Key data
| Regulation | Council Decision (CFSP) 2026/1396, of 22 June 2026 |
|---|---|
| Amends | Decision (CFSP) 2023/2135 |
| Publication | 22 June 2026 |
| Entry into force | 22 June 2026 (immediate application) |
| Affected parties | Companies and individuals with commercial or financial links to Sudan or sanctioned subjects |
| Category | European Regulation — Restrictive measures (sanctions) |
| Scope | All EU Member States |
If your company operates with Sudanese counterparties, finances projects in Sudan or manages assets linked to the country, Decision (CFSP) 2026/1396 affects you directly from the day of its publication. This regulation amends Decision 2023/2135, which established the EU sanctions regime against those who undermine stability and political transition in Sudan, and updates the lists of individuals and entities subject to restrictive measures.
There is no adaptation period: the regulation is immediately applicable in all Member States. Operating with a subject listed in the updated list is a breach as of 22 June 2026 itself.
What does this regulation establish?
Decision (CFSP) 2026/1396 amends the EU sanctions regime relating to Sudan, in force since 2023 through Decision 2023/2135. The changes that this update may incorporate are as follows:
- Addition of new individuals or entities to the sanctions lists.
- Removal of individuals or entities that are no longer subject to restrictive measures.
- Adjustments in the scope of measures applicable to certain already-listed subjects.
The restrictive measures applied to subjects included in the list are two:
| Measure | Description |
|---|---|
| Asset freezing | All funds and economic resources of listed subjects located in EU territory are blocked. |
| Prohibition of entry or transit | Listed subjects cannot enter or transit through any EU Member State. |
The original reference regulation is Council Decision (CFSP) 2023/2135, which established the general framework for sanctions. The 2026 decision updates that framework without replacing it: the regime remains the same, but the list of affected subjects changes.
Economic and operational impact
For European companies, the impact is not abstract. Operating with a sanctioned subject—even involuntarily—can have serious consequences:
- Criminal sanctions in the Member State where the breach occurs (the sanctions regime varies by country, but in Spain it can imply criminal liability for legal entities).
- Administrative sanctions, including fines whose amount depends on the national legislation of application.
- Immediate operational blockade: any financial transaction with a listed subject is de facto paralyzed when their assets in the EU are frozen.
- Reputational risk with clients, investors and financial entities.
The real cost for a company that fails to comply is not just the fine: it is the paralysis of operations, the opening of investigations and damage to the relationship with correspondent banks, which apply their own compliance controls.
Who does it affect?
- Exporting or importing companies with commercial activity in Sudan.
- Financial entities (banks, insurers, funds) that manage assets or finance operations linked to Sudan.
- Logistics and transport companies with routes passing through Sudan.
- Consulting firms, law firms and advisors providing services to Sudanese counterparties.
- NGOs and humanitarian organizations with operations in the country (must verify that their local counterparties are not listed).
- Any natural or legal person established in the EU maintaining financial relationships with potentially listed subjects.
Practical example
A Spanish engineering company has a supply contract for equipment with a Sudanese company. Before executing the next payment or shipment, the compliance department must consult the EU consolidated sanctions list to verify that the Sudanese company—and its legal representatives—have not been added in the update of 22 June 2026.
If the counterparty appears in the updated list and the Spanish company executes the payment anyway, it would be incurring a breach of the EU sanctions regime with immediate effect, exposing itself to criminal and administrative sanctions in Spain. Prior verification before each transaction is not optional: it is the only way to demonstrate due diligence.
The EU sanctions map tool and the EU consolidated sanctions list are the official resources for conducting this verification.
What should companies do now?
- Immediately review the EU consolidated sanctions list to identify whether any of your Sudanese counterparties (companies, individuals, representatives) appear in the updated version after 22 June 2026.
- Halt any pending transactions with unverified counterparties until confirming they are not listed. Do not execute payments or shipments without this verification.
- Update internal compliance procedures to include automatic verification against sanctions lists before each new operation with counterparties in Sudan or from any jurisdiction under EU sanctions regime.
- Inform finance, legal and operations departments about the update to the list, especially if there are ongoing contracts or scheduled payments.
- Consult with a legal advisor specialized in international sanctions if there is any doubt about whether a counterparty or specific operation could be affected by this update.
- Document all verifications performed: in case of inspection or investigation, demonstrating due diligence is the main defense against administrative or criminal sanctions.
Frequently asked questions
Where can I consult the updated list of EU-sanctioned individuals in relation to Sudan?
The EU consolidated sanctions list, which includes all subjects affected by regimes such as Sudan's, is available on the official EU portal and in the sanctions map tool (EU Sanctions Map). Following the publication of Decision (CFSP) 2026/1396 on 22 June 2026, the list must be consulted in its most recent version before any operation with Sudanese counterparties.
What happens if my company operates with a sanctioned subject without knowing it?
Lack of knowledge does not exempt from liability. Non-compliance with EU restrictive measures can result in criminal and administrative sanctions in each Member State. In Spain, legal entities can incur criminal liability for this type of breach. The only effective defense is to demonstrate that a diligent verification was performed before the operation.
When does this sanctions update come into force?
Decision (CFSP) 2026/1396 is immediately applicable from its publication on 22 June 2026. There is no transitional period: verification and compliance obligations are enforceable from that same day in all EU Member States.
What specific measures apply to listed subjects?
Subjects included in the list are subject to two measures: freezing of all their assets and economic resources located in EU territory, and prohibition of entry or transit through any Member State. European companies cannot make funds or economic resources available to these subjects.
Does this regulation affect only companies based in the EU?
It affects all natural and legal persons subject to EU law, which includes companies established in any Member State, their subsidiaries in third countries when acting from the EU, and any operation carried out within EU territory, regardless of the nationality of the parties.
Official source
Consult full regulation in official source
Notice: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D1396