EU Sanctions against Libya 2026: what companies and banks must review

Key data

If your company operates with Libya—whether in the energy, commercial or financial sector—Council Decision (CFSP) 2026/2242, published on 12 October 2026, changes the rules of the game. This regulation modifies Council Decision (CFSP) 2015/1333, which is the European framework for sanctions against Libya in force since 2015, and updates the list of persons and entities affected by asset freezes and travel bans.

The regulation entered into force on the same day of its adoption by the Council: 9 October 2026. This means that compliance obligations are enforceable from that date, although the official publication in the EU Official Journal took place three days later.

What does this regulation establish?

Council Decision (CFSP) 2026/2242 modifies the EU's framework of restrictive sanctions against Libya, originally established by Council Decision (CFSP) 2015/1333. The restrictive measures covered by this framework include two main types:

• Asset freezes: the funds and economic resources of designated persons and entities are blocked. No European company or bank can make funds or assets available to them.
• Travel bans: designated persons cannot enter or transit through the territory of EU Member States.

The modification introduced by this decision may involve one of the following actions on the current list:

To find out exactly which persons or entities have been added, removed or modified in this specific update, it is necessary to consult the full text published on EUR-Lex.

Economic and operational impact

The direct impact of this regulation is not a fee or fixed cost: it is the risk of sanctions for operating with counterparties that appear on the updated list. The consequences of failing to comply with EU restrictive measures may include:

• Administrative sanctions imposed by the competent authorities of each Member State (in Spain, the State Secretariat for Economy and the Bank of Spain, depending on the type of operation).
• Criminal sanctions for natural persons responsible for prohibited operations.
• Immediate operational blockade of transactions in progress with newly designated entities or persons.
• Reputational damage if the relationship with a sanctioned entity becomes public.

The operational cost of compliance includes updating counterparty screening systems, reviewing existing contracts and training compliance teams. This cost is variable depending on the size of the company and the volume of relationships with Libya, but is significantly lower than the risk of sanctions for non-compliance.

Who does it affect?

• Financial entities and banks: obliged to update their screening lists and block any transactions with designated persons or entities.
• Exporters and importers with commercial activity linked to Libya, especially in dual-use goods, energy and raw materials sectors.
• Energy sector companies with contracts, joint ventures or supply agreements with Libyan counterparties.
• Logistics and transport companies operating routes or services to or from Libya.
• Advisors, lawyers and consultants providing services to clients with exposure to Libya.
• Investment funds and asset managers with positions in companies or instruments linked to Libya.

Practical example

A Spanish energy sector company maintains a supply contract with a Libyan company. Following the publication of Council Decision (CFSP) 2026/2242 on 12 October 2026, the compliance team must verify whether that Libyan company—or any of its directors or principal shareholders—has been added to the updated list of designated persons and entities.

If the counterparty appears on the updated list, the Spanish company has the immediate obligation to freeze any pending payments, suspend contract execution and notify the competent authorities of the situation. Continuing with the operation after learning of the designation would constitute a breach of EU restrictive measures, with consequent administrative and criminal sanctions.

If the counterparty does not appear on the list, the company may continue operating, but must document the verification performed and establish a procedure for periodic review in the event of future updates to the list.

What should companies do now?

1. Consult the full text of Council Decision (CFSP) 2026/2242 on EUR-Lex to identify exactly which persons and entities have been added, removed or modified compared to the previous list.
2. Update counterparty screening systems with the revised list, including names, aliases and identifying data of newly designated parties.
3. Review all active contracts and commercial relationships with Libyan counterparties to detect possible matches with updated lists.
4. Immediately block any pending transactions with newly designated persons or entities and notify the competent authorities if an affected case is detected.
5. Document the verification process performed, including date, source consulted and result, to demonstrate due diligence in the event of an inspection.
6. Inform commercial, financial and compliance teams about the changes introduced and establish a protocol for periodic review in the event of future updates to the list.

Official source

Consult complete regulation on official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202602242