EU Sanctions Against Iran 2026: What Companies with Iranian Operations Must Review

Key data

Any Spanish company operating with Iranian counterparties—whether in payments, supply contracts, transport or investment—has an active legal obligation from July 30, 2026: to verify that those counterparties do not appear on the lists of persons and entities designated by the EU. Decision (CFSP) 2026/1885 updates the sanctions framework established by the Decision 2010/413/CFSP, which has been the EU's main instrument for restrictive measures against Iran for over fifteen years.

This is not a future regulation: it entered into force on the same day it was published. Any transaction carried out from July 30, 2026 with a newly designated entity or person may constitute an infraction, even if the commercial relationship was legitimate until that moment.

What does this regulation establish?

Decision (CFSP) 2026/1885 modifies and expands the restrictive measures of the EU sanctions regime against Iran. This regime includes three main types of measures:

The regulation updates or expands the lists of persons and entities subject to these measures. To find out which specific counterparties have been added or modified, it is essential to consult the full text in the EU Official Journal (EUR-Lex) and the EU consolidated sanctions list search tool.

Economic and operational impact

The impact is not just compliance: it has direct economic consequences for any company with exposure to Iran. The main operational risks are:

• Blocking of collections and payments: If an Iranian counterparty becomes designated, any pending transfer is frozen immediately, affecting the Spanish company's cash flow.
• Forced contract cancellation: Ongoing contracts with designated entities must be suspended, with the associated termination costs.
• Risk in dual-use goods exports: Products with civilian and military applications (technology, electronic components, industrial materials) are subject to specific restrictions. Incorrect export can result in seizure and criminal sanctions.
• Responsibility of financial entities: Banks and payment entities that process transactions with designated parties directly incur an infraction, regardless of whether the customer informed them or not.
• Serious administrative and criminal sanctions: Non-compliance with EU restrictive measures is classified as a serious infraction in Spanish legislation, with consequences that may include substantial fines and criminal liability for managers.

Who does it affect?

According to the regulation data, the most exposed sectors and profiles are:

• Financial sector: Banks, credit entities, fund managers, insurance companies and payment companies operating with Iranian counterparties or processing transfers to/from Iran.
• Energy sector: Companies with supply contracts, joint ventures or investments linked to the Iranian energy sector (oil, gas, petrochemicals).
• Maritime transport: Shipping companies, maritime agents, logistics operators and maritime insurance companies with routes or cargo involving Iranian ports or shipowners.
• Exporters of dual-use goods: Companies exporting technology, electronic components, materials or equipment that may have military or nuclear applications.
• Any company with active commercial contracts with Iran: Importers, distributors, professional service providers (consulting, engineering, IT) with Iranian clients or partners.
• Natural persons: Individuals with assets, accounts or contractual relations with designated Iranian entities or persons.

Practical example

A Spanish industrial company exports electronic components to an Iranian distributor it has been working with for three years. On July 30, 2026, Decision (CFSP) 2026/1885 enters into force. If that Iranian distributor has been added to the list of designated entities in this update, the Spanish company is prohibited from:

• Sending any pending merchandise for delivery.
• Collecting pending invoices through the banking system (funds are frozen).
• Renewing or extending the existing contract.

If the company does not verify the updated list and makes a shipment or collects a transfer after July 30, it incurs an infraction of EU restrictive measures, regardless of good faith. Prior verification before each transaction is the only way to avoid this situation.

What should companies do now?

1. Consult the EU consolidated sanctions list immediately: Access the official EU sanctions tool and verify if any of your current Iranian counterparties appear as a designated entity or person.
2. Review all active contracts with Iranian parties: Identify pending payments, ongoing deliveries and upcoming renewals. Any transaction with a designated party must be suspended immediately.
3. Alert the finance and treasury department: Preventively block any transfer to or from Iran until confirming that the counterparty is not designated.
4. Review dual-use goods exports: If your company exports technology, electronic components or industrial materials, verify that products and destinations comply with updated restrictions.
5. Implement a continuous verification process: Designated lists are updated with each new decision. Establish an internal procedure to verify counterparties before each significant transaction with Iran.
6. Consult a legal advisor specialized in foreign trade or international sanctions: If you have relevant exposure to Iran, the specific risk analysis of your contract portfolio requires professional advice. Non-compliance can result in serious administrative and criminal sanctions for the company and its managers.

Official source

Consult complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D1885