prior notification or authorisation from the relevant competent authority has not relied on the derogation: it has conducted a prohibited transaction without authorisation.
What does this mean for your existing compliance programme? Ask whether your screening and documentation process covers every applicable programme, checks for amendments before execution, and captures evidence of condition-satisfaction – not just the general licence citation. Most off-the-shelf compliance processes do not.
How does the UK OFSI position add a further dimension?
OFSI – the Office of Financial Sanctions Implementation, which administers the UK financial sanctions regime under SAMLA – operates a general licence mechanism that is distinct from both OFAC and the EU. UK general licences under OFSI are issued by OFSI directly, require an application where a general licence does not already exist, and are published on OFSI's website. Unlike OFAC, where the programme regulations themselves contain the general licence text, OFSI general licences are free-standing instruments issued outside the primary regulations.
The eligibility criteria for UK general licences broadly track the relevant UN Security Council regime where the UK programme implements a UN measure, but they can diverge where the UK has adopted autonomous measures beyond the UN baseline. Post-2022, the UK has increasingly adopted its own autonomous designations that are not mirrored exactly in either OFAC or EU programmes. For a business managing compliance across all three regimes, this means that a transaction authorised under an OFAC general licence and an EU derogation may still require a separate OFSI general licence, or a specific licence application to OFSI, if the UK designations in play are not identical.
OFSI's enforcement posture has hardened in recent years. Its enforcement guidance makes clear that it considers whether a party took reasonable steps to assess its licensing position before proceeding, and that failure to identify an applicable general licence – or failure to seek a specific licence where none existed – will be weighed as an aggravating factor in any enforcement assessment. The practical implication is that the same transaction may require three separate authorisation analyses: OFAC, EU, and OFSI – and that the absence of any one of them is not remedied by the presence of the other two.
A cross-border scenario: where the three regimes produce different answers
In a recent matter, a financial services business with entities in New York, Amsterdam, and London was asked to process a payment on behalf of a client engaged in a permitted commercial transaction with a counterparty whose ultimate beneficial owner held a minority stake through a structure that had connections to a designated person. The payment sat within the scope of all three regimes.
Under the OFAC analysis, the ownership chain did not trigger the 50 percent rule: the designated person's aggregate ownership fell below the threshold, and a general licence in the applicable programme covered the category of transaction. The OFAC position was, with appropriate documentation, manageable.
Under the EU analysis, the control test produced a different answer. The factual indicators of control – board representation, contractual veto rights, and a management-services agreement – pointed toward the designated person exercising control over the counterparty regardless of the shareholding percentage. The EU derogation in the applicable programme did not extend to entities subject to control by a designated person. An application to the relevant national competent authority was required.
The UK position added a third variable. OFSI had designated the relevant person under a separate autonomous programme whose scope did not precisely mirror the EU designation. The applicable OFSI general licence covered certain payment categories but included a carve-out for transactions involving entities over which a designated person exercises control – which the same factual indicators engaged.
We assessed eligibility across all three regimes, identified the required prior steps under the EU and UK positions, prepared the national competent authority notification and the supporting documentation package, and the transaction proceeded within the available authorisation window. The matter illustrates the core lesson: a clean OFAC general licence analysis is the beginning of the enquiry, not the end of it.
When should a business involve sanctions counsel on general licence eligibility?
The standard case – a straightforward transaction by a clearly eligible party under a programme with an unambiguous general licence and no cross-border overlay – does not require external counsel. The compliance team should document the analysis, verify the current position, satisfy every condition, and retain the records.
Counsel should be involved where any of the following are present: (a) the transaction involves parties or goods that touch more than one OFAC programme; (b) a EU or UK regime runs in parallel and the derogation position is unclear; (c) the ownership or control analysis is genuinely uncertain; (d) a prior authorisation or notification step is required under any applicable regime; (e) the general licence has been recently amended or there is reason to believe it may not extend to the specific fact pattern; or (f) the business is relying on a general licence for a transaction of material value and a challenge to that reliance would have significant operational or reputational consequences.
There is also a specific trigger that many businesses overlook: where a US-person entity operates within a corporate group that includes EU or UK entities, the group-level analysis must address whether the reliance on an OFAC general licence at the US level creates exposure for the EU or UK affiliates under their own regimes. A shared service or intra-group transaction that is authorised for the US entity may not be authorised for its European sister company. We regularly advise group treasury functions on precisely this question.
A common misconception is that general licences eliminate the need for legal analysis. They do not. They eliminate the need for a formal licence application in cases where the conditions are met. The analysis of whether those conditions are met – particularly across multiple regimes with divergent eligibility tests, ownership rules, and documentary requirements – is itself a substantive legal task that carries real risk if done incorrectly.
Related practices
- Frozen account management under BIS / EAR – practical steps for managing blocked or frozen accounts under US export-control authority
- General licence eligibility: OFSI vs Australia – comparative analysis of UK and Australian general authorisation standards
- Humanitarian authorisation: BIS / EAR vs EU – how humanitarian carve-outs compare across US export-control and EU sanctions rules