EU Counter-Terrorism Sanctions 2026: What Companies and Financial Entities Must Verify

Key data

Financial entities and economic operators with compliance obligations in international sanctions have a specific task following the publication of this corrigendum: to confirm that their control systems apply the corrected version of the Council Decision (CFSP) 2026/455, published on 26 February 2026. The corrigendum, published on 4 November 2026 in the EU Official Journal (OJ:L_202690946), is technical-formal in nature and does not alter the substance of current restrictive measures.

For most companies, the impact is nil. For those managing sanctions compliance, it is an immediate verification obligation.

What does this regulation establish?

Decision (CFSP) 2026/455 is the framework regulation governing EU counter-terrorism restrictive measures. Upon publication, it repealed and replaced several earlier rules. The corrigendum now published corrects technical-formal errors in that decision, without modifying the substantive content of the sanctions.

The restrictive measures established by the corrected regulation are:

• Asset freezing applicable to persons and entities included in the EU terrorist list.
• Entry prohibitions to the territory of the European Union for listed persons.

The following table summarizes the rules that Decision (CFSP) 2026/455 repealed and replaced:

The corrigendum published in November 2026 does not add or remove persons or entities from the terrorist list, nor does it modify the scope of asset freezing or entry prohibitions. Its effect is exclusively to correct formal errors in the text of Decision (CFSP) 2026/455.

Economic and operational impact

The direct economic impact of this corrigendum is limited. It does not generate new substantive obligations nor does it modify amounts, thresholds or lists of sanctioned parties. However, it has specific operational consequences for a particular profile of companies:

• Financial entities: Must verify that their sanctions screening systems (blacklists, transaction filters) reference the corrected version of Decision (CFSP) 2026/455 and not earlier already-repealed versions.
• Companies with compliance programs in international sanctions: Must update internal documentation of their procedures to reflect the formal correction and ensure regulatory traceability in case of audit or inspection.
• Economic operators working with counterparties in risk areas: Must confirm that their due diligence tools are aligned with the corrected current regulation.

The operational cost is that of any compliance update: system review, update of documented procedures and, where applicable, internal communication to compliance teams. There are no new economic sanctions or fines directly derived from this corrigendum.

Who does it affect?

• Financial entities (banks, insurance companies, fund managers, payment entities) with an obligation to apply EU international sanctions.
• Companies with formal compliance programs in sanctions and export control matters.
• Legal advisors and regulatory compliance consultants who manage sanctions list monitoring for their clients.
• Natural and legal persons included in the EU terrorist list, who remain subject to asset freezing and entry prohibition.
• Economic operators conducting international transactions and applying due diligence procedures on counterparties.

For other companies—SMEs, self-employed persons, retailers—this regulation generates no new obligations or operational impact.

Practical example

A Spanish bank with an obligation to apply EU counter-terrorism sanctions has configured in its compliance system a filter that references Decision (CFSP) 2026/421—one of the rules already repealed by Decision (CFSP) 2026/455—. Following publication of the corrigendum, the compliance team must:

1. Verify that the screening system has been updated to reference Decision (CFSP) 2026/455 in its corrected version, and not the repealed versions (2025/1577 or 2026/421).
2. Document the review carried out with date and responsible party, to evidence compliance in case of supervisory inspection.
3. Confirm that the list of sanctioned persons and entities applied is the current one under the corrected regulation.

The bank does not incur new costs from sanctions, but does assume the internal operational cost of verification and documentary update. If it failed to carry out this verification and applied a repealed version of the regulation, it could face observations or requirements in a regulatory compliance inspection.

What should companies do now?

1. Verify the regulatory version applied: Confirm that compliance and sanctions screening systems reference Decision (CFSP) 2026/455 in its corrected version (published 4 November 2026), and not the repealed versions (CFSP 2025/1577 or CFSP 2026/421).
2. Update internal documentation: Reflect in compliance procedures the formal correction published, with update date and responsible party, to ensure traceability in audits.
3. Communicate to the compliance team: Inform those responsible for regulatory compliance of the formal change so they update their documentary references and working tools.
4. Review due diligence tools: If external providers of sanctions lists are used, confirm they have incorporated the corrected version in their databases.
5. Assess if it applies to your company: If your company has no formal compliance obligations in international sanctions, this corrigendum generates no required action.

Official source

Consult complete regulation at official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202690946