Key data
| Regulation | Commission Implementing Regulation (EU) 2026/2333 — CELEX:32026R2333 |
|---|---|
| Base regulation applied | Regulation (EU) No 269/2014 |
| Publication | 15 October 2026 |
| Entry into force | 15 October 2026 (immediate effect) |
| Affected parties | Companies, financial entities and persons with commercial links to the sanctioned |
| Measures | Freezing of assets and prohibition on making funds available to listed persons |
| Category | European Regulation |
| Year | 2026 |
If your company operates internationally, has clients or suppliers in the post-Soviet space, or manages third-party assets, this regulation requires you to review your sanctions screening lists today. Commission Implementing Regulation (EU) 2026/2333, published on 15 October 2026, expands or modifies the list of designated persons under Regulation (EU) 269/2014, the EU's sanctions framework relating to actions undermining the territorial integrity, sovereignty and independence of Ukraine. The regulation applies directly in all Member States, including Spain, without need for transposition.
What does this regulation establish?
Regulation (EU) 2026/2333 is an implementing regulation: it does not create a new sanctions regime, but rather updates the list of natural and legal persons already subject to the regime established by Regulation (EU) 269/2014. The measures applied to the newly designated persons are as follows:
- Asset freezing: all funds and economic resources belonging to or in the possession, custody or control of the listed persons are immediately immobilized.
- Prohibition on making funds available: no European person or entity may transfer, assign, provide or make funds or economic resources available to the sanctioned persons, either directly or indirectly.
The regulation expands or modifies the existing list, meaning that some designated persons may have their sanctions conditions modified (for example, updating of identifying data or extension of measures) and others are incorporated for the first time. Companies must treat both scenarios with equal urgency.
| Measure | Description | Application |
|---|---|---|
| Asset freezing | Immobilization of funds and economic resources of designated persons | Immediate from 15/10/2026 |
| Prohibition on making funds available | Ban on transfers, assignments or provision of resources to listed persons | Immediate from 15/10/2026 |
| Update or expansion of the list | New natural and legal persons added or modified in the annex to Regulation 269/2014 | Applicable in all EU Member States |
Economic and operational impact
The impact is not only legal: it is operational and economic. Maintaining an active commercial or financial relationship with a sanctioned person—even unintentionally—may result in criminal and administrative liability for the company and its directors in Spain. The consequences include:
- Blocking of ongoing operations with listed counterparties.
- Obligation to report to competent authorities any frozen assets or blocked transaction attempts.
- Risk of administrative and criminal sanctions for non-compliance, the severity of which depends on each Member State's legislation.
- Reputational damage and review by correspondent financial entities or external auditors.
The operational cost of updating compliance systems—list review, counterparty screening, internal training—is significantly lower than the cost of non-compliance. Companies with automated control systems must update their sanctions databases immediately; those operating with manual processes must initiate an urgent manual review of their portfolio of clients, suppliers and partners.
Who does it affect?
- Financial entities: banks, insurance companies, fund managers, payment entities and any institution managing assets or conducting international transfers.
- Companies with international operations: especially those with clients, suppliers or partners in Russia, Belarus, occupied territories of Ukraine or other jurisdictions linked to the conflict.
- Companies in any sector with commercial relations with the newly designated persons: sanctions do not distinguish by sector of activity.
- Advisors, lawyers and consultants: providing services to listed persons or entities may incur liability if they fail to verify their clients' status.
- Directors and compliance officers: who have the direct obligation to ensure compliance within their organizations.
Practical example
A Spanish industrial machinery company has an active supply contract with a company based in a third country. Following the publication of Regulation (EU) 2026/2333 on 15 October 2026, that company appears on the expanded list of designated persons under Regulation 269/2014.
From that moment on, the Spanish company is prohibited from executing any pending deliveries, collecting outstanding invoices or maintaining any economic flow with that counterparty. It must also freeze the assets of that company that are under its control (for example, advances received or goods in storage) and notify the Spanish competent authority. If the company continues operating normally without having updated its sanctions screening list, its directors may face criminal liability, regardless of whether they knew of the designation or not.
This scenario is not hypothetical: it is the real risk to which any company that fails to update its counterparty screening systems after each list expansion is exposed.
What should companies do now?
- Immediately update sanctions screening lists: incorporate the newly designated persons from Regulation (EU) 2026/2333 into counterparty screening systems. If external list providers are used (World-Check, Dow Jones, etc.), verify that the update is already available.
- Review the active portfolio of clients, suppliers and partners: cross-reference the list of current counterparties with the newly designated persons. Pay special attention to complex corporate structures where the sanctioned person may be the beneficial owner, not the direct entity.
- Block ongoing operations with identified designated persons: stop payments, deliveries and any economic flow with listed counterparties until receiving specific legal advice.
- Notify the competent authority: if frozen assets are detected or blocked transaction attempts occur, report to the corresponding national authority (in Spain, the State Secretariat for Economy or the Bank of Spain depending on the type of entity).
- Document all actions taken: record the reviews conducted, results and decisions adopted. This documentation is key in case of inspection or subsequent investigation.
- Train the compliance team and commercial managers: ensure that those managing third-party relationships know the obligation to verify the sanctions status of counterparties before initiating or renewing any commercial relationship.
Frequently asked questions
What happens if my company operates with a client who has just been added to the sanctions list?
You must immediately stop any operation, payment or delivery with that client. Funds or assets under your control belonging to the sanctioned person must be frozen and reported to the competent authority. Continuing to operate normally may result in criminal and administrative liability for the company and its directors, regardless of whether they knew of the designation.
When does Regulation (EU) 2026/2333 enter into force and from when must I comply with it?
The regulation entered into force on the same day as its publication: 15 October 2026. There is no transitional period. The compliance obligation is immediate for all European companies and financial entities, including Spanish ones.
How can I find out if any of my clients or suppliers are on the sanctions list?
The consolidated list of persons and entities subject to EU sanctions is available on the EU Sanctions Map and in Regulation (EU) 269/2014 and its implementing acts on EUR-Lex. Many companies also use specialized sanctions list providers that update their databases in real time.
What are the consequences of non-compliance with EU sanctions in Spain?
Non-compliance may result in criminal and administrative liability. In Spain, sanctions for breach of the EU restrictive measures regime are processed under foreign trade control regulations and may include significant financial penalties, disqualification of directors and, in the most serious cases, criminal liability. The severity depends on the type of infraction and whether there was intent.
Does this regulation only affect companies with operations in Ukraine or Russia?
No. The regulation affects any European company or financial entity that has any type of commercial or financial relationship with the natural or legal persons included on the list, regardless of the country where they are located. Sanctioned persons may operate from third countries, so screening must be applied to the entire portfolio of counterparties, not just those based in the conflict zone.
Official source
Consult the full regulation at official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026R2333
