A trading company in Germany wins a contract to supply industrial components to a buyer in a third country. The compliance team screens the buyer and flags a shareholder. That shareholder appears on the EU Consolidated List. Now the question is urgent: is the buyer itself subject to EU financial sanctions, even though it is not named? Can the contract proceed? Can payment be accepted? The answer turns on a single analytical exercise – the 50 percent rule and ownership analysis under EU – and getting it wrong exposes every person involved in the transaction to civil and criminal liability under the applicable Council regulations.
Under EU sanctions, a non-listed entity is treated as subject to the same restrictions as a listed person when that listed person, alone or in combination with other listed persons, owns or controls it. The test reaches beyond the direct ownership threshold and extends to control by other means – a materially broader standard than the purely mechanical OFAC rule. As of July 2026, the EU has clarified its approach through updated guidance on the ownership and control concept, but practical application still requires a structured, step-by-step analysis of the full corporate structure.
This guide walks through the EU ownership and control test step by step, compares the EU position with OFAC's approach and the UK OFSI standard, identifies the risk flags that trip up compliance teams most often, and sets out when to involve external sanctions counsel.
Step 1: Understand the governing regime and the authority behind the test
The EU ownership and control test is grounded in the relevant thematic Council regulations that underpin each EU sanctions programme. Those regulations define "funds and economic resources" broadly, and the restriction on making them available extends to entities that listed persons own or control. The European Commission, the Council, and – for enforcement – national competent authorities in each EU member state together constitute the regulatory architecture. There is no single EU equivalent of OFAC as the sole enforcement point; a breach may be pursued by the competent authority of any member state in which the prohibited act occurred or in which the person is based.
The EU General Court and, on further appeal, the Court of Justice of the European Union, sit as the judicial review body for designation challenges. Their case law has progressively defined what "control" means in practice. In our experience, businesses that treat the EU framework as though it were simply a list-matching exercise routinely underestimate the reach of the control limb.
The legal basis is important for a second reason. Different EU programmes – the Russia-related regulations, the Iran-related measures, the Belarus measures, the thematic instruments covering terrorism financing and human-rights abusers – each carry their own definitions and their own prohibition structures. The ownership and control test operates consistently across them, but the scope of the prohibited transactions and the available licences differs. Before applying the test, confirm which programme or programmes are engaged by the transaction and the parties involved.
Step 2: Apply the ownership threshold – who owns how much?
The EU ownership limb asks whether a listed person holds, directly or indirectly, more than 50 percent of the proprietary rights of an entity, or an equivalent ownership participation. This is the clearest part of the test: it is largely numerical and traces ownership through corporate layers.
Direct ownership is straightforward. Indirect ownership requires mapping every intermediate holding company back to the ultimate listed person. A listed person who holds 60 percent of Company A, which holds 60 percent of Company B, owns Company B indirectly through the chain. In our cross-border practice, the chain is rarely two levels deep; structures involving holding companies in multiple jurisdictions routinely run to five or six tiers before the beneficial owner is identified.
The aggregation question is one of the most consequential in practice. Does the EU position aggregate the holdings of multiple listed persons to cross the 50 percent threshold, as OFAC does? The EU guidance suggests that each listed person's interest may be considered individually for the ownership limb, which creates a material divergence from OFAC. Under OFAC's 50 percent rule (the rule that treats entities owned 50 percent or more in aggregate by one or more blocked persons as themselves blocked), two listed persons each holding 30 percent of the same entity together trigger the rule. Under the EU ownership limb, applied strictly to one person at a time, neither holding alone exceeds the threshold. But this is not the end of the EU analysis: the control limb then becomes the critical tool for capturing exactly these structures.
Practical step: obtain the shareholder register and the constitutional documents for every entity in the chain. Calculate each listed person's effective ownership percentage at every tier. Do not stop at the entity you are screening; trace every chain back to its natural-person or listed-entity ultimate owner.
Step 3: Apply the control test – four routes a listed person can control without a majority stake
The control limb of the EU test captures entities that a listed person controls even when ownership falls below 50 percent. This is the element that most consistently surprises compliance teams. Control can arise through four recognised routes under the Council regulations and the interpretive guidance issued alongside them.
First, the right to appoint or remove a majority of the board of directors, supervisory board, or equivalent management body. A listed person holding 40 percent of shares may retain contractual or constitutional rights that allow it to appoint the majority of directors. The entity is controlled. Second, the right to exercise a dominant influence over the entity. This is the broadest limb and turns on the economic reality of the relationship: veto rights over material decisions, exclusive supply arrangements that make the entity economically dependent, or any structure that allows the listed person to dictate the entity's commercial conduct.
Third, the right to use all or part of the assets of the entity. A listed person who, under a contractual arrangement, can direct the use of the entity's production capacity or intellectual property may satisfy this limb even without a board seat or a shareholding. Fourth, the right to benefit from a majority of profits. Profit participation interests and preferred return structures are not immune from scrutiny.
The control assessment requires reading the constitutional documents, any shareholders' agreement, any material commercial contracts with the listed person, and the entity's financial statements. It is not enough to look at the register. Have you reviewed the shareholders' agreement? Have you checked whether any management services agreement gives the listed person operational authority?
In a recent matter, a financial institution in the EU screened a corporate borrower and found no direct listed-person ownership above the threshold. A review of the shareholders' agreement, however, revealed that a listed person held veto rights over any disposal of assets above a modest value and over the appointment of any senior manager. The entity was controlled for the purposes of the applicable Council regulation. The institution restructured the facility accordingly and reported to its national competent authority. The matter demonstrated that the shareholders' agreement is never optional reading in an ownership and control analysis.
Step 4: Map indirect structures and multi-layer chains
A listed person rarely holds its interest in an operating entity directly. Intermediate holding vehicles, trust structures, and nominee arrangements are common. The EU ownership and control test applies at each layer. If a listed person controls a holding company, that holding company is treated as subject to the same restrictions, and any entity that the holding company in turn owns or controls is similarly caught.
The practical consequence is that the analysis does not end when you find an intermediate entity that is itself unlisted. You must ask: does the listed person own or control this intermediate entity? If yes, the entity is captured, and you continue the analysis down the chain. The test applies recursively until you reach entities at every level of a corporate tree that cannot be traced to a listed person through ownership or control.
Indirect structures present a data challenge. Beneficial ownership registries in EU member states provide some transparency, but they are not always current, and structures involving non-EU holding companies may not appear in any EU registry. In those circumstances, the compliance team must rely on direct engagement with the counterparty, requests for constitutional documents and shareholder certifications, and – where the transaction is material – independent beneficial ownership investigations through specialist providers.
One structural risk flag deserves specific attention: nominee shareholding arrangements. A nominee holds shares on behalf of another person. The economic interest and the control rights run to the beneficial owner, not the nominee. EU sanctions analysis looks through nominees. If the beneficial owner is a listed person, the holding is attributed to that person regardless of the nominee's legal ownership. Ensure that any counterparty certification you receive addresses beneficial ownership explicitly, not merely registered ownership.
Step 5: Compare the EU test with OFAC and OFSI – where the differences decide the outcome
The EU, OFAC, and OFSI each operate an ownership and control test, but the standards diverge in three ways that matter for cross-border transactions.
Under OFAC, the 50 percent rule is mechanical: blocked persons owning 50 percent or more in the aggregate means the entity is blocked, regardless of control. The OFAC test does not independently require a control analysis; if the numbers are there, the entity is blocked. OFAC guidance explicitly addresses aggregation: the interests of multiple blocked persons are added together to determine whether the threshold is met. The rule is largely binary – above 50 percent, blocked; below, not automatically blocked (though OFAC retains discretion to block entities under other authority).
Under OFSI (the UK Office of Financial Sanctions Implementation), the test under the Sanctions and Anti-Money Laundering Act and the relevant thematic regulations also covers both ownership and control. The ownership and control test in the UK regime is broadly comparable to the EU position: ownership above 50 percent, or control by any of several routes including board appointment rights and dominant influence, captures the entity. The UK and EU tests are therefore closer to each other than either is to OFAC's purely numerical rule.
The divergence between the three regimes creates a genuine compliance challenge for businesses subject to all of them. A structure in which a listed person holds 45 percent of an entity with no control rights would not automatically trigger OFAC's rule, would require a careful control analysis under EU and UK rules, and might be captured by the EU or UK tests even if OFAC does not reach it. The cardinal principle is that the stricter prohibition governs each regime independently: satisfying one regime's test does not satisfy another's.
For businesses subject to multiple regimes – a European subsidiary of a US parent, or a UK-regulated bank with EU operations – the analysis must be conducted independently under each applicable regime. The entity may be free to transact under one regime and prohibited under another. In our cross-border practice, we regularly advise on exactly this scenario, mapping the entity against each applicable standard before a transaction closes.
The position above covers the standard case. Your facts – the counterparty, the ownership structure, the applicable programmes, the nature of the transaction – change the analysis materially.
For an initial assessment of your exposure under the EU ownership and control test, contact Calder & Vance at info@caldervance.com.
Step 6: Identify the risk flags that most commonly cause compliance failures
Six risk flags appear repeatedly in EU ownership and control matters. Recognising them early shortens the analysis and avoids the cost of discovering a problem after a transaction has closed.
The first is incomplete beneficial ownership data. Screening only the first layer of ownership – the registered shareholders of the direct counterparty – leaves the deeper structure unexamined. Listed persons routinely hold interests through two, three, or more tiers of intermediate companies, and the screening tool's database may not map those chains accurately.
The second is reliance on outdated information. Ownership structures change. A certification obtained six months ago may not reflect a subsequent restructuring. For high-value or ongoing transactions, periodic re-screening and re-certification are necessary.
The third is conflation of the EU test with OFAC's rule. As noted above, the EU test has a control limb that operates independently of the ownership percentage. A team trained primarily on OFAC compliance may apply the 50 percent check and stop there, without conducting the control analysis that the EU and UK standards require.
The fourth is failure to read the shareholders' agreement. Constitutional documents and the shareholder register address the legal ownership position. The shareholders' agreement often contains the control provisions – veto rights, appointment rights, reserved matters – that determine the EU control analysis. Both sets of documents are required.
The fifth is nominal versus economic interest. Some structures separate legal ownership from economic participation. A listed person may hold no shares but retain economic exposure through a profit participation certificate, a convertible instrument, or a royalty arrangement. Those economic interests may not satisfy the ownership limb but can contribute to the control analysis, particularly under the "right to benefit from a majority of profits" route.
The sixth is the treatment of funds and economic resources during the analysis period. Even if the final conclusion is that the entity is not owned or controlled by a listed person, the act of providing funds or economic resources to the entity while the analysis is incomplete may itself be a breach if the prohibition applies at the time. Timing matters. Freeze obligations apply from the moment the prohibition is engaged, not from the moment the analysis is completed.
If a transaction has already been flagged, or a payment has been made to an entity whose ownership and control status is uncertain, an early review can preserve options that narrow with time. Contact us at info@caldervance.com to discuss the position.
Step 7: Myth – if the entity is not on the list, we can transact freely
The most persistent misconception in EU sanctions compliance is that the list is the limit. If a counterparty does not appear by name on the EU Consolidated List or on any EU programme-specific list, the transaction is permitted. That reasoning is incorrect, and it is the source of a significant proportion of the compliance failures we see in practice.
The EU ownership and control test means that the prohibitions extend by operation of law to entities that listed persons own or control, without any requirement that those entities be separately designated. The prohibition is not confined to the listed name. It reaches every entity in the ownership and control chain. A business that transacts freely with a non-listed entity because the entity is unlisted, without conducting an ownership and control analysis, is not complying with its obligations under the applicable Council regulation.
The practical implication is that list screening is a necessary starting point but not a sufficient compliance measure. Screening identifies listed names directly. The ownership and control analysis identifies entities that are captured by extension. Both steps are required for every material counterparty.
A further dimension of this myth concerns de-listing. A person or entity that is removed from the EU Consolidated List is no longer designated. But the removal does not validate transactions that occurred while the designation was in force, and it does not mean that the ownership and control analysis for entities connected to that person was irrelevant during the designation period. Historic transactions conducted without a proper analysis remain exposed to retrospective scrutiny.
When to involve external sanctions counsel
An in-house compliance team can conduct the EU ownership and control analysis competently for straightforward structures. External counsel adds value when the analysis reaches a point of genuine legal uncertainty or when the consequences of error are severe enough to warrant independent review.
Involve external counsel when the ownership chain is multi-tiered and involves non-EU jurisdictions where beneficial ownership data is limited. The factual reconstruction of a complex structure, combined with the legal assessment of each layer, is a task that benefits from specialist experience. Involve counsel also when the control analysis turns on ambiguous constitutional provisions or a shareholders' agreement with non-standard terms. The line between "dominant influence" and a commercially ordinary level of investor protection is not always clear, and the legal assessment of that line has consequences.
Involve counsel when a transaction is already in progress and a screening hit has arisen mid-deal. The obligations to freeze, the reporting requirements to the national competent authority, and the availability of any licence or derogation all require prompt legal assessment. Involve counsel when a voluntary self-disclosure – a VSD (a proactive report to the regulator identifying a potential breach) – may be appropriate. The EU member state competent authorities treat voluntary disclosure as a factor in enforcement decisions, and the preparation of a VSD is a task requiring careful legal management.
We have acted for manufacturing businesses, financial institutions, and trading intermediaries across multiple EU jurisdictions on exactly these questions. Our practice covers the full ownership and control analysis, the cross-regime comparison with OFAC and OFSI, and – where a potential breach has occurred – the enforcement and reporting route.
Related practices
- Sanctions compliance audit and testing – assessing whether your screening programme captures owned and controlled entities.
- The 50 percent rule and ownership analysis: advanced structures – trust arrangements, nominees, and multi-regime analysis in depth.
- Ownership and control under OFAC and OFSI: a comparative guide – how the US and UK tests compare with the EU standard step by step.