A European trading house operating across multiple jurisdictions discovers mid-transaction that a counterparty falls within the scope of EU sanctions. The commercial team has signed heads of terms. Legal holds the deal. The immediate question is not simply whether a licence is needed – it is which type of licence to pursue, and whether the answer is already sitting in the applicable Council regulation unread.
Under EU sanctions, a general licence (a standing authorisation permitting a defined category of transactions without a separate application) and a specific licence (a case-by-case authorisation granted by a competent national authority for an otherwise prohibited activity) serve fundamentally different purposes. Choosing the wrong route does not merely cause delay. It can produce a gap in authorisation that constitutes a breach, trigger reporting obligations, and affect the admissibility of a future specific-licence application.
This case comment walks through a matter in which a business initially misidentified the applicable authorisation route, the analysis that corrected the position, and the practical lessons that apply across EU licensing practice.
The situation: a deal caught by EU sanctions mid-execution
A business operating in the financial-services sector entered a supply arrangement with a counterparty in a third market. The counterparty itself was not listed. However, a parent entity holding a significant interest appeared on the EU Consolidated List (the list of persons and entities subject to EU restrictive measures). The question was whether the ownership-and-control test under the relevant EU Council regulation extended the prohibition to the unlisted subsidiary.
The compliance team's initial screening had flagged the parent. The commercial team's assumption – common, and understandable – was that a general licence covering humanitarian or wind-down transactions might apply and that the deal could proceed on that basis. That assumption was wrong on both counts, and the error was compounded by time pressure from the commercial counterparty.
The EU's ownership and control test (the test for whether a non-listed entity is caught through a listed person's ownership or control) is broader than the mechanical OFAC 50 percent rule (OFAC's rule treating entities owned 50 percent or more in the aggregate by blocked persons as themselves blocked). Under EU rules, a listed person exercising control through other means – board composition, veto rights, contractual dominance – can bring an unlisted entity within the scope of the prohibition even where the ownership percentage alone would not trigger the OFAC threshold. In this matter, the parent's ownership stake was below fifty percent but the control indicators were present.
That distinction matters. A business benchmarking its EU exposure against the OFAC test alone will underestimate risk. We regularly advise clients on exactly this divergence, and it remains one of the most consistent sources of compliance gaps in cross-border transactions.
Mapping the authorisation landscape: what general licences actually cover
General licences under EU sanctions regulations are narrow in scope. They are drafted to permit specific categories of activity – typically humanitarian operations, diplomatic functions, personal remittances up to defined limits, or the performance of obligations arising under pre-existing contracts within a bounded time window. They are not a broad carve-out for commercial transactions.
The practical consequence is that a general licence will not authorise a transaction simply because that transaction has a legitimate commercial purpose. The transaction must fit the defined category precisely. Where the instrument provides a wind-down authorisation for pre-existing contractual obligations, the conditions attaching to it – dates, counterparty types, goods categories, maximum amounts – are not negotiable. If any element of the transaction falls outside those conditions, the general licence provides no cover at all.
In the matter under discussion, the applicable general licence addressed humanitarian-purpose transfers only. The supply arrangement was commercial. There was no pre-existing contract within the relevant window. The compliance team's hope that the general licence might be stretched to cover the transaction was not legally supportable.
The correct route was a specific licence. That meant engaging the competent national authority of the EU member state in which the business was established, submitting a reasoned application, and pausing the transaction pending the outcome. That pause had commercial consequences. But proceeding without authorisation would have created a potential breach of the relevant Council regulation – with enforcement consequences that would have been materially worse.
The position above covers the standard case for a single-jurisdiction EU operator. Where a group spans multiple member states – each with its own competent authority – the analysis changes: two filings may be needed, and the two authorities may adopt different timelines and conditions. For a confidential review of your authorisation position, contact Calder & Vance at info@caldervance.com.
How does the EU specific-licence process work in practice?
A specific licence under the EU regime is applied for through the competent authority of the relevant member state – typically the foreign affairs or finance ministry, or a dedicated sanctions unit. The applicant must set out the legal and factual basis for the application, identify the parties, describe the transaction, and explain why the authorisation is consistent with the objectives of the sanctions programme.
There is no single EU-wide processing timeline. Each member state administers the process under its own procedures, and timelines vary considerably. In our experience, the fastest competent authorities in straightforward cases complete their review within a matter of weeks; others take longer, particularly where the application raises novel questions or where the competent authority refers the matter for inter-agency consultation.
The decision is not automatic. Competent authorities apply a public-interest and policy assessment. An application that is technically complete but commercially motivated without any humanitarian or wind-down rationale faces a higher bar than an application tied to the performance of pre-existing obligations, salary payments, or goods identified as essential. Counsel who understands the authority's practice can improve both the quality of the submission and the realistic assessment of prospects.
One procedural point that practitioners frequently underestimate: the application must be filed in the jurisdiction of establishment of the EU operator, not the jurisdiction of the counterparty or the destination of funds or goods. Where the EU entity is a subsidiary of a third-country parent, the application goes to the authority in the subsidiary's member state. That is a frequent source of misfiled or rejected applications.
If a transaction has already been flagged, or a filing has been refused, early independent review can preserve options that narrow with time. To discuss a specific-licence application or a general-licence eligibility question, write to info@caldervance.com.
Cross-regime comparison: how OFSI and OFAC licensing compare
EU specific licensing is structurally similar to OFSI's case-by-case specific-licence regime in the United Kingdom and to OFAC's specific-licence process in the United States, but the three diverge in ways that matter to operators working across all three regimes simultaneously.
Under OFSI, a specific licence is granted under the Sanctions and Anti-Money Laundering Act ("SAMLA") and the relevant thematic regulations. OFSI's grounds for licensing are defined in the instrument and typically include humanitarian activity, enabling of legal proceedings, and the orderly wind-down of pre-existing contractual obligations. The processing timeline is not set by statute, but OFSI publishes guidance indicating it aims to process complete applications within a defined period. Applications that are incomplete restart the clock.
OFAC's specific-licence regime operates under IEEPA and the relevant programme regulations. OFAC has more explicit published policy on its licensing criteria for particular programmes, and its general-licence catalogue is generally more extensive than the EU equivalent. A transaction that qualifies under an OFAC general licence for a given programme may nonetheless require a specific licence under the parallel EU regulation, because the EU general licence for the same programme may not include the same category of activity. That asymmetry is a consistent feature of multi-regime compliance and one that catches businesses operating under the assumption that a US clearance maps to a European clearance.
In the matter described here, the business had in fact received informal comfort – not an authorisation – from its US compliance counsel that the transaction appeared to fall within a relevant OFAC general authorisation. That comfort did not transfer to the EU position. The two regimes have different legal instruments, different administering authorities, and different general-licence texts. Conflating them is an error we encounter regularly, particularly in US-parented groups where the US compliance function leads and the EU position follows.
Japan, Singapore, and the UAE each operate their own licensing regimes for sanctions-related transactions. The bases for authorisation, the competent authorities, and the procedural requirements differ from all three of the above. Where a transaction touches counterparties in those jurisdictions alongside EU parties, a consolidated multi-regime assessment is essential before any filing is made.
What went wrong and when – the decision-point analysis
The errors in this matter were sequential, each compounding the last. Identifying where the chain broke is itself a useful exercise for any in-house compliance function reviewing its own process.
The first error was in the initial ownership-and-control analysis. The screening tool returned a hit on the parent and recorded the ownership stake. The analyst noted the stake was below the OFAC fifty-percent threshold and moved on. The EU control analysis – examining board composition and contractual dominance – was not conducted. The subsidiary was not flagged as caught.
The second error followed from the first. Because the subsidiary was not flagged as caught, the authorisation question was never properly opened. The general-licence review that was conducted was cursory and focussed on humanitarian carve-outs that were plainly inapplicable. No specific-licence analysis was performed.
The third error was timing. By the time the control analysis was conducted correctly – following referral to external counsel – the commercial counterparty had been given an expected completion date. Walking that date back created pressure to find an authorisation quickly. Specific-licence applications submitted under commercial time pressure, with incomplete supporting documentation, are declined or returned for supplementation more frequently than well-prepared applications made with adequate lead time.
In our cross-border practice, the most common structural fix for this sequence is to embed the EU ownership-and-control analysis as a mandatory step in the initial screening workflow, separate from and in addition to the OFAC fifty-percent screen. The two tests are not substitutes. Running only one of them, and applying it to the other regime's standard, creates a consistent gap.
Risk flags: when a general licence will not save you
General licences are precise instruments. A business relying on one should be able to point to the exact text and explain, element by element, why the transaction fits. If that exercise cannot be completed cleanly, the general licence should not be relied upon.
The following situations are consistently high-risk for misapplication of general licences under EU sanctions regulations:
- A commercial transaction characterised as a wind-down where no pre-existing contract pre-dates the designation or the relevant regulatory amendment.
- A payment to a non-listed entity where the listed person's control – as distinct from ownership – has not been separately assessed.
- A general licence copied from a prior programme applied to a new programme regulation that has not been reviewed for differences in scope and conditions.
- A transaction relying on a general licence issued by a member state other than the operator's own jurisdiction of establishment.
- A humanitarian licence applied to a mixed transaction that includes a commercial component, however minor.
Any of these situations should prompt immediate escalation to sanctions counsel before the transaction proceeds. A specific-licence application made before the transaction is executed carries far less regulatory risk than a retrospective authorisation request or a voluntary self-disclosure made after an apparent breach.
Is your screening programme designed to catch EU control indicators, or only OFAC-style ownership thresholds? That question is worth answering before the next transaction is signed.
The myth: a general licence covers anything not explicitly prohibited
A common misconception among in-house teams – particularly those without dedicated sanctions expertise – is that a general licence operates as a residual catch-all: if the transaction is not explicitly listed as prohibited, and if there is a general licence somewhere in the regulation, the transaction is probably fine. That reading is legally incorrect and consistently produces compliance failures.
General licences under EU sanctions are positive authorisations of a defined activity. They do not create a presumption of lawfulness for anything outside the specifically prohibited list. The correct analytical sequence is: first, determine whether the transaction is prohibited at all (which requires the full ownership-and-control analysis, not only a list check); second, if it is prohibited, determine whether a general licence precisely covers it; third, if it does not, assess whether a specific licence is available and begin that application process.
The myth is reinforced by the way some compliance programmes are structured: the screening tool runs, the list check is clear, and the general-licence review is the last step before sign-off. That structure skips the ownership-and-control analysis entirely. In the matter described here, the list check was clear – because the subsidiary was not listed. The prohibition nonetheless applied, because of control. The general licence did not cover the transaction. The sequence of checks had been designed to miss exactly this type of exposure.
Related practices
- Frozen account management under BIS and the EAR – practical steps for blocked-asset situations under US export-control rules.
- Wind-down authorisation: a Japan matter – how wind-down licensing works in a non-EU, non-US context.
- Wind-down authorisation: an OFSI matter – the UK-specific process for winding down transactions following designation.