EU Sanctions Against Sudan 2026: What Companies and Banks Must Review

Key data

European companies and financial entities with operations in East Africa or with Sudanese counterparties have an immediate obligation: to verify their international sanctions screening lists. The Council Implementing Regulation (EU) 2026/1394, in force since 22 June 2026, expands the list of persons and entities affected by restrictive measures motivated by activities that undermine the stability and political transition of Sudan.

This regulation applies the sanctions framework established by Regulation (EU) 2023/2147 and does not introduce new categories of measures, but rather updates and expands the list of designated subjects, which requires an immediate review of active counterparties.

What does this regulation establish?

Council Implementing Regulation (EU) 2026/1394 updates the annex to Regulation (EU) 2023/2147, adding new natural and legal persons to the list of subjects under EU restrictive measures related to Sudan. The two concrete measures applied to listed subjects are:

• Asset freezing: all funds and economic resources belonging to or in the possession or under the control of listed persons and entities must be immobilized. No European company or bank can make funds available to them.
• Prohibition of entry or transit: natural persons included in the list cannot enter or transit through the territory of any EU Member State.

The original sanctions framework, Regulation (EU) 2023/2147, was adopted to respond to activities that undermine the stability and political transition of Sudan. This implementing regulation of June 2026 is an update of that list, not a new base regulation.

Non-compliance with these measures—for example, executing a transfer to a listed entity or maintaining an active commercial relationship without having reviewed it—may result in administrative and criminal sanctions whose specific severity depends on the legislation of each Member State.

Economic and operational impact

The direct impact is not a new regulatory cost (there is no associated fee or contribution), but rather a risk of sanctions and an operational compliance cost. Companies and financial entities must assume the following costs and risks:

• Urgent review of counterparties: any company with suppliers, customers or partners in Sudan or in the East Africa region must check its databases against the updated list. Failure to do so exposes the company to criminal and administrative sanctions.
• Immediate operational freeze: if a listed counterparty is detected, the company is obliged to freeze the funds or economic resources related to it and notify the competent authorities. Any ongoing operation must be halted.
• Reputational risk: maintaining relationships with subjects designated by the EU can result in significant reputational damage, especially for financial entities subject to supervision.
• Cost of system updates: compliance departments must update their sanctions screening tools to incorporate the new lists published on 22 June 2026.

Who does it affect?

• Financial entities: banks, insurance companies, fund managers and any institution that processes payments or maintains accounts with Sudanese counterparties or those in the region.
• Companies with operations in East Africa: importers, exporters, logistics companies or any business with a supply chain passing through Sudan.
• Companies with Sudanese counterparties: any company that has active contracts, commercial or financial relationships with natural or legal persons domiciled or active in Sudan.
• Listed natural or legal persons: directly affected by asset freezing and prohibition of entry to the EU.
• Compliance and legal departments: responsible for updating internal procedures for international sanctions control.

Practical example

A Spanish raw materials import company has a supplier based in Khartoum with which it has been operating since 2022. On 22 June 2026, Council Implementing Regulation (EU) 2026/1394 enters into force, expanding the list of sanctioned entities.

If that supplier—or any of its administrators—appears on the updated list, the Spanish company has the immediate obligation to:

1. Halt any pending or ongoing payment to that entity.
2. Freeze the funds or economic resources related to it that are under its control.
3. Notify the situation to the competent authorities in Spain.

Failing to act—even through ignorance of the list update—does not exempt from liability. The regulation is directly applicable throughout the EU from its publication date, with no adaptation period.

What should companies do now?

1. Immediately update sanctions screening lists: incorporate the new lists from Regulation (EU) 2026/1394 into compliance screening systems. The effective date is 22 June 2026, with no grace period.
2. Review all active counterparties linked to Sudan or East Africa: check suppliers, customers, partners and ultimate beneficial owners against the updated list published in the Official Journal of the EU.
3. Halt operations with listed subjects: if a match is detected, immediately stop any ongoing transaction or commercial relationship and freeze related assets.
4. Notify the competent authorities: in Spain, the authority responsible for international financial sanctions is the State Secretariat for Economy. Consult the current notification procedure.
5. Document the review process: record the checks performed, dates and results. This documentation is key in the event of an inspection or investigation for non-compliance.
6. Review periodically: sanctions lists are updated frequently. Establish a recurring review process, not just a one-time check, to detect new designations as soon as they are published.

Official source

Consult the complete regulation in the official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026R1394