Key data
| Regulation | Commission Implementing Regulation (EU) 2026/1838 of the Council, of 24 July 2026 |
|---|---|
| Base regulation that applies | Regulation (EU) No 267/2012 on restrictive measures against Iran |
| Publication in the OJEU | 27 July 2026 |
| Entry into force | 24 July 2026 |
| Affected parties | Companies and financial entities with commercial or financial activity linked to Iran |
| Category | European Regulation |
| Application | Direct application throughout the EU, without need for national transposition |
| Updated measures | Freezing of assets and prohibition on making funds available to listed persons and entities |
If your company has commercial, financial or contractual relationships with Iranian counterparties, this regulation affects you from 24 July 2026. Commission Implementing Regulation (EU) 2026/1838, published in the Official Journal of the European Union on 27 July 2026, updates the list of persons and entities subject to restrictive measures under Regulation (EU) No 267/2012.
It is not a new regulation: it is an update to the list of sanctioned parties. But that does not make it any less urgent. Operating with a counterparty that has entered the updated list—even if the commercial relationship was legal until yesterday—may constitute a serious breach.
What does this regulation establish?
Regulation (EU) 267/2012 is the EU's general framework for economic sanctions against Iran. Periodically, the EU Council issues implementing regulations that update the lists of natural and legal persons subject to two types of measures:
- Asset freezing: all funds and economic resources belonging to listed persons or entities are blocked. No European company can release them or make them available.
- Prohibition on making funds available to them: it is prohibited to transfer, pay, assign or facilitate in any way economic resources to those listed, directly or indirectly.
Commission Implementing Regulation (EU) 2026/1838 updates that list, adding new natural and legal persons. As an EU implementing regulation, it is directly applicable in all Member States from its entry into force, without the need for Spain or any other country to transpose it into national legislation.
The updated consolidated list of persons and entities subject to sanctions can be consulted in the EU Sanctions Map and in the official text of the regulation on EUR-Lex.
Economic and operational impact
The impact is not only legal: it is operational and financial. Companies that do not update their compliance systems in time are exposed to concrete consequences:
- Blocking of ongoing operations: if a counterparty enters the list, any pending payment, open letter of credit or contract in execution is de facto suspended.
- Administrative and criminal sanctions: non-compliance with restrictive measures may result in sanctions in Member States. The severity varies depending on jurisdiction, but includes fines and, in serious cases, criminal liability for company managers.
- Reputational and correspondent banking risk: financial entities that process payments to or from listed entities may lose correspondent relationships with international banks.
- Remediation cost: updating screening systems, reviewing contracts and communicating with affected clients or suppliers has a real operational cost, especially for companies with high volume of Iranian counterparties.
Who does it affect?
- Financial entities: banks, savings banks, credit cooperatives, payment entities and any intermediary that processes international transfers with Iran.
- Exporting and importing companies: any company that sells or buys goods or services to Iranian counterparties.
- Companies with subsidiaries or partners in Iran: joint ventures, distribution agreements, licensing contracts or any contractual relationship with Iranian entities.
- Insurance and reinsurance companies: that cover operations or assets linked to Iran.
- Law firms and consulting firms: that provide services to clients with exposure to Iran and act as intermediaries in transactions.
- Compliance and legal departments: responsible for keeping counterparty screening systems updated.
Practical example
A Spanish industrial company has a component supply contract with an Iranian company with which it has been operating for three years without incident. On 24 July 2026, that Iranian company is included in the updated list of Commission Implementing Regulation (EU) 2026/1838.
From that moment on, the Spanish company cannot execute any pending payment or deliver goods under that contract, even if the order was already in transit. It also cannot receive payments from that counterparty. If the compliance department does not detect the change in time and a payment is processed, the company incurs a breach of Regulation (EU) 267/2012, with the administrative and criminal consequences that correspond under applicable Spanish legislation.
The key is that the counterparty screening system is connected to updated data sources and is executed with sufficient frequency to detect changes like this without delay.
What should companies do now?
- Immediately update counterparty screening systems with the new list published in Commission Implementing Regulation (EU) 2026/1838. Entry into force is 24 July 2026, so compliance is required from that date.
- Review all active Iranian counterparties—customers, suppliers, partners, intermediaries—and cross-reference them with the updated list before executing any pending transactions.
- Preventively suspend any payment or delivery linked to counterparties appearing on the updated list until obtaining specific legal advice.
- Notify the legal and compliance department about the update and establish a protocol for periodic review, given that these lists are updated frequently.
- Document all verifications performed: in case of inspection or investigation, traceability of the compliance process is the main defense against sanctions.
- Consult with a specialist advisor in foreign trade and international sanctions if there is any doubt about whether a counterparty or specific transaction is affected.
Frequently asked questions
Which companies must comply with Commission Implementing Regulation (EU) 2026/1838?
All companies and financial entities established in the EU that have commercial or financial activity linked to Iran. This includes exporters, importers, banks, insurance companies, consultancies and any company with Iranian contracts, partners or clients. The regulation is directly applicable throughout the EU from 24 July 2026, without need for national transposition.
What happens if my company operates with a counterparty that has entered the new list?
From the moment a person or entity appears on the updated list, it is prohibited to execute payments, transfers, deliveries or any other operation that makes funds or economic resources available to them. Non-compliance may result in administrative and criminal sanctions in Member States, including liability for company managers.
Where can I consult the updated list of sanctioned persons and entities?
The complete list is available in the official text of Commission Implementing Regulation (EU) 2026/1838, published in the Official Journal of the EU on 27 July 2026, accessible on EUR-Lex. The consolidated list can also be consulted on the EU Sanctions Map (sanctionsmap.eu), which integrates all current updates.
How often should I update screening of Iranian counterparties?
There is no fixed legal deadline, but given that the EU Council updates sanctions lists frequently, the recommended practice is to perform automatic and continuous screening linked to real-time updated data sources, or at least weekly for companies with active exposure to Iran. Each new list update, such as Regulation 2026/1838, requires immediate review.
Does Spain need to transpose this regulation into national legislation?
No. As an EU implementing regulation, it is directly applicable in all Member States from its entry into force on 24 July 2026, without need for any additional national legislative act. Spanish companies are obligated to comply with it from that date.
Official source
Consult complete regulation on official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601838