Key data
| Regulation | Council Decision (CFSP) 2026/2161 — amends Decision 2014/145/CFSP |
|---|---|
| Publication | 22 September 2026 |
| Entry into force | 22 September 2026 (immediate effect) |
| Affected parties | Companies, financial entities and individuals with commercial or financial links to sanctioned parties |
| Category | European Regulation — Restrictive measures (sanctions) |
| Base sanctions framework | Decision 2014/145/CFSP (in force since the annexation of Crimea, 2014) |
| Types of applicable sanctions | Travel ban to Schengen area + asset freezing in the EU |
From 22 September 2026, operating with any of the individuals or entities included in the new update of the EU sanctions regime on Ukraine is illegal. The Decision (CFSP) 2026/2161 amends Decision 2014/145/CFSP —the sanctions framework in force since the annexation of Crimea— and expands or adjusts the list of subjects subject to restrictive measures. There is no adaptation period: the regulation enters into force on the same day of its publication.
For Spanish and European companies, this is not a matter of foreign policy. It is a regulatory compliance obligation with direct economic consequences if action is not taken immediately.
What does this regulation establish?
Decision 2026/2161 is an amendment to the sanctions regime that the EU has maintained since 2014 against natural and legal persons threatening the territorial integrity, sovereignty and independence of Ukraine. This regime has been updated recurrently since the start of the armed conflict in 2022.
The restrictive measures applied by this regime are of two types:
- Travel ban to the Schengen area for natural persons included in the list.
- Asset freezing in the EU for all natural and legal persons listed.
Asset freezing means that no European company, bank or financial entity can make funds or economic resources available to the sanctioned parties, either directly or indirectly. This includes payments, transfers, account opening, credit granting, insurance subscription or any other financial or commercial operation.
| Base regulation | Amended by | Change introduced |
|---|---|---|
| Decision 2014/145/CFSP | Decision (CFSP) 2026/2161 | Update of the list of sanctioned individuals and entities |
The complete text with the specific names and entities added or modified appears in the official text published on EUR-Lex. Direct consultation of that list is essential for compliance.
Economic and operational impact
The impact is not only reputational: non-compliance with the sanctions regime has direct economic and legal consequences. Each Member State applies its own administrative sanctions for breach, which in the Spanish case can be very high depending on the volume of the irregular operation.
At the operational level, affected companies must assume immediate costs in three areas:
- Update of screening systems: Counterparty verification tools must incorporate the new lists from 22/09/2026.
- Review of contracts and active commercial relationships: Any contract in force with an entity or person now sanctioned must be suspended or terminated.
- Asset blocking: Credit entities must immediately freeze the funds of the sanctioned parties and notify the competent authorities.
The cost of not acting far exceeds the cost of adapting: administrative sanctions for non-compliance can reach very significant amounts and, in some Member States, may result in criminal liability for managers.
Who does it affect?
- Credit entities and banks: Obliged to freeze assets and block operations with sanctioned parties. They must update their AML/KYC compliance systems with the new lists.
- Insurance companies: Cannot underwrite or maintain policies that benefit listed individuals or entities.
- Export and import companies: Any commercial operation with the new sanctioned parties is prohibited from 22/09/2026.
- Companies with subsidiaries or partners in Russia, Belarus or occupied territories: Greater risk of indirect exposure to sanctioned counterparties.
- Law firms, consultancies and financial advisors: Must verify that their clients do not appear in the updated list.
- Payment platforms and fintechs: Obliged to apply the same screening as traditional banking.
Practical example
A Spanish industrial machinery company has an active supply contract with a Russian company. On 22 September 2026, the EU publishes Decision 2026/2161 and that Russian company appears in the updated list of sanctioned parties.
From that same day, the Spanish company is prohibited from executing any pending deliveries, collecting invoices due through bank transfer, or maintaining any active commercial relationship with that counterparty. If its bank detects an incoming transfer from that Russian company and does not block it, the bank also incurs non-compliance.
The Spanish company must: suspend the contract immediately, notify the situation to its legal advisor, and consult with the State Secretariat for Trade or the competent authority on how to manage pending assets or collections. Failing to act is equivalent to assuming the risk of a serious administrative sanction.
What should companies do now?
- Consult the updated official list on EUR-Lex (Decision 2026/2161) and identify if any current counterparty appears in it.
- Update counterparty screening systems (AML, KYC, sanctions lists) to incorporate the new lists with date 22/09/2026.
- Review active contracts with companies or individuals in Russia, Belarus and territories linked to the conflict to detect indirect exposure.
- Immediately suspend any commercial or financial operation with the new sanctioned parties, without waiting for additional instructions.
- Notify the competent authorities if freezable assets are detected, according to the procedure established in each Member State.
- Document all actions taken to demonstrate due diligence in the event of an inspection or regulatory request.
Frequently asked questions
When does Decision (CFSP) 2026/2161 enter into force?
On the same day of its publication: 22 September 2026. There is no transitional period. Companies and financial entities must apply the new restrictive measures from that date.
What sanctions can a company receive for operating with a sanctioned party?
Non-compliance may result in serious administrative sanctions according to the legislation of each Member State. The exact amount depends on the applicable national legislation. In serious cases, some Member States also provide for criminal liability for managers.
Where can I consult the updated list of sanctioned individuals and entities?
The complete list appears in the text of the Decision (CFSP) 2026/2161 published on EUR-Lex. The consolidated EU sanctions list can also be consulted on the official European Commission portal.
What types of restrictive measures does this sanctions regime apply?
Two types: travel ban to the Schengen area for listed natural persons, and asset freezing in the EU for all natural and legal persons included in the list. No company or financial entity can make funds available to the sanctioned parties.
What sectors are obliged to update their compliance systems?
Mainly credit entities, insurers and export companies, according to the text of the regulation itself. Consultancies, law firms, payment platforms and any company with commercial or financial relationships with counterparties in territories linked to the conflict are also affected.
Official source
Consult complete regulation on official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026D2161
