Key data
| Regulation | Council Decision (CFSP) 2026/1882, of 30 July 2026 |
|---|---|
| Revised base rule | Council Decision (CFSP) 2026/455 on restrictive measures to combat terrorism |
| Publication | 30 July 2026 |
| Entry into force | 30 July 2026 (immediate effect) |
| Affected parties | Financial entities, companies and any person with links to listed subjects |
| Category | European Regulation — Common Foreign and Security Policy (CFSP) |
| Year | 2026 |
| CELEX reference | 32026D1882 |
If your company operates with international counterparties, manages customer accounts or carries out fund transfers, this update requires you to act today. Council Decision (CFSP) 2026/1882, adopted on 30 July 2026, reviews the list of subjects to which counter-terrorism restrictive measures apply under Council Decision (CFSP) 2026/455. The regulation has immediate effect from its publication in the Official Journal of the EU.
This is not a future obligation: it enters into force on the same day as its publication. Compliance departments that do not update their control systems with the new list are already exposed.
What does this regulation establish?
Council Decision (CFSP) 2026/1882 is a periodic review of the list of persons, groups and entities subject to EU counter-terrorism restrictive measures. This review may include three types of changes:
- Addition of new subjects to the list (natural persons, groups or organizations).
- Removal of subjects that no longer meet the inclusion criteria.
- Modification of conditions applicable to subjects already listed.
The restrictive measures applied to subjects included in the list are of two main types:
| Type of measure | Description |
|---|---|
| Asset freezing | Prohibition on moving, transferring, altering or using funds or economic resources belonging to those listed. |
| Prohibition on making funds available | No company or individual may make funds or economic resources available, directly or indirectly, to subjects included in the list. |
These measures are directly applicable in all EU Member States, including Spain, without the need for further transposition.
Economic and operational impact
The impact is not theoretical. Operating with a subject included in the list—even unintentionally—can result in:
- Administrative sanctions imposed by the competent authorities of each Member State (in Spain, the Ministry of Foreign Affairs and the State Secretariat for the Treasury, among other bodies).
- Criminal liability for terrorism financing, with prison sentences and substantial fines under the Spanish Criminal Code.
- Blocking of operations and possible freezing of the company's own assets while the investigation is ongoing.
- Serious reputational damage and loss of licenses or regulatory authorizations for financial entities.
The operational cost of updating control systems is significantly lower than the cost of non-compliance. Periodic reviews of the list are a continuous compliance obligation, not a one-off procedure.
Who does it affect?
- Financial entities: banks, savings banks, credit cooperatives, payment entities, fund managers, insurance companies and any entity subject to anti-money laundering regulations.
- Companies with international activity: importers, exporters, distributors and any company with counterparties in third countries.
- Companies in any sector that maintain commercial, contractual or financial relationships with natural or legal persons that may be included in the list.
- Compliance and legal departments responsible for internal control systems.
- Advisors and consultants who manage financial or commercial operations on behalf of clients.
- Individuals with economic or financial links to listed subjects.
Practical example
A Spanish international trade company has among its regular clients an organization based in a third country. Following the update of the list published on 30 July 2026, that organization is included as an entity subject to counter-terrorism restrictive measures.
If the Spanish company does not update its counterparty screening system and processes a payment or delivers goods to that organization after 30 July, it will be making funds or resources available to a listed subject. This constitutes a direct breach of Council Decision (CFSP) 2026/1882, regardless of whether the company was unaware of the update. Ignorance of the regulation does not exempt from liability.
The solution is simple: update the counterparty database with the new list published in the Official Journal of the EU and perform a new screening before processing any pending operations.
What should companies do now?
- Download the updated list published in the Official Journal of the EU (Council Decision CFSP 2026/1882, in force since 30 July 2026).
- Update counterparty, customer and supplier screening systems with the new list. If automated compliance tools are used, verify that they already incorporate the update.
- Execute immediate screening on the portfolio of active customers, suppliers and business partners to detect possible matches with listed subjects.
- Preventively block any pending operations with counterparties that appear in the updated list until receiving legal advice.
- Document the review and update process to demonstrate due diligence in the event of an inspection or investigation.
- Inform the legal department or external advisor if any match is detected, to assess the obligation to report to the competent authorities.
Non-compliance with these restrictions can result in administrative and criminal sanctions in the Member States. Updating controls is not optional: it is a legal obligation with effect from the same day the regulation is published.
Frequently asked questions
Where can I consult the updated list of subjects to EU counter-terrorism measures?
The updated list is published in the Official Journal of the European Union, in the full text of Council Decision (CFSP) 2026/1882, of 30 July 2026. It can also be consulted through the EUR-Lex portal with CELEX reference 32026D1882. Many compliance tools incorporate it automatically, but it is advisable to verify the update date of the source being used.
What happens if my company operates unknowingly with a subject included in the list?
Ignorance of the regulation does not exempt from liability. If a company makes funds or resources available to a listed subject, or holds assets without freezing them, it incurs a breach of EU counter-terrorism restrictive measures. The consequences include administrative sanctions and criminal liability in the Member States, including Spain. This is why it is essential to update control systems immediately after each review of the list.
When does the update of the July 2026 counter-terrorism list enter into force?
Council Decision (CFSP) 2026/1882 entered into force on the same day as its publication in the Official Journal of the EU: 30 July 2026. There is no adaptation period. The obligations to freeze assets and prohibit making funds available are enforceable from that date.
What specific measures does the list impose on companies?
The applicable restrictive measures are two: the freezing of assets of listed subjects (prohibition on moving, transferring or using their funds or economic resources) and the prohibition on making funds or economic resources available to them, directly or indirectly. These obligations affect any company or individual that has or may have a financial or commercial relationship with the subjects included.
How frequently is the EU counter-terrorism list updated?
The list is reviewed periodically by the EU Council within the framework of the Common Foreign and Security Policy (CFSP). Council Decision (CFSP) 2026/1882 is one of these periodic reviews of the list established by Council Decision (CFSP) 2026/455. There is no fixed published frequency: updates can occur at any time, so compliance departments must continuously monitor the Official Journal of the EU.
Official source
Consult complete regulation in official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D1882