EU Sanctions against Sudan 2026: What Companies and Banks Must Do

Key data

European companies and financial entities with any link to Sudan have a new compliance obligation as of 21 April 2026. The EU Council has published Council Implementing Regulation (EU) 2026/887, which applies the sanctions framework of Regulation (EU) 2023/2147 to respond to activities that undermine stability and political transition in Sudan.

The regulation requires no prior procedure to be enforceable: it entered into force on the same day of its publication. Any active commercial or financial relationship with persons or entities designated in its annexes constitutes a breach from that moment on.

What does this regulation establish?

Council Implementing Regulation (EU) 2026/887 develops and applies the general sanctions framework established in Regulation (EU) 2023/2147, which was specifically designed to respond to activities that jeopardize political stability and democratic transition in Sudan.

The restrictive measures activated by this regulation are of two types:

• Asset freezing: The funds and economic resources of persons and entities included in the annexes of the regulation must be blocked immediately. No company or financial entity may make any type of asset available to the designated persons.
• Prohibition of entry into the EU: The natural persons designated are barred from access to the territory of any Member State of the European Union.

The lists of persons and entities affected by these measures are contained in the annexes of Regulation 2026/887 itself, published in the Official Journal of the EU. These lists are the operational reference that companies must consult to verify their relationships.

Economic and operational impact

The direct impact of this regulation is not a fixed cost: it is a sanction risk that each company must manage based on its exposure to Sudan. The key elements to consider are as follows:

• Risk of administrative or criminal sanction: Non-compliance with restrictive measures does not have a fixed fine established at European level. Each Member State applies its own national legislation to sanction breaches. In Spain, sanctions for non-compliance with international sanctions regimes can be very significant, including both economic fines and criminal liability for managers.
• Immediate operational blockade: If a financial entity detects that a customer or counterparty is on the list of designated persons, it is obliged to freeze their assets immediately and notify the competent authorities. This may interrupt ongoing operations.
• Compliance cost: Companies with activity in Sudan or with counterparties in the region must implement or strengthen sanctions screening processes, which involves costs for tools, training and review of existing contracts.
• Reputational risk: Being identified as an entity that has operated with persons sanctioned by the EU has reputational consequences that go beyond the economic sanction.

Who does it affect?

This regulation has direct impact on the following profiles:

• Financial entities: Banks, credit institutions, fund managers, insurance companies and any entity that may maintain accounts, deposits, investments or financing linked to persons or entities with activity in Sudan.
• Companies with commercial activity in Sudan: Importers, exporters, companies with subsidiaries, supply contracts, construction projects or any active commercial relationship with Sudanese counterparties.
• Compliance officers: The compliance departments of any company with exposure to the region must update their screening lists and review existing relationships.
• Foreign trade advisors and consultants: Those who advise companies with operations in East Africa must understand the scope of these sanctions to properly inform their clients.
• Designated natural persons: Those included in the annexes of the regulation, whose assets in the EU are frozen and whose entry into European territory is prohibited.

Practical example

A Spanish engineering company has an active consulting contract with a Sudanese company for an infrastructure project. On 21 April 2026, Regulation (EU) 2026/887 enters into force.

The compliance officer of the Spanish company must immediately verify whether the Sudanese counterparty company, or any of its owners or managers, is listed in the annexes of the regulation as a designated entity or person.

If the counterparty appears on the list, the Spanish company is prohibited from continuing to execute the contract, making or receiving payments, and must notify the competent authorities. Continuing the commercial relationship without having carried out this verification would constitute a breach of the regulation, with the administrative or criminal consequences established by Spanish legislation.

If the counterparty does not appear on the list, the relationship may continue, but the company must establish a periodic review process, as the list of designated persons may be updated with new persons or entities at any time.

What should companies do now?

1. Consult the annexes of Regulation (EU) 2026/887: Access the full text published in the Official Journal of the EU and identify the designated persons and entities in its lists.
2. Perform immediate screening of counterparties: Cross-reference the list of customers, suppliers, partners and financial counterparties with those designated in the annexes of the regulation. This verification must be done urgently, given that the regulation is already in force.
3. Review active contracts and financial relationships: Identify any contract, account, deposit, investment or financing linked to persons or entities with activity in Sudan and assess whether any of them could be affected.
4. Freeze assets if a designated person is detected: If a relationship with a designated person or entity is identified, the company or financial entity must block the assets immediately and notify the competent authorities according to Spanish legislation.
5. Update compliance processes: Incorporate Regulation (EU) 2026/887 and the framework of Regulation (EU) 2023/2147 into internal sanctions screening procedures, with periodic reviews in case of updates to the lists.
6. Consult specialized legal advice: Given that sanctions for non-compliance are governed by the national legislation of each Member State, it is advisable to have legal advice to assess the company's specific exposure.