A trading house in Singapore has just flagged a potential counterparty whose ultimate parent sits on the UN Consolidated List. Its local counsel raises an immediate question: is the subsidiary itself subject to UN-derived obligations, even though it does not appear on any list by name? The answer turns on how the relevant national implementing regime handles ownership and control – and that analysis differs materially from jurisdiction to jurisdiction.
The UN Security Council does not itself impose a single global ownership-and-control test. It designates individuals and entities on regime-specific consolidated lists, and each member state implements those designations through national law. The practical effect is that ownership and control assessments (the process of determining whether a non-listed entity is caught through its relationship with a listed person) are governed by the domestic rules of the implementing jurisdiction, not by a uniform UN standard. As of August 2026, the major implementing regimes – OFAC, OFSI, and the EU – each apply a distinct test, and businesses operating across those jurisdictions face divergent obligations from a single UN-origin designation.
This briefing explains how the UN Consolidated List works, why ownership and control assessments arise from it, how the principal implementing regimes translate UN designations into actionable prohibitions, and what a compliance team should do when a counterparty's ownership chain touches a listed person.
What is the UN Consolidated List and why does it generate ownership and control questions?
The UN Consolidated List is the master record of individuals and entities designated by Security Council sanctions committees under binding Chapter VII resolutions. Member states are legally obliged to implement the asset-freeze, travel-ban, and arms-embargo measures attached to each entry. The obligation is mandatory – not discretionary – and the UN Charter places it above conflicting treaty obligations.
The list itself names specific persons and entities. It does not, however, define what happens to their subsidiaries, holding companies, or other related vehicles. That gap is the source of every ownership and control question a compliance officer faces. If a listed person owns sixty percent of an unlisted operating company, is that company itself subject to the measures? The UN resolution is silent. The answer comes entirely from the national implementing rules of each jurisdiction in which the business operates.
This architecture has a direct practical consequence. A single UN designation can generate different legal outcomes in New York, London, Frankfurt, and Singapore – because each jurisdiction's legislation applies a different standard to the non-listed entity. In our experience, businesses that treat a UN designation as a self-contained answer have already made the first analytical error. The designation is the starting point. The ownership and control assessment is the work.
How does the UN designation process work, and who sits at the centre of it?
UN Security Council sanctions committees manage the designation process. Each thematic or country-specific sanctions regime operates under its own committee, with a secretariat drawn from the UN Secretariat. A member state proposes a listing; the committee – typically acting by consensus – adopts it; the entry is added to the Consolidated List; and implementing states are notified through established channels.
The Consolidated List carries identifying information: names, aliases, dates of birth, passport or identification numbers, and addresses where known. It does not describe ownership structures, control relationships, or the corporate family of the listed person. That due-diligence burden falls entirely on the regulated business and its compliance counsel.
For de-listing, the mechanisms differ by regime. The Office of the Ombudsperson handles petitions for individuals and entities on the ISIL (Da'esh) and Al-Qaida list. A Focal Point for De-listing exists for other committees, but the process is slower and the grounds for review are narrow. Neither mechanism provides a binding remedy akin to judicial review. For businesses assessing counterparty risk, this means that a UN designation, once made, is likely to remain operative for a substantial period – which raises the stakes on the initial ownership and control assessment.
How do the principal implementing regimes translate UN designations into ownership and control obligations?
Each major implementing jurisdiction takes the UN Consolidated List as its baseline but applies its own legal test to determine whether non-listed entities are caught. Understanding those divergences is the core of cross-border ownership and control work.
United States (OFAC). OFAC implements UN designations through its programme-specific regulations, issued under IEEPA and other statutory authority. Its 50 percent rule (the rule that any entity owned 50 percent or more in the aggregate by one or more blocked persons is itself treated as blocked) applies automatically, without any need for a separate OFAC designation of the entity. The test is ownership, not control. If the threshold is reached, the entity is blocked as a matter of law regardless of operational independence, board composition, or management structure. Aggregation across multiple listed persons holding minority stakes is expressly covered: two blocked persons each holding 30 percent together reach the threshold.
United Kingdom (OFSI). OFSI implements UN designations through the relevant thematic sanctions regulations made under SAMLA. The UK test extends beyond ownership to ownership and control (the statutory phrase covering both majority ownership and the ability of a listed person to direct or influence the entity's activities). Control can be established through contractual rights, veto powers, or other structural arrangements that fall short of majority ownership. The 50 percent ownership threshold operates as a trigger for the ownership limb, but the control limb requires a separate factual assessment. In our experience, the control limb catches arrangements that a purely mechanical ownership test would miss.
European Union. EU sanctions regulations implementing UN designations use a similar ownership-and-control formulation. An entity owned or controlled by a listed person is subject to the asset freeze. The EU's approach to the control test is broadly comparable to OFSI's: it encompasses both formal control (majority shareholding or voting rights) and effective control (the ability to exert decisive influence). The EU General Court has addressed the evidential standard for control in annulment proceedings, and its approach to what constitutes decisive influence is instructive for compliance assessments even where litigation is not in prospect.
Other jurisdictions. Australia, Canada, Singapore, Japan, and the UAE each implement UN designations through domestic instruments. The ownership and control tests in these regimes vary. Some adopt a purely mechanical threshold; others incorporate a broader influence test. Businesses with regional exposure across Asia-Pacific and the Gulf should not assume that an analysis completed under OFAC or OFSI rules satisfies local requirements. Local counsel in the relevant jurisdiction should verify the applicable country regime before reliance.
Where do ownership and control assessments most frequently go wrong?
Several recurring failure modes produce material compliance risk in practice. Identifying them early is more efficient than remedying them after a transaction has completed.
The first is single-layer screening. Many screening tools check whether the immediate counterparty appears on a list. They do not map the ownership chain above and below that entity. A listed person owning sixty percent of a holding company that owns eighty percent of the operating counterparty is invisible to a tool that checks only the direct relationship. The OFAC 50 percent rule and the OFSI and EU control tests all operate through the chain, not just at its bottom.
The second is aggregation blindness. Where no single listed person holds a majority stake, the aggregation question is critical under OFAC's rule. Two or more blocked persons whose combined holdings reach or exceed the threshold produce a blocked entity even if neither individually is a majority owner. Compliance processes that check each listed person in isolation will miss this. Have your screening tools been configured to aggregate across all listed persons simultaneously?
The third is regime mismatch. A transaction cleared under OFAC's mechanical ownership test may still be prohibited under OFSI or the EU control test if a listed person exercises effective control without majority ownership. The stricter prohibition governs: a business subject to both OFAC and OFSI rules must satisfy both tests, not the easier of the two.
The fourth is stale analysis. UN designations are added, modified, and occasionally removed. An ownership and control assessment completed at the time of onboarding can become inaccurate if the ownership structure of the counterparty changes, or if a new designation is added after the initial check. Periodic refresh of assessments – the frequency determined by the risk profile of the relationship – is a standard element of a well-designed compliance programme.
The position above covers the standard case. Your facts – the counterparty's jurisdiction of incorporation, the complexity of its ownership chain, the regimes to which your business is subject – change the analysis. For an initial assessment of your exposure under the relevant regime, contact Calder & Vance at info@caldervance.com.
What is the relationship between the UN list and autonomous national designations?
UN designations are mandatory for member states. But the major implementing jurisdictions also maintain autonomous sanctions programmes that go beyond UN-listed persons. OFAC, OFSI, and the EU Council each designate individuals and entities under their own legal authority – sometimes in connection with a UN-listed programme, sometimes entirely independently. This layering matters for ownership and control assessments in two ways.
First, an entity that is not captured by the UN-origin designation may still be subject to measures under an autonomous designation made by one or more implementing jurisdictions. A complete ownership and control analysis covers both the UN Consolidated List and the relevant autonomous lists for each jurisdiction in which the business operates.
Second, the ownership and control tests for autonomous designations may differ from those applied to UN-origin entries, even within the same jurisdiction. OFSI's rules for entities caught through ownership or control apply to UK autonomous designations and UN-implementing measures alike, but it is always worth confirming that the test applied to the specific instrument in question is the one that matches the underlying legal basis. In practice, this is a point where practitioner guidance – rather than a screening tool alone – adds genuine analytical value.
When should a business seek counsel on an ownership and control assessment?
Several scenarios indicate that a compliance team has reached the boundary of what internal resources should handle alone.
The first is a counterparty whose ownership chain includes a listed person at any level, where the precise shareholding or control arrangements are not publicly available. When documentary verification of the ownership structure is incomplete, the risk of a wrong answer is highest.
The second is a transaction that crosses multiple implementing jurisdictions. As the analysis above shows, OFAC, OFSI, and the EU apply divergent tests. A business subject to two or more of these regimes simultaneously needs a consolidated analysis, not three separate assessments that do not speak to each other.
The third is a situation where the counterparty or its counsel disputes the assessment – for example, asserting that a listed person's holdings have been transferred, or that an historical control relationship has been terminated. The evidentiary standard for satisfying the relevant authority that the entity is genuinely free of ownership and control requires care, and an incorrect or incomplete presentation can create more regulatory exposure than it resolves.
The fourth is a potential past breach. If a completed transaction may have involved an entity that should have been caught by an ownership and control assessment, the question of whether and how to disclose to the relevant authority is distinct from – and more urgent than – the underlying ownership question itself. If a transaction has already been flagged, or a filing has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com.
A common misconception: does the UN list create a self-executing global prohibition?
A widely held belief among non-specialist in-house teams is that a UN designation creates a uniform global freeze that a business anywhere in the world must observe. This overstates the position in one direction and understates it in another.
It overstates it because the UN designation itself has no direct legal effect on a private actor. The obligation runs from member state to member state at the interstate level. A private business is bound only by the domestic implementing legislation of the jurisdictions to which it is subject – its place of incorporation, the currency of the transaction, the location of its offices, the nationality of its personnel. A business that has no legal connection to any implementing jurisdiction is, in principle, not directly constrained by the UN designation as a matter of national law.
It understates the risk because most internationally active businesses are subject to at least one major implementing regime, and the extraterritorial reach of US sanctions in particular means that OFAC's implementation of UN designations can engage a far wider range of transactions than those with an obvious US nexus. Secondary-sanctions risk – the risk that a non-US business conducting transactions with a listed person could be exposed to US measures aimed at conduct entirely outside US territory – adds a further layer.
The practical lesson is this: a business should map every implementing regime to which it is connected before concluding that a UN-origin designation either does or does not affect a proposed transaction. We regularly advise clients who have made assumptions in both directions and found the analysis to be more nuanced than the initial read suggested.
Related practices
- Compliance audit and testing (Australia) – independent testing of sanctions screening and ownership-chain analysis for Australian-nexus operations.
- Payment processing controls (Australia) – how UN-derived and autonomous Australian sanctions obligations intersect with payment-system compliance.
- Payment processing controls (BIS/EAR) – US export-control obligations relevant to payment and settlement for dual-use transactions.