Key data
| Regulation | Commission Implementing Regulation (EU) 2026/509 of the Council, of 23 April 2026 |
|---|---|
| Base regulation | Regulation (EU) No 269/2014 |
| Publication | 23 April 2026 |
| Entry into force | 23 April 2026 (immediate effect) |
| Affected parties | Companies, financial entities and operators with commercial links to sanctioned persons or entities |
| Measures | Freezing of funds and economic resources; prohibition of making assets available to designated persons |
| Category | European Regulation |
| Consequences of non-compliance | Administrative and criminal sanctions in Member States |
If your company operates with Russian counterparties or in territories affected by the conflict in Ukraine, you have an active legal obligation as of 23 April 2026. The Commission Implementing Regulation (EU) 2026/509 updates the list of natural and legal persons subject to restrictive measures under the Regulation (EU) No 269/2014, which regulates sanctions for actions that undermine the territorial integrity of Ukraine. There is no grace period: obligations are immediate.
What does this regulation establish?
This implementing regulation expands the list of designated persons under the sanctions framework of Regulation (EU) No 269/2014. The two restrictive measures it applies are:
- Freezing of funds and economic resources of all natural and legal persons included in the updated list.
- Prohibition of making assets available to the designated persons, directly or indirectly.
This means that any European company or financial entity that has contractual relationships, accounts, pending payments or any type of economic link with any of the newly designated persons must interrupt those operations immediately and notify the competent authorities.
The regulation applies in all EU Member States directly, without the need for national transposition. Its legal basis is Regulation (EU) No 269/2014, which has been in force since the beginning of the conflict and has been updated periodically with new designations.
Economic and operational impact
The impact is not only legal: it is operational and financial. Affected companies must assume direct and indirect costs arising from compliance:
| Area of impact | Concrete consequence |
|---|---|
| Banking relationships | Immediate blocking of accounts and transfers linked to designated persons |
| Commercial contracts | Suspension of active contracts with persons or entities included in the list |
| Exports | Paralysis of shipments and pending logistics operations |
| Economic resources | Freezing of any assets under European control of the designated persons |
| Non-compliance | Administrative and criminal sanctions according to the legislation of each Member State |
The cost of inaction far exceeds the cost of compliance. Sanctions for non-compliance in EU Member States can include substantial fines and criminal liability for company managers involved.
Who does it affect?
The regulation is particularly relevant for:
- Banks and financial entities that manage accounts, transfers or financial instruments linked to Russian counterparties or affected territories.
- Exporting companies with active operations towards Russia, Belarus or occupied territories in Ukraine.
- Logistics and transport operators that manage goods with origin or destination in affected areas.
- Companies with supply contracts, licenses or distribution agreements with counterparties in those territories.
- Legal advisors, consulting firms and audit companies that provide services to potentially designated entities.
- Investment funds and asset managers with positions in companies or instruments linked to the designated persons.
Practical example
A Spanish industrial machinery company has an active supply contract with a Russian company. Following the publication of Regulation 2026/509 on 23 April 2026, the compliance officer performs a verification of the counterparty against the updated list under Regulation (EU) No 269/2014 and detects that the Russian company has been included in the new list.
The Spanish company must act immediately:
- Suspend any pending shipment of goods.
- Block pending payments linked to that contract.
- Notify its banking entity to freeze related funds.
- Communicate the situation to the competent authority in Spain (in this case, the State Secretariat for Trade or the Bank of Spain, depending on the type of operation).
If it fails to act and continues the commercial relationship, the company and its managers are exposed to administrative and criminal sanctions in accordance with applicable Spanish legislation on the implementation of international sanctions.
What should companies do now?
- Immediately review the updated list published in the Official Journal of the EU (Regulation 2026/509) and cross-reference it with all active counterparties of the company.
- Suspend any ongoing operations with persons or entities appearing on the list: payments, shipments, transfers, provision of services.
- Notify the banking entity to block accounts or transfers linked to the designated persons, in accordance with the asset freezing obligation.
- Communicate with the competent national authority any relationship detected with a designated person. In Spain, depending on the type of operation, this corresponds to the Bank of Spain, the State Secretariat for Trade or the Ministry of Foreign Affairs.
- Update internal compliance procedures to include periodic verifications against EU sanctions lists, given that these are updated recurrently.
- Consult with specialized legal advisors if there is any doubt about whether a counterparty is affected or about the applicable notification obligations in Spain.
Frequently asked questions
Which companies must review their contracts due to Regulation 2026/509?
All European companies and financial entities with commercial or contractual links to persons or entities linked to Russia or territories affected by the conflict in Ukraine. Especially banks, exporting companies and any operator with relationships in those areas.
What specific measures does Implementing Regulation 2026/509 impose?
The regulation imposes two main measures: the freezing of funds and economic resources of the designated persons, and the prohibition of making assets available to them. European companies cannot operate or transfer resources to persons or entities included in the updated list.
What happens if a company fails to comply with the sanctions of Regulation 2026/509?
Non-compliance can result in administrative and criminal sanctions in EU Member States. The severity depends on the national legislation of each country, but in Spain it can include substantial fines and criminal liability for company managers involved.