EU Sanctions on Ukraine 2026: What Companies with Links to Russia Must Verify

Key data

If your company operates, trades or maintains financial relationships with counterparties in Russia or Ukraine, this regulatory correction directly affects you. The Rectification of Decision (CFSP) 2026/504, published on 11 August 2026 in the EU Official Journal, corrects inaccuracies detected after the original publication of 23 April 2026. Although it does not introduce new sanctioned parties, any correction in the data of designated persons or entities may invalidate previous verifications.

The sanctions under the 2014/145/CFSP regime—in force since the Crimea crisis and successively expanded—include two types of measures: travel bans to the EU and asset freezes for designated persons and entities. Operating with any of them, even unintentionally, exposes the company to administrative and criminal sanctions.

What does this regulation establish?

This act is a corrigendum: a formal correction published in the EU Official Journal to correct errors detected in Decision (CFSP) 2026/504, which in turn amended Decision 2014/145/CFSP, the EU's sanctioning framework against actions that compromise the territorial integrity, sovereignty and independence of Ukraine.

What it specifically establishes:

• Corrects material or formal errors detected after the original publication of 23 April 2026.
• Does not modify the list of sanctioned persons and entities: it does not add or remove designated parties.
• Does not expand or reduce the scope of the restrictive measures in force.
• The measures in force remain: travel ban to the EU and asset freeze for designated persons and entities.
• The correction has retroactive effect to the date of the original decision: 23 April 2026.

Economic and operational impact

At first glance, a correction of errors may seem like a minor formality. For companies with exposure to Russia or Ukraine, it is not. These are the real operational impacts:

• Mandatory re-verification of counterparties: If your company performed a compliance verification based on the original version with errors, that verification may be insufficient. The corrected data are the officially valid ones.
• Risk of operating with sanctioned entities: Any error in names, dates of birth, identifiers or corporate names in the original list could have generated false negatives in screening systems. The correction closes that gap.
• Cost of compliance: Updating sanctions control systems, relaunching due diligence processes and documenting verifications has a real operational cost, especially for companies without a specialized legal department.
• Reputational and legal risk: Non-compliance with the EU sanctions regime can result in regulatory investigations, blocking of financial operations and, in serious cases, criminal liability of directors.

Who does it affect?

• Export and import companies with commercial operations in Russia or territories affected by the conflict.
• Financial entities and banks that manage transfers, credits or investments with Russian or Ukrainian counterparties.
• CFOs and financial directors responsible for regulatory compliance in international operations.
• Legal advisors and compliance officers who manage sanctions programs for their clients or employers.
• Logistics and transport companies with routes or clients in the region.
• Investment funds and asset managers with positions in Russian or Ukrainian companies.
• Technology and service providers that operate with clients in Russia or Ukraine.

Practical example

A Spanish industrial machinery company has a Russian company as a client with which it maintains active contracts. In April 2026, its compliance team performed a verification of the counterparty against the list of sanctioned parties published with CFSP Decision 2026/504 and obtained a negative result (not sanctioned).

On 11 August 2026, the rectification is published that corrects formal errors in that same decision. If one of those errors affected the identifying data of the Russian entity (for example, an incorrect corporate name or an erroneous identifier), the April verification could have produced a false negative. The company must re-launch the verification against the corrected list and document the result before executing any new operation or collection.

Failing to do so exposes the company to the risk that, in case of inspection, it cannot prove a valid due diligence process on the official version of the regulation in force.

What should companies do now?

1. Access the corrected version of the sanctions list: Consult the rectification published in the EU Official Journal and compare it with the original version of CFSP Decision 2026/504 to identify what data has been corrected.
2. Re-verify all active counterparties with links to Russia or Ukraine against the updated and corrected list, especially if the previous verification was performed between 23 April and 11 August 2026.
3. Update sanctions screening systems (if automated tools are used) with the corrected data to avoid false negatives in future operations.
4. Document the re-verification process with date, source used and result obtained, to be able to prove it in the event of regulatory inspection.
5. Consult with your legal advisor or compliance officer if there are ongoing contracts or pending payments with counterparties that could be affected by the corrected data.
6. Establish an alert protocol for future corrigenda or updates to the 2014/145/CFSP sanctions regime, given that modifications are frequent in the context of the conflict in Ukraine.

Official source

View complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202690681