Key data
| Regulation | Commission Implementing Regulation (EU) 2026/1812 of 16 July 2026 |
|---|---|
| Modified regulation | Council Regulation (EC) No 881/2002 (358th amendment) |
| Publication | 20 July 2026 |
| Entry into force | 16 July 2026 |
| Affected parties | Financial entities, companies with international activity and listed persons |
| Category | European Regulation — direct application in Spain without transposition |
| Year | 2026 |
If your company operates internationally or your entity manages third-party assets, you have an active obligation right now: verify that none of your customers, suppliers or counterparties appear on the updated EU sanctions list against Daesh and Al-Qaeda. Commission Implementing Regulation (EU) 2026/1812, published on 20 July 2026, amends for the 358th time Council Regulation (EC) No 881/2002 and updates that list with effect from 16 July 2026.
This is not a transposition regulation or a prior notice: it is a European regulation of direct application. From its entry into force, any transfer of funds, provision of assets or economic relationship with the listed parties constitutes a breach.
What does this regulation establish?
Council Regulation (EC) No 881/2002 is the European framework for restrictive sanctions against persons and entities associated with Daesh (EIIL) and Al-Qaeda. Since its adoption, it has been amended 358 times to keep the list of sanctioned subjects updated.
This 358th amendment introduces the following direct legal effects on the listed parties:
- Freezing of funds and economic resources: all financial and economic assets of the persons and entities included in the list are blocked immediately.
- Prohibition on provision of assets: no company, financial entity or individual may transfer, assign or provide to the listed parties any financial asset, property or economic resource.
- Direct application in all Member States: including Spain, without the need for any additional national regulation.
The consolidated list of persons and entities sanctioned under Council Regulation (EC) No 881/2002 is available and updated in the Official Journal of the EU and in the European Commission's financial sanctions repository.
Economic and operational impact
The impact is not theoretical. The consequences of operating with a listed subject are immediate and serious:
- Operational blockade: any transaction in progress with a listed party must be stopped immediately, regardless of the amount or the stage it is in.
- Risk of sanctions for non-compliance: the competent authorities of each Member State —in Spain, the State Secretariat for Economy and the Bank of Spain for financial entities— may impose serious administrative sanctions for breach of restrictive measures.
- Cost of reviewing compliance systems: companies must update their counterparty screening tools to incorporate the updated list. If the process is manual, the operational cost can be significant for companies with large portfolios of international customers or suppliers.
- Reputational risk: operating with sanctioned entities, even unintentionally, can generate long-term reputational and regulatory consequences.
Who does it affect?
- Financial entities: banks, savings banks, credit cooperatives, payment entities, fund managers and any financial services provider with international customers or counterparties.
- Companies with international activity: exporters, importers, companies with subsidiaries or suppliers in third countries, especially in regions with historical presence of Daesh or Al-Qaeda.
- Professional services companies: consultancies, law firms, tax advisors and audit firms providing services to international clients.
- E-commerce platforms and marketplaces: with international sellers or buyers.
- Listed natural persons: are directly subject to asset freezing measures.
Practical example
A Spanish import company with suppliers in the Middle East makes monthly payments to several counterparties. One of those suppliers —or an intermediary in the chain— is included in the updated list by Regulation 2026/1812 with effect from 16 July 2026.
If the company does not update its screening system and processes a payment on 20 July without having verified the list, it will have provided economic resources to a sanctioned subject, incurring a direct breach of Council Regulation (EC) No 881/2002. The transaction must be blocked, the funds frozen if already transferred, and the company must notify the competent authority. Non-compliance may result in serious administrative sanctions.
The preventive solution is simple: automate counterparty screening against the consolidated EU sanctions list, with real-time or at least daily updates.
What should companies do now?
- Immediately update screening systems: incorporate the updated list from Regulation 2026/1812 into counterparty verification tools. Entry into force is 16 July 2026, with no grace period.
- Review the active portfolio of customers, suppliers and partners: cross-check the current counterparty database against the consolidated EU sanctions list under Council Regulation (EC) No 881/2002.
- Block any pending transactions with listed parties: if a match is detected, stop the transaction, freeze the funds if applicable and notify the competent authority.
- Document the verification process: maintain a record of the checks carried out as evidence of due diligence in the event of a regulatory inspection.
- Establish a protocol for periodic updates: given that Regulation 881/2002 has been amended 358 times, updates are frequent. Implement automatic alerts or subscribe to sanctions monitoring services.
- Train the compliance and operations team: ensure that the people who manage payments, contracts and business relationships are aware of the obligation and the verification procedure.
Frequently asked questions
Where can I consult the updated list of persons and entities sanctioned under Regulation 881/2002?
The consolidated list is published in the Official Journal of the EU and in the European Commission's financial sanctions repository. The update contained in Regulation 2026/1812 is the 358th amendment to that list and takes effect from 16 July 2026.
When does Commission Implementing Regulation (EU) 2026/1812 enter into force?
The regulation entered into force on 16 July 2026, although it was published in the Official Journal of the EU on 20 July 2026. There is no transitional period: obligations are enforceable from the date of entry into force.
What happens if my company unknowingly operates with a listed subject?
Lack of knowledge does not exempt from liability. If a company transfers funds or provides assets to a listed party, it incurs a breach of Council Regulation (EC) No 881/2002, regardless of intent. Competent authorities in Spain may impose serious administrative sanctions. Documented due diligence is the primary defense in an inspection.
Does Spain need to transpose this regulation into national legislation?
No. As it is a European implementing regulation, it applies directly in all EU Member States, including Spain, without the need for any national transposition regulation. Compliance is mandatory from 16 July 2026.
How frequently is the sanctions list under Regulation 881/2002 updated?
Council Regulation (EC) No 881/2002 has been amended 358 times since its adoption. Updates are frequent and reflect changes in the lists of persons and entities linked to Daesh and Al-Qaeda. Companies must implement alert systems to detect each new amendment without delay.
Official source
Consult the full regulation at official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601812