EU Sanctions Correction Afghanistan 2026: What Companies Must Update in Compliance

Key data

Companies and financial entities with regulatory compliance obligations regarding international sanctions must update their control lists with the corrected version of Implementing Regulation (EU) 2026/2138. The correction, published in the Official Journal of the EU on 27 October 2026, amends material or formal inaccuracies detected in the original publication of 23 September 2026.

The amended regulation implements Article 11(4) of Regulation (EU) No 753/2011, which establishes the general framework for EU restrictive measures directed against persons, groups, companies and entities linked to the situation in Afghanistan. This framework includes two types of measures: asset freezing and travel bans.

What does this regulation establish?

A corrigendum (correction) in the Official Journal of the EU has a technical purpose but with real practical consequences: it rectifies material or formal errors in an already published regulation. In this case, the corrigendum affects Regulation 2026/2138, which updates the list of persons, groups and entities subject to sanctions in the context of Afghanistan.

The key aspects established by this correction are:

• Type of correction: Amendment of material or formal inaccuracies in the original publication. It does not alter the substance or scope of the restrictive measures.
• Restrictive measures in force: Asset freezing and travel bans against the designated persons, groups, companies and entities on the list.
• Valid version: Following publication of the corrigendum, the legally valid version is the corrected one. The original version of 23 September 2026 is replaced in the amended points.
• Regulatory framework: Regulation (EU) No 753/2011 is the base rule. Regulation 2026/2138 is its most recent implementation, and this corrigendum is the definitively valid version of that implementation.

From a compliance perspective, the distinction between "formal correction" and "substantive change" is relevant for legal analysis, but does not exempt the obligation to update control systems with the corrected version.

Economic and operational impact

The direct impact of this corrigendum is not economic in terms of new fees or regulatory costs. The impact is operational and compliance risk: operating with an outdated or incorrect version of the sanctions list may result in:

• Breaches of international sanctions requirements, with resulting administrative and criminal penalties.
• Exposure to money laundering and terrorist financing risks if operating with entities or persons listed in the corrected list with different data than the original.
• Liability to national supervisors (Bank of Spain, SEPBLAC in Spain) for failing to maintain an updated database of sanctioned subjects.

Entities obligated in anti-money laundering and terrorist financing prevention (AML/CFT) are most exposed, as their customer and counterparty screening procedures must reflect in real time the sanctions lists in force in their correct version.

Who does it affect?

• Financial entities: Banks, savings banks, credit cooperatives, payment and electronic money entities, insurance companies and fund managers with sanctions screening obligations.
• Companies with international sanctions compliance programs: Especially those with operations in risk areas or with international counterparties.
• AML/CFT obligated subjects: Notaries, lawyers, auditors, asset managers, real estate agents and any other subject obligated by the Law 10/2010 on anti-money laundering prevention.
• Compliance and regulatory departments (compliance officers): Responsible for maintaining updated lists of sanctioned persons and entities.
• Screening solution providers: Companies that supply sanctions verification tools to other entities, which must incorporate the corrected version in their databases.

Practical example

A Spanish bank performs daily automated screening processes of its customers and transactions against EU sanctions lists. On 23 September 2026 it incorporates into its system Regulation 2026/2138 in its original version. On 27 October 2026 the EU publishes the corrigendum that corrects inaccuracies in that same list.

If the bank does not update its system with the corrected version, the following may occur:

• A name or identification data of a sanctioned person or entity appears incorrectly in its database, generating a false negative in screening (i.e., failing to detect a sanctioned subject because the data does not match exactly).
• In an inspection by SEPBLAC or the Bank of Spain, it is detected that the entity does not operate with the current and valid version of the list, which may result in a sanctioning file for deficiencies in control procedures.

The solution is immediate: update the sanctions database with the version published on 27 October 2026 and document the update process in the regulatory compliance file.

What should companies do now?

1. Update sanctions lists immediately: Replace in screening systems the original version of Regulation 2026/2138 (published on 23 September 2026) with the corrected version published on 27 October 2026 in the Official Journal of the EU.
2. Notify screening tool providers: If external sanctions verification solutions are used, confirm that the provider has already incorporated the corrigendum in its database and request written confirmation.
3. Document the update: Record in the regulatory compliance file the date of update, the version incorporated and the person responsible for the process. This documentation is essential in the event of a supervisory inspection.
4. Review ongoing transactions with counterparties linked to Afghanistan: If there are active transactions with persons or entities that could be on the list, verify that the identification data matches the corrected version.
5. Inform the compliance officer: Ensure that the compliance department has received and processed the corrigendum, and that it has been communicated to the affected operational areas (correspondent banking, international operations, customer management).

Official source

Consult complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202690923