A trading company with European operations signs a distribution agreement with a local entity. Its compliance team screens the buyer, finds no direct listing, and approves the transaction. Six months later, the firm's parent company flags that one shareholder – buried two layers deep in the ownership chain – appeared on an EU sanctions list at the time of signing. The question now is not whether the deal was profitable. The question is whether it was lawful.
Under EU sanctions regulations, a non-listed entity may itself be caught if a designated person holds ownership or control over it. The test is not purely mechanical – as it is under OFAC – but combines quantitative ownership thresholds with a qualitative control assessment. A business that screens only for direct listings without tracing the ownership and control chain takes a risk that the EU regime is designed precisely to address.
This guide sets out the EU ownership and control test in practical terms, compares it with the approaches of OFAC and OFSI, identifies the most common points of failure, and explains when external counsel should be brought in.
What does EU ownership and control mean in this context?
Under EU sanctions, ownership and control (the test by which a non-listed entity is treated as caught by the sanctions applied to a listed person) operates through the relevant Council regulation applicable to the programme in question. A non-listed entity is typically treated as caught when a listed person owns it or controls it – and those two concepts are assessed separately.
Ownership is assessed by reference to shareholding. Where a designated person holds, directly or indirectly, more than a defined proportion of the shares in an entity, that entity is treated as a target of the relevant prohibitions even though it has never been named on a list. The relevant Council regulations set this threshold, and it maps in broad terms to the level that confers legal or effective ownership. As of mid-2026, practitioners should verify the precise threshold in the applicable Council regulation, as the EU's approach has been refined through successive listings and Commission guidance.
Control is assessed separately and qualitatively. A listed person may exercise control over an entity without holding a majority stake. Control indicators include the power to appoint or remove a majority of the board, the power to direct the entity's commercial decisions, and the existence of contractual arrangements that vest effective authority in the designated person. This is the dimension that differentiates the EU test from OFAC's – and it is where compliance programmes most frequently fall short.
How does the EU test differ from OFAC's 50 percent rule?
The OFAC 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked, regardless of whether the entity is named on the SDN List – OFAC's list of Specially Designated Nationals and blocked persons) is explicitly mechanical: if blocked persons together own 50 percent or more, the entity is blocked. Full stop. Intent, management, and operational independence are irrelevant to the threshold calculation.
The EU test carries a comparable ownership strand but adds the control strand alongside it. This matters in practice because an entity can be caught by the EU rules even where the designated person's stake sits below the ownership threshold, if that person exercises functional control. We regularly advise clients who have cleared the OFAC test and then discovered that the EU analysis requires a different and more fact-intensive enquiry.
OFSI's approach under UK financial sanctions – ownership and control under SAMLA (the Sanctions and Anti-Money Laundering Act) – is broadly comparable to the EU's in its dual structure, requiring assessment of both ownership and control. However, OFSI's published guidance on how to apply the control limb has evolved independently of EU guidance. Post-Brexit divergence between the two regimes has accelerated. A business that relies solely on its EU analysis to clear a UK position, or vice versa, is not safe.
The cross-border point has real commercial consequences. A transaction that is cleared under OFAC because the designated person's aggregated stake falls below 50 percent may still be prohibited under the EU rules if that person exercises control. And the reverse is also possible: a fact pattern that triggers EU concern may be expressly outside OFAC's rule because no blocked person reaches the US threshold. In our experience, this divergence is the single greatest source of cross-regime compliance error in multi-jurisdiction transaction clearance.
The position above covers the standard case. Your facts – the counterparty's structure, the identity of the designated person, the applicable Council regulation, and the jurisdictions with a nexus to the transaction – change the analysis materially.
For an assessment of your counterparty's ownership and control profile under the EU regime, contact Calder & Vance at info@caldervance.com.
Step 1: Identify all applicable Council regulations
Before any ownership analysis can begin, you need to know which Council regulation or regulations apply. The EU operates multiple distinct sanctions programmes, each governed by its own Council regulation and Council decision. The obligations in one programme do not automatically replicate those of another, and the definitions of ownership and control may differ in nuance.
Identifying the applicable programme means identifying the basis on which the listed person is designated. A person may appear on the EU Consolidated List for reasons connected to one programme or to several. The prohibitions relevant to any entity connected to that person flow from the specific programme under which the listing was made. Compliance teams that screen against the EU Consolidated List as a single undifferentiated list, without linking listings back to their governing regulation, cannot reliably complete the second step of the analysis.
In our practice, this step is frequently abbreviated or skipped. A hit against the Consolidated List is treated as the end of the analysis rather than the start. The result is that the applicable legal obligations – including the specific ownership and control definitions in the governing regulation – are never actually consulted.
Step 2: Map the full ownership and control chain
Once the applicable regulation is identified, the ownership and control chain of the counterparty must be mapped in full. This means going beyond the counterparty itself to identify every intermediate holding company, every ultimate beneficial owner, and every person with a formal or informal power to control the entity's decisions.
The mapping exercise should produce a structure chart that shows, at each level: who holds shares, in what proportion, whether those shares carry voting rights, and whether any contractual arrangement modifies the economic or governance rights of any shareholder. A percentage-only view of the cap table is not sufficient. Voting rights, veto rights, and shareholder or investment agreement provisions can all carry control implications under the EU test.
Aggregation is also relevant under the EU rules. Where multiple designated persons each hold partial interests in the same entity, those interests are aggregated for the purpose of the ownership assessment. Two designated persons each holding a significant but individually sub-threshold stake may together reach or exceed the relevant ownership threshold. Screening tools that evaluate each designated person's holding individually, rather than aggregating all designated persons' holdings against the same counterparty, will miss this.
Have you reviewed the shareholder agreement and articles of association, not only the share register? Control indicators often appear in governance documents rather than in the cap table itself.
Step 3: Apply the control test with precision
The control limb of the EU test requires a separate and qualitative assessment. The core question is whether the designated person has the practical ability to direct or determine the entity's conduct, regardless of the size of the legal stake. Indicators of control that practitioners and the relevant guidance identify include the following.
- The power to appoint or remove a majority of the board or equivalent governing body.
- The power to veto significant commercial decisions, capital expenditure, or entry into major contracts.
- The provision of financing under conditions that confer practical authority over the borrower's operations.
- Contractual arrangements – supply agreements, exclusive licences, service agreements – that make the entity commercially dependent on the designated person.
- Informal influence, where documentary evidence of direction or instruction exists even without a formal governance mechanism.
None of these indicators is determinative alone. The analysis weighs the totality of the relationship. What this means in practice is that a counterparty with a designated minority shareholder who also happens to be the entity's largest customer, its lender, and the person whose approval is required for senior appointments presents a materially higher control risk than a counterparty with a designated minority shareholder who holds ordinary shares with no governance rights and no commercial relationship beyond the investment.
If a transaction has already been flagged on ownership or control grounds, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss next steps.
Step 4: Assess secondary-sanctions risk and cross-regime exposure
EU-nexus transactions frequently carry US or UK secondary-sanctions dimensions that the EU ownership and control analysis alone does not address. This is particularly relevant for businesses that use the US financial system, have US persons involved in the transaction chain, or export goods that are subject to US jurisdiction under the EAR (the Export Administration Regulations administered by BIS).
Where a counterparty clears the EU ownership and control analysis but the transaction touches US jurisdiction, the OFAC 50 percent rule must also be applied against the US SDN List separately. A person who appears on the EU Consolidated List may or may not also appear on the SDN List. The two lists are managed by different authorities and updated independently. Clearing one does not clear the other.
The UK position adds a third layer. OFSI maintains its own asset-freeze list, which is independent of both the EU Consolidated List and the SDN List. Post-Brexit, the UK has adopted listings that diverge from the EU's in both direction and timing. Compliance counsel advising on a European-nexus transaction as of mid-2026 must run three separate list checks and three separate ownership and control analyses if the transaction has US and UK nexus as well as EU nexus. In our experience, the businesses most exposed to enforcement risk are those that run a single consolidated screening pass rather than a regime-by-regime analysis.
For businesses with significant APAC exposure, the position in Singapore, Japan, and Australia adds further dimensions. Those regimes typically follow UN Security Council Consolidated List designations as a baseline but may carry additional autonomous measures. The control analysis under those regimes differs from the EU test, and local regulatory guidance should be consulted.
Risk flags and when to involve a sanctions lawyer
Several fact patterns should trigger escalation to compliance counsel (specialist advisers on sanctions obligations) before a transaction proceeds, rather than after a problem is identified.
The most common risk flags in EU ownership and control analysis include the following.
- A counterparty with a designated minority shareholder – particularly where that shareholder also has governance rights or commercial relationships with the entity.
- A counterparty operating in a sector that is subject to a sector-wide or sectoral sanctions measure under an applicable Council regulation, even where the counterparty itself is not listed.
- An ownership or control structure with multiple layers of intermediate holding entities, particularly in jurisdictions where beneficial ownership registers are incomplete or delayed.
- A recent change in the counterparty's ownership structure, which may have been designed to bring the entity below a threshold – a fact pattern that should trigger heightened diligence rather than reassurance.
- A counterparty that has a designated person as a significant customer, lender, or commercial partner rather than merely as a shareholder.
- Any indication that the counterparty's governance documents have been amended contemporaneously with a sanctions listing affecting one of its shareholders.
A sanctions lawyer should be involved before the transaction is signed when any of these flags is present. The EU General Court has confirmed in a series of annulment proceedings that designations and the prohibitions that flow from ownership and control findings are subject to legal challenge – but the window for challenge and the procedural options available are not unlimited, and acting early produces materially better outcomes than acting after an asset freeze or a contract refusal.
Addressing the compliance myth: "if it is not on the list, it is not blocked"
The single most persistent misconception we encounter is the belief that EU financial sanctions apply only to listed entities. The ownership and control extension of the prohibitions exists precisely to prevent this reading. A non-listed entity that is owned or controlled by a listed person is as firmly within the asset-freeze prohibition as the listed person itself. The entity need not be separately named on any list.
This matters because EU sanctions lists are necessarily incomplete as a practical matter. A designated individual may hold interests in dozens of entities. The Council cannot list every downstream entity at the point of listing the individual. The ownership and control rule fills that gap. The burden of identifying and assessing those downstream entities falls on the person who proposes to deal with them.
We regularly advise businesses that have operated for extended periods with a counterparty they believed to be unlisted, only to discover that the EU rules applied throughout because a designated person exercised control. The compliance cost of that discovery – reconstruction of the transaction history, notification obligations, legal advice, potential voluntary disclosure – is substantially higher than the cost of a thorough initial ownership and control analysis.
Related practices
- Sanctions compliance audit and testing – stress-testing screening programmes and ownership analysis methodology across major regimes.
- The 50 percent rule and ownership analysis under the Japan regime – how Japan applies its ownership and control test and where it diverges from the EU.
- Ownership analysis under the Japan sanctions regime: a practical guide – detailed practitioner view on Japan's autonomous measures and their interaction with UN designations.