A Canadian trading company finalises the paperwork for a cross-border transaction. Its compliance team identifies that the counterparty falls within the scope of a Canadian sanctions programme administered by Global Affairs Canada. The deal looks blocked – until someone asks whether a general licence (a standing authorisation that permits a defined category of transactions without a separate application) might apply. That single question can be the difference between a transaction that proceeds lawfully and one that stalls indefinitely.
General licence eligibility under Canada's sanctions regime turns on whether the specific transaction falls within the terms of an authorisation issued under the Special Economic Measures Act ("SEMA") or, for UN-mandated measures, the United Nations Act. The administering authority is Global Affairs Canada ("GAC"). Unlike some regimes, Canadian general licences are transaction-specific and tightly drafted; the eligibility analysis is not mechanical. As of June 2026, the number of standing authorisations in force remains smaller than under comparable OFAC or OFSI programmes, which amplifies the risk of misreading their scope.
This guide walks through the governing authority, the eligibility test, the verification procedure, cross-border considerations, common risk flags, and when to involve counsel. It is structured as a decision path: each section asks the question a compliance officer or General Counsel should answer before relying on an authorisation.
Step 1: Identify the governing authority and legal basis
Canadian sanctions authorisations derive from SEMA and the United Nations Act, with the detailed terms set out in the specific regulations for each programme. GAC is the competent authority for issuing, publishing, and interpreting these authorisations. Understanding who governs is the first step, because it shapes every subsequent procedural obligation.
SEMA authorises the Governor in Council to make regulations prohibiting transactions and, within those same regulations, to provide for permits or exceptions. Not every programme contains a general authorisation. Some permit categories are embedded directly in the programme regulations; others require a separate permit application to GAC. The distinction matters because the procedural requirements – and the available defences in an enforcement context – are different in each case.
The United Nations Act operates in parallel for UN Security Council-mandated measures. Where the UN Consolidated List drives a designation, the Canadian implementation typically follows closely. But there can be timing gaps between a UN listing and the Canadian regulatory update, and those gaps can create temporary ambiguity about which instrument governs. In our cross-border practice, this is a detail that clients often overlook until it is raised in the context of a specific transaction.
A practical first step is to identify which programme regulation applies to the counterparty or transaction in question, and then to read the entire regulation – not just the prohibition articles – to establish whether any standing authorisation exists. If the regulation is silent, the default answer is that no general licence is available, and a specific permit application to GAC is required.
Step 2: Read the authorisation terms precisely – and test eligibility
Eligibility under a Canadian general authorisation requires the transaction to fall within the exact terms of the authorisation: the permitted purpose, the permitted parties, any value or volume limits, and any conditions attached. Partial compliance is not sufficient; a transaction that satisfies three of four conditions is a prohibited transaction.
Canadian sanctions authorisations often specify the permitted purpose by reference to categories such as humanitarian activity, diplomatic or consular operations, or the maintenance of pre-existing contractual arrangements. Each of those categories has limits. Humanitarian activity, for instance, does not extend to all activities that benefit affected populations; it covers the specific functions that the authorisation text identifies. Reading the purpose narrowly is the correct approach – and it is the approach GAC adopts when reviewing compliance questions.
The permitted-party dimension adds a further layer. Some authorisations are available only to specified classes of persons (accredited diplomatic missions, registered humanitarian organisations, or similar). A commercial business that does not fall within that class cannot rely on the authorisation, regardless of the purpose of the transaction. In a recent matter, a logistics business in the technology sector assumed it could rely on an authorisation drafted for a different category of operator. We assisted it in identifying the correct characterisation and, where the authorisation did not apply, in preparing a specific permit application to GAC. The matter reached resolution, though no outcome can be guaranteed in any given case.
Conditions are equally critical. An authorisation may permit a payment but require that the funds be directed to a specific account type, or that the activity cease if the designated person gains or increases a beneficial interest. Missing a condition converts an authorised transaction into a potential violation. Read every condition, and document the analysis.
Step 3: Verify the authorisation is current and has not been amended
Canadian sanctions regulations are amended by order-in-council and can change with limited advance notice. An authorisation that was valid when a compliance policy was drafted may have been narrowed, suspended, or removed by a subsequent amendment. The third step in any eligibility analysis is to verify that the authorisation is still in force in its current form on the date of the proposed transaction – not the date the policy was written.
GAC publishes consolidated versions of the programme regulations through the Justice Laws website and maintains a dedicated sanctions page. However, there is typically a lag between the order-in-council and the updated consolidated version appearing publicly. In periods of active enforcement activity or diplomatic development, that lag creates a real risk. We regularly advise clients to check the Canada Gazette directly for recent regulatory orders, alongside the consolidated text, before finalising any eligibility assessment.
Where an authorisation has conditions that require ongoing monitoring – for instance, a condition that the authorisation is only available while the counterparty remains at a specified ownership structure – the verification obligation is continuous, not one-off. Firms managing long-term supply arrangements should build this into their periodic review cycle rather than treating eligibility as a concluded question.
How does Canadian general licence eligibility compare with OFAC, OFSI, and the EU?
Canada's authorisation structure is narrower in scope than comparable instruments under OFAC, OFSI, or the EU, and the cross-regime divergence is operationally significant for any business that has counterparties across multiple jurisdictions.
Under OFAC, general licences are published on OFAC's website and are frequently supplemented by programme-specific FAQs and interpretive guidance. OFAC's licence programme is large: at any given time, dozens of general licences may be in force across the active US sanctions programmes. The eligibility analysis under OFAC often benefits from a body of published interpretive material. Canada offers a thinner set of published guidance, which makes legal analysis harder and the risk of misapplication higher.
OFSI in the United Kingdom also provides general licences, and OFSI has expanded its published guidance in recent years. The UK and Canada share a broadly similar structure in that each relies on a primary statute with programme-specific regulations, but OFSI's licensing team tends to issue written interpretations more readily than GAC. Practitioners managing UK-Canada parallel obligations should not assume that an OFSI general licence authorises the same transaction that a GAC authorisation covers; the terms and conditions are drafted independently and do not mirror one another.
The EU operates through Council regulations, which often include derogations (the EU term for authorisations). EU derogations may require competent-authority approval in the relevant member state before they can be used, which introduces a procedural layer absent from the Canadian structure. For a business with EU and Canadian exposure to the same counterparty, this means two separate eligibility analyses, potentially before two different authorities, with different timelines.
The baseline cross-border rule is that where multiple regimes apply, the strictest prohibition governs each regulated nexus. A transaction that Canadian law authorises may still be prohibited under OFAC if a US-person nexus exists or if the goods or services are of US origin. We have acted for exporters who misread the Canadian authorisation as resolving their US exposure; it does not. The two analyses are independent.
For further detail on cross-border licensing coordination, see our guide on general licence eligibility across regimes, and for the EU authorisation procedure in depth, see our EU general licence eligibility guide.
What are the risk flags that most often lead to compliance failures?
Canadian general licence compliance failures cluster around a small number of recurring patterns. Identifying them in advance is more effective than discovering them through an enforcement enquiry.
The first risk flag is purpose drift. A transaction begins within the permitted purpose and, over time, expands to include activities that the authorisation does not cover. This is particularly common in long-term supply or services arrangements. A logistics contract may begin as the supply of humanitarian goods and gradually incorporate commercial distribution. The moment commercial distribution displaces the authorised purpose, the authorisation no longer supports the transaction, but the internal documentation often does not reflect the change.
The second risk flag is ownership-chain error. Some authorisations are restricted to transactions with entities that are not directly or indirectly controlled by a designated person. If the ownership chain of the counterparty changes – through a corporate restructuring, a new investor, or a secondary designation – eligibility that existed at the outset may no longer exist. Canadian sanctions extend to entities owned or controlled by designated persons, applying an ownership and control test (the test for whether a non-listed entity is caught through a listed person). In our experience, firms screen at onboarding and then fail to re-screen on a periodic basis. That gap creates exposure.
The third risk flag is record-keeping failure. Compliance under a general authorisation requires contemporaneous documentation: the eligibility analysis, the version of the regulation relied upon, the date of verification, and the approval by a responsible officer. If a GAC enquiry or enforcement review follows, undocumented reliance on an authorisation offers limited protection. We regularly see firms that conducted a sound analysis but cannot produce the audit trail. That is a correctable deficiency, but only before the enquiry arrives.
The fourth risk flag is the assumption of transferability. A general authorisation available to one member of a corporate group is not automatically available to another member. Each entity that wishes to rely on the authorisation must independently satisfy its conditions. Transfers of benefit within a group – for instance, an authorised subsidiary transacting on behalf of a non-authorised parent – may create separate prohibition risk.
The position above covers the standard case. Your facts – the counterparty, the goods, the purpose, the corporate structure, and the regime in play – change the analysis materially. If you have identified a potential eligibility question, contact Calder & Vance at info@caldervance.com for an assessment of your position.
Step 4: Document the eligibility decision and establish the ongoing compliance structure
Relying on a Canadian general authorisation without a documented eligibility decision is operationally weak even if the underlying analysis is correct. GAC expects firms to be able to demonstrate, at any point, that reliance on an authorisation was reasoned and contemporaneous. The documentation should record the authorisation relied upon, the version in force on the transaction date, the eligibility criteria assessed, and the conclusion reached by a qualified person.
For recurring transactions under a standing authorisation, the compliance structure should include a periodic review trigger – at minimum, annually, and additionally whenever the programme regulations are amended or when a counterparty's ownership or designation status changes. Many firms use a simple compliance calendar that ties the authorisation review to the programme's regulatory version date. That approach works, provided someone is responsible for monitoring regulatory changes and triggering the review.
Where the volume or complexity of transactions under a single authorisation is significant, a dedicated compliance record for that programme – separate from the general transaction-screening log – is good practice. It allows an efficient response to any GAC enquiry and demonstrates that the firm treats its authorisation reliance as a managed obligation rather than a one-time determination.
If a transaction is time-sensitive and the eligibility analysis cannot be completed before the agreed date, the correct approach is to delay the transaction. An incomplete eligibility analysis does not provide a defence, and the pressure of commercial timelines is not a mitigating factor in Canadian sanctions enforcement. The question is not whether you can afford to wait. The question is whether you can afford not to.
Common myths and objections handled
A persistent misconception is that Canadian sanctions rules are less strictly enforced than US or UK equivalents, and that minor technical breaches are unlikely to attract regulatory attention. That view is incorrect. GAC has shown a clear direction of travel toward more active enforcement, and the existence of a general authorisation does not create a low-scrutiny zone. Firms that rely on an authorisation without proper documentation are equally exposed in an enforcement context as firms that transact without any authorisation at all.
A second misconception is that GAC will provide informal guidance on eligibility questions without a formal enquiry. In practice, GAC's published guidance is limited, and requests for informal views are not reliably answered within commercial timelines. Practitioners who need certainty about eligibility either conduct a thorough legal analysis themselves or apply for a specific permit. Waiting for informal guidance is not a viable compliance strategy where the transaction has a fixed date.
A third objection we encounter regularly is that a cross-regime analysis is unnecessary because the transaction is "only Canadian." That framing misses extraterritorial exposure. If any element of the transaction involves US-origin goods, US-person involvement, a US-dollar payment, or a counterparty with US connections, OFAC's rules may apply independently of the Canadian position. Similarly, if EU-based entities or EU-origin goods are involved, EU derogation requirements may be engaged. The Canadian authorisation resolves the Canadian question only.
If a transaction has already been flagged – by a bank, a counterparty, or your own screening system – or if a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss next steps.
When to involve sanctions counsel
Sanctions counsel should be involved at the earliest point at which eligibility is uncertain. The most cost-efficient engagements are those where we review the eligibility question before the transaction is committed, rather than after a compliance failure has occurred or an enforcement enquiry has arrived.
Specific triggers for early involvement include: a counterparty that is designated or that has a designated person in its ownership chain; a transaction that falls within a humanitarian, diplomatic, or official category that an authorisation nominally covers but that has significant commercial components; a transaction that crosses multiple regimes simultaneously; and any situation in which the programme regulations have been amended within the past twelve months.
Where a firm has an existing compliance programme and wishes to test its eligibility analysis against the current state of the Canadian programme, we can conduct a structured review of the programme, the authorisation relied upon, and the supporting documentation. That review surfaces gaps before they become enforcement issues.
For cross-border matters where Canadian exposure arises alongside US or UK exposure, our practice covers all three regimes under one engagement. See also our service on account management under the BIS/EAR for parallel US export-control considerations that frequently arise in the same transactions.
Related practices
- BIS/EAR frozen account management – advice on managing assets and accounts subject to US export-control constraints
- General licence eligibility across regimes – cross-border analysis of authorisation procedures under OFAC, OFSI, the EU, and comparator regimes
- EU general licence eligibility guide – detailed procedural guide to EU derogation eligibility and competent-authority approval