Control beyond the bright-line ownership test under Canada: in practice

A Canadian subsidiary of a multinational group closes a trade-finance transaction. The designated person who controls the underlying supplier does not appear by name on the counterparty's corporate register. Screening returns no hits. The transaction proceeds. Three months later, a de-risking (a financial institution exiting a relationship to avoid sanctions exposure) review surfaces a shareholding structure that places a sanctioned individual in practical control of the supply chain. At that point, the question is no longer whether a problem exists. The question is how serious it is, and what can still be done.

Under Canadian sanctions law administered by Global Affairs Canada under the Special Economic Measures Act ("SEMA") and the Justice for Victims of Corrupt Foreign Officials Act ("JVCFOA"), the prohibition on dealing with a designated person is not exhausted by a straightforward ownership screen. Control – the practical ability of a designated person to direct the decisions of an entity – can bring a non-listed company within the reach of the regime even where no threshold ownership figure is met. As of January 2026, this is a live enforcement question, and the cross-border divergence between how Canada, the United Kingdom, and the United States approach it creates material compliance risk for businesses operating across those jurisdictions.

This case comment traces the decision points in one representative engagement, from the trigger event to the resolution, and draws out the lessons for businesses whose screening programmes focus on names and numbers rather than on practical authority.

How the matter came to light: the trigger event

The matter surfaced not through a proactive compliance review but through a correspondent bank's due-diligence query. The financial institution, subject to its own obligations under SEMA and its AML regime, had identified a pattern of payments flowing through the Canadian subsidiary to a supplier incorporated in a third jurisdiction. The supplier was not listed under any Canadian, UK, or OFAC programme. Its registered shareholders were corporate entities with no sanctioned names in their officer lists.

What the bank's enhanced review surfaced was a network of nominee arrangements. A single individual – designated under a Canadian sectoral programme – held no direct shares. Instead, that individual held appointees in place across the board, controlled the accounts through power-of-attorney structures, and received the economic benefit of the business through a series of management-fee arrangements routed via a jurisdiction with limited corporate-transparency requirements.

The Canadian subsidiary had conducted name screening at onboarding and at periodic review. It had not mapped the ownership structure beyond the first corporate layer, and it had not applied a control analysis. In our experience, this is the most common structural gap in mid-market compliance programmes: the tool is calibrated for direct ownership, not for indirect authority.

The legal framework: what "control" means under Canadian sanctions law

Canadian sanctions administered under SEMA and JVCFOA prohibit a broad range of dealings with designated persons, including any dealing in property owned or controlled, directly or indirectly, by a designated person. The phrase "controlled, directly or indirectly" is the operative term. It does not require that the designated person hold any shares at all. It requires that they exercise – or are in a position to exercise – meaningful authority over the entity's decisions or assets.

GAC's published guidance addresses this point qualitatively. The Canadian position is not as arithmetically precise as the US test. OFAC's 50 percent rule (the rule treating entities owned 50 percent or more, in the aggregate, by blocked persons as themselves blocked) provides a bright-line trigger. If the aggregate direct and indirect ownership reaches that level, the entity is blocked automatically, regardless of control. Canada does not apply the same mechanical threshold as its primary trigger. Instead, the question turns on the facts: who actually directs the entity's commercial decisions, who controls its bank accounts, who can bind it to contracts, and who receives its economic output.

That makes the Canadian analysis more demanding, not less. A business cannot look at a shareholding table and conclude it has performed the analysis. It must ask the harder question: regardless of what the cap table says, who is actually running this entity?

The UK's ownership and control test (the OFSI test under SAMLA and the relevant thematic regulations) operates on a similar principle. The UK test looks at whether a designated person owns more than fifty percent of the shares or voting rights, or holds rights to appoint or remove a majority of the board, or has the right to exercise or actually exercises significant influence or control. UK case law distinguishes existing influence from a hypothetical ability to exert control; the leading authorities hold that control must be actual, not theoretical. That distinction is directly relevant to the nominee-and-power-of-attorney structure at the heart of this matter.

The EU's test for ownership and control for asset-freeze purposes looks at a combination of ownership of more than fifty percent and the concept of control, including indirect and de facto control. An EU court ruling affirmed that control must be proved by objective and sufficiently weighty evidence. The practical alignment between the three regimes on the core concept – that legal ownership is not exhaustive – creates a consistent standard, but the evidentiary burden and the procedural routes differ materially.

How the control analysis unfolded: the decision points

Once the correspondent bank's query was received, the compliance team faced a sequenced set of decisions. Each one had a downstream consequence. Working through them in order is the structure of this section.

Decision point one: scope the apparent exposure before disclosing anything. The first instinct in many organisations is to self-report immediately. That instinct is understandable, but it is not always the right sequence. The more productive first step is to understand precisely what has occurred: which transactions, over what period, involving what value of property, and under which Canadian instrument the prohibition arises. Until that picture is clear, any disclosure is incomplete and may require amendment, which is a worse starting position than a single, complete disclosure.

In this matter, external sanctions counsel was engaged at this stage. A structured review was conducted across the subsidiary's transaction records for the relevant period. The review mapped every payment, every property interest, and every service rendered that touched the supplier. It also assessed the cross-border dimension: were any of the same transactions routed through a UK-regulated entity (bringing OFSI into scope) or through a US person or US dollar clearing (bringing OFAC's jurisdiction into play)?

Decision point two: assess the control evidence. Having mapped the transactions, the next question was whether the designated individual actually exercised control within the meaning of the Canadian regime, or whether the structure was more ambiguous. The review considered the nominee appointment records, the scope of the powers of attorney, the flow of management fees, and the internal communications available on the supplier's decision-making.

The evidence supported a conclusion that the individual exercised actual control. The board nominees acted on written instructions. The power of attorney was broad, covering account operations and contract execution. The management-fee recipient was a vehicle in which the designated individual held an economic interest. In our experience, this combination – nominees plus a power of attorney plus economic-benefit extraction – is the structural signature of a controlled entity that is designed to avoid a name screen.

Decision point three: consider voluntary self-disclosure. Voluntary self-disclosure ("VSD") – the process of informing the regulator of an apparent violation before it is detected – is a recognised mitigating factor in the enforcement posture of both OFAC (under its Enforcement Guidelines) and OFSI. Canada's enforcement posture under SEMA similarly treats voluntary disclosure as relevant to any penalty or prosecution decision. A complete, accurate, and timely VSD, accompanied by a thorough remediation plan, materially reduces the risk of a more severe consequence.

The decision to disclose was taken on the basis that: the evidence of control was strong; the transaction record was material; and the remediation actions needed to accompany any disclosure were achievable within a reasonable time. The alternative – continuing to hold the position without disclosure while monitoring for regulatory contact – was assessed as increasing risk, not managing it.

Decision point four: remediation design. Alongside the disclosure, the organisation was required to demonstrate that the gap had been closed. That meant three things. First, revising the screening programme to require a beneficial-ownership and control analysis at onboarding and at periodic review – not only a name screen. Second, training the compliance team on the control concept as it operates under Canadian, UK, and OFAC rules, and on the structural indicators of a nominee-controlled entity. Third, introducing a documented escalation path for any supplier relationship where control cannot be established from the corporate documentation alone.

What control beyond the bright-line ownership test risk looks like in practice: indicators

The pattern in this matter is not unusual. Across the engagements in our practice, a set of structural features recurs in cases where control is exercised outside the ownership register.

The most consistent indicator is a mismatch between the registered shareholding and the practical decision-making authority. Where the named shareholders are corporate vehicles incorporated in jurisdictions with low corporate-transparency requirements, and where those vehicles do not have identifiable ultimate beneficial owners in the documentation provided, that gap requires explanation, not acceptance.

A second indicator is the presence of broad powers of attorney or signatory rights held by individuals who are not reflected in the corporate register. A power of attorney over a company's bank accounts is, in substance, a form of control. It does not need to be labelled as such to operate as one.

A third indicator is an unusual fee or payment structure that routes economic value away from the operating entity to a third party whose ownership or control is unclear. Management fees, consulting fees, and licence arrangements are all legitimate commercial structures. They become a control indicator when the recipient is opaque and the amounts are disproportionate to the service nominally provided.

A fourth indicator is a change in counterparty structure or personnel that coincides with a designation event. Where a supplier reorganises its board or its shareholding shortly after a related party is designated, the reorganisation warrants scrutiny, not acceptance at face value.

These indicators do not constitute proof of a violation. They constitute the basis for enhanced review. The obligation is to understand the actual control structure, not to assume that the absence of a listed name confirms the absence of a connection.

Cross-border dimension: when does a single control question engage multiple regimes?

This matter engaged Canadian law as the primary regime. But several of the transactions had additional features that required a parallel analysis under UK and US rules.

The UK dimension arose because a related entity in the group was UK-incorporated and had participated in two of the transactions as a counterparty. OFSI's ownership and control test under SAMLA applies to that entity's obligations independently of the Canadian analysis. The UK test for control includes the concept of significant influence or actual control, and OFSI has stated that its test is not confined to formal ownership structures. The same nominee-and-power-of-attorney facts that supported the Canadian control finding also supported a UK analysis.

The US dimension arose because one transaction had been settled in US dollars through correspondent banking. US-dollar clearing implicates the jurisdiction of OFAC over transactions that touch the US financial system. OFAC's 50 percent rule does not itself capture this entity, because the designated individual did not own a sufficient stake on any direct analysis. But the facilitation prohibition – which bars US persons and the US financial system from facilitating transactions that would be prohibited if conducted directly – required a separate assessment. In our cross-border practice, the dollar-clearing point is one that mid-market compliance teams consistently underestimate. The US dollar route brings OFAC's jurisdiction into the analysis even where the primary designation is under a non-US programme.

Where two regimes both apply, the stricter prohibition governs the conduct of a person subject to both. That principle does not mean the analysis can be collapsed into the more demanding regime and everything else ignored. Each regime has its own reporting obligations, its own licensing structures, and its own enforcement posture. The Canadian disclosure obligation does not satisfy the OFSI reporting requirement. The OFSI report does not satisfy the OFAC blocked-property reporting window of 10 business days from the date of blocking. These are parallel and separate obligations.

The lesson for similar businesses: control beyond the bright-line ownership test compliance failure canada

The lesson from this matter is not that sanctions screening does not work. It is that name screening, applied only to the names that appear on a corporate register, is a necessary but not sufficient control. The control concept – whether framed as the Canadian standard, the UK significant-influence test, or the EU objective-evidence standard – demands an inquiry into the facts of authority, not merely the facts of legal title.

There is a persistent belief in compliance teams that name screening alone is enough to meet the rules. This matter demonstrates why that belief is wrong. The designated individual did not appear in any name screen because no screen was calibrated to look at the persons who held authority rather than the persons who held shares. The control structure was deliberately designed to place distance between the designated person and the legal documentation. That distance did not affect the underlying prohibition. It only delayed its detection.

Three practical adjustments follow from this analysis.

First, the beneficial-ownership analysis must go beyond the first corporate layer. Where a supplier or counterparty is held through one or more intermediate vehicles, the analysis must identify the ultimate natural persons who own or control those vehicles, and must assess whether any of them is designated or exercises control on behalf of a designated person.

Second, the control analysis must be documented. It is not sufficient to conclude in a review meeting that a supplier appears clean. The compliance record should show the analysis that was performed: which persons were identified as exercising decision-making authority, what documentary basis existed for that conclusion, and what enhanced review was triggered by any gaps.

Third, cross-border transactions require a parallel-regime analysis, not a single-jurisdiction screen. A transaction that is clean under Canadian law may still engage OFSI or OFAC obligations because of the involvement of a UK entity or a US-dollar payment. The question to ask is not "which regime covers this transaction?" but "which regimes could apply, and what does each require?"

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.