Key data
| Regulation | Commission Implementing Regulation (EU) 2026/2257 of the Council, of 8 October 2026 |
|---|---|
| Legal basis | Regulation (EU) 2024/2642 on restrictive measures against destabilizing activities of Russia |
| Publication | 8 October 2026 |
| Entry into force | 8 October 2026 (immediate effect) |
| Affected parties | Companies, financial entities and persons with commercial links to Russia |
| Measures applied | Asset freezing and prohibition of entry into EU territory |
| Category | European Regulation — Sanctions regime |
| CELEX reference | 32026R2257 |
If your company operates with Russian counterparties, exports to Russia, maintains accounts or assets linked to Russian persons or entities, or works in the financial sector with exposure to that market, this regulation affects you from today. Commission Implementing Regulation (EU) 2026/2257, adopted by the Council on 8 October 2026, updates the lists of sanctioned subjects in application of the framework established by Regulation (EU) 2024/2642, which regulates restrictive measures against destabilizing activities attributed to Russia.
This is not a future regulation: its entry into force is immediate. Operating with a counterparty included in the updated list, even if the commercial relationship was legitimate before publication, constitutes non-compliance from the moment the regulation enters into force.
What does this regulation establish?
Commission Implementing Regulation (EU) 2026/2257 does not create a new sanctions framework: it applies and updates the existing one, established by Regulation (EU) 2024/2642. Its specific function is to modify the lists of natural and legal persons subject to restrictive measures due to their involvement in destabilizing activities attributed to Russia.
The measures that may be imposed on subjects included in the lists are two:
- Asset freezing: all funds and economic resources belonging to or under the control of the listed persons or entities are blocked. No EU company or entity may make funds or economic resources available to them.
- Prohibition of entry into EU territory: applicable to natural persons included in the lists.
The regulation updates these lists periodically as the Council identifies new subjects involved in destabilizing activities. Each update takes effect immediately upon publication in the Official Journal of the European Union.
Non-compliance with restrictive measures is not a minor administrative violation: the consequences—administrative and criminal—are determined according to the legislation of each Member State, which in Spain may imply very significant sanctions for the company and personal liability for its directors.
Economic and operational impact
The direct impact of this regulation is not measured in fees or fixed amounts, but in the risk of non-compliance and its economic and reputational consequences. The most exposed companies are those operating in sectors with greater contact with Russian counterparties:
- Financial entities: are the most exposed. They must verify that no customer, beneficial owner, payment service provider or counterparty in transactions appears in the updated lists. A failure in this control may result in the freezing of operations, regulatory sanctions and severe reputational damage.
- Exporting companies: any export operation with a recipient included in the list is illegal from the moment of publication of the regulation. Lack of knowledge does not exempt from liability.
- Companies with existing contracts: a contract signed previously does not protect if the counterparty appears in the updated list. The obligation to suspend the commercial relationship is immediate.
The real cost of non-compliance includes: administrative sanctions, possible criminal liability for administrators and directors, blocking of banking operations and loss of licenses or regulatory authorizations in supervised sectors.
Who does it affect?
- Financial entities: banks, insurance companies, fund managers, payment entities and any financial intermediary with exposure to Russian customers or counterparties.
- Exporting companies: any company that exports goods or services destined for Russia or to persons/entities linked to Russia.
- Importing companies: that receive goods or services from Russian suppliers or entities controlled by listed subjects.
- Companies with investments or assets in Russia: or with partners, shareholders or beneficial owners of Russian nationality.
- Advisors and consulting firms: that provide services to persons or entities included in the lists may incur liability.
- Compliance and legal departments: responsible for keeping counterparty verification processes (KYC/KYB) updated.
Practical example
A Spanish industrial machinery company maintains a supply contract with a Russian company with which it has been working for three years without incident. On 8 October 2026, Commission Implementing Regulation (EU) 2026/2257 updates the lists of sanctioned parties and includes that Russian company as a subject of restrictive measures.
From that same day, the Spanish company is prohibited from executing any delivery, collecting outstanding invoices or making any economic resources available to that counterparty. If the compliance department does not detect the inclusion in the list and a shipment is made or a payment is accepted, the company incurs non-compliance with the European sanctions regime, with the administrative and criminal consequences determined by Spanish legislation.
The operational key is clear: counterparty verification processes cannot be one-time or annual. They must be executed each time the lists are updated, that is, on a continuous basis.
What should companies do now?
- Review the updated list of sanctioned parties immediately: access the full text of Commission Implementing Regulation (EU) 2026/2257 in the Official Journal of the EU and verify if any of your current counterparties appear in the modified lists.
- Suspend any operations with listed counterparties: if you identify an included counterparty, immediately stop all pending transactions, deliveries and payments. Do not wait to receive legal advice to halt operations.
- Update KYC/KYB processes: implement automatic alerts that notify each time an update of the sanctions lists is published. Counterparty screening tools must incorporate EU lists in real time.
- Review existing contracts with Russian counterparties: identify all active contracts that may be affected and include automatic suspension clauses in case of inclusion in sanctions lists.
- Inform management and board of directors: non-compliance may generate personal liability for administrators and directors. Management must be aware of the company's actual exposure.
- Consult with legal advisors specialized in foreign trade and international sanctions: especially if there are ongoing contracts, blocked assets or doubts about the scope of application of the measures.
Frequently asked questions
Where can I find the updated list of persons and entities sanctioned by the EU in relation to Russia?
The updated list is published in the full text of Commission Implementing Regulation (EU) 2026/2257, available in the Official Journal of the European Union (EUR-Lex). Additionally, the European Commission maintains a consolidated search tool for sanctioned subjects. Each update of the regulation modifies these lists, so verification must be continuous, not one-time.
What happens if my company operates with a counterparty that has just been included in the sanctions list?
From the moment the regulation enters into force—8 October 2026, with immediate effect—any operation with that counterparty constitutes non-compliance with the European sanctions regime. Lack of knowledge does not exempt from liability. The consequences include administrative and criminal sanctions according to Spanish legislation, in addition to possible blocking of banking operations and reputational damage.
What specific measures does Regulation (EU) 2026/2257 apply to listed subjects?
The regulation applies two types of measures: asset freezing (all funds and economic resources of listed subjects are blocked, and no EU company may make them available to them) and prohibition of entry into EU territory for natural persons included in the lists.
Do financial entities have additional obligations compared to other companies?
Yes. Financial entities are the most exposed according to the regulation itself. In addition to verifying that no counterparty appears in the lists, they must apply enhanced controls over customers, beneficial owners and payment operations. A failure in these controls may result in sector-specific regulatory sanctions, in addition to those provided for by the general sanctions regime.
How frequently are the sanctions lists related to Russia updated?
The lists are updated periodically through new implementing regulations each time the EU Council identifies new subjects involved in destabilizing activities. There is no fixed periodicity: updates can occur at any time. Therefore, companies must implement alert systems and continuous verification, not annual or one-time reviews.
Official source
Consult complete regulation in official source
Notice: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026R2257
