EU Sanctions Against Iran 2026: What Changes and How It Affects Your Business

Key data

If your company exports to Iran, operates accounts for Iranian customers, insures operations with that country or manages transport of goods originating from or destined for Iran, this update affects you as of now. The Council Decision (CFSP) 2026/1836, published on 27 July 2026 in the EU Official Journal, modifies Decision 2010/413/CFSP which forms the basis of the European sanctions regime against Iran.

The regulation has been in force since 24 July 2026, three days before its official publication, which means that any operation carried out from that date must already comply with the new restrictions.

What does this regulation establish?

Council Decision (CFSP) 2026/1836 updates the framework of restrictive measures that the EU has maintained against Iran since 2010. Although the full text of the amendment should be consulted in the EU Official Journal, the areas that are typically reviewed in this type of updates are as follows:

• Lists of designated persons and entities: incorporation, removal or modification of individuals and organizations subject to restrictive measures (asset freezing, entry prohibition, etc.).
• Types of restrictive measures: adjustments to restrictions applicable to financial operations, fund transfers, exports of dual-use goods or sensitive technology.
• Exceptions and exemptions: modifications to the circumstances that allow operating with Iranian entities under prior authorization from the competent authorities.

The regulation directly modifies Decision 2010/413/CFSP, which has been the cornerstone of the European sanctions regime against Iran for over 15 years. Each update can expand or reduce the scope of restricted entities, so it is not enough to have done the review in the previous version: you must do it again.

Economic and operational impact

The impact is not just legal: operating with an entity or person included in the sanctions lists can result in the freezing of ongoing operations, the blocking of payments already made and the opening of enforcement proceedings with serious administrative and criminal consequences.

From an operational perspective, affected companies must assume direct costs of review and adaptation:

• Counterparty review: audit of all customers, suppliers, partners and ultimate beneficial owners with Iranian links against the updated lists.
• Update of screening systems: compliance tools must incorporate the new lists of designees to automatically filter prohibited operations.
• Review of existing contracts: any contract in execution with Iranian counterparties must be verified to detect if any of the parties has been designated in the update.
• Communication to financial entities: correspondent banks and insurers require confirmation of sanctions compliance before processing operations with Iran.

The risk of not acting is asymmetric: the cost of a preventive review is always less than the cost of a sanction or the blocking of an ongoing operation.

Who does it affect?

• Exporters: companies that sell goods or services to Iranian customers, especially in the technology, machinery, chemicals or dual-use goods sectors.
• Banking and financial entities: banks, savings banks and payment entities that manage transfers, letters of credit or accounts with Iranian account holders or beneficiaries.
• Insurance companies: companies that cover foreign trade operations, maritime transport or export credit with Iran as destination or involved party.
• Transport and logistics companies: shipping companies, freight forwarders and logistics operators with routes or cargo involving Iranian ports or recipients.
• Investors and funds: any entity with shareholdings, loans or financial instruments linked to Iranian companies or with Iranian shareholding.
• Advisors and consultancies: law firms, foreign trade consultancies and financial advisors providing services to clients with exposure to Iran.

Practical example

A Spanish industrial machinery company has an active supply contract with an Iranian company signed in 2025. Following the entry into force of Council Decision (CFSP) 2026/1836 on 24 July 2026, the compliance officer must verify whether that Iranian company, or any of its shareholders or directors, appears in the updated lists of designated entities.

If the counterparty has been added to the lists, the Spanish company cannot execute the contract or receive pending payments without incurring a breach of the sanctions regime. In that case, it must halt the operation, notify the Spanish competent authority (the State Secretariat for Trade or the corresponding body depending on the type of sanction) and seek guidance on how to proceed with blocked assets or payments.

If the counterparty does not appear on the lists, the company may continue operating, but must keep documentary evidence of the verification performed and the date it was carried out, as evidence of due diligence in the event of an inspection.

What should companies do now?

1. Review updated designation lists: access the full text of Council Decision (CFSP) 2026/1836 in the EU Official Journal and compare with the previous version of Decision 2010/413/CFSP to identify specific changes in the lists.
2. Perform counterparty screening: cross-reference all customers, suppliers, partners and ultimate beneficial owners with Iranian links against the updated lists. Document the process and verification date.
3. Update compliance systems: ensure that automatic screening tools (if available) incorporate the new lists. If automated tools are not available, establish a periodic manual process.
4. Review contracts in execution: identify all active contracts with Iranian counterparties and verify if any of the parties has been designated in the update.
5. Consult with a specialized advisor: if there are doubts about whether a specific operation is permitted, seek legal advice before executing it. Non-compliance can result in serious administrative and criminal sanctions.
6. Inform commercial and financial teams: ensure that sales, treasury and operations departments are aware of the update and know which operations must be paused until compliance is verified.

Official source

Consult complete regulation in official source

Notice: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601836