A European trading company prepares to settle a supply transaction with a distributor it has used for several years. A routine screening run flags that a listed individual holds a minority stake in the distributor's parent. The compliance team asks the obvious question: is the distributor itself caught? Under EU sanctions, the answer depends not only on the size of that stake but on whether the listed person exercises control – and that is a fundamentally different question from the one OFAC's mechanical ownership threshold poses.
EU sanctions prohibit making funds or economic resources available to listed persons and to entities owned or controlled by them. The ownership limb mirrors the logic of other regimes: a shareholding of 50 percent or more by a listed person is ordinarily sufficient. The control limb goes further and is unique to the EU and UK approach: even a minority shareholder can render an entity caught if that person directs its decisions. Both limbs must be assessed, and failure to address either is a compliance failure.
This guide sets out the full EU ownership and control assessment, step by step, with comparisons to the OFAC and OFSI positions, the risk flags practitioners encounter most frequently, and the point at which external counsel adds clear value.
Step 1 – Identify the legal basis and the competent authorities
The obligation to screen counterparties and avoid dealings with owned or controlled entities flows from the relevant EU Council regulations implementing autonomous EU sanctions and, where applicable, measures giving effect to UN Security Council resolutions. The Council enacts a separate regulation and decision for each programme. The legal text governing ownership and control is substantively consistent across programmes, though implementation guidance from the European External Action Service and national competent authorities – known as NCAs – can differ by member state.
As of mid-2026, the EU operates a significant number of autonomous sanctions programmes. Each programme designates individuals and entities whose assets are frozen and with whom EU persons and EU-nexus transactions are prohibited. The EU's Consolidated List gathers all listings across programmes; it is maintained by the Official Journal and replicated in the EU Sanctions Map tool maintained by the EEAS.
For the ownership and control assessment specifically, the framework derives from guidance documents agreed between the Commission and member state NCAs – typically called "best practices" notes. These are not binding legislation, but NCAs apply them in enforcement. The practical consequence is that a business operating in multiple EU member states must satisfy NCAs in each relevant jurisdiction, though the underlying test is harmonised. We regularly advise clients on how to standardise their assessment methodology while satisfying the procedural preferences of different NCAs.
The cross-border dimension matters immediately. An EU-incorporated company has EU obligations. A non-EU parent transacting through an EU subsidiary carries its own jurisdictional exposure, and US-person employees or dollar-clearing transactions may simultaneously engage OFAC. Understanding which authority has primacy – and where the tests diverge – is the first step before any specific counterparty is assessed.
Step 2 – Apply the ownership limb: mapping shareholdings and aggregation
The EU ownership limb is satisfied when a listed person or entity holds, directly or indirectly, 50 percent or more of the ownership rights of a target entity. The threshold is consistent with OFAC's position and with OFSI's guidance under the UK regime. Where the EU approach begins to differ is in its treatment of indirect holdings and chains of ownership.
Mapping the ownership chain requires going beyond the immediate counterparty. A listed person may hold a sixty percent interest in a holding company that itself holds forty-five percent of the target. The indirect share of the target is twenty-seven percent – below the threshold. But if a second listed person holds a further twenty-five percent of the target directly, aggregation of both listed-person interests reaches fifty-two percent and the entity is caught. The arithmetic is straightforward; locating all the relevant shareholders is not.
Several practical questions arise at this step:
- What is the cut-off for beneficial ownership disclosure in the target's jurisdiction? Corporate registries in some member states disclose beneficial owners at a twenty-five percent threshold, leaving a gap between disclosure requirements and the fifty-percent screening test.
- Are intermediate holding companies themselves subject to screening? The assessment must be repeated at each layer where ownership data is available.
- Is the ownership structure current? Corporate structures change. Acquisitions, secondary share sales, and inheritance of listed persons' estates can alter the picture between transaction signing and settlement.
In our experience, the most common source of missed ownership exposure is the use of stale data – a screening run performed at the contract negotiation stage that is not refreshed at settlement or upon each drawdown in a facility. The EU Council guidance on best practices notes the importance of ongoing vigilance, not a one-time check.
Where the 50 percent threshold is met or closely approached, the entity is treated as caught and dealings must cease unless a licence is in place. There is no OFAC-style "close nexus" analysis at this stage: the arithmetic either reaches the threshold or it does not. See also our companion guide on the OFAC ownership test at ownership and control assessments under OFAC for the points of convergence and divergence between the two regimes.
Step 3 – Apply the control limb: where the EU test goes beyond a threshold
The control limb is the feature that most distinguishes the EU (and UK) ownership-and-control test from the OFAC position. An entity can be caught under EU sanctions even where no listed person meets the fifty-percent ownership threshold, if a listed person controls it.
What does control mean in this context? The Council's best-practices guidance and NCA interpretations identify several indicators:
- A listed person holds a majority of voting rights, whether or not their economic stake reaches fifty percent.
- A listed person has the right to appoint or remove a majority of the board or equivalent management body.
- A listed person can exercise dominant influence over the entity's decisions by virtue of contractual rights, articles of association, or de facto management arrangements.
- A listed person acts in concert with others to exercise control collectively.
The last indicator is important and often overlooked. Two or more listed persons who each hold less than fifty percent but who together direct the management of a company may collectively satisfy the control test. Concert is assessed through conduct – voting records, board resolutions, correspondence between the relevant parties, and the actual management decisions taken – not through formal contractual arrangements alone.
How does this compare with OFSI under the UK regime? OFSI's ownership and control guidance follows similar lines. Both the EU and OFSI treat control as a factual question assessed against the indicators above. The substantive difference is that OFSI operates under SAMLA – the Sanctions and Anti-Money Laundering Act – and its guidance is published separately by His Majesty's Treasury. In practice, a business that applies the EU control test rigorously will cover the UK position in almost all cases, but OFSI guidance should be reviewed independently because its published interpretations are not always identical to the EU best-practices position. Our separate guide on ownership and control assessments under OFAC – a supplementary guide addresses the further question of how US-nexus transactions interact with a parallel EU control finding.
The control assessment is, by its nature, a judgment call. It requires gathering evidence – shareholder agreements, constitutional documents, minutes, management accounts where available, and public reporting on the entity – and weighing that evidence against the indicators. That exercise cannot be reduced to a screening-tool output. It requires legal analysis.
How does the EU control test differ from the OFAC ownership test?
OFAC's test is mechanical: 50 percent or more ownership by one or more blocked persons, whether direct or indirect, triggers blocked-entity status. OFAC does not apply a standalone control test equivalent to the EU position. A listed person who holds forty-eight percent and runs the company as chief executive would not, under OFAC's stated guidance, cause the entity to be treated as blocked solely on that basis. Under the EU regime, the same fact pattern would require a control analysis and very likely produce a finding that the entity is caught.
That divergence has direct consequences for businesses operating under both regimes simultaneously – which describes the vast majority of internationally active companies and virtually all correspondent-banking relationships. A transaction that passes the OFAC ownership screen may still fail the EU control test. Running both tests in parallel is not optional; it is a minimum standard of cross-border sanctions compliance.
The divergence also affects how evidence is gathered. Because OFAC's test is quantitative, corporate registry data and disclosed shareholding records are often sufficient for the ownership assessment. Because the EU control test is qualitative, the evidence base must be wider: articles of association, shareholder agreements, board composition, reported governance practices, and sometimes media or regulatory filings. In a recent matter, a financial services business cleared a counterparty under the OFAC ownership screen and proceeded to settlement, only to identify, through a subsequent EU-mandated review of governance documentation, that a listed individual held contractual rights to veto material decisions. The entity was caught under the EU control limb. The cost of remediation was substantially higher than the cost of a combined assessment at the outset would have been.
Step 4 – Document the assessment and manage ongoing obligations
The EU sanctions rules do not prescribe a specific form of documentation for ownership and control assessments. What the rules do establish – and what NCAs apply in enforcement – is a standard of due diligence: a business must be able to demonstrate that it took reasonable steps at the relevant time to identify any prohibited connection. Adequate documentation is the only way to evidence those steps.
A defensible EU ownership and control assessment file typically contains:
- A record of the screening run, identifying the lists checked, the date, and the tool or method used.
- A corporate structure chart showing the full ownership chain to the level at which the relevant information is available or reasonably obtainable.
- An analysis of each ownership layer, confirming the shareholding percentages and the source of that data.
- A control assessment addressing each indicator in the best-practices guidance, with the evidence considered and the conclusion reached.
- A sign-off from a suitably qualified person within the organisation, or from external counsel where the matter is complex.
- A note of any limitations – unavailable data, opaque structures, incomplete registries – and the steps taken to address or account for them.
Retention of documentation is a material point. EU sanctions regulations require that records relevant to obligations under the relevant Council regulation are kept for a defined period; five years is the benchmark applied across the main programmes, consistent with anti-money laundering record-keeping requirements. Verify the current position under the applicable programme before relying on this.
Ongoing obligations compound the documentation burden. A one-time assessment at counterparty onboarding is not enough. The EU Consolidated List is updated frequently. New designations can render a previously cleared counterparty caught overnight. A periodic re-screening schedule – aligned with the risk profile of the counterparty and the nature of the relationship – is a basic element of a proportionate compliance programme. For higher-risk relationships, screening at each transaction event is warranted.
If a new listing affects an existing counterparty, the obligation to cease dealings is immediate. The question that then arises is whether a licence is available. Under EU sanctions, the relevant programme regulation sets out the licensing grounds – typically covering humanitarian activity, personal maintenance payments, legal costs, and pre-existing contractual obligations in limited circumstances. Applications go to the NCA of the relevant member state. The decision rests with that authority; outcomes cannot be guaranteed.
For assessments touching Australian entities or clients with Australian regulatory obligations, our sanctions compliance audit and testing service for the Australian regime addresses the parallel obligations under Australia's autonomous sanctions and how to align them with an EU-driven assessment.
Risk flags and when to involve counsel
Not every ownership and control assessment requires external lawyers. A clearly listed person with a majority stake in a simply structured entity presents a straightforward case: the entity is caught and dealings must stop. External counsel adds greatest value at the margins – and the margins are where the real risk lies.
The following situations warrant early counsel involvement:
- Opaque or multi-layer structures: Offshore holding companies, jurisdictions with limited beneficial-ownership transparency, and nominee arrangements all impede the gathering of reliable data. The assessment is only as good as the information on which it rests.
- Minority stakes near the threshold: A listed person holding forty-five to forty-nine percent of a counterparty is below the ownership limb but within range of the control test. That combination requires careful legal analysis, not a tool-generated clearance.
- Contractual control rights: Shareholders' agreements, preferred share rights, veto provisions, and management services contracts can all establish control without an ownership majority.
- Historical changes in ownership: Acquisitions, successions, and corporate restructurings that predate the current assessment may have introduced listed-person exposure that is not visible in current registry data.
- Parallel OFAC or OFSI obligations: Where a transaction also engages US or UK nexus, a combined assessment is more efficient and reduces the risk of a clearance under one regime that creates liability under another.
- A live transaction under time pressure: The combination of legal complexity and commercial urgency is the scenario most likely to produce a hurried and inadequate assessment. Early involvement sets the pace, not a late escalation.
A common misconception – the AUDIENCE_MYTH – is that completing a sanctions screening check constitutes an ownership and control assessment. It does not. Screening tools check names against lists. The ownership and control question is different: it asks whether a non-listed entity is captured through a listed person, and answering it requires analysis of corporate structure, voting rights, contractual arrangements, and conduct. Compliance counsel who treat a screening hit as the end of the inquiry, rather than the beginning, expose their organisation to enforcement risk. The EU regime expects the analysis to go further.
We advise compliance teams regularly on exactly this point. The question is not whether a name appears on a list. The question is whether the entity in front of you is caught – and that is a legal conclusion, not a database query.
Related practices
- Compliance audit and testing – Australia – sanctions compliance review aligned to Australia's autonomous regime and cross-border obligations
- Ownership and control assessments under OFAC – the US ownership threshold, the OFAC 50 percent rule, and how the test differs from EU
- Ownership and control assessments under OFAC – supplementary guide – secondary-sanctions risk and the interaction between OFAC and EU ownership findings
If a transaction is already in progress and an ownership or control question has emerged, early review preserves options. Dealings that have already occurred may give rise to a reporting obligation or a voluntary disclosure. The window for managing those outcomes is not indefinite.
For a confidential review of an ownership or control question under the EU regime or a parallel multi-regime assessment, contact Calder & Vance at info@caldervance.com.