EU Sanctions Against Russia 2026: What Spanish Companies Must Review Now

Key data

If your company exports to Russia, operates with Russian entities, manages investments there or works with counterparties that may be on sanctions lists, this update affects you from today. Decision (CFSP) 2026/2192, approved by the EU Council on September 28, 2026, amends the sanctions framework established by Decision (CFSP) 2024/1484 and enters into force on the same day as its publication.

There is no adaptation period. The new provisions apply immediately, which requires companies to act without delay to avoid incurring violations with criminal and administrative consequences in Spain.

What does this regulation establish?

Decision (CFSP) 2026/2192 updates the EU's restrictive measures regime against Russia in the context of the conflict in Ukraine. This is an amendment to the sanctions framework in force since 2024, which may affect the following elements:

• Lists of designated persons and entities: possible incorporation of new names or entities subject to restrictions.
• Travel restrictions: prohibition of entry or transit in EU territory for designated persons.
• Asset freezes: blocking of funds and economic resources of listed persons and entities.
• Trade prohibitions: possible new restrictions on exports, imports or provision of services related to Russia.

To find out exactly which persons, entities or sectors have been added or modified in this specific update, it is essential to consult the Official EU Sanctions Register and the full text published in the Official Journal of the EU (EUR-Lex).

Economic and operational impact

The impact of this update translates into concrete operational and legal risks for Spanish companies. The main risk vectors are:

• Financial operators: banks, insurance companies and fund managers with exposure to Russian assets or counterparties must verify that no entity in their portfolio appears on the updated lists. Asset freezes can block ongoing operations.
• Exporters: companies selling goods or services to Russia must check whether their products or sectors have become subject to new trade prohibitions.
• Companies with investments in Russia: the update may restrict the ability to repatriate dividends, sell stakes or make new capital contributions.
• Service providers: consultancies, law firms, audit firms and technology companies providing services to Russian entities must review whether their clients have been designated.

The cost of non-compliance is not only economic: in Spain, violations of the European sanctions regime can result in criminal and administrative liability, including fines, disqualifications and, in the most serious cases, prison sentences for those responsible.

Who does it affect?

• Exporting companies with customers or distributors in Russia
• Financial entities (banks, insurance companies, fund managers) with exposure to Russian assets or counterparties
• Companies with subsidiaries, joint ventures or direct investments in Russia
• Importers of products of Russian origin
• Providers of professional services (legal, audit, consulting, technology) to Russian entities
• Transport and logistics companies with routes or clients in Russia
• Any company whose supply chain includes raw materials, components or intermediaries of Russian origin

Practical example

A Spanish industrial company that exports machinery to a Russian distributor with which it has worked since 2019 receives an order on October 1, 2026. Before processing the order, its compliance department must verify:

1. Whether the Russian distributor appears on the lists of designated entities updated by Decision (CFSP) 2026/2192.
2. Whether the type of machinery exported has become subject to new trade prohibitions in this update.
3. Whether the intermediary bank used for collection is affected by financial restrictions.

If the company processes the order without performing these checks and the distributor appears on the new lists, it incurs a violation of the European sanctions regime with criminal and administrative consequences in Spain, regardless of whether the commercial relationship was legitimate before September 28, 2026.

What should companies do now?

1. Consult the updated sanctions lists: access the Official EU Sanctions Register and verify whether any counterparty, client, supplier or Russian partner has been designated in this update.
2. Review contracts and ongoing operations: identify all active contracts with Russian parties and assess whether any clause or service may have become prohibited by the new provisions.
3. Block pending payments or deliveries: if a counterparty is detected on sanctions lists, suspend any pending transaction until receiving specialized legal advice.
4. Update due diligence procedures: incorporate verification against updated sanctions lists in all processes for registering new clients, suppliers and business partners.
5. Consult a specialized legal advisor: if in doubt about whether a specific operation is permitted, seek advice before executing it. Non-compliance entails criminal and administrative liability in Spain.
6. Document all checks performed: maintain a record of verifications carried out as evidence of due diligence against possible inspections.

Official source

Consult full regulation on official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D2192