EU Sanctions on Sudan 2026: What Companies and Banks Must Do Now

Key data

Banks, insurance companies and Spanish companies with international operations have a new compliance obligation as of 7 May 2026. The Commission Implementing Regulation (EU) 2026/1051 amends the list of persons and entities subject to restrictive measures in the context of the Sudan conflict, in application of Regulation (EU) No 747/2014.

This is not a rule that only affects those operating directly in Sudan. Any European company that has commercial or financial counterparties listed in the updated list is obliged to act immediately. Non-compliance is not a minor matter: it can result in serious administrative and criminal sanctions.

What does this regulation establish?

Commission Implementing Regulation (EU) 2026/1051 amends the list of persons and entities subject to restrictive measures in the context of the armed conflict in Sudan. It applies within the framework of the sanctions regime established by Regulation (EU) No 747/2014.

The restrictive measures applied to those designated on the list are two:

• Freezing of assets: all funds and economic resources belonging to the designated persons and entities are immobilized. No company or financial entity may make funds or economic resources available to them.
• Prohibition of entry or transit through the EU: natural persons included on the list cannot enter or transit through the territory of any EU Member State.

The regulation does not only bind the designated persons. It binds all European financial entities and companies to actively verify that they do not maintain commercial or financial relations with any of the sanctioned persons. This due diligence obligation is continuous and does not admit ignorance as an excuse.

Economic and operational impact

The impact for most companies is not direct (they do not have operations in Sudan), but operational and compliance-related. The specific obligations generated by this update are:

The real cost for companies is the cost of verification processes and, where applicable, the termination of commercial relations with affected counterparties. Failing to act has a potentially much higher cost: sanctions for non-compliance with international sanctions regulations in Spain can be very significant.

Who does it affect?

• Financial entities: banks, savings banks, credit cooperatives, insurance companies, fund managers and any supervised entity operating in Spain or the EU. They are obliged to update their sanctions screening systems.
• Exporting and importing companies: any Spanish company that has commercial relations with counterparties in third countries must verify that none of them appear on the updated list.
• Companies with subsidiaries or partners in Africa or the Middle East: the risk of indirect exposure is greater in these geographies.
• Compliance and legal departments: responsible for updating internal procedures and ensuring continuous compliance.
• CFOs and financial directors: responsible for approving operations with international counterparties and ensuring that controls are in place.
• Natural persons and entities designated on the list: directly subject to asset freezing and, in the case of natural persons, to the prohibition of entry into the EU.

Practical example

A Spanish industrial machinery company has a distributor in Egypt with which it has been operating for three years. That distributor, in turn, has business partners in Sudan. Following the update of the list under Regulation 2026/1051, one of those Sudanese partners appears as a designated entity.

If the Spanish company has not updated its counterparty verification process and continues to operate with that Egyptian distributor without reviewing the chain of relationships, it may be indirectly facilitating access to economic resources of a sanctioned entity. This constitutes a breach of Regulation (EU) 2026/1051, with exposure to serious administrative and criminal sanctions.

The solution is not to stop operating with all international distributors: it is to implement a due diligence process that includes periodic verification against the consolidated EU sanctions lists, and to document that process.

What should companies do now?

1. Immediately update sanctions screening systems with the new list published in Commission Implementing Regulation (EU) 2026/1051. Entry into force was 7 May 2026: there is no time to wait.
2. Review all active counterparties (customers, suppliers, distributors, partners) against the consolidated EU sanctions list, available on EUR-Lex and in the European Commission's sanctions tool.
3. Document the verification process: in case of inspection or investigation, the company must be able to demonstrate that it performed due diligence. Without documentation, there is no defense.
4. Review contracts with international counterparties to include sanctions compliance clauses that allow contract termination if a counterparty is designated in the future.
5. Train sales, procurement and finance teams on the obligation to verify sanctions before approving new operations or counterparties.
6. Consult with specialized legal advice if there is doubt about whether any current counterparty may be related to designated persons or entities. Non-compliance can result in serious administrative and criminal sanctions.