Key data
| Regulation | Council Decision (CFSP) 2026/2332, of 15 October 2026 — amends Decision 2014/145/CFSP |
|---|---|
| Publication | 15 October 2026 |
| Entry into force | 15 October 2026 (direct application in Spain from publication in the Official Journal of the EU) |
| Affected parties | Companies with commercial links to Russia, financial entities and European exporters |
| Category | European Regulation — Restrictive measures (sanctions) |
| Year | 2026 |
| Base sanctioning framework | Decision 2014/145/CFSP (adopted following the annexation of Crimea in 2014) |
If your company operates with Russia, has counterparties in occupied territories or carries out exports to that region, this update affects you from today. The Council Decision (CFSP) 2026/2332, published on 15 October 2026, amends Decision 2014/145/CFSP and incorporates new natural and legal persons to the list of sanctioned parties for threatening the territorial integrity, sovereignty and independence of Ukraine.
This is not a new regulation: it is an update of a sanctions framework that has been active since 2014, following the annexation of Crimea. But each modification expands the risk perimeter for European companies that do not review their counterparties.
What does this regulation establish?
Decision 2014/145/CFSP is the European sanctions framework adopted following Russia's illegal annexation of Crimea. Since then, it has been amended multiple times to incorporate new subjects to the restrictive measures. This latest update, Decision (CFSP) 2026/2332, again expands the list of affected persons and entities.
The restrictive measures applied by this regime are two:
- Asset freezing: all funds and economic resources of the listed persons and entities located in EU territory are blocked.
- Prohibition of entry or transit: natural persons included in the list cannot enter or transit through any EU Member State.
The regulation is directly applicable in Spain from its publication in the Official Journal of the EU, without the need for national transposition. This means that the obligations are enforceable from 15 October 2026 itself.
| Aspect | Decision 2014/145/CFSP (base framework) | Decision 2026/2332 (amendment) |
|---|---|---|
| Origin | Adopted following the annexation of Crimea (2014) | Update of October 2026 |
| Main content | Establishment of the sanctions regime | Expansion of the list of sanctioned persons and entities |
| Applicable measures | Asset freezing + prohibition of entry/transit | The same, applied to the newly incorporated subjects |
| Territorial scope | All EU territory | All EU territory |
| Application in Spain | Direct from publication in Official Journal of the EU | Direct from 15 October 2026 |
Economic and operational impact
The impact is not only legal: it is operational and financial. Operating with a sanctioned counterparty can result in immediate paralysis of operations, blocking of payments and the opening of administrative or criminal sanctions proceedings.
The specific consequences for a company that breaches the sanctions regime include:
- Administrative sanctions under Spanish legislation on foreign trade control and compliance with EU restrictive measures.
- Criminal sanctions in the most serious cases, under the Spanish Penal Code regarding evasion of embargoes and international restrictive measures.
- Blocking of financial operations if the banking entity detects the link with a sanctioned subject.
- Reputational damage to clients, investors and business partners.
For financial entities, the risk is particularly high: they are obliged to apply screening controls on all their counterparties and transactions, and non-compliance can result in regulatory sanctions from the Bank of Spain or the CNMV, in addition to criminal sanctions.
Who does it affect?
- Companies with commercial links to Russia: any Spanish or European company that imports, exports or maintains contractual relationships with Russian counterparties or in occupied territories.
- Financial entities: banks, savings banks, payment entities and asset managers that process transactions originating from or destined for Russia or that have clients with links in that region.
- European exporters: companies that export goods or services to Russia or territories under Russian control, which must verify that their end customers do not appear on the list.
- Companies with operations in occupied territories: any entity with presence or activity in Crimea, Donetsk, Luhansk, Zaporizhzhia or Kherson.
- Advisors and consultancies: law firms, foreign trade consultancies and financial advisors providing services to clients with exposure to Russia.
Practical example
A Spanish industrial company maintains a machinery supply contract with a Russian company with which it has been operating since 2021. Following the publication of Decision (CFSP) 2026/2332 on 15 October 2026, that Russian company appears on the updated list of sanctioned entities.
From that same day, the Spanish company is prohibited from executing any payment, delivery or provision of services linked to that contract. If its bank detects a transfer to that counterparty, it will block it and notify the competent authorities. If the Spanish company executes the operation without having reviewed the updated list, it incurs non-compliance with the sanctions regime, regardless of whether it did so in good faith.
Proactive review of the updated list, before executing any operation, is the only way to avoid this scenario.
What should companies do now?
- Review the updated list of sanctioned parties: consult the consolidated list published in the Official Journal of the EU and cross-reference it with all current counterparties (customers, suppliers, partners, intermediaries).
- Preventively suspend ongoing operations with Russian counterparties or in occupied territories until confirming that they do not appear on the updated list.
- Update counterparty screening processes: incorporate the new list into compliance systems and establish automatic alerts for future updates.
- Review existing contracts with exposure to Russia or occupied territories and assess with legal advice whether it is necessary to activate force majeure or contract termination clauses.
- Train the compliance and operations team on the obligations arising from the sanctions regime and the consequences of non-compliance (administrative and criminal sanctions).
- Document all reviews carried out: in case of inspection or investigation, the traceability of the due diligence process is the company's main defense.
Frequently asked questions
Where can I consult the updated list of persons and entities sanctioned by the EU?
The updated list is published in the Official Journal of the EU as part of Decision (CFSP) 2026/2332. Additionally, the European Commission maintains a consolidated list of sanctions on its restrictive measures portal, which is updated following each modification of the regime.
What happens if my company operates unknowingly with a sanctioned counterparty?
Lack of knowledge does not exempt from liability. Non-compliance with the sanctions regime can result in administrative and criminal sanctions under Spanish legislation, regardless of intent. This is why it is essential to review the updated list before executing any operation with Russian counterparties or in occupied territories.
When does compliance with Decision (CFSP) 2026/2332 become mandatory?
From 15 October 2026 itself, the date of its publication in the Official Journal of the EU. The regulation is directly applicable in Spain and in all Member States without the need for national transposition. There is no adaptation period.
What specific measures does this regulation impose on listed persons and entities?
Two measures: freezing of all their assets and funds located in EU territory, and prohibition of entry or transit through any Member State for natural persons included on the list.
Do financial entities have special obligations under this sanctions regime?
Yes. Banks, payment entities and asset managers must apply screening controls on all their counterparties and transactions to detect links with sanctioned subjects. Non-compliance can result in regulatory sanctions from the Bank of Spain or the CNMV, in addition to general administrative and criminal sanctions.
Official source
Consult full regulation at official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D2332
