New EU sanctions against Burundi: what Spanish companies and financial entities must do

Key data

Spanish companies and financial entities with any link to Burundi have an urgent obligation: update their regulatory compliance systems with the new list of sanctioned persons and entities. The Decision (CFSP) 2026/2197, in force since 28 September 2026, modifies the sanctions regime that the EU has maintained on Burundi since 2015 and may have incorporated new designees or modified the criteria for designation.

This is not a regulation with indirect impact: operating with a designee—even through ignorance—constitutes a breach of the EU sanctions regime, with serious administrative and criminal consequences for both the company and its executives.

What does this regulation establish?

Decision (CFSP) 2026/2197 amends Decision (CFSP) 2015/1763, which is the base framework for EU restrictive measures against the political crisis in Burundi. This review may involve two types of changes:

• Changes to the list of designees: incorporation of new persons or entities linked to the political crisis in Burundi, or removal of those no longer meeting the criteria.
• Adjustments to designation criteria: modification of the circumstances that justify including a person or entity on the list of sanctioned parties.

The measures applied to designees are of two types:

To know exactly which persons and entities are currently designated, it is essential to consult the consolidated EU sanctions list, which is updated on the European Commission's official sanctions portal and in the EU Official Journal following each modification.

Economic and operational impact

The direct impact of this regulation is not a fixed cost: it is a serious sanction risk for non-compliance. The consequences of operating with a designee include:

• Administrative sanctions: fines that can be very high according to Spanish regulations transposing the EU sanctions regime.
• Criminal liability: executives and compliance officers may incur criminal liability for evasion of international sanctions.
• Operational blocking: transactions with designees are automatically blocked; if not detected in time, they can generate accounting and legal contingencies.
• Reputation: appearing in a sanctions file for non-compliance with international sanctions has serious reputational consequences, especially for financial entities.

The real operational cost of compliance is low: updating lists in screening systems and performing a one-time verification of active counterparties. The cost of non-compliance can be much higher.

Who does it affect?

• Financial entities: banks, savings banks, credit cooperatives, fund managers, payment entities and any financial intermediary that may have assets or accounts linked to persons or entities from Burundi.
• Exporting companies: companies that export goods or services to Burundi or that have commercial counterparties in that country.
• Operators with commercial links to Burundi: companies with contracts, agents, distributors or partners in Burundi, regardless of sector.
• Compliance officers and legal departments: obliged to keep screening systems updated and to document verifications performed.
• Advisors and consultancies: that provide services to companies with exposure to Burundi must alert their clients to this update.

Practical example

A Spanish agribusiness company has a supply contract with a distributor in Burundi with whom it has been operating for three years without incident. Following the entry into force of Decision (CFSP) 2026/2197 on 28 September 2026, that distributor appears on the updated list of persons designated for their involvement in the Burundian political crisis.

If the company does not update its screening system and processes a pending payment to that distributor, it is executing a transfer to a designee under the EU sanctions regime. This constitutes a breach of the restrictive measures regime, regardless of whether the company was unaware of the designation. The obligation to verify is continuous, not one-time.

The solution: before processing any payment or shipment, the compliance officer must cross-check the list of active counterparties with the updated consolidated list published in the EU Official Journal.

What should companies do now?

1. Access the updated consolidated list: download or consult the list of designated persons and entities published in the EU Official Journal following the entry into force of Decision (CFSP) 2026/2197 (28 September 2026).
2. Cross-check active counterparties with the list: review all customers, suppliers, partners and payment beneficiaries with any link to Burundi against the updated list.
3. Update screening systems: incorporate the new list into regulatory compliance tools (AML, KYC, sanctions systems) so that future verifications are automatic.
4. Block operations with designees: if any designated counterparty is detected, immediately suspend any pending transaction and notify the legal department and, if appropriate, the competent authorities.
5. Document the process: keep written record of the verification performed, the date and the result. This documentation is key in case of inspection or sanctions proceedings.
6. Review updated designation criteria: if the regulation modifies designation criteria, assess whether any counterparty not previously designated could be included under the new criteria.

Official source

Consult full regulation at official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202602197