Evidencing the absence of control under EU: explained

A group holding company receives notice that its majority shareholder has been designated under EU sanctions. Counsel checks the subsidiaries. None appear on the Council's list. But the asset-freeze prohibition extends to entities owned or controlled by a designated person – and the question of whether those subsidiaries are "controlled" is now the most consequential legal question the group faces. Evidencing the absence of control under EU rules is not a formality. It is an evidentiary exercise that determines whether a business can continue to operate, access its own funds, or complete a pending transaction.

Under EU sanctions, the asset-freeze prohibition extends to entities that a designated person owns or controls, even where those entities are not themselves listed. Evidencing the absence of control under EU rules requires demonstrating, through objective and sufficiently weighty evidence, that no designated person exercises actual decision-making authority over the entity. The governing instruments are the relevant Council Regulation and Council Decision; the EU General Court has confirmed that control must be proved by concrete facts, not by inference from political or economic proximity alone.

This briefing sets out who administers the control assessment, the legal test that applies, how it compares with the OFAC and OFSI approaches, the evidence that typically carries weight, and when to involve specialist sanctions counsel.

Who administers the control assessment, and under what authority?

EU financial sanctions are imposed by the Council through directly applicable Council Regulations and accompanying Council Decisions. No member state implementing measure is required for the asset-freeze prohibition to bite. Every EU operator – a bank processing a payment, a company completing a supply transaction, a port handling cargo – applies the prohibition directly from the moment of publication in the Official Journal.

There is no single central EU authority that issues binding rulings on whether a specific non-listed entity is controlled by a designated person. Responsibility is distributed. National competent authorities in each member state – the financial intelligence unit, the central bank, or a designated ministry, depending on the jurisdiction – apply and enforce the regime domestically. An operator seeking legal certainty must approach the relevant national authority. That authority's view is persuasive but not automatically binding across the single market.

For the entity asserting that it is not controlled, the burden sits with it in practice. An operator asked to justify continued business with a non-listed company will look to the entity itself to supply the evidentiary chain. The EU General Court has developed the legal standard through annulment proceedings: control must be established by objective, sufficiently weighty evidence, and a court ruling of September 2026 confirmed that the character of a state's political environment is not by itself sufficient proof that its leadership controls a given private company. That principle cuts both ways – it raises the bar for authorities seeking to extend the freeze, and it informs the kind of evidence an entity must assemble to rebut a control allegation.

What does the EU control test actually require?

The EU control test for asset-freeze purposes looks at two distinct grounds: direct or indirect ownership exceeding 50 percent, and actual control. Ownership above that threshold creates a presumption that operates automatically. Control below the ownership threshold is not presumed – it must be shown through concrete evidence of decision-making power.

What counts as actual control? The General Court has pointed to factors such as the ability to appoint or remove management, the right to veto material business decisions, contractual or structural arrangements that subordinate the entity's commercial choices to the designated person's direction, and financial dependency of a kind that prevents independent operation. None of these factors is individually decisive. The assessment is holistic, based on the cumulative picture.

Critically, influence is not the same as control. A designated person may hold a minority stake, maintain a commercial relationship, or supply financing without crossing into the territory of actual control. In our cross-border practice, we regularly advise entities that need to distinguish between a designated person's residual commercial interest and the kind of governance power that brings an entity within the freeze. The line is real, but it requires careful mapping of the constitutional documents, shareholder agreements, management arrangements, and the actual conduct of the business over time.

The EU Blocking Regulation adds a further dimension for entities simultaneously subject to third-country measures. Where an operator is caught between the EU asset-freeze and a conflicting third-country requirement, the Blocking Regulation may restrict how that conflict is resolved. This is an area where multi-jurisdiction counsel is essential.

How does the EU control test compare with OFAC and OFSI?

The OFAC test is mechanical at the ownership level: an entity owned 50 percent or more in the aggregate by one or more blocked persons is itself blocked, regardless of whether those persons exercise any governance power. OFAC's guidance makes the ownership threshold the operative trigger. The control dimension – where the EU test operates – is less developed under OFAC's published guidance. For a business operating across both regimes, the OFAC analysis typically resolves first on ownership arithmetic, before the control question arises.

The UK OFSI regime applies both an ownership criterion and a control test under SAMLA and the relevant thematic regulations. UK case law – which pre-dates OFSI's own enforcement posture – has established that control must be actual, not merely a theoretical ability to exert influence. A designated person's power to intervene, if never exercised, does not by itself bring an entity within the freeze. That distinction between existing influence and exercisable-but-unexercised power is a live issue before UK courts and mirrors the direction of EU General Court jurisprudence.

What this comparison reveals is that a business asserting the absence of control must run the analysis separately under each applicable regime. An entity that survives the EU control test may still be caught by OFAC's ownership arithmetic. An entity below the OFAC threshold may still be within OFSI's control test if governance arrangements give a designated person practical authority. Where two regimes both apply, the stricter prohibition governs. We advise on this interaction routinely – and the answers differ depending on the ownership structure, the nationality of the entity, and the transactions at issue.

For clients with exposure under the UN Consolidated List, the analysis adds a further layer: member states implement UN listings at a national level, and the control test applied by a given member state may follow its own domestic law rather than EU doctrine precisely. Cross-regime awareness is therefore not optional; it is the substance of the advice.

What evidence carries weight in EU control proceedings?

The evidentiary exercise for evidencing the absence of control under EU rules begins with the constitutional and governance documents. Articles of association, shareholder registers, board minutes, and shareholder agreements are the starting point. They show, on paper, who holds what rights. They are necessary but rarely sufficient on their own.

The second layer is the record of actual conduct. Board meeting minutes that show independent management making decisions without seeking approval from the designated shareholder, audit committee records, bank mandates, and financial statements that demonstrate the entity's commercial independence all contribute to the picture. A company whose treasury function, banking relationships, and commercial contracts operate entirely independently of the designated person is in a materially different position from one that routes transactions through a structure the designated person directs.

Third-party verification adds credibility. An independent audit opinion on the entity's financial statements, legal opinions on the governance structure from qualified counsel in the relevant member state, and – in appropriate cases – a forensic review of actual transaction flows can convert a documentary case into one that withstands regulatory scrutiny. In our experience, the strength of an evidentiary package depends heavily on its internal consistency: a formal governance structure that is contradicted by the operational reality carries no weight and may actively damage the entity's position.

The timing of the assembly matters. Evidence gathered contemporaneously – board minutes created at the time of the meeting, not reconstructed – carries greater weight than retrospective documentation. Entities that begin building the evidentiary record before a control allegation is raised are in a materially stronger position than those who must reconstruct events under pressure. This is one reason we recommend that businesses with any designated-person exposure in their ownership chain maintain a standing governance record that would support a control analysis at short notice.

What are the risk flags, and when does the position require counsel?

Several patterns consistently indicate heightened control risk under the EU analysis. A designated person who formerly managed the entity and retains informal influence over its current management is a principal concern. Contractual arrangements – supply agreements, loan facilities, IP licences – that give the designated person leverage over the entity's commercial viability can constitute practical control even absent governance rights. A significant financial dependency, where the entity's solvency turns on continued support from the designated person, raises the same concern.

Ownership at or near the 50 percent threshold is a second category of risk. An entity just below the EU ownership trigger may still be within the control limb if governance arrangements compensate for the numerical shortfall. Equally, an entity that has recently undergone a restructuring to reduce a designated person's holding to below 50 percent will face close scrutiny of whether the restructuring was substantive or cosmetic. The EU anti-circumvention instrument, applied for the first time in 2026, demonstrates the Council's willingness to look through formal arrangements to economic substance.

A third category is the multi-jurisdiction entity. A group with subsidiaries in multiple EU member states faces the same control question applied by different national competent authorities, potentially reaching inconsistent conclusions. The absence of a unified EU ruling mechanism means that an entity can be treated as controlled in one jurisdiction and non-controlled in another. Managing that inconsistency requires coordinated legal advice across the affected member states.

When should counsel be engaged? The answer is earlier than most businesses assume. If a designated person appears anywhere in the ownership or governance chain, the control question is live immediately – not when a bank flags the relationship or a competent authority asks questions. At that point, the options available narrow quickly. An early review allows the entity to assemble a contemporaneous evidentiary record, to take a considered position on disclosure to counterparties, and to identify any licensing route that may be available if the freeze does apply. Acting after a freeze has been applied is more expensive, more difficult, and subject to time pressure that forecloses options.

The delisting route and its relationship to the control question

Where a control finding has been made – expressly or implicitly, by a competent authority or a counterparty declining to proceed – the path to resolution runs in two directions. The first is to challenge the underlying designation of the shareholder or controller, through an annulment action before the EU General Court or through a representation to the Council seeking delisting. A delisting application is not automatic when facts change: the Council reviews listings periodically, but the submission of a substantiated delisting request, supported by the material change in circumstances, is required. A designation does not lapse through the passage of time alone. This is the myth that causes the most damage in our practice: businesses wait for the listing to be lifted without understanding that affirmative advocacy is needed.

The second direction is to establish conclusively that the non-listed entity is not, in fact, controlled – so that the freeze never attaches. This is the evidencing-the-absence-of-control exercise described above. It does not require any change to the designated person's status; it requires a sufficiently well-documented demonstration that the entity operates independently.

In practice, both tracks often run in parallel. The entity builds and presents its control-absence evidence to the relevant national competent authority while the designated shareholder pursues delisting before the General Court. The two proceedings have different timelines, different legal standards, and different outcomes. Coordinating them requires a clear understanding of which forum controls which question and what evidence overlaps. We regularly manage this coordination for clients across multiple EU member states.

It is also worth noting that an EU General Court judgment may be appealed to the Court of Justice on points of law. A first-instance ruling that finds control – or that affirms a listing that sustains the control allegation – is not necessarily the end of the road. The appellate route is narrower and slower, but it remains available where there is a genuine point of law in issue.

Procedural obligations running alongside the control assessment

While the control analysis is under way, the regulatory obligations of the entity and its counterparties continue. EU asset-freeze prohibitions extend to making funds or economic resources available, directly or indirectly, to or for the benefit of listed persons. A bank or payment processor that cannot determine whether an entity is controlled must, in practice, apply precautionary measures that may have the same effect as a freeze. Disruption to the entity's operations begins not when a determination is made, but when a counterparty first raises the control question.

There is a legal obligation under EU member states' domestic implementing measures to report knowledge or suspicion of a designated person to the competent authority. The entity that is asserting the absence of control must be careful to handle this obligation correctly: a well-intentioned proactive disclosure can be managed to support the entity's position, while an inadvertent omission can complicate the regulatory relationship. Legal advice on the reporting question should run alongside the evidentiary exercise, not after it.

Record-keeping obligations also apply. The EU sanctions regime requires that relevant records be maintained for a period set by the applicable member state's implementing rules. Compliance counsel advising on a control question must ensure that the evidentiary record assembled for the control analysis is preserved in a manner consistent with those obligations. The practical implication is that documentation assembled during the control review should be maintained as part of the compliance record, not as a separate litigation file that could become inaccessible.

What does a compliant evidencing process look like in practice? It combines the documentary review with a governance interview programme, a mapping of actual transaction flows against the formal legal structure, and a written legal analysis addressed to the relevant national competent authority. The written analysis should anticipate the questions that authority is likely to ask, address any gaps in the record proactively, and set out the legal standard being applied with citations to the General Court's jurisprudence. A submission that reads as though it was prepared by counsel familiar with the EU General Court's own framing of the control test is more persuasive than a generic corporate governance statement.

This publication is general information and does not constitute legal advice. For advice on your situation, contact info@caldervance.com.