Calder & Vance International Sanctions & Compliance Counsel

Delisting & Designation Challenges · OFAC

OFAC vs OFSI: Managing relisting risk: what businesses miss

A company has just succeeded in having its name removed from the SDN List (OFAC's list of Specially Designated Nationals and blocked persons). Its legal team is celebrating. Its compliance officer is already asking the harder question: what happens next? Delisting is not a terminus. It is a conditional state – and in our cross-border practice, the relisting risk that follows a successful designation challenge is the issue businesses most consistently underestimate.

Managing relisting risk after an OFAC or OFSI delisting requires a structured post-delisting compliance posture, maintained for as long as the underlying enforcement interest persists. Under OFAC, the original designating authority retains the power to relist on new or continuing grounds, with no mandatory waiting period. Under OFSI, the statutory review cycle provides slightly more procedural predictability, but the substantive threshold for relisting is no higher. The divergences between the two regimes are operational and strategic – and ignoring them is how businesses find themselves back on a list they worked hard to leave.

This analysis sets out the legal basis for relisting under each regime, maps the key procedural divergences, identifies the conduct that most commonly triggers a second designation, and explains what a cross-border business must put in place to keep its delisting durable. It is written for General Counsel, compliance heads, and board advisers managing a post-delisting period across the US and UK regimes simultaneously.

What is the legal basis for relisting, and how does OFAC differ from OFSI?

Both OFAC and OFSI can relist a delisted party without initiating an entirely new designation process, provided there is a legal basis that satisfies the applicable threshold. The authority for each sits in the primary legislation: IEEPA for most US programmes and the Sanctions and Anti-Money Laundering Act ("SAMLA") for the UK. Neither statute imposes a grace period or a mandatory interval between a delisting and a subsequent redesignation.

OFAC's standard requires that a party meet the criteria for designation under the relevant programme at the time of the relisting decision. That is a prospective test. It means that new conduct – new transactions, new relationships, or a material change in ownership – can satisfy it independently of anything that occurred before the original delisting. It also means that OFAC does not need to revisit the original designation; the relisting is legally self-contained.

OFSI operates under a similar logic, but SAMLA's statutory review mechanism introduces a regular cadence. Reviews are periodic, and OFSI is required to consider whether the designation criteria continue to be met. That review can conclude in continued designation, variation, or revocation – but it can equally lead to relisting where OFSI has grounds it was not previously relying on. In our experience, businesses that treat an OFSI review as a formality rather than a substantive audit of their ongoing conduct expose themselves unnecessarily.

Where the regimes diverge most sharply is in transparency. OFAC may relist without prior notice to the affected party. OFSI's procedure is more formally structured, with greater opportunity to respond before a final designation decision. That procedural difference has real strategic value – but it is available only to parties who have maintained the relationship with the authority and kept their compliance posture documented.

What conduct triggers relisting under OFAC?

Relisting under OFAC most commonly arises from one of three categories of post-delisting conduct: resumed association with currently designated persons, engagement in the activity that originally supported the designation, or a failure to comply with the conditions of any settlement agreement or consent order entered as part of the delisting. Each carries a different risk profile and a different response strategy.

Resumed association is the most frequent trigger. A delisted individual who rejoins a board, resumes a business relationship, or accepts a role at an entity connected to currently designated persons provides OFAC with precisely the factual predicate it needs. The association does not have to be commercial. Family financial arrangements, shared legal representatives, and joint property interests have all featured in enforcement contexts as evidence of ongoing connection. Do you know who your directors and senior officers are currently connected to?

The second category – resumed activity – is more nuanced. Where the original designation concerned sectoral involvement, OFAC will scrutinise any re-entry into that sector, even where the specific transactions are structured differently. Compliance teams sometimes assume that changing the counterparty or the product is sufficient distance. It is not, where the sectoral or jurisdictional exposure remains materially the same.

Settlement breaches are the third category. Where a delisting was negotiated as part of a broader resolution – involving a settlement agreement, a monitorship, or a condition that certain relationships be terminated – any material departure from those conditions creates both a relisting risk and a separate enforcement exposure. In those situations, relisting and a civil monetary penalty can run concurrently. The lesson is that the conditions attached to a delisting are not administrative formalities. They are enforceable obligations, and OFAC's enforcement division treats them accordingly.

How does OFSI's approach to relisting risk differ in practice?

OFSI's relisting risk is governed by a broadly similar substantive test, but the procedural pathway and the evidentiary culture differ in ways that matter operationally. Under the UK regime, the government must have reasonable grounds to suspect that the person meets the designation criteria. "Reasonable grounds to suspect" is a lower threshold than proof. It means that associations, conduct, and financial arrangements that fall well short of criminally actionable behaviour can still support a redesignation.

The UK's statutory review cycle is the key structural feature. OFSI must review each designation within a defined period following the original designation and at regular intervals thereafter. That review is an opportunity. Businesses and individuals who engage proactively – providing evidence of changed circumstances, updated ownership structures, or compliance programme improvements – are better positioned than those who wait passively. OFSI's guidance makes clear that the review is not automatic confirmation of a continued designation; it is a substantive reconsideration.

What businesses consistently miss is that the standard for relisting under OFSI can be met by intelligence gathered since the original delisting, even where that intelligence was not available at the time of the earlier review. There is no estoppel equivalent. A party cannot rely on a prior review conclusion to block a subsequent designation, provided the new decision is supported by fresh or newly available grounds. That is true under OFAC as well, but OFSI's review cycle creates natural pressure points at which new intelligence tends to surface in the decision.

There is also a divergence on notification. OFSI is generally required to notify the designated person of a new or varied designation, and there are formal routes to challenge a decision. OFAC's notification practice is less formally prescribed. In our experience advising clients who have been through both processes, the UK regime affords somewhat more time to respond when relisting is being considered – provided the affected party has maintained a dialogue with OFSI throughout the post-delisting period, rather than retreating from contact.

Where does the EU regime intersect, and why does it matter for cross-border businesses?

For a business with EU operations or EU-connected counterparties, the analysis cannot stop at OFAC and OFSI. EU designations under the relevant Council regulations are legally independent of both US and UK decisions. A party delisted by OFAC may remain designated under EU law, and vice versa. The EU General Court provides the primary judicial avenue to challenge EU designations, and its case law has developed a body of procedural protections – the right to reasons, the right to respond – that in some respects exceed what either OFAC or OFSI provides administratively.

The practical implication is that a post-delisting compliance posture designed only for one regime can leave residual exposure under another. We regularly advise clients who have secured an OFAC delisting and then discover that EU-nexus transactions are still blocked under a separate Council regulation. That situation is not academic; it arises wherever a business has EU counterparties, EU bank accounts, or goods that route through EU member states.

There is also the question of what EU-incorporated subsidiaries or EU-licensed financial institutions do when their US parent has been delisted but the EU listing remains. De-risking decisions by those entities – choosing to maintain restrictions even after an OFAC delisting – reflect a rational legal judgment about their own EU law exposure. They are not, in that sense, acting unreasonably. But the effect is that a delisted party may find normal business relations resuming on one side of the Atlantic while remaining blocked on the other.

The ownership and control test – the UK and EU test for whether a non-listed entity is caught through a listed person – also remains relevant after a delisting. If a delisted individual retains a significant ownership stake in a corporate entity, that entity's status under EU rules (where the test includes control as well as ownership) requires re-examination each time the individual's designation status changes. Businesses that restructured their ownership during a designation period should reassess those structures post-delisting to confirm they are not carrying legacy arrangements that create unnecessary opacity.

What are the specific risk flags compliance teams consistently miss?

In our cross-border practice, the post-delisting period surfaces a consistent set of risk flags that compliance teams – even experienced ones – underweight. The first is timing asymmetry. When a delisting takes effect, the relevant lists are updated, but counterparties and financial institutions are not automatically notified. Businesses that have been screened out of banking relationships, supply chains, or trading platforms need to affirmatively re-qualify. That process takes time, and in the gap, informal workarounds sometimes develop. Those workarounds – payments through intermediaries, warehousing arrangements with third parties – can themselves create the very associations that support a relisting.

The second risk flag is the residual 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked). Where a delisted individual continues to hold ownership interests in third-party entities, those entities require re-screening. But the screening needs to account for aggregation: two blocked persons each with a minority stake can together push an entity over the threshold. When a delisted person's former co-shareholders remain designated, the ownership arithmetic in connected entities can still produce a blockable result – even after the individual's own delisting.

Third, businesses miss the signalling effect of ancillary relationships. OFAC and OFSI both monitor professional advisers, asset managers, and introduced business. A delisted party that retains a lawyer or accountant who also acts for currently designated persons may inadvertently create an evidentiary record of continued proximity to the sanctions environment. The relationship does not need to be directly transactional to be relevant to the designation analysis.

Fourth, and most importantly, businesses underestimate the institutional memory of enforcement agencies. The original designation file does not disappear on delisting. OFAC and OFSI analysts monitoring the sector or the jurisdiction will continue to encounter the delisted party's name in intelligence streams. Any new appearance – in transaction data, in intelligence products, in beneficial ownership registries – is viewed against that background. The threshold for escalating a monitoring flag to a relisting recommendation is lower for a party with a prior designation history than for a first-time subject.

How should a business structure its post-delisting compliance posture?

A durable post-delisting compliance posture has five elements, each addressing a distinct relisting vector. The first is a documented relationship-mapping exercise conducted within the first 30 days of delisting. That exercise identifies every current commercial, financial, and personal relationship that has any connection to currently designated persons or to the sector or jurisdiction that generated the original designation. The output is a living document, not a one-time snapshot.

The second element is a proactive communication programme with the relevant authority. For OFSI, this means engaging with the review process rather than waiting for it. For OFAC, it means maintaining the compliance culture that was demonstrated in the delisting petition – whether that petition included a voluntary self-disclosure, a remediation plan, or a settlement. Agencies interpret silence negatively. A party that disappears from contact after a delisting is harder to defend when relisting is being considered.

The third element is a transaction-level compliance protocol that applies the same substantive standards as the primary regime to all new business. This is not about nominal compliance. It is about being able to demonstrate, if challenged, that every significant transaction since the delisting was reviewed against the applicable regime's prohibitions before it was executed. In a relisting proceeding, the evidence of a well-maintained compliance programme is one of the most persuasive mitigating factors available.

Fourth, a business should maintain a record-keeping programme that is capable of producing the relevant transaction and relationship records at short notice. Under OFAC, the standard record-keeping period for transactions subject to sanctions rules is five years. Under OFSI's enforcement guidance, equivalent obligations apply. A business that cannot produce records promptly when questioned faces a compounded risk: the agency draws an adverse inference, and the relisting risk escalates independently of whether the underlying conduct was actually problematic.

The fifth element is regular external review. An annual review by sanctions counsel who can test the programme against the current state of the relevant regimes – including any new guidance, new designations in connected networks, or new enforcement trends – provides both the substantive assurance and the documented external scrutiny that supports a defence against relisting. It is also, in our experience, the element that post-delisting businesses most commonly defer until after a problem has arisen rather than before.

When should a business involve sanctions counsel in managing relisting risk?

The answer is earlier than most businesses currently do. The common pattern is to engage counsel intensively during the delisting process and then to reduce external support once the delisting is confirmed. That pattern is the reverse of what the risk profile justifies. The post-delisting period – typically the first 12 to 24 months – is the period of highest relisting risk, because it is the period during which the business is re-entering the market, resuming relationships, and operating under the closest scrutiny from the designating authority.

Counsel should be involved at the point of re-qualifying with financial institutions and counterparties. That process involves representations about the business's legal status, and those representations need to be accurate. Inconsistencies in how a delisting is described to different counterparties can create evidentiary problems if a relisting is subsequently pursued.

Counsel should also be involved in any transaction that touches the sector, jurisdiction, or network that gave rise to the original designation. That does not mean all transactions require individual legal review – a well-designed compliance programme handles routine screening internally. It means that transactions with any elevated profile under the original designation criteria should be routed for external review before execution, not after.

Finally, if the business becomes aware of intelligence suggesting that relisting is being considered – through regulatory enquiries, information requests, or formal notices – counsel should be involved immediately. At that stage, the available response window is short, and every step taken without legal advice carries the risk of foreclosing options. The position above covers the standard case. Your facts – the specific regime, the original designation grounds, the post-delisting conduct, and the current counterparty relationships – change the analysis materially.

If you are managing a post-delisting period under OFAC, OFSI, or both, and you want an assessment of your current exposure, contact Calder & Vance at info@caldervance.com.

A common misconception: "delisting means the risk is over"

Perhaps the most persistent myth in post-delisting practice is that a successful delisting constitutes a clean slate. It does not. The designation file remains. The underlying intelligence streams continue. The enforcement interest, if it was genuine, does not dissolve because a petitioner met the procedural requirements for removal. Businesses that operate on the assumption that a delisting resets their relationship with the relevant authority to zero will typically discover otherwise – and usually at a moment when the relisting process is already advanced.

What a delisting does create is a procedural baseline. It establishes that, as of a specific date, the relevant authority accepted that the designation criteria were no longer met. That baseline is valuable. It provides a point of legal argument, a record of the government's own prior conclusion, and – in OFSI and EU proceedings – a formal starting point for any subsequent challenge. But it is a baseline, not a guarantee. The authority's subsequent view of the delisted party's conduct is not bound by what it concluded at the time of the delisting.

In a recent matter, a trading-sector business that had successfully navigated an OFAC delisting re-entered a related market segment within 12 months. The new activity was structured differently from the original conduct, but the counterparty network overlapped significantly with persons who remained designated. We were instructed to conduct a pre-transaction review and identified three relationships that would, if continued without structural changes, have provided adequate grounds for a relisting recommendation. The business restructured those arrangements before executing the transactions. The matter closed without further regulatory action. That outcome was a function of early instruction, not luck.

If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review.

Related practices

Frequently asked questions

Where do the regimes diverge on managing relisting risk?
OFAC and OFSI share a broadly similar substantive threshold for relisting, but diverge procedurally. OFAC may relist without prior notice or a mandatory review cycle; OFSI operates within a statutory review cadence and generally provides more formal opportunity to respond before a final relisting decision. The EU regime is legally independent of both: a delisting under OFAC does not affect EU status, and EU proceedings carry their own procedural protections under the EU General Court's developing case law. For cross-border businesses, the three regimes must be managed in parallel, not sequentially.
Which regime is stricter on managing relisting risk?
Strictness depends on the dimension being assessed. OFAC is more demanding in terms of notice: it can relist rapidly and without the procedural steps that OFSI's review mechanism requires. OFSI's "reasonable grounds to suspect" standard is, on its face, a lower evidentiary threshold than OFAC's criteria for some programmes, though in practice both agencies set a bar that post-delisting conduct can readily meet if associations with designated persons or prohibited activities resume. Neither regime is inherently more lenient; the appropriate posture is to design for the stricter requirement on each dimension and apply it consistently across both.
What should a cross-border business do about managing relisting risk?
A cross-border business should implement a five-element post-delisting compliance posture immediately on delisting: conduct a relationship-mapping exercise, establish proactive communication with the relevant authority, apply transaction-level compliance protocols, maintain records for at least five years, and commission an annual external review by sanctions counsel. For businesses operating across OFAC, OFSI, and EU regimes, the programme must account for each regime's independent legal basis and review cycle. Early instruction of counsel – particularly before re-entering markets or networks connected to the original designation – is the single most effective relisting-risk mitigation measure available.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.