Canada: control beyond the bright-line ownership test

A trading house in Toronto has screened its new supplier against every major sanctions list. No name match. The deal proceeds. Months later, a compliance review surfaces the real issue: the supplier is not listed, but it is directed by a person who is. The ownership stake is below the threshold – yet the relationship may still carry sanctions exposure. That gap is where the control question lives.

Under the Canadian sanctions regime, administered by Global Affairs Canada under the Special Economic Measures Act ("SEMA") and associated statutes, a non-listed entity can be caught not through a bright-line ownership calculation but through the practical reality of who directs its decisions. As of January 2026, Canadian authority looks past legal form to the actual relationships governing an entity's conduct – a test that sits alongside, and can extend well beyond, the mechanical ownership threshold. Name screening alone does not satisfy this obligation.

This guide walks a compliance team through one representative engagement: how the control question arises in a Canadian-nexus transaction, how to apply the test step by step, where the cross-border picture diverges from OFAC and OFSI, and what makes the position materially worse if the analysis is delayed.

The triggering scenario: when a clean list check is not a clean answer

A business with Canadian connections – a subsidiary, a bank account, a roster of Canadian-domiciled clients – enters a commercial relationship with a counterparty whose ultimate beneficial owner does not appear on any watchlist. Screening passes. The compliance officer signs off. But the counterparty's board decisions are driven by a designated person who holds a minority stake through an intermediate holding vehicle.

That is the scenario we see most often in cross-border matters. The designated person's formal ownership share is below any numerical threshold. No automated system flags the name at the entity level. Yet the Canadian rules, read together with their stated purpose, require more than a name match at the counterparty's surface layer. They require an assessment of who, in practice, governs the entity's material decisions.

Why does this matter? Because the prohibition under SEMA is not limited to dealings with listed persons directly. It extends to conduct that benefits, directly or indirectly, persons subject to the measures. A transaction routed through a non-listed vehicle that a designated person directs can fall within that prohibition. The legal form – minority shareholder, advisory board member, de facto principal – does not determine the outcome. The substance does.

In our experience, the gap between what a name-screening tool reports and what the law requires is most acute in two situations: complex group structures where control is exercised through contractual rights rather than registered shares, and transactions in sectors where ownership is deliberately diffused for commercial or regulatory reasons unrelated to sanctions at all.

Step 1 – Mapping the Canadian legal architecture

Canada's sanctions framework rests principally on SEMA and the Justice for Victims of Corrupt Foreign Officials Act ("JVCFOA"), both administered with Global Affairs Canada ("GAC"). The Governor in Council may make regulations under SEMA listing persons and imposing prohibitions; the designated authority then administers those measures. Separate regulations apply to distinct programmes, each with its own list of designated persons.

The prohibitions in SEMA regulations typically cover dealing in the property of a designated person, facilitating a dealing by a third party, and providing financial or other services for the benefit of a designated person. The phrase "for the benefit of" is the vector through which a non-listed entity controlled by a designated person becomes relevant. Any transaction that enriches or supports the designated person – even indirectly, through a corporate layer – can engage that prohibition.

GAC has not published a single numerical ownership threshold equivalent to OFAC's 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked). Instead, the Canadian position is functional: the question is whether a person benefits from, or is served by, the transaction. That framing means that a minority shareholding coupled with board representation or a veto right can produce a worse compliance position than a majority stake held passively by a person with no governance role.

This is a meaningful divergence from US practice. Under OFAC, the ownership threshold is mechanical: aggregate 50 percent or more and the entity is blocked, regardless of whether the blocked person exercises any actual influence. Under SEMA, ownership below any threshold can still be problematic if the facts establish that the transaction benefits a designated person through an influence relationship.

Step 2 – Identifying the indicators of control and benefit

The practical task is to identify whether a designated person directs, benefits from, or is served by the counterparty relationship, regardless of the ownership register. That task is structured around a defined set of indicators.

The first category covers governance rights: formal board seats, contractual appointment rights, consent rights over major transactions, and reserved matters that require the designated person's approval. These are the clearest indicators. A minority investor who holds a veto over material contracts or asset disposals is not a passive shareholder. That governance architecture confers practical direction over the entity's conduct.

The second category is economic benefit. Even without governance rights, a designated person who receives a royalty, a management fee, a profit share, or a debt repayment from a transaction with the counterparty benefits from that transaction in a manner that the "for the benefit of" prohibition is designed to reach. The payment need not be direct. It can flow through multiple corporate layers, and the Canadian rules follow the benefit, not the route.

The third category – and in our experience the one most often missed – is de facto direction. This covers scenarios where a designated person is not listed on any document but is the person whose instructions the counterparty's management follows in practice. Evidence of this often sits outside corporate registries: in email records, in the pattern of contract approvals, in which individual negotiates key terms, and in the identity of the person who the counterparty's employees treat as the ultimate authority. Sanctions due diligence that relies only on official filings will not reach this layer.

A fourth indicator is reputational or commercial dependency. Where a counterparty's business model depends substantially on a relationship with a designated person – as a principal supplier, a key customer, or a licensee – the designated person's ability to direct the counterparty's conduct may follow from that dependency even without formal governance rights. This is a softer indicator and does not by itself establish control, but it raises the level of scrutiny required.

Step 3 – Conducting the enhanced due diligence sequence

Once the initial screening flags a potential control concern, the compliance sequence moves into enhanced due diligence. This step-by-step process should be documented, because the record of the enquiry is itself a mitigating factor if a regulator later examines the relationship.

The first step is to obtain and review the corporate registry materials for the counterparty and every intermediate holding entity: constitutive documents, shareholder registers, director lists, and any publicly filed information about ownership changes. This establishes the formal ownership position as a baseline, not as a conclusion.

The second step is to map any contractual rights that supplement the formal ownership picture. Shareholder agreements, investor rights agreements, side letters, and loan agreements with governance conditions are the most important documents here. A convertible loan held by a designated person, for instance, may carry consent rights that are operationally equivalent to a blocking stake.

The third step is to review any information available about actual management conduct. Who attends board meetings? Whose approval is sought before major commercial decisions? Who signs contracts above certain thresholds? In a corporate group context, which individual at the designated person's level is the communication counterpart for the counterparty's management?

The fourth step is to assess the economic flow: does any revenue, fee, or other economic output from the contemplated transaction reach a designated person directly or indirectly? This requires tracing the beneficial ownership of any person receiving a portion of the proceeds, not only the registered counterparty.

The fifth step is to form a documented judgment. A compliance team that has worked through these four steps, recorded its reasoning, and reached a reasoned conclusion about the benefit question is in a materially better position than one that ran a list check and moved on. GAC, like other regulators, distinguishes good-faith analysis that reaches an arguable conclusion from a failure to perform any analysis at all.

How does the Canadian test compare with OFAC, OFSI, and the EU?

Practitioners advising on multi-jurisdictional transactions regularly have to hold the Canadian analysis alongside the OFAC, OFSI, and EU positions. The four regimes share a common purpose but reach it through different legal instruments, and the differences are practically significant.

OFAC's 50 percent rule is, as noted, a numerical floor. It is designed to give certainty: at or above the threshold, the entity is blocked. Below the threshold, a specific analysis is required, but the starting point is that the entity is not blocked unless independent grounds exist. OFAC has indicated that below-threshold ownership relationships can still create concern where other factors are present, but the mechanical bright-line is the primary tool. For a Canadian-nexus transaction, a counterparty that passes the OFAC 50 percent test may still require a full GAC-focused control analysis.

OFSI in the United Kingdom applies an ownership-and-control test that explicitly addresses the control dimension. The UK test catches a non-listed entity that is owned or controlled by a designated person. "Control" is defined to include holding more than 50 percent of the shares or voting rights, but it also includes the right to appoint or remove the majority of the board of directors, the ability to ensure the entity conducts its affairs in accordance with the designated person's wishes, or any right or power by which the designated person would be able to achieve that result. That formulation is substantially closer to the Canadian functional approach than to the OFAC bright-line.

The EU asset-freeze prohibition extends to making funds or economic resources available, directly or indirectly, to or for the benefit of listed persons. The EU control test looks at an ownership criterion of more than 50 percent but also at whether a listed person controls the entity. A September 2026 court ruling indicated that control requires objective and sufficiently weighty evidence; the character of a political system is not by itself sufficient. That is consistent with the direction of the Canadian analysis: evidence-based, functional, and not reducible to a single number.

The practical implication is this: where a transaction has exposure under Canadian law, there is a real probability that it also requires analysis under at least one other regime. A business with US dollar clearing, a UK subsidiary, or EU-domiciled counterparties faces a stacked analysis. The regime that imposes the stricter prohibition governs the conduct of a person subject to both. In our cross-border practice, the Canadian control question rarely travels alone.

For businesses with US-side exposure involving affiliate-level restrictions under the EAR, the analysis intersects in a different way: see our affiliate-level restrictions under BIS/EAR service page for how that dimension works. For the EU parallel, our guide on control beyond the bright-line under EU sanctions sets out the European position in detail. And for a further cross-regime perspective, the guide covering the Japanese treatment of this question provides useful comparative context.

Risk flags that elevate the position from amber to red

Not every below-threshold relationship with a designated person is equally urgent. A risk-based assessment distinguishes situations that call for enhanced review from those that warrant immediate escalation to counsel. The following flags move a situation toward the more serious end of the spectrum.

The first and most serious flag is evidence of active direction. Any indication that a designated person is issuing instructions to the counterparty's management – however informally – moves the situation out of the routine control-assessment process and into a question that requires legal advice before the transaction proceeds. This is not a matter of degree; it is a categorical change in the analysis.

The second flag is geographic concentration. Where a counterparty's operations are substantially concentrated in a jurisdiction that is itself subject to a thematic programme under SEMA, the control question interacts with a territorial dimension. The combination can reduce the analytical space available for a benefits-based safe harbour.

The third flag is a pattern of recent ownership change. A counterparty that has recently reorganised its shareholding – moved assets from a listed individual to a family member or a newly incorporated vehicle – may have done so for perfectly legitimate reasons. But it is also the pattern that precedes an attempt to put distance between a designated person and a commercially active entity. Enhanced scrutiny of the reorganisation is appropriate.

The fourth flag is a compliance programme that relies exclusively on automated name-screening. SEMA screening obligations attach on a risk basis; a name match at the surface layer is the start of the enquiry, not its end. Where a programme has no process for investigating ownership chains, governance rights, or economic benefit flows, the programme has a structural gap. That gap, if it surfaces in a regulatory examination, is itself a finding.

Is your compliance programme designed to detect benefit relationships as well as direct name matches? If not, the controls may be technically operational but structurally incomplete.

When to involve counsel and what that engagement looks like

The threshold for involving external counsel in a Canadian control analysis is lower than many compliance teams assume. Three situations call for counsel before a decision is made, not after.

The first is where enhanced due diligence produces ambiguous results. If the ownership chain is clear but the governance documents are incomplete, or if the economic benefit question turns on a contested interpretation of a contract, the compliance team has a judgment call that carries regulatory and commercial stakes. That is precisely the situation where a reasoned legal opinion – one that the business can present to GAC if required – provides both substantive guidance and a documented record of good-faith enquiry.

The second is where the transaction has a cross-regime dimension. A matter with Canadian, US, and EU elements requires coordinated analysis across the applicable regimes. An opinion that addresses only one regime while leaving the others unaddressed does not provide complete protection. In our experience, the most significant compliance failures in multi-jurisdictional contexts arise not from a failure to analyse any one regime, but from a failure to identify that a second or third regime applies at all.

The third situation is where a transaction has already proceeded and a control concern has subsequently emerged. GAC's approach to voluntary disclosure is a relevant mitigating factor in enforcement. Acting promptly, preserving records, and presenting a complete and accurate account of the analysis performed before and after the concern arose puts a business in a materially different position from one that delays. The window for the most effective response is short.

A compliance team that has worked through the steps above – mapping the Canadian legal architecture, identifying the indicators of control and benefit, conducting the enhanced due diligence sequence, and comparing the position across regimes – has the foundation for a substantive engagement with counsel. The engagement itself focuses on the judgment calls that require legal authority: whether the benefit test is met on the specific facts, whether a voluntary disclosure is warranted, and whether a transaction can be structured to remove or mitigate the exposure.

That last point deserves emphasis. The control question is not always a binary stop/proceed decision. In some cases, a transaction can be restructured to remove the channel through which a designated person benefits – by altering payment flows, changing the service scope, or engaging a different counterparty within a group. Counsel's role in that analysis is not to find a way around the rules; it is to identify what a lawful transaction looks like and whether the commercial objective can be achieved within those parameters. We do not advise on circumventing or evading sanctions.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.