EU Sanctions on Ukraine: corrections to lists requiring immediate compliance updates

Key data

If your company operates with international counterparties, moves capital or has commercial relationships with entities in the post-Soviet space, this correction directly affects you. Commission Implementing Regulation (EU) 2026/695, published on 14 March 2026, applies restrictive measures under the Regulation (EU) No 269/2014 on actions undermining the sovereignty and territorial integrity of Ukraine. The correction of errors published on 19 June 2026 modifies formal aspects of that regulation—identifying data of sanctioned persons or entities—and requires all operators to synchronize their control systems immediately.

This is not a minor change. An incorrect identifying data point in a sanctions list can cause both false negatives (allowing a sanctioned entity to pass) and false positives (blocking legitimate operations). Both scenarios have operational and legal consequences.

What does this regulation establish?

This correction of errors modifies Commission Implementing Regulation (EU) 2026/695, which in turn applies the restrictive measures of Regulation (EU) No 269/2014. The corrections affect identifying data of natural and legal persons included in EU sanctions lists related to the conflict in Ukraine. The types of data that may have been corrected are:

• Names of natural or legal persons subject to sanctions
• Dates of birth of natural persons
• Descriptions of entities or reasons for inclusion in the list

The correction does not add new persons or entities to the list nor remove any already included: its scope is strictly formal. However, from a regulatory compliance perspective, any discrepancy between the corrected data and that appearing in a company's internal systems may generate a technical breach.

The regulatory framework of reference is as follows:

Economic and operational impact

The impact is not in direct costs derived from the regulation, but in the risk of non-compliance generated by operating with outdated lists. The consequences of not updating compliance systems can be:

• Administrative and criminal sanctions for operating with entities or persons included in EU sanctions lists, even if the error comes from outdated data in the company's own systems.
• Blocking of financial operations and freezing of assets if authorities detect transactions with sanctioned counterparties.
• Reputational damage to clients, investors and regulators, especially in financial and international trade sectors.
• Operational review costs: compliance departments will need to dedicate resources to verify and update their counterparty databases.

Non-compliance with current sanctions can result in serious legal and economic consequences for European operators, as expressly stated in the regulation summary. The severity of sanctions varies by Member State, but in Spain the sanctioning regime regarding EU restrictive measures can involve substantial fines and, in serious cases, criminal liability.

Who does it affect?

• Financial and banking entities: banks, savings banks, payment entities and fund managers with counterparty screening obligations.
• Exporting and importing companies with activity in international markets, especially in the post-Soviet space or with supply chains passing through that region.
• Compliance and legal departments of any company with international operations.
• Advisors and consultants managing regulatory compliance for third parties.
• Foreign trade operators: freight forwarders, customs agents and logistics companies.
• Technology and service companies providing services to entities or persons that may be on sanctions lists.

Practical example

A Spanish industrial machinery company operates with distributors in several countries and conducts periodic verification of its counterparties against EU sanctions lists. Its compliance system uses a database that was last updated in April 2026, following the publication of Commission Implementing Regulation (EU) 2026/695.

With the correction of errors published on 19 June 2026, one of the identifying data points—for example, the spelling of a name or the date of birth of a sanctioned natural person—has been modified. If the company's system does not incorporate this correction, it may occur that:

• The system fails to detect that person in a screening because the name does not exactly match the corrected data.
• The company processes a transaction with a sanctioned counterparty without knowing it, assuming responsibility for non-compliance.

The solution is simple but urgent: update the sanctions data source with the corrected version published on 19 June 2026 and document the update process to demonstrate due diligence in any regulatory inspection.

What should companies do now?

1. Immediately update sanctions lists in compliance systems with the corrected version published on 19 June 2026 (OJ:L_202690507). Do not wait for the next scheduled update cycle.
2. Verify the data source used: check whether the sanctions list provider (internal or external) has already incorporated the correction. If not, request the update urgently.
3. Review recent operations: if between 14 March and 19 June 2026 operations were conducted with counterparties that could be affected by the corrected data, a retroactive review is advisable and should be documented.
4. Document the update process: keep evidence of when and how systems were updated. This is key to demonstrating due diligence in an inspection.
5. Inform operations and finance teams: compliance is not the only department that needs to know. Anyone approving payments, contracts or commercial relationships should be aware.
6. Consult with specialized legal advisors if there is doubt about whether any current or recent counterparty could be affected by the corrected data.

Official source

View complete regulation in official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202690507