A Canadian trading company enters a distribution agreement with a counterparty in a third market. The compliance team screens the buyer's legal name against the primary consolidated lists. Nothing flags. The transaction proceeds. Three months later, an internal audit surfaces a beneficial owner two layers into the ownership structure – a person subject to measures under the Special Economic Measures Act ("SEMA", Canada's primary autonomous sanctions statute administered by Global Affairs Canada, "GAC"). The payment has already cleared. The goods have already shipped.
This situation is not hypothetical. As of January 2026, Canada's autonomous sanctions regime under SEMA and its associated regulations captures not only listed persons but also entities owned or controlled by them – and GAC's screening expectations for trade transactions have tightened materially in recent years. A surface-level name-check against the Consolidated Canadian Autonomous Sanctions List ("CCASL") is no longer a defensible procedure for counterparties above a minimal risk profile.
This case comment walks through an illustrative matter in our practice, identifies where the screening procedure failed, explains the Canadian legal position alongside comparators under OFAC and OFSI, and draws the practical lessons a compliance team or general counsel should take from it.
The situation: how a gap in beneficial-ownership screening created exposure
The business involved was a mid-sized manufacturer and distributor operating across several markets, with a Canadian subsidiary executing export contracts on behalf of the group. The counterparty had traded with the group for several years without incident. On each prior occasion, the compliance team had run the counterparty's registered legal name through a commercial screening tool and matched it against the CCASL and the UN Consolidated List. Both checks returned clean.
What the procedure did not do was map the counterparty's ownership chain beyond the first layer. The counterparty's immediate parent was a holding company incorporated in a third jurisdiction. That holding company was majority-owned by an individual designated under SEMA. The individual's name differed slightly from the registered owner on the counterparty's corporate-registry filing – a transliteration variant that the screening tool did not resolve.
Several risk indicators had been present but had not been escalated. The counterparty's beneficial-ownership certificate, requested at onboarding two years earlier, had not been refreshed. The payment route had changed: funds now moved through a correspondent institution in a jurisdiction subject to a thematic sanctions programme. And the volume of the order had increased significantly from the prior contract. Each signal, taken alone, might have been rationalised. Together, they pointed to a pattern that warranted enhanced review.
In our cross-border practice, we see this pattern consistently. The gap between list screening and full ownership-chain analysis is the single most common failure mode in trade-transaction diligence, and it is not specific to any one regime. It is, however, particularly acute under the Canadian regime, where the ownership-and-control test in the applicable SEMA regulations closely mirrors the EU approach – and differs structurally from OFAC's purely mathematical threshold.
What does Canadian law actually require for ownership and control screening?
Under SEMA and the associated country-specific regulations, a person must not deal in the property of a designated person and must not facilitate a transaction by a designated person or for their benefit. The prohibition extends to entities owned or controlled by a designated person – a formulation that goes beyond legal ownership to encompass effective control through other means, including directorial, contractual, or factual influence over the entity's operations.
This is the critical distinction from the OFAC standard. Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked) operates as a mechanical threshold. An entity is blocked if blocked persons own it, in the aggregate, at that level or above. The test does not require a control analysis once the ownership threshold is met; equally, entities below the threshold are not automatically blocked by ownership alone, though other OFAC authorities may still apply.
Under the Canadian and EU approaches, the control question is separate and additive. An entity may be below any ownership threshold and yet still be caught if a designated person controls it in fact. Conversely, majority ownership without more may be sufficient. The two tests overlap but are not identical, and a procedure calibrated only to the OFAC model will produce false negatives under SEMA and the parallel EU regulations. Where does your organisation's screening methodology sit on this spectrum?
GAC administers the CCASL and publishes guidance on prohibited dealings, but the practical mechanics of ownership and control analysis under SEMA are not codified in the same detail as OFAC's published guidance. This places a heavier interpretive burden on the business. Legal analysis of the specific facts – the ownership percentages, the governance documents, the operational relationship between the parent and the subsidiary – is required to reach a defensible conclusion.
Where the screening procedure failed: a step-by-step risk readout
Breaking the matter down to its component failures clarifies the corrective programme that followed. There were four distinct weaknesses in the procedure.
First, the scope of the screening list was too narrow. The business screened against the CCASL and the UN Consolidated List. It did not screen against OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons), the EU consolidated financial-sanctions list, or OFSI's UK sanctions list. For a group with a Canadian subsidiary but also with US-dollar payment flows and EU-incorporated group entities, those omissions created residual exposure on secondary-sanctions risk, even setting aside the Canadian position.
Second, the screening was entity-name only. No systematic attempt was made to identify and screen the beneficial owners and controlling persons behind the counterparty. Corporate-registry data was not refreshed after the initial onboarding check. The transliteration variant of the designated individual's name was not resolved, either by a fuzzy-matching rule or by manual review.
Third, the periodic review cycle had lapsed. The counterparty had been treated as a validated relationship after the initial onboarding. Changes in the payment route and the order volume – both potential red flags under GAC's guidance on unusual transactions – had not triggered a re-screening event.
Fourth, the escalation path was unclear. When the audit team surfaced the ownership concern, the initial response was internal: the business attempted to resolve the question without engaging external sanctions counsel. Several weeks elapsed before the analysis was completed, and during that window the business continued to process a further payment under the same contract. That decision materially affected the options available at the review stage.
How the matter was resolved: the route taken and the limiting factors
When Calder & Vance became involved, the first task was to scope the apparent violation and assess the materiality of the exposure. This meant mapping the full ownership chain, confirming the designated individual's current status on the CCASL and cross-referencing against other relevant lists, establishing the precise nature and value of the transactions that had occurred, and reviewing the correspondence trail for evidence of knowledge or intent.
The analysis produced three conclusions. First, the designated individual's ownership of the counterparty was below the level at which automatic blocking would apply under OFAC's rule, but the control analysis under SEMA was less clear – the individual held a contractual right that arguably gave them influence over the counterparty's major commercial decisions. Second, the payment flows had involved US-dollar clearing, which engaged OFAC's jurisdiction independently of the Canadian position. Third, no individual within the business had knowingly dealt with a designated person; the failure was procedural, not intentional.
Those three conclusions shaped the response. On the Canadian side, GAC does not operate a formal voluntary self-disclosure ("VSD", a process by which a potential violator discloses an apparent breach to the regulator before enforcement action is commenced) programme equivalent to OFAC's, but GAC does consider the circumstances of an apparent breach – including whether the business has identified and remediated the issue proactively – in its enforcement posture. A detailed written report to GAC was prepared, setting out the factual position, the legal analysis, and the corrective measures being implemented.
On the OFAC side, a VSD was filed, using OFAC's published VSD procedure and reflecting the absence of wilful conduct, the low aggregate value of the transactions, the existence of a compliance programme (albeit a flawed one), and the proactive internal discovery. The matter resolved without a penalty being imposed. We do not represent that outcome as guaranteed in any comparable situation – the analysis is always fact-specific, and outcomes are not predictable in advance.
The corrective programme included: an immediate suspension of the counterparty relationship pending a full ownership-chain review; a redesign of the screening procedure to cover all relevant lists and to require beneficial-ownership mapping for all non-retail counterparties; a new periodic re-screening trigger tied to payment-route changes, material volume increases, and annual renewal; and a documented escalation protocol directing any ownership-or-control concern to compliance counsel within a defined timeframe.
The cross-regime dimension: why a Canada-only lens was inadequate
A point that this matter illustrates sharply is the risk of treating the Canadian regime as a self-contained analysis. Canada is a significant trading partner for businesses headquartered in the United States, the United Kingdom, and the European Union. Each of those jurisdictions operates its own sanctions regime with its own list, its own ownership-and-control test, and its own enforcement authority.
For a group with a Canadian operating subsidiary, the Canadian position on a given counterparty is rarely the only question. US-dollar clearing – which touches virtually any trade transaction in hard currency – engages OFAC's jurisdiction regardless of where the contracting entity sits. An EU parent company executing a contract through its Canadian subsidiary does not shed its EU-law obligations. OFSI's financial-sanctions rules apply to UK-incorporated group entities and UK-connected persons wherever they act.
In our experience, the businesses most exposed to this multi-regime gap are mid-market groups that have developed a compliance function calibrated to their home jurisdiction's rules and have not reviewed whether that function adequately addresses the regimes applicable to their subsidiary operations. The Canadian subsidiary of a European group often falls into this category: the parent's EU compliance programme is strong; the Canadian entity's local procedure is lighter and may not reflect the full scope of Canadian sanctions obligations, let alone the US and UK exposures that arise through the group's payment infrastructure.
The practical remedy is a group-wide screening policy that identifies, for each legal entity in the group, the set of lists and tests that apply and that mandates escalation to a central compliance function when any entity-level screen surfaces a concern. The screening policy should address the jurisdictional basis for each regime in scope – not just the home jurisdiction's programme.
If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. For a confidential review of a potential breach, contact us at info@caldervance.com.
Risk flags that should have triggered enhanced review
The pattern of signals in this matter is instructive, because none of the individual flags was individually conclusive. The risk lay in their combination and in the absence of a procedure for aggregating them.
Red flags that warrant an enhanced ownership-chain review – rather than a list-screen-and-proceed approach – include the following situations. A counterparty's payment route has changed since the last review, particularly if it now routes through a jurisdiction with a heightened sanctions profile. The order volume has increased materially relative to the prior contract and to the counterparty's known business profile. The beneficial-ownership disclosure was provided more than twelve months ago and has not been refreshed. The counterparty's corporate structure involves intermediate holding companies in jurisdictions that do not maintain public beneficial-ownership registers. A commercially sensitive contractual term – exclusivity, pricing protection, or step-in rights – is held by a person not previously identified in the corporate structure.
Each of these, individually, might be explicable. Together, they define the profile of a relationship that warrants a deeper look before the next transaction is authorised. The compliance procedure that cannot differentiate between a low-risk, long-standing counterparty and a relationship that has accumulated risk signals is not doing its job, however clean the list screen returns.
We regularly advise businesses on the design of tiered review procedures that allocate enhanced diligence resources to the relationships where they are most needed, without creating a bottleneck that stops legitimate trade. The design question is not whether to screen – it is how to calibrate the depth of the screen to the risk profile of the counterparty and the transaction.
What a defensible screening programme looks like under Canadian and cross-regime standards
A defensible trade-transaction screening programme for a business with Canadian operations and cross-border payment flows has five elements, drawn from the standards GAC articulates in its enforcement guidance and from the parallel frameworks of OFAC and OFSI.
The first element is list coverage. The programme must screen, at a minimum, against the CCASL, the UN Consolidated List, and any other list applicable to the business's own legal entities in other jurisdictions. For most internationally active groups, that means the OFAC SDN List and the EU and OFSI consolidated lists as well.
The second element is ownership-and-control analysis. Beyond name-screening, the programme must trace beneficial ownership to the natural-person level for all counterparties above a defined risk threshold. The Canadian and EU control tests require this; the OFAC 50 percent rule requires it for aggregation purposes; and OFSI's ownership and control test (the UK and EU test for whether a non-listed entity is caught through a listed person) requires it in its own formulation.
The third element is periodic re-screening. An onboarding check is not a compliance programme. The programme must include triggers for re-screening: defined time intervals, and event-based triggers including payment-route changes, material volume increases, and changes in counterparty corporate structure.
The fourth element is a documented escalation protocol. When a screen returns a potential match or an ownership-chain concern, the protocol must specify the steps to be taken, the timeframe, the decision-maker, and the documentation required. The protocol must prohibit further transaction processing pending resolution, not merely recommend it.
The fifth element is record-keeping. Maintaining evidence that a screen was conducted, what it covered, what it returned, and what decision was made is essential both for internal accountability and for demonstrating good faith to a regulator. Record-keeping requirements vary by regime; verify the applicable retention period for each jurisdiction in scope before relying on a general standard.
The position above covers the standard case. Your specific counterparty profile, payment routes, and the group's entity structure will change the analysis materially. To stress-test your screening and compliance programme, reach our team at info@caldervance.com.
Related practices
- Correspondent banking and de-risking under OFAC – managing US-dollar clearing risk and financial-institution exposure across regimes
- Wind-down exposure under BIS and the EAR – managing export-control obligations during transaction unwinding