EU Sanctions Against Iran: What Companies with Commercial Relations Must Verify

Key data

If your company operates with Iranian counterparties, exports to Iran or conducts financial transactions with entities in that country, this correction requires you to take action. The error correction CELEX:32011D0235R(03), published on 16 March 2026, modifies specific data from Council Decision 2011/235/CFSP: names, identifiers or other data of persons and entities included in the sanctions list may have been corrected. Any incorrect data in the previous list is replaced by the corrected data, and it is the updated version that has legal validity.

This is not a new regulation: it is a technical correction that updates existing information. But its practical impact is immediate: if a company was verifying its counterparties against a previous version of the list, that verification may have become outdated.

What does this regulation establish?

Council Decision 2011/235/CFSP, in force since 14 April 2011, establishes restrictive measures against persons and entities linked to the Iranian regime. These measures include the prohibition of conducting commercial or financial operations with the listed persons and entities.

This error correction rectifies specific data from that list. According to the published information, the corrections may affect:

• Names of persons or entities included in the sanctions list
• Identifiers of the listed persons or entities
• Other identification data included in the annexes of the Decision

The correction does not expand or reduce the number of sanctioned persons or entities: it rectifies the data by which they are identified. This is relevant because compliance systems and counterparty screening filters must be updated with the corrected data to remain valid.

The original regulation and its corrections are part of the EU's sanctions regime against Iran, which is mandatory for all companies and legal entities established in the European Union, regardless of their size or sector.

Economic and operational impact

The direct impact of this correction is not economic in terms of new fees or regulatory costs, but operational and legal risk. Affected companies must assume the costs of:

• Updating screening systems: Counterparty verification filters must incorporate the corrected data from the sanctions list.
• Review of active commercial relations: Any contract, transaction or ongoing relation with Iranian counterparties must be verified against the updated list.
• Legal risk from non-compliance: Non-compliance with restrictive measures may result in serious administrative and criminal sanctions, both for the company and for its individual managers.

Financial entities are the most exposed, given that their due diligence obligations and international sanctions control are subject to direct regulatory supervision. A failure to update screening systems may result in a compliance breach with serious consequences.

Exporting companies with activity in Iran or with Iranian customers must also review their processes, especially if they use third-party sanctions databases that may not yet have been updated with this correction.

Who does it affect?

• Financial entities: Banks, insurance companies, asset managers and any entity that conducts transactions or transfers with Iranian counterparties. They are the most directly affected according to the regulation.
• Exporting companies: Any Spanish or European company that exports goods or services to Iran or that has Iranian customers, distributors or partners.
• Importing companies: Companies that import products of Iranian origin or that operate with suppliers established in Iran.
• Compliance and legal departments: Responsible for keeping counterparty verification systems updated and ensuring compliance with the sanctions regime.
• Foreign trade advisors and consultants: Professionals who advise companies on operations with Iran must know and communicate this update to their clients.

Practical example

A Spanish industrial company has a supply contract with an Iranian company with which it has been operating since 2022. Its compliance department conducted the last verification of the counterparty in January 2026, using the version of the sanctions list in force at that time.

With the publication of this correction on 16 March 2026, the identification data of some listed entities have been rectified. If the name or identifier of this company's Iranian counterparty matches any of the corrected data, the January verification may have become outdated.

The company must repeat the screening process with the updated list before making the next payment or shipment. If it does not do so and the counterparty turns out to be sanctioned according to the corrected data, the company would be in breach of EU restrictive measures, with the consequent risk of serious administrative and criminal sanctions for the company and its managers.

What should companies do now?

1. Access the updated list: Download or consult the corrected version of Decision 2011/235/CFSP on EUR-Lex to know exactly what data has been rectified.
2. Update screening systems: Incorporate the corrected data in your counterparty verification tools. If you use an external sanctions list provider, confirm that it has already integrated this correction.
3. Review active commercial relations with Iran: Verify all current Iranian counterparties against the corrected list, especially if the last verification was conducted before 16 March 2026.
4. Document the verification process: Keep evidence that you have conducted the review with the updated list. This documentation is key in case of inspection or compliance audit.
5. Inform compliance and legal managers: Ensure that the departments involved are aware of this update and have taken the necessary measures.
6. Consult with a specialist if in doubt: If any of your Iranian counterparties raises doubts after verification, consult with a lawyer specializing in international sanctions before continuing to operate with them.