A freight forwarder preparing a shipment from Canada receives a last-minute request to add a consignee in a third market. The end-user looks unfamiliar. The forwarder's compliance officer runs a quick web search, finds nothing obvious, and approves the shipment. Two months later, Global Affairs Canada contacts the exporter. The consignee appears on Canada's Area Control List, and a restricted-goods permit was required. The shipment has already landed.
Screening against Canada's denied-party and restricted-entity lists means checking every transaction against the instruments administered by Global Affairs Canada (GAC) – principally the lists generated under the Special Economic Measures Act (SEMA), the Freezing Assets of Corrupt Foreign Officials Act (FACFOA), the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, and the export-permit regime under the Export and Import Permits Act (EIPA). As of May 2026, Canada's sanctions and export-control architecture operates as a layered system: financial sanctions lists, denied-party designations, and controlled-goods or controlled-destination lists each impose different obligations, and a clean result on one list does not clear the transaction on another.
This guide walks through the screening process step by step, identifies the most frequent gaps, and explains how the Canadian regime sits alongside the US, UK, and EU controls that often apply to the same shipment or transaction.
Step 1 – Understand which Canadian lists are in scope
Effective screening starts by identifying which Canadian lists can touch the transaction at hand, because each list has a different legal trigger and a different regulator.
Canada does not publish a single consolidated "entity list" equivalent to the US Commerce Control List Entity List. Instead, the regime operates through four overlapping instruments. The SEMA list designates persons and entities subject to asset freezes and dealings prohibitions – the closest functional parallel to OFAC's Specially Designated Nationals list (the SDN List, which catalogues blocked persons and entities under US sanctions). The FACFOA list designates politically exposed persons and associates linked to corruption by foreign states. The United Nations Act (UNA) gives domestic legal effect to Security Council resolutions, which may designate additional persons. Finally, the EIPA and the associated Area Control List and Export Control List regulate who may receive controlled goods and to which destinations – independently of whether the counterparty appears on a sanctions designation list.
Why does this matter in practice? Because a shipment of dual-use goods to a clean, unlisted buyer may still require an Individual Export Permit if the destination country appears on the Area Control List, or if the goods fall within a controlled category. The screening process must address both the who and the what-and-where.
In our cross-border practice, we regularly advise exporters who screen their counterparties diligently against SEMA and FACFOA but overlook the export-permit requirements entirely. The two exercises are legally separate and operationally distinct.
Step 2 – Screen the parties: the denied-party check
The denied-party check covers all natural persons and legal entities involved in the transaction – the buyer, the end-user, intermediate brokers, freight agents, and, where the goods are financial instruments or services, the ultimate beneficiary.
The GAC consolidated sanctions list is the primary data source for SEMA and FACFOA screening. It is updated without a fixed schedule; designations can be added with immediate effect following Order-in-Council. This means a counterparty cleared last week may be listed today. Periodic re-screening at meaningful transaction milestones – at contract execution, at shipment, and on renewal of ongoing relationships – is not optional; it is a baseline compliance requirement.
Spelling and transliteration present a consistent challenge. Many designated persons' names appear in transliterated form from non-Latin scripts. Screening tools that apply only exact-match logic routinely miss near-match variants. A tool configured for fuzzy matching (a scoring technique that flags near-miss name variants above a defined similarity threshold) is standard practice in any well-run compliance programme. The threshold must be calibrated: set too low and the system generates unmanageable false positives; set too high and genuine hits are missed. Practitioners typically recommend a tiered approach – higher sensitivity for high-risk counterparties and lower-risk clearing only for counterparties with well-established, long-term, verified track records.
One dimension of denied-party screening that Canadian exporters sometimes underweight is ownership. SEMA prohibits not only direct dealings with designated persons but also transactions that benefit them. Where a designated person holds a significant stake in an unlisted legal entity, the transaction may still be caught. Canada's ownership and control analysis – the test for whether a non-listed entity is caught through a listed person's economic interest – is less mechanically codified than the OFAC 50 percent rule (OFAC's rule treating entities owned 50 percent or more, in aggregate, by blocked persons as themselves blocked). Under SEMA, the dealings-prohibition analysis looks at whether the transaction confers an economic benefit on the designated person; that enquiry can reach into ownership chains that stop short of the OFAC threshold.
Step 3 – Check controlled goods and controlled destinations
Once the party screen is complete, the next phase covers the goods themselves and the destination country.
Canada's Export Control List classifies goods and technology by category. Exporters must determine whether their goods fall within a controlled category and, if so, which permit is required for the proposed destination. The Area Control List identifies countries to which exports require an Individual Export Permit regardless of the type of goods. Exporters must therefore run two parallel checks: one on the goods classification and one on the destination.
This is the phase where Canadian export-control obligations most directly interact with US controls. Many goods exported from Canada by Canadian subsidiaries of US multinationals, or goods incorporating US-origin technology or components, are subject to the Export Administration Regulations (EAR) administered by the Bureau of Industry and Security (BIS). The EAR's Entity List is a US instrument: it restricts exports, re-exports, and in-country transfers of items subject to the EAR to named entities, irrespective of the transaction's primary jurisdiction. A Canadian exporter shipping goods that contain US-origin content above de minimis thresholds (the minimum proportion of US-controlled content below which the EAR does not apply to a foreign item) must screen against the BIS Entity List as well as the GAC lists.
We regularly advise on exactly this intersection. The cross-border complexity is not abstract: a single shipment from a Canadian manufacturer incorporating US components to a buyer in a third market may trigger Canadian export-permit requirements, US re-export obligations under the EAR, and – if the buyer is in a country subject to secondary-sanctions risk – UK or EU considerations as well. For further detail on BIS Entity List mechanics and deemed-export controls on technology, see our service page on deemed export and technology controls under the BIS/EAR.
Step 4 – Assess secondary-sanctions and extraterritorial risk
A transaction that is clean under Canadian law may still carry material risk if counterparties or routes bring US, UK, or EU secondary-sanctions exposure into the picture.
Secondary sanctions (measures targeting non-US – or non-UK, non-EU – persons for conduct that the administering jurisdiction treats as supporting a designated party or a sanctioned programme) are primarily a US mechanism administered by OFAC. They operate extraterritorially and can reach Canadian entities transacting in US dollars, through US correspondent banks, or with counterparties subject to US sanctions programmes. A Canadian company that is not itself a US person, dealing in non-US goods, may still find that its transaction triggers an OFAC enforcement concern if a US bank clears the payment or if the goods contain a US-origin component.
The UK's OFSI (the Office of Financial Sanctions Implementation) and the EU Council sanctions regimes also operate independently of Canada. Where a buyer is designated under a UK or EU regime but not yet listed under SEMA, a transaction with that buyer may be permissible under Canadian law but prohibited under UK or EU law – which matters whenever the Canadian exporter has UK or EU operations, personnel, or financial relationships. Exporters operating in multiple jurisdictions must build multi-regime list coverage into their screening logic, not treat it as a supplementary check.
For a practical comparison of how the major regimes approach denied-party screening across jurisdictions, our cross-border guide on entity list screening across borders sets out the regime-by-regime differences and where misalignments create the greatest risk.
Step 5 – Document the screening result and escalate where there is a hit
A screening result – positive or negative – is only useful if it is properly documented and retained.
Canadian export-control and sanctions compliance does not specify a single universal record-keeping period across all instruments, but GAC guidance and the obligations under the EIPA, SEMA, and FACFOA collectively require that exporters maintain records sufficient to demonstrate compliance. In our practice, we advise clients to maintain screening documentation, supporting data sources, and escalation records for a minimum period that matches the longest retention obligation applicable to the transaction – and to check the current requirement before relying on any assumed standard.
Where a screening check produces a potential hit – a name match, a near-match above the fuzzy threshold, or a destination flag – the process must move to escalation. Escalation means human review by a qualified compliance officer or external counsel; it does not mean overriding the flag without analysis. The reviewer must assess:
- whether the matched individual or entity is the same person as the screened counterparty (identity resolution)
- whether the transaction falls within the scope of the relevant prohibition or permit requirement
- whether a licence, permit, or statutory exception is available
- whether the transaction should be refused, suspended, or voluntarily disclosed to GAC
A voluntary self-disclosure (VSD – a proactive report to the regulator of a potential violation, before enforcement is commenced) to GAC can be a significant mitigating factor in any subsequent enforcement proceeding. The decision to disclose, and the timing and scope of that disclosure, is one of the most consequential compliance judgments a business makes. It should not be made without advice.
Common risk flags and the myths that obscure them
The most consistent error in Canadian denied-party screening is treating the SEMA list as the only list that matters. Exporters in sectors such as technology, advanced manufacturing, and life sciences must layer goods-classification and destination checks on top of the party screen.
A second risk flag is screening at the point of initial contract but not at shipment. Canada's GAC list updates without a predictable publication cycle. A counterparty cleared at contract signing may be designated by the time goods move. Compliance programmes that screen once and rely on that result are vulnerable.
The third flag is the ownership question. As noted above, SEMA's dealings prohibition can reach transactions that benefit a designated person indirectly. Screening the direct counterparty and stopping there, without tracing the beneficial ownership chain, leaves a material gap.
There is a persistent myth among smaller exporters that Canadian sanctions and export controls apply only to large multinationals or defence-sector businesses. That is wrong. SEMA applies to all persons in Canada and all Canadians abroad. The EIPA export-permit regime applies to any Canadian exporter of controlled goods, regardless of size. A technology start-up shipping software tools to a third-market buyer faces the same obligations as a large manufacturer – and may have fewer resources to manage a compliance failure when it occurs. Have you mapped your goods against the Export Control List, or assumed that software exports are uncontrolled?
In our experience, the businesses that face the most acute enforcement risk are not those who deliberately disregard the rules. They are those who have partial programmes – a party screen without a goods check, or an annual audit without ongoing monitoring – and who discover the gap only when GAC contacts them. At that point, the question is no longer how to prevent the problem; it is how to manage it.
When to involve counsel – and what that looks like
Screening is a process a well-resourced compliance team can run internally. But several situations call for external sanctions counsel to be involved early.
The first is a potential hit that is not immediately resolvable by the compliance officer. Identity resolution for near-match results, ownership-chain analysis for beneficial-interest questions, and permit eligibility assessments all benefit from specialist input. A decision made without legal advice to proceed with a transaction that later proves to involve a designated party is significantly more difficult to defend than one where counsel reviewed and cleared the matter.
The second situation is a failed or refused permit application. GAC processes export-permit applications and can request additional information or refuse the permit. Where a refusal occurs, the grounds for refusal and the options available – resubmission with additional documentation, or a reconsideration request – require careful navigation. The window for response is typically short.
The third situation is a suspected violation. Whether the issue is a shipment that has already occurred to a restricted destination, a payment made to a subsequently designated party, or a disclosure obligation that may have been missed, early legal advice is essential. The decision on whether to make a voluntary self-disclosure to GAC, and on the form and timing of that disclosure, is not one to take without specialist input.
A micro-scenario from our practice: a technology business in the logistics sector discovered, during a periodic internal audit, that goods shipped to a third-market distributor over the preceding eighteen months included controlled-category items. The distributor had passed party screening throughout. The gap was at the goods-classification stage. We conducted a rapid classification review, assessed the permit position, and advised on the voluntary self-disclosure process. The matter was managed through disclosure before any enforcement contact was received. Outcomes in similar situations are never guaranteed – every case turns on its own facts – but early action consistently preserves options that delay narrows.
If a transaction has already been flagged, or a review has identified a potential compliance gap, an early conversation with counsel can preserve options that contract with time.
Related practices
- Deemed Export and Technology Controls (BIS/EAR) – US controls on technology transfers and deemed exports, with cross-border implications for Canadian entities
- Entity List Screening: Cross-Border Guide – how the major denied-party and entity-list regimes compare, and where multi-regime gaps arise
- Entity List Screening: EU Guide – the EU Council Regulation approach to restricted-party screening, including ownership and control