A multinational trading house with counterparties across three continents runs a routine screening pass before closing a supply contract. The immediate counterparty is clean. But a secondary check surfaces a listed person holding a minority interest in the counterparty's parent. Is the contract blocked? Under the EU regime, the answer turns not only on percentages but on a layered test of ownership and control (the combined legal and factual assessment of whether a non-listed entity is effectively directed by a listed person) – and that test works differently from its OFAC counterpart in ways that determine whether a deal can close at all.
Under EU sanctions, ownership and control assessments EU require a business to establish both the formal ownership structure and whether a listed person exercises effective control over a non-listed entity, even where the listed person holds less than fifty percent of the shares. The governing authority is the relevant Council Regulation, interpreted through guidance issued by the European Commission and the EU General Court's case-law. As of July 2026, the EU test remains broader than the OFAC mechanical threshold, and divergences with the UK OFSI standard add a further layer of complexity for cross-border operations.
This analysis maps the EU ownership and control test in detail, compares it directly with the OFAC and OFSI approaches, identifies the points of greatest practical divergence, and sets out the steps a cross-border business should take before any transaction involving a counterparty with a potentially tainted ownership chain.
The EU Legal Basis and Governing Authority for Ownership and Control Assessments
The EU ownership and control test flows from the relevant Council Regulation applicable to each sanctions programme, interpreted in light of guidance from the European Commission and the EU General Court's developing body of annulment case-law. No single codified rule covers all programmes; the test is programme-specific, though its core elements are consistent across the major EU regimes.
The governing principle is that asset-freeze and dealing prohibitions apply not only to listed persons but also to entities owned or controlled by them. Ownership is assessed by reference to shareholding – but the EU approach does not stop at a fixed numerical threshold. A listed person holding forty-nine percent of a company can still trigger the control arm of the test. That matters because it shifts the analytical task from a mechanical arithmetic exercise to a qualitative assessment of actual influence.
The EU General Court has addressed the ownership and control standard in a series of annulment proceedings brought by listed persons and affected entities. In our cross-border practice, we read those judgments not as abstract constitutional law but as practical guidance on what evidence the Council and the Commission regard as sufficient to sustain a designation or an asset-freeze determination. The Court's review – examining proportionality, the sufficiency of the evidence base, and the adequacy of reasons given – tells compliance practitioners where the legal boundaries of the test actually sit, even if the Court does not always resolve the factual disputes in the same way a national court would.
A key structural point: the EU test is two-limbed. The first limb addresses formal ownership; the second asks whether a listed person exercises effective control regardless of the ownership level. Both limbs can operate independently. Proving the absence of formal majority ownership is therefore not a complete answer to the question of whether a non-listed entity is caught.
How the EU Ownership and Control Test Actually Works
The EU ownership test begins with the formal shareholding structure. A non-listed entity is caught if a listed person holds, directly or indirectly, a majority of the shares or voting rights. Unlike the OFAC 50 percent rule (OFAC's rule treating entities owned fifty percent or more in the aggregate by blocked persons as themselves blocked, as set out in OFAC guidance under IEEPA), the EU approach does not prescribe a single numerical trigger in all cases. Majority ownership is the clearest indicator, but the inquiry does not end there.
The control limb is more demanding to apply. Indicators of control include the right to appoint or remove a majority of the board, the right to exercise a dominant influence over the entity, or structural arrangements – shareholders' agreements, veto rights, financing terms, or contractual dependencies – that allow a listed person to direct the entity's commercial decisions without holding a formal majority. In our experience, this is where assessments become genuinely difficult: a listed person can sit at thirty percent of the equity and still satisfy the control test if the remaining shareholding is dispersed and the listed person controls the board appointment process.
Indirect ownership adds a further tier. The EU approach traces control through chains of intermediate holding companies. A listed person who owns seventy percent of an intermediate entity, which in turn owns forty-five percent of the operating company, may still be regarded as controlling the operating company if the indirect influence is sufficient. The assessment requires a full entity-tree analysis, not a single-layer check.
Acting on behalf of is a third concept that runs alongside ownership and control. An entity that acts on the instructions of, or for the benefit of, a listed person – even without any equity relationship – can be caught by the prohibitions in some EU programme regulations. Compliance teams should map this pathway separately from the ownership and control analysis.
Where Does the EU Test Diverge from OFAC and OFSI?
The divergence between the EU, OFAC, and OFSI approaches is not a theoretical technicality. It decides whether a transaction is prohibited, whether a licence is needed, and which authority has jurisdiction to issue one. For a cross-border business operating under all three regimes simultaneously, the strictest prohibition governs the immediate legal exposure – but the tests are different enough that a clean result under one regime is not a clean result under all.
OFAC vs EU. The OFAC test under the 50 percent rule is, in principle, simpler: if one or more blocked persons own, in aggregate, fifty percent or more of an entity directly or indirectly, that entity is treated as blocked regardless of whether it is itself listed. The test is arithmetic and does not, in the first instance, turn on control. An entity owned forty-nine percent by a blocked person is not automatically blocked under OFAC (though secondary-sanctions risk may remain). Under the EU, that same forty-nine percent holding could satisfy the control limb if the listed person exercises effective management influence. The EU test is therefore broader in the control dimension, while the OFAC test provides a cleaner arithmetic trigger that, in some cases, may be quicker to apply for routine screening. For a detailed comparison of the OFAC ownership and control framework, see our OFAC ownership and control assessment analysis.
OFSI vs EU. The UK OFSI test shares the EU's two-limbed structure: ownership and control are assessed separately, and a listed person can control an entity through mechanisms that do not reflect formal majority ownership. The OFSI guidance under SAMLA refers to ownership of more than fifty percent of shares or voting rights as one indicator, but control extends to the right to appoint or remove a majority of the board and to the ability to direct or ensure the operating decisions of the entity. In practice, OFSI and the EU approach are close in design. The divergence emerges in the institutional context: OFSI can issue guidance on specific cases and can communicate informally with affected businesses in ways that the EU Council, as a legislative body, cannot. Enforcement posture and response timelines differ as well.
Aggregation. Under OFAC, the fifty percent rule aggregates holdings of multiple blocked persons. If two blocked persons each hold twenty-six percent, the entity is blocked. The EU approach does not prescribe a simple aggregation rule in the same way, but the control analysis would capture a scenario where the combined influence of multiple listed persons is decisive. Practitioners should not assume that because neither listed person holds a majority individually, the EU control limb is automatically satisfied. We regularly advise on precisely this gap between the OFAC aggregation analysis and the EU control analysis.
For the interaction between the OFAC and BIS approaches, see our comparative analysis of OFAC and BIS ownership and control approaches.
Practical Risk Flags in EU Ownership and Control Assessments
The risk flags in EU ownership and control work fall into three categories: structural, evidential, and procedural. Missing any one of them can turn a routine compliance check into a regulatory incident.
Structural red flags. Entities with dispersed public shareholdings and a listed person at any meaningful level of the structure require enhanced scrutiny. Intermediate holding vehicles in third-country jurisdictions, particularly those with opaque beneficial-ownership registries, increase the difficulty of the analysis and the probability of an incomplete assessment. Joint ventures where a listed person holds a non-majority stake but has specific consent rights over commercial decisions are another pattern we see repeatedly in cross-border work.
Evidential gaps. The most common failure in EU ownership and control assessments is the absence of evidence about governance rights. Share registers and corporate filings identify formal ownership. Shareholders' agreements, board composition, financing covenants, and operational dependency relationships reveal the control picture. Many compliance teams stop at the registry check. That is not sufficient under the EU two-limbed test. A business that has reviewed only publicly available corporate filings has not completed an EU ownership and control assessment.
Procedural timing. EU sanctions lists are updated by Council implementing acts and Council decisions, which can take effect on the date of publication in the Official Journal. An entity that was clean yesterday may be caught today. Compliance programmes that rely on periodic batch screening rather than real-time monitoring create a window of exposure. In our experience, the interval between designation and the update of commercial screening databases is a consistent source of inadvertent breach. Verify the current position against the EU Consolidated List before relying on any database output.
The acting-on-behalf-of pathway. As noted above, this pathway operates independently of the ownership and control analysis. Where a counterparty has been directed by a listed person to enter into a contract – even without any equity relationship – the transaction may be prohibited. This is difficult to detect through standard screening but is a real enforcement risk in cases where the commercial rationale for a transaction is unclear.
The EU Licensing Route When the Analysis Flags a Concern
Where an EU ownership and control assessment flags a potential prohibition, the primary question is whether a licence or other authorisation is available. Under the relevant EU programme regulations, the competent authority is typically the national sanctions authority of the Member State where the relevant funds or economic resources are held or where the relevant transaction is to be performed. The European Commission provides coordination guidance, but licences are granted at the national level.
The EU licensing architecture is more fragmented than its OFAC counterpart. OFAC is a single authority. Under the EU regime, a business may need to apply to different national authorities depending on where assets are held and where the activity takes place. Cross-border groups with operations in multiple Member States should map their licensing exposure across each relevant jurisdiction before submitting an application, because inconsistent decisions across Member States – while rare – are possible in principle, and each authority applies the same regulation on its own administrative record.
Common EU licensing grounds include humanitarian purposes, legal representation costs, basic needs, and specific authorisations for transactions that serve a defined policy objective. The specific grounds available vary by programme. Grounds that exist under one programme may not be available under another. In our cross-border practice, we assess licence eligibility before an application is submitted – a step that avoids the loss of time and legal costs of an application that will not succeed on its own merits.
The position above covers the standard case. Your facts – the counterparty, the ownership chain, the Member State involved, and the specific programme – change the analysis materially. For an assessment of your exposure under the EU regime, contact Calder & Vance at info@caldervance.com.
A Cross-Border Scenario: When EU, OFSI, and OFAC All Apply
Consider a UK-based financial institution financing a trade between a European seller and a buyer domiciled in a third country. The buyer's ultimate parent is a company in which a listed person under EU, UK, and US programmes holds a forty-two percent stake and has the right to appoint two of five board members.
Under OFAC, the arithmetic test is not met – forty-two percent is below the fifty percent threshold. The institution must still assess secondary-sanctions risk and any secondary-exposure pathways, but the primary blocking analysis under the 50 percent rule does not trigger. Under OFSI and the EU, by contrast, the board appointment right is a strong indicator of control. Both the UK and EU tests are likely engaged. The financing transaction – if it involves funds flowing to or for the benefit of the entity – is potentially prohibited under UK and EU law, even though it passes the OFAC ownership test.
This scenario is not unusual in multi-jurisdictional trade finance. We have acted for institutions facing exactly this divergence, advising on which regime governs the transaction, what evidence is needed to satisfy the control analysis, and whether a licence is available and from which authority. The lesson: running only the OFAC check and stopping when it is clear is a compliance failure under UK and EU rules.
If a transaction has already been flagged or a compliance hold has been placed, an early legal review can preserve options that narrow with time. Write to Calder & Vance at info@caldervance.com for a confidential assessment.
What a Cross-Border Business Should Do: A Decision Sequence
A structured approach to EU ownership and control assessments reduces both compliance cost and residual legal risk. The following sequence is how we approach the issue with clients, adapted to the complexity of the counterparty structure.
- Map the full ownership chain. Start from the counterparty and trace every layer of ownership upward to the ultimate beneficial owner. Include intermediate holding entities, including those in third-country jurisdictions. Corporate registry checks alone are not enough; seek out shareholders' agreements and governance documents where available.
- Screen every entity in the chain. Run each entity and each identified natural person against the EU Consolidated List, the OFAC SDN List, and the OFSI Consolidated List. Use the current list, not a cached database. Note the date of each check.
- Apply the EU two-limbed test. For any counterparty with a listed person in the ownership chain, assess both formal ownership and effective control. Document the analysis in writing. A clean registry result is not a complete EU assessment.
- Apply the OFAC and OFSI tests in parallel. For cross-border transactions, do not stop at the EU result. The OFAC arithmetic test and the OFSI control test must each be applied on their own terms. Record where results diverge and flag the regime that generates the most restrictive outcome.
- Assess the acting-on-behalf-of pathway. Consider whether the commercial rationale for the transaction is consistent with an arm's-length relationship. Unusual pricing, unusual payment terms, or a counterparty introduced through a listed person's network are indicators that require further enquiry.
- If a flag arises, assess licensing availability before declining. A prohibited transaction is not necessarily one that cannot proceed. Assess whether a licence or authorisation is available, from which authority, and on what grounds, before a commercial decision is made to walk away.
- Document and retain. EU sanctions compliance documentation should be retained for the period required by the applicable record-keeping obligation under the relevant programme regulation – verify the current position with counsel. Documentation is your first line of defence in any regulatory enquiry.
Related practices
- Compliance audit and testing – sanctions screening programme review and testing for cross-border businesses
- OFAC ownership and control assessment analysis – the US fifty percent rule and aggregation in depth
Addressing a Common Misconception: One Clean Result Covers All Regimes
A persistent assumption among in-house teams is that a clean OFAC ownership check, or a clean result from a single commercial screening tool, is sufficient to clear a transaction under all applicable regimes. It is not. The OFAC 50 percent rule is the most widely known ownership test because it is clear, numerical, and frequently litigated – but it covers only OFAC's prohibitions. It says nothing about the EU or UK control analysis.
We regularly encounter compliance programmes that are OFAC-optimised: they aggregate blocked-person holdings, apply the fifty percent rule correctly, and flag direct matches on the SDN List. They then describe themselves as sanctions-cleared. For a business with EU or UK regulatory exposure, that description is incomplete. The EU control test can catch an entity that the OFAC analysis clears. The OFSI test can reach further than a direct-ownership screen would suggest.
The practical consequence is that a transaction approved on the basis of an OFAC-only analysis may still be prohibited under the EU Council Regulation applicable to the relevant programme. For a UK parent and a European subsidiary, both operating in the same transaction, that gap is a live enforcement risk under two separate regimes. The solution is not a more sophisticated tool. It is a more complete methodology – one that applies the specific test of each relevant regime to the specific facts of the counterparty structure.
In a recent matter, a financial institution's compliance team had approved a financing transaction after completing what their internal procedure described as a full ownership and control review. The review was OFAC-based. When the transaction attracted regulatory attention in a European Member State, it emerged that the EU control analysis had not been applied. The EU two-limbed test engaged the transaction through the control pathway at a forty-four percent indirect holding. We were instructed to advise on the exposure, scope the voluntary disclosure question, and prepare the regulatory response. The matter resolved, but the costs – direct legal costs, management time, and commercial disruption – were significant and avoidable.
Frequently Asked Questions: Ownership and Control Assessments EU Explained
Where do the regimes diverge on ownership and control assessments?
The principal divergence is that the OFAC test is primarily arithmetic – applying a fixed fifty percent aggregate ownership threshold – while the EU and OFSI tests are qualitative as well as quantitative, requiring an assessment of effective control even where formal majority ownership is absent. A listed person holding forty-two percent of a company is not automatically blocked under OFAC but may trigger the control arm of both the EU and OFSI tests if that person exercises dominant influence over the entity's governance. The EU approach also addresses acting-on-behalf-of relationships independently of the ownership and control analysis. For cross-border transactions, each regime's test must be applied separately; a clean result under one does not clear the others.
Which regime is stricter on ownership and control assessments?
In the control dimension, the EU and OFSI regimes are broader than OFAC because they do not set a single numerical ownership threshold as the exclusive test. The EU control analysis can catch entities where a listed person holds a minority interest but exercises effective governance authority. OFAC's 50 percent rule is clear and arithmetic in the ownership analysis, which makes it easier to apply mechanically – but it may not capture the same range of entities that fall within the EU or OFSI control test. Where a transaction is subject to all three regimes, the strictest applicable prohibition governs, meaning EU or OFSI control findings can prohibit a transaction that the OFAC ownership test would not.
What should a cross-border business do about ownership and control assessments?
A cross-border business should apply the specific ownership and control test of each relevant regime to every significant counterparty transaction. This means mapping the full ownership chain, screening at every level against current lists, applying both the EU two-limbed test and the OFAC arithmetic test, and separately assessing the OFSI control standard. Where any test flags a concern, the business should assess whether a licence is available before making a commercial decision. All steps should be documented and retained. Businesses operating under the EU regime should ensure their compliance methodology is not OFAC-optimised at the expense of the EU and UK control analyses. Counsel should be involved when the ownership structure is complex, when any flag arises, or when a regulatory enquiry is initiated.
About the Author
Claire Dubois advises on EU sanctions, including Council-regulation analysis, ownership-and-control questions, and annulment actions before the EU General Court. Calder & Vance – International Sanctions & Export Control Counsel.
About Calder & Vance
Calder & Vance is an independent international sanctions and export-control boutique. We advise multinationals, financial institutions, exporters, and individuals on the major regimes – OFAC and BIS in the United States, OFSI and ECJU in the United Kingdom, the EU Council regulations and the EU General Court, the United Nations Consolidated List, and the regimes of Switzerland, Canada, Australia, the UAE, Singapore, and Japan. Our work is limited to lawful compliance, licensing, delisting, enforcement defence, and due diligence. To discuss a matter, contact info@caldervance.com.
Disclaimer: This material is general information, not legal advice, and is not a substitute for advice on your specific facts. Sanctions and export-control rules change frequently and differ by regime; verify the current position before relying on anything stated here. Calder & Vance does not advise on circumventing or evading sanctions. For advice on your situation, contact info@caldervance.com.