A business operating under an EU-specific sanctions licence reaches a point that most compliance teams underestimate: the licence expires, or the facts it was granted on have changed. The counterparty's ownership structure has shifted. The sanctioned goods category has been amended by a new Council regulation. A previously licensed payment stream now falls under a different derogation. Each of these events demands action – and the window to act is shorter than most in-house teams expect.
EU sanctions licences – formally called specific authorisations (case-by-case derogations granted by a competent authority of an EU member state, permitting an otherwise-prohibited transaction) – are time-limited and fact-specific. As of June 2026, the relevant Council regulations across all major EU sanctions programmes require that any material change to the underlying facts be notified to the issuing competent authority, and that renewal applications be lodged before expiry if the activity is to continue lawfully. The governing instruments are the relevant thematic Council regulations and their implementing and amending Council decisions; OFSI and OFAC operate distinct parallel regimes that do not automatically recognise an EU authorisation.
This guide walks through the amendment and renewal process step by step, compares the EU position with OFSI and OFAC, identifies the risk flags that most commonly produce enforcement referrals, and sets out when to involve external counsel.
Step 1 – Understand what you hold: mapping the scope of your existing authorisation
Before any amendment or renewal is possible, the holder must build a precise record of what the current authorisation actually permits. EU specific authorisations are granted by individual member-state competent authorities – the national bodies designated under each thematic Council regulation – and they vary in scope, duration, and the conditions attached to them.
The mapping exercise has four elements. First, identify the issuing competent authority and the regulation under which the authorisation was granted. Second, record the precise transaction type, the counterparty, the sanctioned person or entity involved, and the goods, services, or funds covered. Third, confirm the expiry date. Fourth, list every condition attached to the authorisation – reporting obligations, end-use declarations, value caps, currency restrictions, and any requirement to obtain co-authorisation from a second member state where the transaction has a cross-border element within the EU.
In our experience, the most common gap at this stage is incomplete condition mapping. Holders log the expiry date but not the attached conditions. When a renewal application arrives at the competent authority, undisclosed breaches of conditions emerge – and what began as a routine renewal becomes an enforcement inquiry. The time to check for condition compliance is before the application, not after.
A further point: EU sanctions regulations are amended frequently by the Council. A licence granted under an earlier version of the regulation may refer to a derogation that has since been re-numbered, tightened, or deleted. Confirm that the legal basis cited in your authorisation still exists in the current text of the relevant regulation before you proceed.
Step 2 – Identify the triggering event: amendment, renewal, or both?
The EU regime treats amendments and renewals as legally distinct procedures, and the triggering analysis governs which application is required – sometimes both simultaneously.
An amendment is required when a material fact underlying the original authorisation has changed, but the activity itself is to continue within the same licence period. Material changes include: a change in the ownership or control structure of the counterparty or the sanctioned person; a change in the goods, services, or funds covered; a change in the route, intermediary, or financial institution involved; a change in the value or volume of the activity; or a regulatory amendment by the Council that alters the scope of the applicable derogation.
A renewal is required when the authorisation expires and the activity is to continue. Renewal is not automatic. It is a fresh application assessed against the criteria in force at the date of the renewal application – not at the date of the original grant. This matters because Council regulations are amended regularly, and the threshold for a derogation in force today may be materially different from the one applied when the original authorisation was granted.
Where both a material change and an approaching expiry coincide, the application must address both. Attempting to renew without disclosing a material change that occurred during the licence period is the most common trigger for an adverse regulatory finding in the EU licensing context. We regularly advise clients who have inherited an authorisation through a restructuring and face precisely this compound situation.
Step 3 – Prepare the amendment or renewal application: what the competent authority requires
The competent authority that issued the original authorisation is the correct filing address for both amendments and renewals. Where the underlying regulation has been amended by the Council and a different derogation now applies, the correct authority may have changed; confirm this before filing.
The application package typically requires the following elements, though requirements differ by member state and by the thematic regulation in question.
- A formal application form – most competent authorities publish these; some accept a structured letter.
- A copy of the original authorisation and all prior amendments.
- A clear description of the change or the continuing activity, with supporting documentation.
- Updated ownership and control information for the counterparty and any sanctioned person involved, including a full beneficial-ownership chart.
- Evidence that the applicable derogation criteria are met – humanitarian purpose, prior contractual obligation, legal fees, basic needs, or whichever derogation applies under the relevant regulation.
- A statement of any conditions that applied to the original authorisation and confirmation that those conditions have been complied with.
- Where the regulation requires it, a statement from a professional – a lawyer, auditor, or equivalent – confirming the facts stated.
Processing times vary by member state. Some competent authorities have published indicative timelines; others operate without a stated target. In our cross-border practice, the range we encounter is wide – from a matter of weeks for straightforward renewals in jurisdictions with well-resourced competent authorities, to several months for complex amendments in jurisdictions where the competent authority must consult other member states or the European Commission. Plan accordingly; do not assume that filing shortly before expiry is safe.
The position above covers the standard case. Your facts – the counterparty, the goods, the derogation in play, the member state – change the analysis. For a preliminary assessment of your authorisation, contact Calder & Vance at info@caldervance.com.
How does the EU amendment and renewal process compare with OFAC and OFSI?
The EU, OFAC, and OFSI regimes all require licences to be kept current, but the mechanics diverge in ways that create real compliance risk for businesses operating across all three.
Under OFAC – the US Office of Foreign Assets Control, which administers US economic sanctions – a specific licence is issued by OFAC itself as a federal authority; there is no member-state equivalent. Amendments require written communication to OFAC explaining the changed facts. Renewals are processed by OFAC, which applies the standards in force at the time of renewal. The regime is described in detail in our OFAC licence amendment and renewal guide.
Under OFSI – the UK Office of Financial Sanctions Implementation – specific licences are issued by OFSI under the Sanctions and Anti-Money Laundering Act and the relevant thematic regulations. Amendment and renewal requests go to OFSI directly. The UK regime post-Brexit operates independently of the EU; an EU authorisation has no standing in the UK, and vice versa. Henry Ashworth leads our UK licensing work; the regime is structured differently from both OFAC and the EU in its enforcement posture and in its reporting obligations for licence holders.
Three structural differences merit particular attention for cross-border businesses.
First, decentralisation. EU licences are issued by member-state competent authorities, not by a single EU-level body. A business with operations in multiple EU member states may hold authorisations from different competent authorities under the same Council regulation. Each competent authority applies its own procedural requirements. OFAC and OFSI are single federal or national bodies; their procedures are uniform.
Second, the ownership and control test. Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) operates mechanically. Under the EU and UK regimes, the test extends to control – a concept that captures de facto dominance over decision-making even where ownership is below the threshold. This difference is directly relevant to the factual basis of an authorisation: if the sanctioned person's control over the counterparty has changed, the EU competent authority needs to know, even if the ownership percentage has not moved.
Third, record-keeping obligations. The EU regime requires licence holders to retain records of all transactions conducted under an authorisation. The Japan regime – detailed in our Japan licence amendment and renewal guide – imposes its own distinct record-keeping standard. Where a business holds authorisations across multiple regimes, a consolidated record-keeping protocol is essential to avoid inadvertent shortfalls in any one jurisdiction.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact us at info@caldervance.com for a confidential assessment.
Step 4 – Risk flags that most commonly produce adverse outcomes
The following risk flags, in our experience, are the situations most likely to convert a routine amendment or renewal into an enforcement referral or a refusal.
Late filing. Filing a renewal application after the authorisation has expired means that any activity conducted in the gap period was conducted without authorisation. Even a short gap – days, not weeks – can constitute a breach of the relevant Council regulation. Build a renewal calendar with a minimum lead time of several weeks before expiry, and monitor it actively.
Non-disclosure of material changes. Any change to the facts underlying the authorisation must be disclosed. This includes changes in ownership or control of any party to the transaction, changes in the route of a payment or shipment, and changes in the nature of the goods or services involved. Competent authorities routinely cross-check renewal applications against the original application and against financial-intelligence data. Undisclosed changes are identified.
Reliance on an outdated derogation. Council regulations are amended by successive Council decisions. A derogation that applied at the time of the original application may have been amended in scope, made more restrictive, or deleted. Using an authorisation granted under a superseded derogation without checking whether the current text of the regulation still supports the activity is a legal compliance failure, not an administrative oversight.
Cross-border gaps. A business licensed under the German competent authority's authorisation is not automatically covered for the same transaction routed through a Dutch subsidiary. Each member state's competent authority authorises conduct within its jurisdiction. Cross-border transactions within the EU may require authorisations from more than one competent authority, and the applicable regulation may impose a co-authorisation requirement. Map the transaction route before assuming a single authorisation covers it.
Condition breaches undisclosed at renewal. Where an authorisation carries reporting conditions – for example, a requirement to report the volume of transactions conducted under the authorisation to the competent authority at stated intervals – a failure to comply with those conditions before filing a renewal is a problem. Some competent authorities treat unreported condition breaches as grounds for refusal of the renewal and for referral to enforcement. Check condition compliance before you file.
The 50 percent rule and the EU control test. If the counterparty's ownership or control structure has changed during the licence period, and a sanctioned person now meets either the OFAC 50 percent threshold or the EU control test with respect to the counterparty, the authorisation may no longer be valid as a matter of law. Continuing to rely on it in those circumstances is not a licensing procedural issue; it is an apparent substantive violation.
Step 5 – The EU General Court route: when a refusal or a restriction can be challenged
A refusal by a competent authority to grant a renewal or amendment, or the imposition of restrictive conditions, is not necessarily final. The EU legal system provides routes for challenge that are not available under all comparable national regimes.
At the member-state level, national administrative law typically provides for review of a competent authority's decision by an administrative court or tribunal. The scope and speed of that review varies by member state. Where the refusal or restriction is grounded in the text of the Council regulation itself rather than in a discretionary judgment by the competent authority, the challenge may need to be directed at the Council regulation.
Actions for annulment of a Council decision or regulation can be brought before the EU General Court under the Treaty on the Functioning of the European Union. The procedural requirements are demanding: the applicant must demonstrate standing, and the time limit for bringing an action is strict. In our practice advising on EU General Court matters, the window between a refusal and the deadline for commencing proceedings is one of the most time-sensitive points in the EU licensing lifecycle.
Claire Dubois leads Calder & Vance's EU General Court practice. Where a renewal refusal appears to be grounded in a disputed legal interpretation of the applicable Council regulation, or where the competent authority has applied the regulation in a way that appears inconsistent with the Council's stated intent, an annulment action deserves serious consideration. The firm assesses the merits of potential challenges and advises on the realistic prospects and timelines before any application is prepared.
What is less well understood is that a challenge to a refusal does not suspend the underlying prohibition. A business cannot continue a prohibited transaction on the basis that it has lodged a challenge. Interlocutory relief is theoretically available but rarely granted in sanctions licensing contexts. The practical implication: manage the transaction timeline to account for the possibility that a challenge will run for months before a substantive outcome is reached.
Common misconceptions about EU licence amendments and renewals
One misconception we encounter regularly is the belief that a renewal application filed before expiry preserves the authorisation while the application is pending. This is not correct as a general rule under EU sanctions regulations. Whether activity can continue during the gap between the expiry of the original authorisation and the grant of a renewal depends on the text of the relevant regulation and the practice of the competent authority in question. Some regulations contain a bridging provision; most do not. Assume that the authorisation expires on its stated date unless the regulation or the competent authority has explicitly confirmed a bridging position in writing.
A second misconception is that an amendment to a sanctions programme by the Council automatically extends or modifies an existing authorisation to reflect the new legal position. It does not. An authorisation is a grant of a specific derogation at a specific time. If the Council amends the regulation in a way that broadens the available derogation, a fresh application may be needed to access that broader scope. If the Council tightens the derogation, the existing authorisation may no longer support the full range of activity it previously covered. Monitor Council decisions and implementing regulations throughout the life of an authorisation, not only at renewal.
A third misconception is that a general authorisation – an EU general licence equivalent, being a standing derogation in the text of the Council regulation itself that permits a defined category of transactions without a specific application – operates in the same way as a specific authorisation for amendment and renewal purposes. It does not. General authorisations are defined by the regulation text; they apply as long as the regulation text applies. They do not expire on a date, but they can be removed or restricted by Council amendment. The appropriate response to a Council amendment that restricts a general authorisation is to assess whether the activity still falls within the amended text, not to file a renewal application.
Related practices
- Frozen account management under BIS and EAR – managing blocked accounts and assets under US export-control and sanctions authority.
- Licence amendments and renewals under the Japan regime – step-by-step guide to the Japanese licensing process and its interaction with global regimes.