A European trading company receives a payment from a counterparty whose bank account sits within a sanctioned entity's group structure. The compliance officer knows that an EU general authorisation may permit the transaction – but which one applies, and does the company actually qualify? Getting that question wrong does not merely delay a deal. It can expose the company to enforcement action under the applicable Council regulation.
Under EU sanctions, a general licence (a standing authorisation permitting a defined category of transactions without a separate application to a competent authority) is available only when the relevant Council regulation expressly creates one and the transacting party meets every eligibility condition attached to it. The EU does not operate a single general-licence register; each thematic sanctions regime carries its own authorisations, with eligibility criteria set at Council level and administered nationally. As of June 2026, the interaction between Council-level rules and member-state implementation remains the single most common source of compliance error we see in practice.
This briefing sets out how EU general licence eligibility works, who administers it, how it compares with the OFAC and OFSI approaches, what the common failure points are, and when a business should involve sanctions counsel.
What is a general licence under EU sanctions law, and why does it matter?
An EU general authorisation is a provision within a Council regulation that permits a defined category of otherwise-prohibited transactions to proceed without a prior individual decision from a national competent authority. The authorisation is self-executing: if you qualify, you may proceed. If you do not qualify, you may not – and there is no residual discretion at the point of transaction.
The significance for cross-border businesses is structural. EU sanctions regulations operate as directly applicable law across all member states. A general authorisation written into the regulation is therefore simultaneously available in every member state. That sounds straightforward. In practice, however, member states retain authority to require notification, to impose additional conditions, and – critically – to assess compliance after the fact. A company that proceeds on the basis of a general authorisation and is later found not to have met the eligibility conditions has no defence of good faith in the way that OFAC's general licence regime sometimes accommodates.
The other structural point is that EU general authorisations are narrower in scope than their OFAC equivalents. They tend to address specific transaction types – humanitarian activity, personal remittances, legal fees, prior contractual obligations – rather than creating broad carve-outs for entire sectors. That specificity is deliberate. It means that eligibility analysis is always a point-by-point exercise against the conditions of the specific authorisation, not a broad-brush assessment.
Who administers general licence eligibility under EU?
EU general licence eligibility is administered at two levels: the Council of the European Union sets the authorisation and its eligibility conditions through the Council regulation; national competent authorities implement, monitor, and enforce compliance within each member state.
There is no single EU-level licensing body equivalent to OFAC or OFSI. The European Commission plays a coordinating role and issues guidance, but it does not grant or refuse individual authorisations. A company wishing to rely on a general authorisation must assess its eligibility under the regulation itself. Where the regulation requires prior notification – which some authorisations do – that notification goes to the national competent authority of the member state in which the company is established or where the transaction is being executed.
This dual structure creates a practical complexity that we regularly advise on. The same general authorisation may be interpreted differently by the French, German, Dutch, and Spanish competent authorities. There is no binding mechanism that forces harmonised interpretation below the level of a Court of Justice ruling or Commission guidance. A multinational with subsidiaries across several member states may therefore face materially different eligibility assessments for the same transaction type depending on which national authority is involved.
Where eligibility is genuinely ambiguous, the appropriate route is a formal request for guidance or an individual authorisation from the relevant national competent authority – not a unilateral decision to proceed under a general authorisation that may not cover the facts.
How do EU general authorisation conditions work in practice?
Each general authorisation in a Council regulation sets out a list of conditions, and every condition must be satisfied for the authorisation to apply. There is no partial credit. If a transaction meets nine out of ten conditions, it is not authorised – it is prohibited unless an individual licence is obtained.
Conditions typically address one or more of the following factors: the type of transaction or activity (payments, transfers, services, goods); the identity of the counterparty (a designated person, an entity owned or controlled by a designated person, a legal person in a sanctioned territory); the purpose of the transaction (humanitarian, legal representation, pre-existing contractual obligation); any monetary limit; and any notification or reporting requirement attaching to use of the authorisation.
Monetary limits deserve particular attention. Several EU general authorisations apply only below a specified threshold. A business that structures a series of transactions to remain below that threshold, intending to use the authorisation for each tranche separately, risks a finding that the series constitutes a single prohibited transaction. This is not a theoretical risk. In our cross-border practice, we have seen competent authorities aggregate what appeared to be separate transactions when the pattern of dealing indicated a deliberate split. The advice is always to analyse the economic substance of a transaction series, not just its formal structure.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the member states involved – change the analysis materially.
For a preliminary assessment of whether a specific EU general authorisation covers your transaction, contact Calder & Vance at info@caldervance.com.
How does EU general licence eligibility compare with OFAC and OFSI?
The cross-regime comparison is one of the most practically important questions for any business operating across the Atlantic or under both UK and EU obligations simultaneously. The three regimes share the same broad category of instrument – a standing authorisation permitting otherwise-prohibited activity – but they differ in legal architecture, scope, and enforcement posture.
Under OFAC, general licences are published on OFAC's website and operate as broadly drafted standing permissions. They are often written at a high level of generality, covering entire sectors, categories of counterparty, or activity types. OFAC maintains a consolidated and publicly searchable set of general licences for each sanctions programme. Eligibility turns on a fact-specific analysis of whether your transaction falls within the terms of the licence, but the terms themselves tend to be wide. OFAC's approach to good-faith reliance also gives some practical protection where a business has taken reasonable steps to confirm eligibility. You can read more about the OFAC approach at our OFAC general licence eligibility briefing.
Under OFSI, the general licence (a standing permission issued by the Office of Financial Sanctions Implementation under SAMLA and the relevant thematic regulations) sits somewhere between the EU and OFAC models. OFSI publishes its general licences individually, and each carries specific eligibility conditions. The enforcement posture following OFSI's 2022 and 2023 guidance updates has become more assertive, and the obligation to report to OFSI when a firm knows or suspects it holds frozen funds applies irrespective of whether a general licence covers the relevant activity. The UK briefing is at our OFSI general licence eligibility briefing.
The practical implication of the divergence is this. A business that qualifies for an OFAC general licence for a particular transaction type does not automatically qualify under the EU general authorisation for the same transaction. The conditions are set independently. Where the EU regulation is more restrictive than the OFAC licence, the more restrictive rule governs the EU-law dimension of the transaction – and an EU-established entity must comply with EU law regardless of what OFAC permits. This is not a theoretical tension; it arises regularly in humanitarian, energy, and financial-services transactions that involve US-dollar clearing alongside EU-established counterparties.
What are the ownership and control implications for eligibility?
EU general authorisations frequently carve out transactions involving persons who are designated or who are owned or controlled (the EU and UK test for whether a non-listed entity is caught through a listed person) by designated persons. Whether a counterparty is owned or controlled is therefore a threshold eligibility question, not a secondary one.
The EU ownership and control test differs from OFAC's mechanical 50 percent threshold. Under EU Council regulations, ownership is assessed on a similar percentage basis, but control is an additional, qualitative criterion. A non-listed entity may be treated as controlled by a designated person even where the designated person holds less than 50 percent of the shares, if that person exercises dominant influence over the entity's decisions. That influence may be exercised through governance rights, contractual arrangements, or factual circumstances.
This has direct implications for general authorisation eligibility. A company wishing to rely on an EU general authorisation for a payment to a counterparty must first confirm that the counterparty is not owned or controlled by a designated person. If the counterparty is owned or controlled, the authorisation may not apply – or may apply only in restricted circumstances explicitly stated in the Council regulation. Screening tools that check only against the EU Consolidated List without tracing the ownership and control chain miss the most common category of prohibited transaction we see in enforcement contexts.
If a transaction has already been flagged or a payment has been held, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.
What are the common risk flags in EU general licence eligibility?
Several categories of error recur with sufficient frequency in our practice that they warrant specific attention.
The first is assuming that a general authorisation in one sanctions programme extends to another. EU sanctions are structured programme by programme. An authorisation in the regulation applicable to one country regime does not carry across to a different country's regulation, even where the conditions look similar. Each regulation must be analysed separately.
The second is failing to satisfy a notification requirement. Some EU general authorisations are conditional on prior or simultaneous notification to a national competent authority. A company that executes a transaction and notifies afterwards – or not at all – has not properly used the authorisation. The authorisation may be treated as inapplicable, and the transaction as unlicensed.
The third is misreading the purpose condition. Where an authorisation covers transactions "for humanitarian purposes" or "to meet basic needs", those phrases carry specific meanings in the context of the relevant Council regulation. They do not extend to all transactions that have an incidental humanitarian element. We have seen businesses misapply this condition in the context of medical-equipment exports and food-supply contracts, where the regulatory definition was narrower than the commercial description of the goods.
The fourth is failing to account for the interaction between the EU general authorisation and applicable member-state law. A general authorisation in a Council regulation does not override national anti-money laundering requirements, national export licensing requirements, or national currency-control rules. All applicable legal requirements must be met concurrently. The general authorisation covers only the sanctions-law dimension of the transaction.
The fifth, and perhaps most consequential, is the absence of contemporaneous documentation. If a competent authority subsequently queries whether a company properly relied on a general authorisation, the company will need to demonstrate that at the time of the transaction it held an analysis confirming eligibility. An undocumented decision to proceed – even one that was factually correct – is significantly harder to defend than a recorded analysis, however brief.
How is general licence eligibility enforced under EU?
Enforcement of EU sanctions, including compliance with general authorisation conditions, is a matter for national competent authorities and national criminal and civil enforcement bodies. There is no EU-level enforcement body with direct sanctioning power over private persons in the way that OFAC operates in the United States.
The practical consequence is that enforcement standards, penalties, and procedures vary materially across member states. Some member states have invested heavily in sanctions enforcement capacity and pursue non-compliance proactively. Others have historically maintained a lighter supervisory posture. That divergence is narrowing: the establishment of the EU's anti-money laundering and sanctions enforcement architecture, combined with political pressure following the expansion of EU sanctions programmes since 2022, has led to a broad increase in enforcement activity across member states.
The EU General Court provides the primary judicial avenue for challenging a designation or a Council measure that bears on eligibility. An annulment action before the EU General Court – a challenge to the legality of a Council designation or regulation – is the principal tool available to a designated party contesting its listing. For a non-designated party, the primary recourse is before the relevant national court or competent authority.
Voluntary self-disclosure to a national competent authority – a VSD (a proactive disclosure of a suspected breach before the authority identifies it independently) – is recognised in several member states as a mitigating factor in enforcement. The weight given to a VSD varies by jurisdiction; there is no uniform EU-level VSD policy. Where a company has identified a potential breach of general authorisation conditions, the decision whether to self-disclose, and to which authority, requires legal analysis specific to the member states involved.
Related practices
- Frozen Account Management – BIS/EAR – managing blocked-account obligations and release applications under US export-control rules
- General licence eligibility under OFAC – how OFAC general licences work and how to confirm eligibility across US sanctions programmes
- General licence eligibility under OFSI – UK general licence conditions, notification requirements, and the OFSI enforcement posture