Calder & Vance International Sanctions & Compliance Counsel

Export Controls & Dual-Use · OFSI

Export-licence determinations under OFSI: a compliance guide

A UK-based technology exporter finalises a supply agreement with a distributor in a third market. The goods are dual-use items. The end customer is not on any list – but a minority investor in the distributor's parent has recently appeared on the UK Consolidated List (the Office of Financial Sanctions Implementation's register of designated persons and entities). Does the shipment require an export licence? Does the financial dimension of the transaction trigger a separate OFSI authorisation? These two questions are legally distinct, yet in practice they land on the same compliance team at the same time.

Export-licence determinations under OFSI turn on whether a proposed transaction involves a designated person or sanctioned territory, and whether any general or specific licence issued under the relevant thematic UK sanctions regulations applies to permit it. The Export Control Joint Unit ("ECJU") governs the physical movement of controlled goods; OFSI governs the financial and economic dimension. As of May 2026, any business that conflates the two risks both an unlicensed export and an unlicensed financial-sanctions breach.

This guide walks through the determination process step by step, identifies the most common errors, and explains where OFSI's approach diverges from OFAC and EU practice.

Step 1: Understanding which authority governs – OFSI, ECJU, or both?

The first step in any export-licence determination is establishing which regulatory authority – or combination of authorities – has jurisdiction over the transaction. OFSI administers financial sanctions under the Sanctions and Anti-Money Laundering Act 2018 ("SAMLA") and the relevant thematic regulations made under it. ECJU administers physical export licensing under the Export Control Order. The two regimes operate in parallel and address different aspects of the same transaction.

A shipment of controlled goods to a non-designated entity in a non-embargoed country may still trigger OFSI review if any payment flows touch a designated person. Conversely, a transfer of intangible technology may require an ECJU licence but no OFSI authorisation at all. The determination starts with a clean split of the two questions: is the good or technology controlled? And does the transaction involve a designated person or a sanctioned territory?

In our practice, the most reliable way to avoid regulatory overlap is to run both analyses in parallel from the outset. Compliance teams that sequence them – completing the ECJU classification first, then turning to OFSI – regularly miss the financial dimension until late in the deal cycle, when renegotiation costs are highest. Have you mapped the transaction to both authorities before the term sheet is signed?

Step 2: Classify the goods, technology, or services against the UK control lists

Correct classification against the UK Strategic Export Control Lists is the foundation of any export determination. Each controlled item carries an Export Control Classification Number ("ECCN") equivalent – a reference that identifies whether the item falls within a military, dual-use, or other controlled category under UK law, and whether a licence is required for the destination, end-use, or end-user in question.

The classification exercise has three distinct sub-tasks. First, confirm whether the item appears on the UK Military List, the UK Dual-Use List, or the UK Control List for items subject to arms-embargo controls. Second, identify the relevant destination. Third, cross-check the end-use and end-user against OFSI's Consolidated List and any relevant country-based regime maintained under SAMLA.

A frequently overlooked point: the UK Dual-Use List is not identical to the EU Dual-Use Regulation's Annex I, though they share a common origin in the Wassenaar Arrangement, the Australia Group, and allied multilateral control regimes. Since the UK maintained its own lists after 2020, the positions have begun to diverge at the margins. A business that exports under both EU and UK licences – common for multinationals with EU subsidiaries – should not assume that one classification covers both jurisdictions.

We regularly advise exporters who have relied on an EU classification for a UK shipment without checking whether the UK list has been updated independently. That assumption carries real regulatory risk.

Step 3: Screen the counterparty and the ownership chain against the UK Consolidated List

Once the goods are classified, every natural and legal person in the transaction chain – buyer, end-user, freight forwarder, financial intermediary – must be screened against the UK Consolidated List. A name match alone is not a determination. The match must be verified against the identifying particulars on the list entry before a compliance officer can conclude that the counterparty is designated.

The ownership test under OFSI and UK sanctions regulations differs from the OFAC 50 percent rule. Under UK law, ownership and control is the test: a non-designated entity is caught if it is owned or controlled by a designated person. The control limb is broader than OFAC's mechanical 50 percent threshold. Control can be established through board appointment rights, veto rights over strategic decisions, or other means that fall short of majority shareholding. That breadth is deliberate – and it means that a 40 percent stake held by a designated person, accompanied by contractual veto rights, can bring an apparently clean counterparty within the prohibition.

Under EU sanctions regulations, a similar ownership and control analysis applies. The EU position and the UK position are broadly aligned in their control-limb reasoning, though the specific guidance documents diverge in how they treat indirect control through nominee arrangements. The OFAC position is more mechanical: 50 percent or more aggregate direct or indirect ownership by blocked persons triggers the blocked-entity status regardless of control. Where a transaction spans US, UK, and EU exposure, the strictest applicable prohibition governs the analysis – and that is usually the regime with the broadest control test.

The position above covers the standard screening case. Your facts – the counterparty's ownership structure, the payment routing, the destination country – change the analysis materially.

For transactions with a US nexus, the ECCN classification and any BIS licensing requirements must also be confirmed. Our colleagues who handle deemed-export and technology controls under BIS and the EAR regularly encounter UK-origin goods that also carry BIS jurisdiction through the de minimis rule or through US-origin technology content. A UK licence determination that does not account for US extraterritorial reach is incomplete.

Step 4: Identify the applicable prohibitions under the relevant UK sanctions regime

With the counterparty screened and the goods classified, the next step is to identify precisely which prohibitions apply. Under SAMLA and the thematic regulations made under it, the prohibitions relevant to an export transaction typically cover: making funds or economic resources available to or for the benefit of a designated person; dealing with the property of a designated person; and, in country-specific regimes, importing or exporting specific goods regardless of the designated status of the counterparty.

Each prohibition has its own elements. The "making available" limb is wider than it first appears. It captures not only direct payment to a designated person but also indirect benefit – for example, where a sale reduces the liabilities of an entity controlled by a designated person. Compliance teams that focus exclusively on whether the named buyer is designated regularly miss the indirect-benefit analysis.

Country-specific regimes impose additional trade controls: prohibitions on the export of certain goods to specific territories, irrespective of the designated status of the recipient. These controls sit under the thematic sanctions regulations and operate alongside the ECJU's strategic export licensing regime. Neither displaces the other.

Rhetorical check: if a transaction survives the ownership-and-control test but involves goods that are subject to a trade prohibition in a country-based regime, is it clear which regulation bites first? In our experience, the answer depends on the specific thematic regulation and its interaction with the Export Control Order – and that interaction is not always intuitive from the face of the instruments.

Step 5: Assess whether a general licence or a specific licence authorises the transaction

A transaction that engages a prohibition is not automatically unlawful. The UK licensing regime provides two routes to authorisation. A general licence (a standing authorisation that permits a defined category of transactions without a separate application) may already cover the proposed activity. If no general licence applies, a specific licence (a case-by-case authorisation to conduct an otherwise prohibited transaction) may be sought from OFSI.

General licences under UK sanctions regulations cover a range of transaction types: humanitarian activity, certain legal services, journalism, prior obligations, and a number of sector-specific categories. The scope and conditions of each general licence are instrument-specific. A general licence that applies under one thematic regime does not automatically apply under another. Before relying on a general licence, the compliance officer must confirm: (a) the general licence applies to the relevant thematic regulations; (b) the transaction falls within the licence's defined scope; (c) any conditions or reporting obligations attached to the licence are satisfied.

Where no general licence applies, a specific licence application is submitted to OFSI. The application must set out the legal basis, the parties, the goods or services, the economic resources in question, and the grounds for authorisation. OFSI's published guidance identifies the information expected at the application stage. Timelines vary by complexity and the volume of applications before OFSI at the time of submission; verify the current processing time with OFSI directly before committing to a transaction timetable.

Under EU sanctions, the equivalent route is an authorisation from the competent authority in the relevant member state. Under OFAC, the route is a specific licence application to OFAC, with a separate application process and different criteria. The three systems operate independently, and a licence granted by OFSI does not authorise the same transaction under EU or US regulations. If a transaction has all three-regime exposure, separate authorisations are required under each applicable regime.

If a transaction has already been flagged – a shipment held by a freight forwarder, a payment queried by a correspondent bank – an early legal review preserves options that narrow as time passes. Contact Calder & Vance at info@caldervance.com for a confidential assessment.

Step 6: Confirm record-keeping and reporting obligations

Completing the licence determination and, where necessary, obtaining an authorisation does not close the compliance file. UK sanctions regulations impose record-keeping obligations on persons who rely on a licence or who become aware that they hold frozen assets. OFSI's enforcement guidance expects businesses to maintain documentation that demonstrates the basis on which a licence was relied upon, the transaction details, and any conditions satisfied.

Firms regulated by the Financial Conduct Authority or the Prudential Regulation Authority face additional obligations: mandatory reporting to OFSI where a firm knows or suspects that it holds the frozen assets of a designated person, or that a person it is dealing with is a designated person. The obligation to report is not discretionary and the reporting window is short. Verify the applicable window under the current regulations before relying on any general description of it.

Record-keeping requirements under the EAR (the US Export Administration Regulations administered by BIS) typically run for five years from the date of the transaction. UK and EU record-keeping periods should be confirmed against the current text of the applicable regulations, as they are instrument-specific and subject to amendment. Do not assume that a UK record-keeping period mirrors the US requirement.

In our experience, the weakest point in export-compliance programmes is the gap between the initial determination and the final transaction record. Businesses that complete a thorough determination but fail to document it are in a structurally weaker position if OFSI or ECJU later reviews the transaction.

Risk flags and when to involve specialist counsel

Six patterns consistently generate regulatory risk in export-licence determinations under OFSI. Recognising them early reduces both the cost and the complexity of the resolution.

  • Layered ownership structures. Where the counterparty has multiple tiers of holding companies, the control test must be applied at each layer. A clean first-level screen is not a clean determination.
  • Payments routed through third countries. A transaction between two non-UK parties can trigger OFSI jurisdiction if the payment is processed through a UK financial institution or the goods transit UK territory. The nexus test under SAMLA is broader than many compliance teams assume.
  • Reliance on outdated classifications. The UK control lists are updated periodically. A classification that was correct at the point of an earlier shipment may no longer be accurate for a new transaction.
  • Assumption that an EU licence covers the UK. Since the UK regime diverged from the EU regime, an authorisation granted by an EU competent authority has no legal effect under UK law. The two licences must be obtained separately.
  • Indirect benefit to a designated person. The "making available" prohibition can be satisfied indirectly. A payment that reduces the secured liabilities of a designated person, or that discharges an obligation guaranteed by a designated person, may constitute prohibited dealing even where the direct counterparty is clean.
  • Failure to monitor list changes during a long-term contract. A counterparty that is clean at the time of contract signature may be designated before completion. Ongoing monitoring obligations apply for the life of the contract, not only at the point of entry.

The myth that a one-time screen at transaction initiation satisfies the compliance obligation is widespread. It does not. OFSI's published enforcement guidance and the case record before the regulator both show that ongoing monitoring is expected, particularly for long-dated contracts and continuing commercial relationships. A compliance programme that screens at entry but not during performance is, in OFSI's view, an incomplete programme.

Related practices

Frequently asked questions

What are the steps to determine the export-licence requirement under OFSI?
The determination follows six steps: (1) identify whether OFSI, ECJU, or both have jurisdiction; (2) classify the goods or technology against the UK control lists; (3) screen every party and the ownership chain against the UK Consolidated List, applying the ownership and control test; (4) identify the specific prohibitions that apply under the relevant thematic sanctions regulations; (5) assess whether a general licence covers the transaction or whether a specific licence application to OFSI is required; and (6) confirm record-keeping and reporting obligations. Each step must be documented. Skipping a step does not eliminate the legal exposure – it only removes the paper trail that demonstrates compliance.
What is the most common mistake in export-licence determinations?
The most common error is treating a clean first-layer counterparty screen as a complete determination. OFSI's ownership and control test requires analysis of the full ownership chain, including indirect control through board appointment rights or contractual veto provisions. Businesses also regularly conflate OFSI authorisation with ECJU licensing, when in fact the two regimes operate in parallel and both must be satisfied independently. A third common failure is reliance on a general licence without confirming that its scope and conditions apply to the specific transaction, goods, and thematic regulations in question.
How does OFSI differ from other regimes here?
OFSI's ownership and control test is broader than OFAC's mechanical 50 percent or more aggregate-ownership threshold. Under OFSI, control can be established through means falling short of majority shareholding – including board rights, contractual veto, or other forms of dominance. OFSI also administers financial sanctions separately from ECJU's export licensing regime, so a business requires both a financial-sanctions analysis and a physical-export determination. OFAC combines both dimensions within its own SDN and licensing regime more directly, while the EU distributes the equivalent functions across the Council regulation and member-state competent authorities.

Talk to Caldervance

For a scoped view of your exposure, contact info@caldervance.com.

Discuss your matter

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.