A European trading company receives a payment instruction from a counterparty it has dealt with for years. Routine screening returns no direct hit. But one shareholder holds a significant stake in the payer – and that shareholder is listed under EU Council regulations. Is the payment blocked? Does it matter whether the listed person controls management, or only whether they own enough of the equity? These are not abstract questions. Getting the answer wrong exposes the business to asset-freeze violations, enforcement scrutiny, and potential criminal referral in member states.
Under EU sanctions, a non-listed entity can be caught by an asset freeze if a listed person owns or controls it. The test is not purely mechanical: EU rules apply a combined ownership and control (the test under relevant Council regulations for determining whether a non-listed entity is caught through a listed person's ownership or control) analysis, which goes further than a fixed percentage threshold alone. As of August 2026, the EU position formally incorporates both an ownership limb and a control limb, meaning that even a minority-owned entity can be frozen where the listed person exercises decisive influence.
This briefing sets out who administers the EU ownership and control test, how the analysis works in practice, where it diverges from the OFAC and OFSI positions, the risk flags that compliance teams miss, and when to involve sanctions counsel before a transaction proceeds.
Who administers the EU ownership and control rules?
The EU sanctions regime is administered collectively: the Council of the European Union adopts the legal acts, member-state competent authorities implement and enforce them domestically, and the EU General Court hears annulment challenges to designations. No single body equivalent to OFAC or OFSI sits at the centre. Enforcement is national – a French bank, a German exporter, and a Dutch freight company each face their own competent authority, operating under the same Council regulation but with different enforcement postures and different procedural rules.
This structure has direct consequences for ownership analysis. Guidance on the control limb has developed through a combination of Council explanatory notes, member-state authority publications, and EU General Court judgments – none of which are binding on every member state in the way that OFAC guidance binds US persons. In our cross-border practice, we regularly see EU businesses apply the OFAC 50 percent test mechanically and miss the control limb entirely. That gap is where enforcement risk accumulates.
The legal basis is the relevant Council Regulation for the programme in question (each programme has its own instrument) and the associated Council Decision. The regulations are directly applicable in all member states without domestic implementing legislation – but enforcement, licensing, and reporting obligations sit with national authorities. Identifying which authority governs a particular business is the first practical step before any ownership analysis can be completed.
What does the EU ownership and control test actually require?
The EU test has two limbs: an ownership limb and a control limb, and either is sufficient to bring a non-listed entity within the scope of an asset freeze. The ownership limb catches entities in which a listed person holds, directly or indirectly, more than 50 percent of the proprietary rights or a majority interest. The control limb catches entities over which a listed person exercises dominant influence – even where formal ownership sits below that threshold.
Control can arise in several ways. It includes the power to appoint more than half the board, rights to cast a majority of votes at shareholder meetings, and contractual or structural arrangements that give the listed person the ability to determine the entity's strategic decisions. The key question is not what percentage appears in a shareholder register, but whether the listed person can direct the entity's conduct. That requires a facts-and-circumstances analysis, not a single-figure screen.
Indirect ownership layers compound the problem. A listed person who owns 60 percent of a holding company that itself owns 60 percent of an operating company creates an indirect ownership chain that brings the operating company within scope under the ownership limb alone. Add contractual influence over the intermediate entity's board, and the control limb is also engaged. Screening tools that interrogate only the first ownership layer miss the downstream risk entirely.
One feature the EU shares with OFSI but which differs from OFAC is the absence of a strict bright-line rule at 50 percent. OFAC's ownership test is mechanical: 50 percent or more aggregate ownership by blocked persons triggers the rule, regardless of whether those persons actually control the entity. The EU and UK positions require practitioners to look further – at voting rights, board composition, veto rights, and any other mechanism through which a listed person might exercise decisive influence. That broader lens is, in our experience, the single most common source of analytical error in EU ownership work.
How does the EU position compare with OFAC and OFSI?
All three regimes agree on the basic proposition: a non-listed entity can be caught through its relationship with a listed person. But the mechanisms differ in ways that matter operationally. For a cross-border business subject to more than one regime, the stricter prohibition governs – and identifying which regime imposes the tighter constraint is itself an analytical task.
Under OFAC, the 50 percent rule (OFAC's rule treating entities owned 50 percent or more in aggregate by blocked persons as themselves blocked) is mechanically applied. It aggregates ownership across multiple blocked persons. It does not require control. An entity owned 50 percent or more by blocked persons is blocked as a matter of rule, even if operational control sits with an unaffiliated management team. The clarity of the OFAC position is a practical advantage: it is faster to apply. Its limitation is that it does not catch a listed person who owns 49 percent but runs the business entirely.
OFSI's test under the relevant UK thematic regulations mirrors the EU approach more closely: it combines an ownership limb (more than 50 percent) with a control limb that looks at whether a designated person is able to exert control over the entity's activities. The language in UK regulations adopted since the Sanctions and Anti-Money Laundering Act came into force tracks EU drafting closely in many programmes, though the two regimes have begun to diverge as the UK develops its own autonomous programmes post-Brexit.
For a compliance team advising on a transaction with a counterparty that is potentially within scope of all three regimes, the EU control limb is often the most demanding analytical exercise. It requires original fact-gathering: constitutional documents, shareholder agreements, loan agreements with governance provisions, side letters, and any other instrument through which influence might be exercised. This is not work that can be delegated to a screening tool.
For a comparative analysis of the OFAC position, see our briefing on the 50 percent rule and ownership analysis under OFAC.
What are the enforcement mechanics under EU rules?
Enforcement of the EU ownership and control test operates at member-state level, and the intensity of enforcement varies significantly across jurisdictions. Some member-state authorities have published detailed operational guidance; others have issued few public statements on control analysis, leaving practitioners to work from the Council regulation text and General Court case law alone.
The EU General Court has adjudicated a substantial body of cases on the procedural rights of designated persons and on the adequacy of the Council's reasoning in listing decisions. Those judgments do not directly address the ownership and control test for non-listed entities, but they reinforce the requirement that the factual basis for any freeze be demonstrable and adequately evidenced. In practice, that means a business relying on a conclusion that a counterparty is not caught – because the control limb is not met – should document that analysis thoroughly and retain it for the duration of the relevant record-keeping period.
Penalties for breach sit with national authorities. They range from administrative fines to criminal prosecution depending on the member state. A knowing breach – transacting with an entity that is effectively controlled by a designated person, in the absence of a licence – can constitute a criminal offence in a number of EU jurisdictions. The absence of intent does not always provide a defence: negligent breach is sufficient for administrative liability in several member states.
Licensing is available where a transaction would otherwise be caught. Applications go to the relevant member-state competent authority. The grounds for licensing vary by programme – humanitarian purposes, legal fees, prior contractual obligations – and the processing timeline differs between authorities. We regularly advise clients on the selection of the correct national authority, the preparation of the evidence file, and the management of regulator queries through to a licensing decision.
What are the most common risk flags in EU ownership analysis?
The control limb is consistently the source of the most serious oversights. Below are the patterns we see most frequently in cross-border compliance work.
- Reliance on the OFAC rule as a proxy. A business that screens against the 50 percent ownership threshold and stops there will miss entities in which a designated person holds, say, 35 percent but controls the board through a shareholders' agreement. The EU regime requires the additional step.
- Failure to interrogate governance documents. Shareholder registers are necessary but not sufficient. Constitutional documents, shareholder agreements, pledges, call options, and management agreements all need to be reviewed for provisions that confer decisive influence on a designated person.
- Layered ownership structures. Intermediate holding companies reduce the visibility of the ultimate beneficial owner. A thorough analysis works through each layer, applying the ownership and control test at each tier.
- Dynamic structures. Ownership and control arrangements change. A refinancing, a share pledge enforcement, or a governance restructuring can move an entity into or out of scope without any designation being made. Ongoing monitoring is as important as point-in-time screening.
- Multi-programme exposure. A counterparty may be within the scope of one EU programme but not another. Several Council regulations now share a harmonised structure, but the designated-person lists differ. Analysis must be programme-specific, not regime-generic.
A myth we encounter regularly is that a clean result from a commercial screening tool means the counterparty is safe to transact with. Screening tools are a first-line check; they are not a legal opinion. A tool that returns no direct hit on a counterparty says nothing about whether a non-listed shareholder, or a complex governance arrangement, brings that counterparty within the scope of an EU asset freeze through the control limb. In our experience, the gap between a clean screen and a defensible legal analysis is where enforcement risk lives.
If a transaction has already been flagged, or if a compliance team has identified a potential ownership or control issue in an ongoing relationship, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com to discuss the position.
When should a business involve sanctions counsel on EU ownership questions?
Sanctions counsel should be involved at the earliest stage at which an ownership or control question arises – not after a transaction has been executed or a payment made. The practical triggers are: a screening hit on a direct or indirect shareholder; a governance document that shows unusual rights for an undisclosed third party; a request from a counterparty to route payments through an intermediate entity; or an M&A target with beneficial ownership opacity in a high-risk jurisdiction.
The analysis a sanctions lawyer brings to these situations goes beyond what an in-house compliance team without specialised EU sanctions training can produce. It requires familiarity with the structure of Council regulations across multiple programmes, knowledge of the control-test case law, an understanding of how different member-state authorities apply the guidance, and the practical experience to know which governance arrangements habitually obscure designated-person influence.
In a recent matter, a financial institution processing a trade-finance transaction identified that the beneficiary's majority shareholder held its stake through a chain of three intermediate entities. A commercial screen returned no direct hit. A full ownership-chain analysis revealed that a designated person held a controlling position at the second intermediate tier, satisfying the EU control limb even though direct ownership at the beneficiary level sat below 50 percent. We conducted the analysis, mapped the chain, identified the licensing route, and supported the client through the member-state authority process. The transaction did not proceed on the original structure, but a compliant alternative route was identified.
Timing matters. Once a transaction is completed or funds transferred, the legal exposure crystallises. Voluntary self-disclosure – where appropriate – is an option that requires early professional assessment, as the procedural requirements and evidential standard differ between member-state authorities. An early-stage review gives the compliance team and the board the clearest picture of what exposure exists and what options remain.
How does the EU ownership test interact with other regimes?
For a business operating across the EU, the UK, and the US simultaneously, the ownership and control analysis must be conducted under each regime independently. The EU test, the OFSI test, and the OFAC test are not interchangeable, and a conclusion reached under one does not carry over to the others.
Two practical consequences follow. First, an entity that falls outside the OFAC 50 percent rule because aggregate ownership by blocked persons sits below the threshold may nonetheless be caught under the EU or OFSI control limb. Second, an entity that is clearly caught under OFAC's mechanical test may require additional analysis under EU rules to determine whether the control limb is also met – which affects the scope of the freeze, the applicable licensing routes, and the reporting obligations.
The UN Consolidated List sits beneath all three regimes. Designations by the Security Council feed into OFAC, OFSI, and EU lists through autonomous domestic implementation, but the timing and scope of that implementation differs. A Security Council designation does not automatically and instantaneously update all three domestic lists, and the associated prohibitions in each regime may not be identical. Checking all three lists and the relevant national instruments independently is the correct approach.
Beyond the major western regimes, businesses with operations in Singapore, the UAE, Canada, or Australia face their own autonomous ownership and control tests. The structure of those regimes varies; some follow the EU combined approach more closely, others are structured differently. Where a transaction involves counterparties or assets in multiple jurisdictions, a multi-regime ownership and control analysis is the only reliable method of mapping aggregate exposure. We regularly advise on multi-jurisdictional screening implications and work with local counsel in the relevant jurisdiction where domestic law issues arise.
For businesses subject to Australian sanctions obligations, see our compliance audit and testing service for Australia. For considerations relevant to Canadian screening processes, see our briefing on name and entity screening under the Canadian regime.
Related practices
- Sanctions compliance audit and testing – Australia – structured review of screening logic and ownership-chain methodology
- 50 percent rule under OFAC – how the US mechanical test differs from the EU control-limb approach