EU Sanctions Against Iran 2026: What Exporters and Banks Must Do

Key data

Any European company operating with Iran — directly or indirectly — has an active legal obligation since March 30, 2026. Regulation (EU) 2026/759 is not a minor update: it repeals Regulation 961/2010 and consolidates the sanctions regime into a single updated text, amending Regulation 267/2012 as the reference framework. Ignoring it is not an option: non-compliance exposes the company to administrative and criminal penalties in the relevant Member State.

The regulation was adopted on March 30, 2026 and published in the Official Journal of the EU on March 31, 2026, with immediate entry into force. Companies have no adaptation period: the regulation is applicable from its adoption.

What does this regulation establish?

Regulation 2026/759 updates the EU's legal sanctions framework against Iran with three main effects:

• Repeal of Regulation 961/2010: This previous text is eliminated and all legislation is consolidated into Regulation 267/2012, now amended and updated as the sole reference framework.
• Update of restrictive measures: Existing restrictions on financial transactions, exports of dual-use goods, technology and operations in the energy sector with Iranian entities are strengthened.
• Enhanced due diligence obligation: Companies with supply chains involving Iran or persons designated under the sanctions regime must apply thorough verification processes.

Economic and operational impact

The impact is not only legal: it is operational and financial. Affected companies must bear real costs arising from compliance:

• Review of contracts and commercial relationships with Iranian entities or with suppliers operating in Iran, which may involve the termination of existing agreements.
• Blocking of financial transactions with designated Iranian entities, with the consequent impact on liquidity and the management of international payments and collections.
• Export restrictions on dual-use goods and technology, which may affect industrial, telecommunications, energy and defence sectors.
• Enhanced due diligence costs: Companies must invest in supply chain verification processes, which involves internal or external resources (consultants, sanctions screening tools).
• Risk of administrative and criminal penalties in the event of non-compliance, the amount of which depends on the legislation of each Member State.

The energy, financial and technology export sectors face the greatest operational exposure under this regulation.

Who is affected?

• Exporting companies that sell or have sold dual-use goods, technology or products related to the energy sector to Iranian entities.
• Financial entities (banks, insurers, fund managers) that maintain or manage transactions, accounts or investments linked to Iran or to designated persons.
• Operators with supply chains that include suppliers, intermediaries or distributors with a presence or ties in Iran.
• Energy sector companies with projects, contracts or investments in Iran or with Iranian companies.
• Advisors, consultants and law firms that provide services to any of the above and must ensure their clients' regulatory compliance.

Practical example

A Spanish manufacturer of industrial equipment has a supply contract with a distributor based in the United Arab Emirates. After reviewing its supply chain in application of Regulation 2026/759, it detects that this distributor resells part of the material to an Iranian entity included on the list of persons designated under the sanctions regime.

In this case, the Spanish company is obliged to:

1. Suspend supply to the distributor until the final destination of the goods is clarified.
2. Document the due diligence process carried out to demonstrate that it acted with due care.
3. Notify the competent authorities if it detects that transactions have already taken place that could violate the sanctions.

Failure to act exposes the company to administrative penalties and, depending on applicable Spanish legislation, potentially criminal liability for those responsible for decision-making.

What should companies do now?

1. Audit all commercial relationships with Iran: Review contracts, suppliers, customers and partners that have any link with Iran or with persons designated under the sanctions regime.
2. Verify the lists of designated persons and entities: Consult the EU's official lists to check whether any counterparty is included. These lists are updated periodically.
3. Implement or strengthen the due diligence process: Establish a sanctions screening protocol for new operations and for existing commercial relationships, especially in complex supply chains.
4. Review financial operations: Financial entities must block or review any transaction linked to Iranian entities or designated persons.
5. Train compliance and commercial teams: Staff managing exports, international purchases or financial transactions must be aware of the updated restrictions.
6. Document all actions taken: In the event of an inspection or investigation, documentation of the due diligence process is the primary defence against potential penalties.
7. Seek advice from specialised legal counsel if there is any doubt about the company's exposure to the sanctions regime, especially in operations involving third countries that may act as intermediaries.

Official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, please consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026R0759