Russia Sanctions 2026: What Companies with Commercial or Financial Activity Must Verify

Key data

If your company exports, imports, finances or maintains contracts with Russian entities or individuals, this corrigendum directly affects you. The Decision (CFSP) 2022/327, adopted on 25 February 2022 —one day after the start of Russia's large-scale invasion of Ukraine— modified the sanctions regime established in Decision 2014/512/CFSP. The corrigendum published on 28 July 2026 corrects material or formal errors in that text, without altering the substantive content of the restrictions.

The message for companies is clear: the version they must apply is the corrected one, not the original. Applying an outdated or incorrect version of the regulation does not exempt from responsibility.

What does this regulation establish?

The corrigendum corrects material or formal errors detected in Decision (CFSP) 2022/327. This decision, in turn, modified Decision 2014/512/CFSP, which is the base framework for EU restrictive measures against Russia. The substantive restrictions in force include:

• Export prohibitions: restrictions on certain goods, technologies and products destined for Russia or Russian entities.
• Financial restrictions: limitations on banking operations, financing and access to European capital markets for designated Russian entities and individuals.
• Limitations on access to the European market: restrictions on the participation of Russian entities in EU contracts and markets.

The corrigendum does not introduce new prohibitions or eliminate existing ones. Its function is to ensure that the legal text is precise and applicable without ambiguities. However, from a regulatory compliance perspective, the corrected version is the only legally valid version as of its publication.

Economic and operational impact

The direct impact of this corrigendum is not economic in itself: it does not raise rates, does not expand the list of sanctions or modify amounts. The impact is one of regulatory compliance, and the consequences of non-compliance do have real economic cost.

Companies operating under the Russia sanctions regime must update their internal compliance procedures to reference and apply the corrected version of the regulation. The concrete operational risks are:

• Administrative sanctions for non-compliance with the European restrictions regime, applied in Spain by the competent authorities.
• Criminal sanctions in the most serious cases, according to Spanish legislation transposing EU restrictive measures.
• Blocking of operations if internal control systems are not updated with the corrected version of the regulation.
• Reputational risk with clients, partners and financial entities that require regulatory compliance certifications.

Who does it affect?

• Exporters and importers with commercial activity to or from Russia, or who manage goods of Russian origin or destination.
• Financial and banking entities that operate with Russian counterparties or manage assets linked to designated individuals or entities.
• Companies with active contracts with Russian entities, whether for supply, services, licenses or distribution.
• Legal advisors and consultants who provide services to companies with exposure to Russia and must ensure their clients' compliance.
• CFOs and financial directors responsible for validating that cross-border operations comply with the current sanctions regime.
• Compliance departments of any company with international activity that includes Russian counterparties.

Practical example

A Spanish industrial company maintains a machinery supply contract with a Russian company that does not appear on the lists of designated entities. Its compliance department has referenced Decision (CFSP) 2022/327 in its procedures manual, but with the text originally published in OJ L 48 of 25.2.2022, without incorporating the July 2026 corrigendum.

In a regulatory compliance audit, the auditor detects that the company is applying the uncorrected version of the regulation. Although the substantive restrictions have not changed, the company must prove that it applies the legally current version. If it cannot do so, it is exposed to formal observations, requests for remediation and, depending on the severity of the error detected, to administrative sanctions by the competent Spanish authorities.

The solution is simple: update the regulatory reference in internal procedures, download the corrected version from the EU Official Journal and document the change in the compliance record.

What should companies do now?

1. Download the corrected version of Decision (CFSP) 2022/327 from the EU Official Journal (reference OJ:L_202690623, published on 28 July 2026) and replace any previous version in compliance files.
2. Update internal compliance procedures and operations manuals to reference the rectified version as the applicable regulation.
3. Review active contracts and operations with Russian counterparties to verify that export prohibitions, financial restrictions and limitations on access to the European market are correctly applied.
4. Inform the legal and financial team of the change, especially those who manage operations with Russia or validate lists of sanctioned entities.
5. Document the update in the regulatory compliance record, with date and reference to the corrigendum, to be able to prove it in an audit or inspection.
6. Consult a specialized advisor if there are doubts about whether any specific operation is affected by the corrected restrictions, given that non-compliance may result in administrative and criminal sanctions in Spain.

Official source

Consult complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202690623