How to test control where ownership sits below the threshold under EU

An EU compliance team runs a counterparty through screening. The target company does not appear on any list. Its majority shareholder is clean too. The deal looks clear. But one investor – holding a thirty-eight percent stake – is subject to an EU asset-freeze. Does the target fall within the prohibition? The answer is not found in the ownership arithmetic. It is found in the control analysis, and that analysis is where deals collapse without warning.

Under EU sanctions, the asset-freeze prohibition extends to entities owned or controlled by a listed person. Where direct or aggregate ownership sits below the fifty percent threshold, the question becomes whether the listed person nonetheless controls the target – a qualitative test that looks at actual influence, structural arrangements, and economic dependency, not at percentage holdings alone. As currently in force, the EU control test is the most fact-intensive ownership-and-control assessment among the major regimes, and it is the one most often applied incorrectly.

This guide walks through how to apply the EU control test step by step, where the analysis diverges from the OFAC and OFSI approaches, and which risk flags demand counsel before a transaction proceeds.

What does the EU control test actually require?

The EU asset-freeze prohibition catches funds and economic resources owned or controlled, directly or indirectly, by a listed person. Ownership above fifty percent is a bright-line trigger. Below that line, the test shifts to control – an assessment of whether the listed person can determine the commercial, operational or strategic decisions of the entity.

EU Council regulations do not reduce "control" to a checklist. Guidance and judicial decisions from the EU General Court make clear that control requires objective and sufficiently weighty evidence – it is not inferred from the mere existence of a minority shareholding or from the political or institutional character of the listed person's home country. This is an important limit: proximity to a powerful state actor does not by itself establish that the actor controls a private company. You need specific, verifiable evidence of actual influence over how the entity operates.

In practice, the relevant evidence tends to cluster around three questions: Can the listed person block or compel decisions at board or shareholder level? Does the listed person supply credit, revenues, or critical inputs on terms that create economic dependency? And has the listed person actually exercised direction over the entity's material decisions in the recent past? If the honest answer to all three is no, control is unlikely to be established. If even one is yes – or probably yes – the analysis must go further.

How does the EU control test compare with the OFAC and OFSI approaches?

OFAC's test is mechanical: 50 percent or more ownership, directly or indirectly, triggers the blocked status of the owned entity. There is no separate control limb. A listed person owning forty-nine percent of a company, with no other listed shareholders, does not by itself block that company under OFAC – even if the listed person is the founder, the dominant supplier, and the only person whose calls the board returns.

That is not the EU position. For EU purposes, forty-nine percent ownership combined with contractual veto rights, a dominant supply relationship, or governance arrangements that give the listed person effective say over operational decisions may be sufficient to establish control. We regularly advise clients who have cleared a counterparty under OFAC's bright-line test and then face a genuinely different answer under the EU rules.

OFSI's approach sits between the two. The UK ownership-and-control test can catch a non-listed entity controlled by a designated person, and UK case law – as currently in force – draws a distinction between existing, actual influence and a hypothetical ability to exert control. The UK courts have held that control must be real, not theoretical. This aligns the UK position closer to the EU's evidence-based approach than to OFAC's arithmetic, but the precise scope of the UK test is under active review. What this means for cross-border transactions is that a business with EU, UK, and US counterparties cannot apply a single bright-line standard and assume consistency.

For practitioners, the practical consequence is sequential analysis: clear the OFAC ownership test first, because it is fast and mechanical; then apply the EU control test to any counterparty where a listed person holds a material but sub-majority stake, has a significant commercial relationship, or has any governance role.

What evidence should you gather for the EU control test?

The starting point is the entity's formal ownership and governance structure: articles of association, shareholder agreements, and the current register of members. These tell you the legal position. They rarely tell you the full story.

Beyond legal form, you need evidence of the economic and operational relationship between the listed person and the entity. Relevant documents and data points include:

• Board composition and appointment rights – who nominated which directors, and whether the listed person can remove them.
• Shareholder agreements and any drag, tag, pre-emption, or veto provisions that give minority holders effective blocking powers.
• Material contracts – particularly supply agreements, exclusive distribution arrangements, or credit facilities where the listed person is counterparty.
• Revenue concentration – if the listed person or entities connected to them account for a dominant share of the target's revenues, economic dependency may be established.
• Evidence of actual direction – board minutes, instructions, or correspondence indicating that the listed person set or vetoed decisions on pricing, strategy, capital allocation, or key personnel.

What you are building is a factual record that can withstand scrutiny. The EU General Court has made clear that control is proved by the weight of objective evidence, not by inference. A weak record – "we could not find anything to suggest control" – is not the same as a well-evidenced conclusion that control does not exist. The former leaves you exposed; the latter protects the transaction.

What are the most significant risk flags in a sub-threshold ownership structure?

Sub-threshold ownership is not a safe harbour – it is the starting point of the harder question. Several structural patterns consistently produce elevated EU control risk, and these deserve particular attention in any compliance counsel review.

The first is a shareholder agreement that confers rights disproportionate to the equity stake. Veto rights over revenue-generating contracts, the power to block capital raises, or the right to appoint key management can give a listed minority holder effective control over the entity's commercial trajectory. Equity percentage and decision-making power often diverge significantly in closely held companies and joint ventures.

The second is economic dependency. Where a target company derives the majority of its revenues, inputs, or financing from a listed person or entities in that person's orbit, the listed person may exercise control through commercially coercive means rather than through formal governance mechanisms. Courts look at the economic reality, not only the organogram.

The third is the role of nominees or proxies. Where a listed person has transferred equity to family members, associates, or opaque holding vehicles, the ownership record may understate the true exposure. The EU control test is concerned with substance: if the listed person directs the nominee and the nominee holds the shares, the analysis does not stop at the nominee.

The fourth is a recent restructuring. If a counterparty has changed its ownership structure – transferred shares, created a new holding layer, or moved assets between entities – in the period following a listing event, that restructuring is a material red flag. A sharp change in corporate structure after a designation is precisely the pattern that the EU's anti-circumvention instruments are designed to address, and regulators treat it as such.

What is the step-by-step process for testing control under EU rules?

The EU control-beyond-bright-line assessment follows a defined sequence. Running these steps in order – and documenting each one – is the compliance counsel discipline that separates a defensible conclusion from a guess.

Step one: establish the full ownership map. Start with the current register and trace every layer of indirect ownership. Identify all listed persons anywhere in the chain. Confirm aggregate ownership across all listed persons. If aggregate ownership reaches or exceeds fifty percent, the entity is caught under the ownership limb and the control analysis is academic for practical purposes.

Step two: identify governance rights. Review the articles of association and every shareholder agreement. Map which rights attach to each stakeholder's position. Identify veto rights, appointment rights, and any mechanism by which a minority holder can determine or block decisions.

Step three: assess commercial dependency. Obtain a revenue and supply analysis for the target. Quantify the share of revenues and critical inputs attributable to the listed person or connected entities. A dominant share – and what counts as dominant will depend on the specific facts – is a strong indicator of economic control.

Step four: review the operational record. Examine board minutes, correspondence, and decision logs for evidence of actual direction by the listed person. This step often distinguishes a theoretical concern from a real one. If the listed person has not in practice directed the entity's decisions, the evidence record should reflect that clearly.

Step five: document the conclusion. Write a reasoned analysis that sets out the evidence reviewed, the factors present and absent, and the conclusion reached. A compliance note that records only the outcome – "not controlled" – without the reasoning is of limited value if the transaction is later reviewed. The analysis must be reproducible.

Step six: apply the cross-regime check. If the transaction has a US or UK dimension, repeat the analysis under OFAC's ownership test and the UK control test. Where the regimes produce different outputs, the stricter prohibition governs the conduct of any person subject to both.

When should you involve external sanctions counsel?

Not every sub-threshold ownership structure requires external counsel. But several situations make early involvement significantly more valuable than late involvement.

The first is a transaction where the listed person's stake is material – say, above twenty percent – and there is any contractual relationship between the listed person and the target, any governance right, or any evidence of past direction. The line between minority influence and effective control can be narrow, and the consequences of crossing it are serious.

The second is a merger, acquisition, or joint venture where the target operates across jurisdictions that include EU, UK, and US perimeter. In our experience, multi-regime control analysis conducted without specialist input routinely underweights the EU control question because it is more familiar to reach for OFAC's cleaner bright-line test.

The third is any situation where the ownership structure has changed recently or where the information available about beneficial ownership is incomplete. Incomplete information means incomplete conclusions, and an incomplete conclusion on a sanctioned-counterparty question is a material compliance risk.

The fourth is where a hit – even a partial or uncertain one – has already been flagged by screening. At that point, the question is no longer prospective. It becomes: what is the current legal position, what transactions may already have been caught, and what reporting obligations, if any, are already running? That is not a question for an internal compliance note. For a confidential review of your position under the EU control test, contact Calder & Vance at info@caldervance.com.

Does name screening alone satisfy the EU control-test obligation?

This is the myth that drives the most significant gap between a firm's perceived compliance posture and its actual legal exposure. Name screening alone is not enough.

Sanctions screening obligations attach on a risk basis, and a list-hit check against the direct counterparty addresses only one dimension of the required analysis. The EU control test requires an assessment of the entire ownership and governance structure – not just whether the counterparty itself appears on a list. A counterparty whose majority shareholder is unlisted but who is controlled by a listed person through economic or governance mechanisms will pass a name screen and fail a control analysis.

In our practice, we encounter this gap most often in three contexts. First, financial institutions using automated screening tools configured to flag listed-entity names but not to prompt ownership and control review when sub-threshold listed stakes are present. Second, exporters who screen the end-user but not the end-user's parent or significant investors. Third, M&A due diligence processes that use standard KYC screening rather than a sanctions-specific ownership and control review.

The correct standard is a risk-calibrated, structured review of ownership and control for any counterparty where a sub-threshold listed stake is identified – not a second pass of the same name-screening tool. For guidance on how to structure that review, and where it fits within a broader sanctions risk and compliance programme, our affiliate-level restrictions and entity-level risk service sets out the standard controls in detail.

Businesses operating in jurisdictions with their own ownership-and-control standards – including Japan – face additional compliance considerations. Our guide to control beyond the bright-line test under the Japan regime addresses that analysis in full. For the OFAC position, including the mechanical fifty percent test and its interaction with the EU approach, see our guide to control beyond the bright-line ownership test under OFAC.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.