EU Sanctions Against Russia 2026: What Companies with Russian Activity Must Review

Key data

Spanish companies with any link to Russia—whether commercial, financial or investment—have a compliance obligation that is updated as of April 23, 2026. The Council Decision (CFSP) 2026/508 modifies the sanctions framework established by Decision 2014/512/CFSP, which has been in force since 2014 in response to Russia's actions in Ukraine.

This is not a new regulation: it is a modification of an existing sanctions regime. However, each modification can expand the scope of application, incorporate new sectoral restrictions or update the lists of sanctioned persons and entities. Any of these changes can directly affect operations that have been compliant until now.

What does this regulation establish?

Decision (CFSP) 2026/508 modifies Decision 2014/512/CFSP, which is the EU's main instrument for articulating restrictive measures against Russia in the context of the conflict in Ukraine. This modification may include:

• Expansions of the scope of existing restrictions.
• New sectoral restrictions affecting commercial, financial or investment activities.
• Adjustments to the lists of sanctioned persons and entities.
• Changes to goods and technologies whose export or import is restricted.

The EU's sanctions regime against Russia covers a broad spectrum of activities. Companies engaged in export and import with relations to Russian counterparties must consult the updated lists of restricted entities and goods published in the Official Journal of the EU to verify that their operations remain compliant.

Economic and operational impact

The impact of this modification is not uniform: it depends on each company's degree of exposure to the Russian market and the sectors in which it operates. The most relevant operational effects are:

• Review of contracts and commercial relations: any contract with Russian counterparties must be verified against updated lists of sanctioned entities.
• Blocking of financial operations: Spanish financial entities with exposure to Russia must review their positions and pending operations.
• Export and import restrictions: exporters and importers with goods or technologies affected by restriction lists must halt or redirect those operations.
• Risk of administrative and criminal sanctions: non-compliance is not a matter of minor fines. In Spain, violations of the international sanctions regime can lead to criminal proceedings.

The cost of non-compliance far exceeds the cost of preventive review. Companies operating in the energy, financial, defense and technology sectors face the greatest risk if they do not update their controls.

Who does it affect?

The regulation affects all companies and individuals with relations linked to Russia. Specifically:

• Energy sector: companies with contracts for supply, distribution or investment related to energy of Russian origin.
• Financial sector: banks, investment funds, insurance companies and credit entities with exposure to Russian counterparties or assets.
• Defense sector: companies with supply contracts for goods or dual-use technology destined for or originating from Russia.
• Technology sector: companies exporting technology, software or electronic components that may have use in Russia.
• Exporters and importers: any company operating with goods included in restriction lists and having Russian counterparties.
• Advisors and consultants: professionals providing services to Russian entities or companies with Russian links must verify that their services are not restricted.

Practical example

A Spanish technology company that exports electronic components to a distributor based in Moscow must, as of April 23, 2026, verify two things before executing any shipment:

1. That the Russian distributor does not appear on the updated lists of entities sanctioned by the EU.
2. That the components it exports are not included in the lists of restricted export goods or dual-use items affected by the modification.

If either of these two conditions is not met and the company executes the operation, it exposes itself to administrative sanctions and potentially to criminal proceedings in Spain. Prior review is the only way to avoid this risk. The same principle applies to an importing company that receives goods from a Russian entity: it must verify that the entity is not sanctioned before completing the transaction.

What should companies do now?

1. Review updated lists of sanctioned entities and persons: consult the current version of the lists published in EUR-Lex and verify that no Russian counterparty appears on them.
2. Audit active contracts with Russian counterparties: identify all contracts in force involving Russian persons, companies or assets and assess whether they remain compliant with the new modification.
3. Review goods and technologies exported or imported: check that products exchanged with Russia are not included in the updated restriction lists.
4. Update internal compliance procedures: incorporate Decision (CFSP) 2026/508 into the company's compliance protocols, especially in the foreign trade, finance and legal departments.
5. Consult with a specialist in international sanctions: given that non-compliance can lead to criminal sanctions in Spain, review by a qualified professional is especially recommended for companies with significant exposure to Russia.
6. Monitor future modifications: the sanctions regime against Russia has been modified multiple times since 2014. Establishing an alert system for new publications in the Official Journal of the EU is a basic risk management measure.