A cross-border trading company screens its counterparty list on a Monday morning. One name returns a potential match against a listed individual under Canada's autonomous sanctions programme. The compliance officer is unsure whether to freeze the funds, report to Global Affairs Canada, or call legal counsel first. She has a narrow window to act – and each decision taken in the wrong order may compromise the firm's position.
Under Canada's Special Economic Measures Act ("SEMA") and its associated regulations, a person in Canada – or a Canadian wherever located – who holds property owned or controlled by a designated person must, as a rule, report that fact to the Royal Canadian Mounted Police and to Global Affairs Canada ("GAC") promptly after the holding comes to their attention. A parallel obligation requires that the property be frozen immediately upon designation. The reporting window and the freeze obligation are distinct steps, and conflating them is one of the most common escalation failures we see.
This guide walks through the escalation and reporting procedure under Canada's sanctions regime step by step, identifies the critical decision points, and compares key features with the OFAC, OFSI, and EU positions where the divergence is practically significant.
Step 1 – Understand the governing authority and legal basis
Canada's primary financial-sanctions instrument is SEMA, administered by GAC. SEMA grants the Governor in Council authority to make regulations imposing economic measures against a foreign state, entity, or individual. Each sanctions programme operates through a separate set of thematic regulations made under SEMA – one for each designated country or situation – and maintains its own schedule of listed persons.
GAC publishes and updates the Consolidated Canadian Autonomous Sanctions List ("CASL"), which is distinct from the UN Consolidated List. The CASL is the operative screening reference for businesses and financial institutions subject to Canadian law. An individual or entity may appear on the CASL without appearing on any other regime's list, and vice versa. That divergence matters for a cross-border business that runs only a single-regime screen.
Canada's Export and Import Permits Act ("EIPA") governs strategic-goods controls, administered by GAC's Trade Controls Bureau. For a business handling dual-use or controlled goods, SEMA and the EIPA can engage simultaneously – a situation that requires a single, coordinated escalation path rather than two parallel tracks. In our experience, businesses that separate these streams into different compliance silos create dangerous gaps where items that are both subject to financial sanctions and export-licence requirements fall through the cracks.
GAC coordinates enforcement referrals with the Royal Canadian Mounted Police ("RCMP"). The RCMP holds primary authority over criminal enforcement of sanctions breaches. A firm receiving a GAC inquiry should treat it as a potential precursor to an RCMP investigation and involve counsel immediately.
Step 2 – Trigger identification: when does the escalation clock start?
The escalation clock starts the moment a business has reasonable grounds to believe it is holding or controlling property belonging to a designated person, or that it has provided a service to such a person. That moment – not the point of formal confirmation, and not the point at which management is notified – is the legal trigger.
What counts as a trigger? Practically, it includes:
- a positive or unresolved match on the CASL from the firm's screening tool;
- a transaction-monitoring alert linking a payment to a designated person or a designated person's known associate;
- a commercial document – contract, bill of lading, letter of credit – naming or referencing a person on the CASL;
- a notification from a correspondent bank, trading partner, or freight forwarder identifying a potential match; or
- information from a third party – including law enforcement – indicating that property held by the firm may belong to a designated person.
The trigger is objective: if a reasonably competent compliance officer reviewing the facts would have reasonable grounds, the clock runs. A business cannot delay escalation on the basis that senior management has not yet been briefed. That internal sequencing question is separate from the regulatory trigger.
How does this compare across regimes? Under OFAC, the obligation to block property arises immediately upon designation or upon discovery that property is held. Under OFSI, a firm must notify OFSI as soon as practicable once it knows or suspects it holds funds subject to the financial-sanctions regime. The EU regime requires reporting to the competent national authority promptly. Canada's formulation – prompt reporting after the fact comes to attention – sits broadly in the same family, but the institutional address (RCMP and GAC concurrently) and the precise obligation differ enough that a compliance programme designed around OFSI rules will not automatically satisfy SEMA without review.
Step 3 – Immediate freeze: what must stop before you report?
Before submitting any report, the business must freeze the property. Dealing in, facilitating a dealing in, or making available funds or property to a listed person is prohibited from the moment of designation – there is no grace period for ongoing transactions already in flight.
In practical terms, this means:
- Suspend the transaction or instruction immediately upon a positive-or-unresolved match. Do not complete a payment, release goods, or execute a transfer pending confirmation.
- Isolate the asset or account within internal systems so that no further automated or manual processing occurs.
- Document the time and basis of the freeze decision, including the match that triggered it and the name of the officer who authorised it. Record-keeping from this moment is critical for any later regulatory inquiry.
- Do not notify the customer or counterparty that a freeze has been applied before you have taken legal advice. Tipping-off rules under Canadian anti-money-laundering law may apply, and premature disclosure can itself create liability.
The freeze step is jurisdictionally concurrent with similar obligations under OFAC and OFSI. If the same transaction is also caught by a US nexus – a US-dollar leg, a US correspondent, a US-incorporated entity in the chain – OFAC's blocking obligations apply in parallel. The stricter prohibition governs: freezing under Canadian rules does not discharge a simultaneous obligation under OFAC, and vice versa.
Step 4 – The reporting obligation: who receives the report and what must it say?
Canada's reporting requirement is bifurcated. A person who holds or controls frozen property must report to both GAC and the RCMP. The two reports are not the same document, and the information each authority requires may differ in emphasis.
For the GAC report, the business should be prepared to provide:
- the identity and description of the property frozen;
- the basis on which the person or entity to whom it belongs is designated (the relevant SEMA regulation and list, without prejudging ultimate beneficial ownership);
- the value and nature of the property at the time of freeze;
- the relationship of the reporting person to the property (custodian, financial institution, service provider, etc.); and
- contact details for the reporting person's authorised representative.
For the RCMP report, the business should state the same facts, but be prepared for follow-up questions that are more investigative in character. The RCMP may treat the report as the opening of an investigation file. In our experience, businesses that submit bare-minimum reports without legal review often find themselves called back for clarification in circumstances where a fuller initial submission would have resolved the matter more efficiently.
The reporting obligation applies to all persons in Canada and to all Canadians outside Canada. A Canadian financial institution operating a branch or subsidiary abroad is expected to ensure that relevant information flows back to Canada so that the head office can meet its reporting obligation. That extraterritorial dimension is not always appreciated by legal teams that treat Canadian sanctions as a purely domestic matter.
Is your reporting obligation fully scoped? If your business has Canadian employees, accounts, or entities, even a transaction that is primarily booked and executed outside Canada may carry a Canadian reporting obligation if a Canadian person touches it.
Step 5 – Documentation, record-keeping, and ongoing review
Reporting to GAC and the RCMP does not close the file. The business must maintain complete records of the frozen property, all communications with regulators, and the compliance steps taken from trigger to report. Good record-keeping serves two functions: it demonstrates the firm acted promptly and in good faith, and it provides the evidentiary base if a penalties process or RCMP investigation follows.
Records should include, at minimum:
- the screening alert or information that triggered the freeze, with timestamp;
- the identity and designation status of the person concerned, with the source of that determination;
- a description of the property frozen, its value, and the account or location where it is held;
- copies of all internal escalation communications and approvals;
- copies of reports submitted to GAC and the RCMP, with proof of submission; and
- all subsequent correspondence with either authority.
Canada's record-keeping expectations broadly mirror those under comparable regimes. OFAC's guidance under IEEPA and the relevant programme regulations expects records to be maintained for five years. OFSI similarly requires firms to keep records sufficient to demonstrate compliance. Businesses operating across regimes should adopt the most demanding standard across all applicable jurisdictions – which, in practice, typically means a five-year minimum for sanctions-related records across the board.
Ongoing review matters too. A freeze does not end simply because time passes. If a designation is removed – either because the person is de-listed or because a court annuls the designation – the property may need to be unfrozen, potentially with the benefit of a general or specific authorisation. Businesses should build a periodic-review step into their escalation programme so that frozen assets are not simply left in limbo indefinitely.
Step 6 – Licensing, authorisations, and voluntary disclosure
The SEMA regime provides for ministerial authorisations to permit transactions that would otherwise be prohibited. These authorisations are the functional equivalent of OFAC specific licences or OFSI licences. They are issued by GAC on a case-by-case basis, and the grounds for granting them are set out in the applicable regulations. Common grounds include transactions for the benefit of third parties who are not themselves designated, humanitarian transactions, and transactions necessary to wind down pre-existing obligations.
A ministerial authorisation application requires a clear statement of the proposed transaction, the identity of all parties, the connection to the designated person, and the grounds on which relief is sought. Incomplete applications delay decisions. In our cross-border practice, we regularly advise clients who have submitted initial applications without adequate factual detail and then face extended delays while GAC seeks clarification.
Where a potential violation has already occurred – for example, where a payment was made before the compliance team identified a match – a business should consider whether a voluntary disclosure to GAC and potentially the RCMP is appropriate. Voluntary self-disclosure (a proactive report of an apparent breach to the regulator before enforcement action is initiated) is recognised as a mitigating factor in several sanctions regimes. Under OFAC's enforcement guidelines, for instance, a timely and complete voluntary self-disclosure is treated as a significant mitigating factor. Canada's enforcement approach similarly recognises co-operation with authorities. A decision on whether and how to disclose should always be taken with legal advice: the content, timing, and form of disclosure are material to how it is received.
Step 7 – Cross-border escalation: coordinating with other regimes
Most businesses subject to Canadian sanctions obligations also operate under at least one other sanctions regime. A cross-border transaction may simultaneously engage OFAC (if there is a US-dollar leg or a US-incorporated party), OFSI (if there is a UK nexus), and the EU Council regulations (if there is an EU-entity or EU-person link). Each regime has its own reporting counterparty and its own procedural requirements.
The critical principle is that the strictest obligation governs each element of the transaction. If a proposed authorisation is available under SEMA but the same transaction is blocked under OFAC without a specific licence, a SEMA ministerial authorisation is insufficient on its own. Equally, an OFAC general licence does not extend to Canadian obligations.
Coordinating a multi-regime escalation involves mapping, for each leg of the transaction:
- which regime is engaged and which authority holds jurisdiction;
- what the freeze and reporting obligation is under each regime and the applicable deadline;
- whether a licence or authorisation is available under each regime; and
- whether voluntary disclosure to any authority is warranted, and in what order.
We have acted for trading businesses managing concurrent SEMA, OFAC, and OFSI obligations arising from a single transaction. The documentary and procedural burden in those situations is significant, and the risk of inadvertently satisfying one regime while breaching another is real. Early co-ordination – across internal functions and, where necessary, with local counsel in the relevant jurisdiction – substantially reduces that risk.
A note on the UN dimension: Canada implements UN Security Council designations through domestic regulations. If a person is designated at UN level, Canadian law will generally apply the obligation through the thematic SEMA regulations, but businesses should confirm whether the UN designation has been incorporated into the CASL, since the operative obligation flows from the domestic instrument.
For businesses also operating in Australia, the compliance and escalation structures bear a family resemblance to the Canadian approach, though the administering authority and precise obligations differ. Our separate guidance on sanctions compliance audit and testing for Australia addresses those distinctions in detail. The EU escalation and reporting framework is addressed in our guide at escalation and reporting under EU sanctions, and a further EU-focused analysis is available at EU sanctions escalation and reporting – a second perspective.
Common risk flags and objection handling
One myth we encounter frequently is that Canadian sanctions are a domestic concern only – that a business without a physical presence in Canada is simply outside the regime. That is not correct. SEMA applies to Canadians and persons in Canada wherever they or the transaction may be located. A Canadian-incorporated holding company that is a party to an offshore deal, or a Canadian individual who is a director or officer of a foreign entity, can bring Canadian obligations into a transaction that looks, on its face, entirely non-Canadian.
A second risk flag is over-reliance on automated screening. Screening tools are a necessary component of any sanctions compliance programme, but they are not sufficient. Name-matching logic misses indirect ownership chains, newly added aliases, and transliterated names. In our experience, firms that conduct screening against the CASL alone – without also screening against the OFAC SDN List, the OFSI consolidated list, and the UN Consolidated List – are operating with a material gap in their risk controls. A cross-regime screen is the baseline, not a premium option.
A third error is treating the escalation procedure as a form-filling exercise rather than a decision sequence. The steps above are interdependent. Reporting before freezing, or freezing without documenting, or disclosing to the counterparty before taking legal advice – each of those sequencing errors creates separate liability. The procedure is not bureaucratic; it is the record that demonstrates the firm acted lawfully from the moment of discovery.
Related practices
- Sanctions compliance audit and testing – Australia – structured review of screening, escalation, and controls under Australia's autonomous sanctions regime.
- Escalation and reporting under EU sanctions – step-by-step guide to EU regime obligations, competent-authority reporting, and asset-freeze procedures.
The position above covers the standard case. Your facts – the counterparty structure, the goods involved, the Canadian persons in the chain, and the other regimes engaged – change the analysis. If a transaction has already been flagged, or a report has been submitted without legal review, an early assessment can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential review of your position.