A trading company based in the Netherlands identifies a potential supplier in a third market. The supplier's ultimate beneficial owner appears on no list. But two of its intermediate shareholders are designated under EU Council regulations. Does the supplier itself fall within the scope of EU financial sanctions? The answer determines whether the contract can proceed, how the goods must be paid for, and whether the transaction team needs to stop work immediately.
Under EU sanctions, a non-listed entity is treated as caught by the relevant prohibition when a designated person owns or controls it – either through a direct or indirect ownership stake of 50 percent or more, or through the exercise of control by other means. Unlike the purely mechanical OFAC ownership test, the EU regime adds a control limb that can extend the prohibition well below the 50 percent threshold. As of July 2026, that dual-limb structure is embedded across the major thematic sanctions regulations administered by the Council and implemented by EU Member States.
This guide walks through the EU ownership and control assessment step by step, explains where the EU position diverges from OFAC and OFSI, identifies the risk flags that most commonly trip up compliance teams, and sets out when to involve qualified sanctions counsel.
Step 1: Understand the legal basis and the governing authority
The ownership and control test in EU sanctions law derives from the relevant Council regulations that implement each thematic sanctions programme. Each regulation defines the categories of person subject to the asset-freeze prohibition and provides – either in the operative text or in accompanying guidance from the Council and from the European Commission – a method for assessing whether a non-listed entity is caught through its connection to a listed person.
The Council adopts the designations. Member State competent authorities – national financial intelligence units, treasury ministries, or equivalent bodies – administer and enforce the prohibitions at the national level. The European Commission issues guidance notes that, while not legally binding in themselves, are treated by most competent authorities as the authoritative interpretation of the ownership and control standard. The EU General Court provides the judicial review route for entities contesting a designation or the application of a prohibition to them.
In our cross-border practice, the first question we ask is which Council regulation applies to the particular counterparty and transaction. The ownership and control language is consistent in its structure across the main programmes, but small textual differences can matter, and the guidance that accompanies each programme should be read alongside the operative text.
The legal basis is also relevant to enforcement risk. Breaches of EU financial sanctions are prosecuted by Member State authorities under national implementing legislation, and penalty levels differ significantly between jurisdictions. A breach that would attract a civil administrative penalty in one Member State may attract criminal liability in another. That asymmetry has direct implications for how seriously the ownership and control analysis should be treated before a transaction is approved.
Step 2: Map the ownership chain to the 50 percent threshold
The first limb of the EU test requires assessing whether a designated person holds a direct or indirect ownership interest of 50 percent or more in the entity under review. This mirrors the headline threshold used by OFAC under its guidance on the 50 percent rule, but the EU assessment does not stop there.
Mapping the ownership chain requires identifying every intermediate holding company between the designated person and the entity in question. Aggregation applies: if two or more designated persons together hold 50 percent or more of the entity, the threshold is met even if no single listed person holds a majority stake. That aggregation point is the most common source of error in compliance assessments we review. A screening tool that checks only whether a single listed person crosses the threshold will miss a structure where two listed minority shareholders together hold a controlling stake.
The practical steps at this stage are:
- Identify every natural person and entity that appears on the relevant EU designations list as connected to the counterparty.
- Obtain ownership structure documentation – articles of association, corporate registry extracts, shareholder registers – that covers every layer of the chain.
- Aggregate all holdings attributable to designated persons, whether held directly or through intermediate entities.
- Record the methodology and the source documents, and retain them for the applicable record-keeping period.
Where the ownership chain is opaque – a common situation with privately held companies in markets with limited public registry infrastructure – the compliance team must consider whether the available information is sufficient to support a conclusion, or whether enhanced due diligence and independent verification are required before the transaction can proceed.
Step 3: Apply the control limb – where EU diverges from OFAC
The control limb of the EU test has no direct equivalent in OFAC's guidance, and it is the point at which EU and US analyses diverge most sharply. Even where the designated person holds less than 50 percent of the entity's shares, the entity may still be subject to the EU prohibition if the designated person exercises control over it by other means.
Control in this context is not a term of art with a single fixed definition. The European Commission's guidance identifies indicators that competent authorities and regulated entities should consider. These include: the power to appoint or remove a majority of the board or management body; the right to exercise a dominant influence over the entity through a shareholders' agreement, a contract, or the constitutional documents; the ability to direct the entity's financial or operational decisions in practice; and the holding of special veto rights over strategic decisions.
What does this mean in practice? It means that a designated person who holds 30 percent of an entity's shares but who has contractual rights to appoint the chief executive and to block major transactions may well be in control of that entity for EU sanctions purposes – regardless of the formal ownership percentage. We regularly advise clients who have passed the ownership screen but who face a more difficult question about whether the contractual architecture of a joint venture or a franchise arrangement gives a designated counterparty effective control.
The OFSI position in the United Kingdom applies a similar dual-limb approach. OFSI's guidance identifies control indicators that are closely comparable to the EU list, and the two regimes are broadly convergent on this point. The sharpest contrast remains with OFAC, whose guidance focuses on the ownership percentage and does not extend to a generalised control analysis of the kind the EU and UK apply. For a business operating across all three regimes, that divergence means that a transaction cleared under OFAC analysis may still be prohibited under the EU and UK rules – and vice versa.
Step 4: Identify risk flags and high-risk structures
Certain ownership and corporate structures are inherently more likely to raise ownership and control questions under the EU regime, and compliance teams should treat them as triggers for enhanced analysis rather than routine screening.
The following structures warrant particular attention:
- Nominee shareholding arrangements, where a designated person's interest is held on their behalf by a third party. The beneficial ownership is what matters; the nominee's clean record does not remove the exposure.
- Joint ventures with minority designated shareholders, particularly where the joint-venture agreement grants the minority partner veto rights over key decisions.
- Franchise and licensing structures, where a designated franchisor retains operational control or receives material financial benefits from the franchisee's activity.
- Holding companies in opaque jurisdictions, where beneficial ownership information is difficult to obtain and verify independently.
- Recent restructurings that have occurred after the designated person was listed, which may indicate an attempt to distance the listed person from the asset – a risk profile that warrants careful analysis of the pre-restructuring position.
In our experience, the most underweighted risk in EU ownership and control assessments is the control-through-contract scenario. Clients often focus on share registers and miss the provisions of a shareholder agreement that give a listed minority holder effective blocking rights. Reviewing the constitutional documents and the key commercial agreements is not optional where a designated person holds any interest in the counterparty, however small.
The position above covers the standard analytical steps. Your facts – the specific counterparty, the structure of its ownership, the applicable thematic sanctions programme, and the jurisdiction of the relevant Member State competent authority – change the analysis in ways that a generic guide cannot fully anticipate. For a targeted assessment of your exposure under the EU regime, contact Calder & Vance at info@caldervance.com.
Step 5: Consider interaction with OFAC secondary-sanctions risk and other regimes
An EU ownership and control assessment does not operate in a regulatory vacuum. For many cross-border businesses, the same transaction that triggers an EU analysis will also raise questions under OFAC, OFSI, and potentially other regimes. The EU and OFAC ownership tests are not co-extensive, and a clean result under one does not guarantee a clean result under the other.
Secondary-sanctions risk is a further dimension. OFAC's secondary-sanctions authorities create exposure for non-US persons who conduct significant transactions with persons designated under certain US sanctions programmes, even where no US nexus is otherwise present. A European business that concludes, correctly, that a counterparty is not caught by the EU asset-freeze prohibition may nonetheless face secondary-sanctions risk under US law if the counterparty is designated under a US programme covered by secondary-sanctions authorities.
The interaction with OFSI is particularly relevant for UK-connected businesses or transactions that pass through the UK financial system. OFSI applies its own ownership and control test, which in structure is closely comparable to the EU approach. Where a transaction requires clearance under both the EU and UK regimes, the assessments should be conducted in parallel and the results cross-checked, because a structural feature that does not trigger the EU control test may nonetheless trigger the OFSI equivalent, or vice versa.
For transactions with any UN-listed dimension, the UN Consolidated List is the baseline. EU designations typically go further than UN listings, but where a person is listed at UN level, the obligations under UN Security Council measures apply to all Member States regardless of the EU position.
If a transaction has already been flagged by a bank, or a payment has been frozen pending clarification of the ownership and control position, an early review of all relevant regimes can preserve options that narrow quickly. For a confidential cross-regime review, contact us at info@caldervance.com.
Step 6: Record-keeping, reporting, and interaction with the competent authority
An EU ownership and control assessment must be documented. The analysis, the source materials, the conclusion reached, and the identity of the person who approved the assessment should all be recorded and retained. Competent authorities that conduct enforcement reviews expect to see a contemporaneous record, not a reconstruction after the event. In the absence of contemporaneous documentation, even a correct conclusion may not provide an effective defence against an allegation of breach.
Where an EU-based entity holds funds or economic resources belonging to a designated person – or belonging to an entity that the ownership and control analysis shows to be caught – there is an obligation to freeze those assets and to notify the relevant national competent authority. The notification requirement operates on a short statutory timeline that varies by Member State. Acting promptly once the analysis is complete is therefore not merely good practice; it is a legal requirement.
Regulated financial institutions also carry suspicious transaction reporting obligations under applicable anti-money-laundering rules that operate alongside the financial-sanctions regime. Where an ownership and control assessment reveals a sanctioned connection, the reporting obligations under both regimes may be triggered simultaneously, and both must be considered.
Where the assessment is genuinely uncertain – where the available information does not support a definitive conclusion on whether a designated person exercises control – it is prudent to approach the competent authority for informal guidance, or to structure the engagement so that no irreversible action is taken until the position is clarified. In our practice, we have seen cases where early engagement with the competent authority on a complex ownership question has produced a clearer regulatory position and reduced enforcement risk materially. Record that engagement, and document the authority's response in writing.
Common myths and objections: what compliance teams get wrong
A pervasive misconception is that the EU ownership and control test is simply a replication of the OFAC 50 percent rule. It is not. The EU test includes the control limb, and applying only the ownership calculation will produce an incomplete – and potentially wrong – result. Compliance teams trained primarily on OFAC methodology, or screening systems calibrated to the OFAC standard, require adjustment before they can reliably handle EU assessments.
A second misconception is that a clean result from a commercial screening database closes the analysis. Commercial databases aggregate publicly available ownership information. They do not routinely capture contractual control provisions, nominee arrangements, or recent restructurings that have not yet been reflected in public registries. A negative screen is a starting point, not a conclusion.
A third error is treating the ownership and control assessment as a one-time exercise. Designations change. Ownership structures change. A counterparty that was clean at the time of the initial assessment may become caught following a new listing or a corporate restructuring. Ongoing monitoring – not just pre-transaction screening – is a necessary component of an effective EU sanctions compliance programme.
Finally, some businesses assume that because a transaction is structured through a non-EU intermediary, the EU prohibition does not apply. The EU prohibitions apply to all EU persons wherever they are located, to all transactions conducted in or passing through the EU, and to transactions involving EU-origin goods, technology, or funds. Structuring a transaction through a non-EU entity does not remove EU exposure if an EU person is involved or if EU-origin value is present.
Related practices
- Sanctions compliance audit and testing – independent review and stress-testing of your sanctions screening programme across regimes.
- Ownership and control assessments: advanced EU scenarios – deeper analysis of joint ventures, nominee structures, and contested control questions under EU law.
- Ownership and control: cross-regime comparison guide – how the EU, OFAC, and OFSI tests compare and where the gaps create transaction risk.