A trading company signs a long-term supply agreement. Six months later, a counterparty shareholder appears on the UN Consolidated List (the list of individuals and entities subject to UN Security Council asset-freeze, travel-ban, and arms-embargo measures). The deal is live. Deliveries are in transit. Does the contract continue? Who bears the compliance cost? These questions can determine whether a business faces regulatory exposure or emerges clean.
Sanctions clauses in contracts under the UN Consolidated List serve as the legal mechanism by which parties allocate responsibility for compliance obligations, termination rights, and loss where a UN-designated person intersects with the transaction. As of August 2026, the UN Consolidated List is administered through Security Council committee structures under Chapter VII of the UN Charter, but the operative prohibitions fall on businesses through national implementing legislation – meaning that the clause must be tested against the applicable country regime, not the UN instrument alone.
This guide walks through how to identify the right clause architecture, how the UN regime interacts with OFAC, OFSI, and EU implementing rules, the most common drafting mistakes, and when to bring in sanctions counsel.
What is the UN Consolidated List and why does it matter for contracts?
The UN Consolidated List is the master register of individuals, entities, and groups designated by UN Security Council committees under Chapter VII resolutions, and every business contracting across borders must treat it as the baseline screening reference. The List does not itself create civil liability for a private party – that liability arises under national law – but it defines the population of counterparties that national regimes are legally required to target. In practical terms, a contract involving a listed person will trigger prohibitions under the applicable country regime that implements the relevant Security Council resolution, whether that is the United States, the United Kingdom, the European Union, or one of the Asia-Pacific regimes we discuss below.
Why does this matter for the contract text? Because the clause must anticipate a designation that does not yet exist at signing. Sanctions designations happen without notice. A counterparty that clears all screening checks on day one can appear on the List months later. Without a well-drafted sanctions clause, the party that discovers the designation faces a choice between continuing a potentially unlawful transaction and terminating without contractual cover. Neither is comfortable. In our experience, businesses that treat the sanctions clause as boilerplate invariably face the harder version of this choice.
What governing authority and legal basis should a clause reference?
A sanctions clause in a cross-border contract should reference the governing authority at two levels: the international source and the national implementing instrument. At the international level, the UN Security Council acts under Chapter VII of the UN Charter. The Council designates persons and entities through resolutions, which are then given effect by member states through their own national legislation. The clause should therefore refer to obligations arising under "applicable sanctions laws and regulations, including those implementing UN Security Council resolutions" rather than to a specific resolution number or article.
At the national level, the relevant instruments differ by jurisdiction. For a transaction with a US nexus, OFAC administers the relevant programme under the International Emergency Economic Powers Act ("IEEPA") or the Trading with the Enemy Act ("TWEA"). For UK counterparties, the Sanctions and Anti-Money Laundering Act ("SAMLA") and the relevant thematic sanctions regulations give OFSI its authority. For EU parties, the Council adopts autonomous regulations that may align with, extend, or diverge from UN-level measures. A well-drafted clause captures all applicable regimes by referring to "any sanctions laws applicable to either party or to the transaction".
Should the clause name every regime individually? In our practice, the answer is generally no. An open-ended formulation that sweeps all applicable laws is more durable because it catches amendments, new designations, and new national programmes without requiring a contract amendment. However, certain sectors – banking, shipping, commodities – benefit from naming the key regimes explicitly, provided the clause is backed by an adequate catch-all. The position above covers the standard drafting. Your facts – the sector, the counterparties, the transaction route, the applicable country regimes – change the analysis. For a review of how the clause should read in your specific contract, contact Calder & Vance at info@caldervance.com.
How should a contract allocate compliance obligations between parties?
The allocation of compliance obligations is the core function of a sanctions clause, and getting it wrong creates liability for both sides. The fundamental drafting question is whether each party warrants its own compliance status, undertakes ongoing screening obligations, and accepts a right of termination or suspension in the event of a sanctions trigger.
A well-structured clause typically operates in four steps:
- Representations at signing: Each party represents that it is not itself a designated person, does not appear on the UN Consolidated List or any applicable national list, and is not majority-owned or controlled by a designated person. This addresses the day-zero risk.
- Continuing undertakings: Each party undertakes to notify the other promptly – a short window is standard practice, often measured in business days – if it becomes aware that the representation has ceased to be true. The specific window should be aligned with any mandatory reporting obligations under the applicable country regime.
- Compliance obligations during performance: The clause should specify which party is responsible for conducting ongoing screening, at what frequency, and against which lists. For high-volume trading relationships, monthly or quarterly rescreening is typical. For one-off transactions, a final pre-delivery check is the minimum.
- Termination right: Either party should have the right to suspend performance and, after a defined notice period, terminate the contract if a sanctions trigger arises. The clause should make clear that such termination is without liability – subject to any regulatory reporting obligation that may arise.
A common gap in practice is the absence of a force majeure or excusing condition that covers sanctions-related performance failures. If a party cannot perform because a payment route is blocked or a licence cannot be obtained, it should have an express contractual route to relief. Does your current contract template include that protection?
How does the UN regime compare with OFAC, OFSI, and EU implementing measures?
The UN Consolidated List is the floor, not the ceiling. National regimes routinely go further – in scope, in designated persons, and in secondary-sanctions reach – and the contract clause must be calibrated to this reality.
Under OFAC, the SDN List (OFAC's list of Specially Designated Nationals and blocked persons) includes all UN-listed persons plus a significantly larger population designated under autonomous US programmes. Critically, OFAC's secondary-sanctions programmes can affect non-US parties whose transactions have no US nexus but who deal with persons targeted under a US autonomous programme. A contract between two European companies involving a UN-listed person may trigger OFAC exposure if the transaction touches a US financial institution, uses US-dollar clearing, or involves a US-connected counterparty. In our cross-border practice, the secondary-sanctions dimension is the most frequently underestimated risk in contract review.
Under OFSI in the UK, the ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) means that a company can be subject to a financial-sanctions prohibition even if it does not appear on any list, if it is owned or controlled by a listed person. The OFSI test looks beyond registered ownership to actual control – including control through contractual arrangements. A sanctions clause that screens only for listed persons by name misses this exposure entirely.
Under EU Council regulations, the position tracks OFSI in substance but the administrative and reporting channels differ. The EU General Court is the venue for annulment actions challenging designations. EU autonomous measures have expanded significantly in recent years and now cover a wider range of persons than the UN baseline in many programmes. Any contract with EU-based parties should include a reference to "applicable EU regulations" in addition to UN instruments.
For contracts with an Asia-Pacific dimension, the relevant regimes – including those administered by DFAT in Australia, MAS in Singapore, METI in Japan, and the relevant UAE authority – each implement UN measures through their own national instruments. A clause that is adequate for EU or US purposes may still leave gaps under these regimes if it does not sweep them in. Where the stricter prohibition governs, that prohibition overrides a more permissive national implementation; the clause should reflect this.
What are the risk flags and the most common drafting mistakes?
Several patterns of drafting failure appear with regularity in contracts brought to us for review. They share a common cause: the clause was copied from a template without being tailored to the actual counterparty, transaction, and applicable regime.
Flag 1 – Static list references. A clause that names a specific version of a sanctions list, or refers to "the list current as of the date of this agreement", is obsolete the moment a new designation is made. The reference should always be to the list "as amended and updated from time to time".
Flag 2 – The ownership and control gap. Clauses that represent only "we are not on the list" without addressing ownership and control (whether a listed person owns 50 percent or more, or exercises control) miss the principal mechanism by which listed-person restrictions extend to unlisted entities. Under OFSI and the EU, this gap is particularly material.
Flag 3 – Absent or silent force majeure. Where sanctions prevent performance – because a payment channel is blocked, a licence is refused, or a counterparty becomes designated mid-performance – the contract should have express relief. Silence forces parties to argue that sanctions constitute an event under a general force majeure clause, with uncertain outcomes.
Flag 4 – No reporting obligation alignment. Many national regimes impose mandatory reporting obligations when a party holds or receives funds or economic resources of a designated person. If a party discovers a sanctions trigger, the contract's notification window must be consistent with – and not shorter than – the statutory reporting deadline under the applicable country regime. Misalignment can create a conflict between contractual and regulatory duties.
Flag 5 – Termination without regulatory clearance. Terminating a contract that involves a designated person may itself require a licence or regulatory authorisation in some regimes. A termination-right clause that purports to allow immediate termination without reference to regulatory process may generate a separate compliance problem. The correct formulation is to suspend performance pending regulatory guidance, then terminate on the basis of that guidance or the expiry of a licence application period.
One widespread myth in contract negotiations is that a generic "compliance with law" covenant is sufficient to cover sanctions exposure. It is not. A compliance-with-law clause allocates the obligation but does not define the termination right, the notification window, the ownership and control test, or the force majeure relief. Each of those requires a specific, tailored provision. If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a review of where a current matter stands.
When should a business involve sanctions counsel?
Sanctions counsel should be involved at three moments in a contract's lifecycle: before signing, when a designation or screening hit arises during performance, and at the point of any enforcement enquiry or self-reporting decision.
Before signing, the value of counsel is in clause design and counterparty due diligence. Screening the counterparty's ownership chain against the UN Consolidated List, the SDN List, and applicable national lists – and then expressing that diligence in the clause itself – is the most cost-effective form of sanctions risk management. In a recent matter, a financial institution reviewing an acquisition target brought us in to map the ownership structure of a subsidiary with opaque shareholding. We identified an indirect holding by a listed person exceeding the relevant ownership threshold. The institution was able to restructure the transaction before signing. The alternative – discovering the issue post-closing – would have triggered reporting obligations, potential asset-freeze issues, and a materially more complicated position.
During performance, the trigger for counsel engagement is any screening hit, any adverse media report linking a counterparty to a designated person, or any government enquiry. These situations benefit from immediate legal assessment because the window for voluntary self-disclosure – a VSD (voluntary self-disclosure to a regulator), which is a factor in penalty mitigation under most regimes – is not unlimited. Regulatory cooperation is most effective when it begins quickly and is structured from the outset.
When the apparent violation is at the enforcement stage, the priority is to scope the exposure, assess the viability of a VSD, and prepare the penalty defence. Under OFAC, OFSI, and EU enforcement procedures, a well-constructed VSD and penalty submission can materially reduce the outcome. No outcome can be guaranteed, but the procedural steps and the quality of the submission are firmly within counsel's control.
How should a business calibrate the clause to its risk profile?
Not every contract requires the same depth of sanctions clause. The calibration depends on the counterparty risk, the transaction value, the applicable regimes, and the sector. A decision matrix helps structure the approach.
Situation A – Low-risk, domestic-only transaction with no cross-border nexus. A basic representation that neither party is a designated person, a continuing notification undertaking, and a termination right will ordinarily suffice. The list references should be kept open and updateable. The force majeure clause should include sanctions as an excusing event. Timeline for drafting: short; the clause set is compact.
Situation B – Cross-border transaction with multiple applicable regimes, including a US nexus. Full clause suite: representations and warranties covering ownership and control to the applicable threshold; undertaking to conduct ongoing rescreening at defined intervals; immediate notification on any trigger; compliance-liaison obligation (each party cooperates with the other's regulatory enquiries); a specific force majeure provision covering sanctions-related performance failures; a termination right that is conditioned on confirmation that termination does not itself require a licence; and a governing law and jurisdiction clause that addresses the multi-regime context. Risk: secondary-sanctions exposure, misaligned reporting windows, and termination-triggers arising simultaneously under two or more regimes.
Situation C – High-value project finance or M&A transaction with complex ownership structure. All of Situation B, plus an obligation to deliver ownership-chain due diligence documentation at signing and at defined intervals during the life of the facility or earn-out period; a change-of-control trigger linked to sanctions status; a material adverse change definition that captures designation of any party or key person; and a deferred consideration mechanism that does not require payment to a potentially designated recipient before the final ownership check. Risk: designation of a shareholder post-signing triggers the ownership-and-control test, freezing funds otherwise owed.
How do you determine which situation applies? The analysis turns on the facts: the counterparty's jurisdiction, ownership structure, and beneficial-ownership disclosure; the goods or services being supplied; the payment route; and the applicable country regimes. In our experience, businesses that begin with a thorough ownership-chain screen are far better positioned to calibrate the clause correctly from the outset.
Related practices
- Sanctions compliance audit and testing (Australia) – independent programme review against Australian autonomous and UN-implementing sanctions rules
- Sanctions risk assessment guide (Australia) – structured approach to identifying and managing sanctions exposure under Australian law
- Sanctions and export-control risk assessment under BIS/EAR – practical guide to assessing US export-control and dual-use exposure