EU Sanctions Against Iran 2026: What Spanish Companies Must Review

Key data

Spanish companies with any link to Iran—whether commercial, financial, contractual or investment-related—have an immediate obligation: to review their operations in light of Council Decision (CFSP) 2026/1866, published on July 31, 2026 and in force from the previous day. This regulation modifies the EU sanctions framework against Iran originally established by Decision 2010/413/CFSP, which has been the cornerstone of Europe's restrictive regime against Tehran for over a decade.

Failing to act in time is not an option: non-compliance with EU restrictive measures carries consequences in both administrative and criminal spheres.

What does this regulation establish?

Council Decision (CFSP) 2026/1866 modifies Decision 2010/413/CFSP, which is the central legal instrument of the EU sanctions regime against Iran. This type of update may involve one or more of the following changes:

To find out exactly which persons or entities have been added to or removed from the lists in this specific update, it is essential to consult the official publication on EUR-Lex and the consolidated list of EU sanctions, available on the European Commission portal.

Economic and operational impact

EU sanctions against Iran are not a matter for large corporations alone: they affect any company that, directly or indirectly, maintains relations with Iranian counterparties. The operational impact materializes in several dimensions:

• Blocking of collections and payments: If an Iranian counterparty appears on the designated list, any financial transaction with it is prohibited, which can generate non-payment or contractual breaches.
• Paralysis of exports: Goods or technologies subject to restrictions cannot be sent to Iran, even if the contract was already signed.
• Asset freezes: If the Spanish company has assets in the hands of a designated entity, those funds are immobilized.
• Correspondent banking risk: Banks operating with designated Iranian entities may see their relationships with international correspondent banks compromised.
• Compliance costs: Updating internal procedures, reviewing contracts and training staff generate direct costs, especially for SMEs without a specialized legal department.

Non-compliance is not merely a theoretical risk: Spanish and European authorities have increased surveillance of compliance with international sanctions, and the consequences include serious administrative and criminal sanctions.

Who does it affect?

• Energy sector: Companies with contracts for supply, exploration or commercialization of oil, gas or related energy with Iran.
• Banking and financial sector: Entities managing accounts, transfers, letters of credit or financing linked to Iranian persons or companies.
• Transport and logistics sector: Shipping companies, freight forwarders, air or land transport operators with routes or cargo related to Iran.
• International trade: Importers and exporters from any sector operating with Iranian counterparties, especially in dual-use goods, technology or machinery.
• Advisors and consultants: Law firms, consulting firms and advisors providing services to companies with exposure to Iran.
• Investors: Natural or legal persons with shareholdings, joint ventures or investment agreements in Iranian territory or with Iranian partners.

Practical example

A Spanish industrial machinery company has a supply contract signed six months ago with an Iranian manufacturing company. With the entry into force of Council Decision (CFSP) 2026/1866 on July 30, 2026, the compliance department must immediately verify whether that Iranian company appears on the updated consolidated EU list.

If the counterparty has been designated in this update, the Spanish company cannot execute the contract or receive the pending payment without incurring a breach of restrictive measures. The solution is not to ignore it: it must be reported to the competent authorities, the operation must be halted and specialized legal advice must be sought. Acting late—or not acting at all—turns a compliance problem into a criminal risk for the company's administrators.

What should companies do now?

1. Consult the consolidated EU sanctions list: Verify whether any Iranian counterparty (customer, supplier, partner, intermediary) appears on the updated list. Available on the official European Commission portal.
2. Review all active contracts with links to Iran: Identify ongoing operations—pending payments, scheduled deliveries, active services—that may be affected by the new restrictions.
3. Update internal compliance procedures: Incorporate the changes from this Decision into counterparty screening protocols and transaction filters.
4. Train key personnel: International sales teams, treasury, logistics and legal teams must understand the new restrictions and know how to act when an alert is triggered.
5. Consult a specialist advisor in international sanctions: If there is actual exposure to Iran, the review should be conducted by a professional with experience in EU sanctions law, not just the general legal department.
6. Document all actions taken: In case of inspection or investigation, documentation of the compliance process is the company's and its directors' main defense.

Official source

Consult complete regulation on official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601866