EU Sanctions against South Sudan 2026: what companies and financial entities must verify

Key data

European companies and financial entities with operations in sub-Saharan Africa or with links to South Sudan must act now: Council Implementing Decision (CFSP) 2026/1401, adopted on 22 June 2026, updates the application of restrictive measures established in Decision (CFSP) 2015/740 regarding South Sudan. This means that the list of designated persons and entities has been reviewed, and any commercial or financial relationship with subjects included in it is, as of 22 June, a high-risk legal exposure.

This is not a regulation of future application: it entered into force on the same day of its adoption. Compliance obligations are immediate.

What does this regulation establish?

Council Implementing Decision (CFSP) 2026/1401 applies and updates the EU sanctions regime on South Sudan, in force since 2015. This regime contemplates two types of restrictive measures that can be imposed on designated natural or legal persons:

• Asset freezing: all funds and economic resources belonging to designated persons or entities, located in EU territory or under the control of European operators, must be immobilized.
• Travel ban: designated persons cannot enter or transit through the territory of EU Member States.

The 2026 update reviews who is included in that list. European companies and financial entities must check their databases of clients, suppliers and counterparties against the updated list published in the EU Official Journal.

The original sanctions framework, Decision (CFSP) 2015/740, was adopted in response to the conflict situation in South Sudan. The 2026 decision does not repeal that framework, but updates it by modifying the list of designated persons, which is the key operational instrument for business compliance.

Economic and operational impact

Non-compliance with EU restrictive measures is not a theoretical risk. Each Member State establishes its own sanctions regime for breach, which may include:

• Administrative sanctions: economic fines whose amount varies according to the national legislation of each Member State.
• Criminal sanctions: in many Member States, including Spain, non-compliance with EU restrictive measures can constitute a criminal offense, with consequences for responsible managers and directors.
• Blocking of operations: any transaction with a designated subject must be suspended immediately, which can generate operational and contractual disruptions.

From an operational perspective, the impact is concentrated in three areas: due diligence and counterparty verification processes, compliance systems and procedures for continuous monitoring of sanctions lists.

Who does it affect?

• Financial entities: banks, insurance companies, fund managers and any entity that processes payments or manages assets with exposure to South Sudan or designated persons.
• Companies with operations in sub-Saharan Africa: especially those with commercial, contractual or investment activity in South Sudan.
• International trade companies: importers, exporters and logistics operators with routes or counterparties in the region.
• Compliance and legal departments: responsible for keeping sanctions lists updated and customer verification processes (KYC/AML).
• Advisors and consultants: who provide services to companies with links in the region and may incur liability for failing to alert about these obligations.
• Directors and managers: who may assume personal responsibility in case of non-compliance, both administrative and criminal.

Practical example

A Spanish infrastructure company maintains a supply contract with a company based in South Sudan. Following the publication of Decision (CFSP) 2026/1401, the compliance officer verifies the updated list of designated persons and detects that the legal representative of that company appears in the new list of sanctioned persons.

At that moment, the Spanish company is obliged to:

1. Immediately suspend any pending payment or transfer to that counterparty.
2. Notify the competent Spanish authorities of the existence of funds or assets linked to the designated person.
3. Not execute any contractual clause that implies transfer of economic resources until the situation is resolved.

Failing to act in time, even through ignorance of the list update, does not exempt from liability. The obligation to continuously monitor falls on the company itself.

What should companies do now?

1. Review the updated list of designated persons: access the full text of Decision (CFSP) 2026/1401 in the EU Official Journal and check names against the database of clients, suppliers and counterparties.
2. Update screening systems: ensure that sanctions verification tools (OFAC lists, EU lists, UN) incorporate the June 2026 update.
3. Suspend operations with designated subjects: if any match is detected, immediately halt any financial or commercial transaction and notify the legal department.
4. Notify competent authorities: in Spain, the authority responsible for international sanctions is the State Secretariat for Economy. Consult the applicable notification procedure.
5. Document the verification process: keep evidence that the review was carried out following publication of the regulation. This documentation is key in case of inspection or investigation.
6. Review existing contracts: identify if any contract in force with counterparties in South Sudan may be affected and incorporate sanctions compliance clauses if it does not have them.

Official source

Consult complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601401