WHO.6 EU Sanctions DD

EU Sanctions DD WHO.6: State-Owned Enterprise (SOE) Exposure Analysis

What This Control Requires

Is there any direct or indirect link to state-owned enterprises of governments subject to EU restrictive measures?

In Plain Language

Many EU sanctions target state entities and their subsidiaries. Government ownership of a counterparty, contracts with state-owned enterprises, or revenue dependency on sanctioned government agencies all create sanctions exposure.

The EU Sanctions Map lists all countries subject to EU restrictive measures: Russia, Belarus, Iran, Syria, North Korea, Myanmar, and others. State-owned enterprises of these governments are frequently designated, and their subsidiaries are subject to the same 50% ownership and control tests.

In M&A scenarios, this is particularly important. An acquisition target may have seemingly commercial relationships that, on closer inspection, involve state-owned customers or suppliers from sanctioned regimes - creating inherited sanctions exposure for the acquirer.

How to Implement

Identify whether any counterparty is wholly or partly owned by a government subject to EU sanctions. Check the EU Sanctions Map (sanctionsmap.eu) for the complete list of country-specific restrictive measures.

Investigate: 1. Direct government ownership - is the counterparty a state-owned enterprise or partially government-owned?

2. State customer dependency - does the entity derive significant revenue from government contracts, state agencies, or state-owned banks of sanctioned regimes?

3. Government-controlled funds - is investment capital coming from sovereign wealth funds, state pension funds, or government-controlled investment vehicles of sanctioned states?

4. SOE subsidiary chains - state-owned enterprise subsidiaries are subject to the same 50% ownership test per the EU Best Practices (July 2024). A subsidiary of a subsidiary of a Russian SOE may still be sanctioned.

5. Indirect exposure - in M&A scenarios, check whether the target's customer base, supply chain, or revenue streams include government entities of sanctioned regimes, even through distributors or intermediaries.

Document all government connections found, assess whether they create sanctions exposure, and escalate any confirmed links to legal review before proceeding.

Evidence Your Auditor Will Request

Analysis of government ownership in counterparty structures
Assessment of revenue dependency on state-owned enterprises from sanctioned regimes
Review of SOE subsidiary chains with application of 50% ownership test
M&A-specific analysis of target's customer base for sanctioned government exposure
Legal opinion on any identified government connections and sanctions implications

Common Mistakes

Not recognising that subsidiaries of SOEs from sanctioned states may themselves be sanctioned
Failing to investigate the customer and supplier base for indirect government exposure
Ignoring revenue dependency on state contracts when assessing sanctions risk
Not checking whether investment capital originates from government-controlled funds
Treating 'private sector' label at face value without investigating actual ownership

Related Controls Across Frameworks

Framework	Control ID	Relationship
EU Sanctions DD	EU Sanctions DD WHO.1 (related mapping)	Related
EU Sanctions DD	EU Sanctions DD WHO.2 (related mapping)	Related
EU Sanctions DD	EU Sanctions DD GEO.1 (related mapping)	Related

Frequently Asked Questions

Which countries have state-owned enterprises subject to EU sanctions?

The EU Sanctions Map (sanctionsmap.eu) lists all country-specific sanctions programmes. Major programmes with SOE implications include Russia (Regulation 833/2014 - extensive sectoral sanctions on state banks, energy companies, defence entities), Belarus (similar structure), Iran (nuclear-related restrictions), Syria, North Korea, and Myanmar. Russian SOE exposure is the most common issue for EU businesses given historical trade volumes.

Does a counterparty being partly state-owned automatically mean it is sanctioned?

Not automatically, but it triggers enhanced due diligence. If the government stake is 50% or more, the entity is likely subject to the same restrictions as the state. Below 50%, check for control indicators. Also check whether the specific SOE or its parent has been individually designated on the EU Consolidated List. Even partial government ownership by a sanctioned regime creates significant risk that warrants legal review.

How does SOE exposure affect M&A transactions?

An acquirer inherits the target's sanctions risk. If the target has customers, suppliers, or revenue streams linked to SOEs of sanctioned states, the acquirer could find itself in violation post-acquisition. This is why SOE exposure analysis is critical in tech DD and broader M&A due diligence. Findings may require the target to wind down certain relationships as a condition of closing, or may materially affect valuation.

Track EU Sanctions DD compliance in one place

AuditFront helps you manage every EU Sanctions DD control, collect evidence, and stay audit-ready.

Start Free Assessment