Key data
| Regulation | Council Decision (EU) 2026/1522, of 4 June 2026 |
|---|---|
| Official reference | OJ:L_202601522 |
| Publication | 3 July 2026 |
| Entry into force | 4 June 2026 |
| Affected parties | Judicial and prosecutorial authorities of the EU and Lebanon; citizens investigated in cross-border criminal cases |
| Category | European Regulation |
| Year | 2026 |
| Areas covered | Organized crime, terrorism, drug trafficking, money laundering and other serious cross-border offences |
Spain and the rest of the EU Member States have had, since 4 June 2026, a new legal instrument to prosecute cross-border crime involving Lebanon. The Council Decision (EU) 2026/1522 approves the cooperation agreement between Eurojust —the EU Agency for Criminal Justice Cooperation— and the competent authorities of the Lebanese Republic. The decision is binding on all Member States of the European Union.
The agreement is not a statement of intent: it establishes an operational legal framework for the exchange of information, transfer of personal data and mutual assistance in active criminal investigations and proceedings. For companies, advisors and executives with exposure to operations in Lebanon, this change has direct implications for compliance and legal risk.
What does this regulation establish?
The agreement creates a formal framework for criminal judicial cooperation between Eurojust and the judicial and prosecutorial authorities of Lebanon. Its main elements are:
- Exchange of information and personal data: Eurojust may share data with the competent Lebanese authorities, with data protection guarantees in accordance with European standards.
- Mutual assistance in investigations: It allows coordination of actions between prosecutors and judges of both parties in active cases.
- Areas of application: Organized crime, terrorism and other serious cross-border offences. For Spain, the most relevant cases are drug trafficking, money laundering and terrorism involving Lebanese parties.
- Data protection guarantees: The transfer of personal data to Lebanon must respect European data protection standards, which implies specific safeguards in each exchange operation.
This agreement is part of the EU's policy of establishing bilateral agreements with third countries through Eurojust, following the model already in place with other non-EU States. The decision is binding on all Member States, including Spain.
Economic and operational impact
This agreement does not generate direct costs for private companies, but it has operational and risk consequences that should not be ignored:
- Greater exposure in cross-border criminal investigations: Companies with operations, business partners or financial flows linked to Lebanon may be involved in criminal proceedings coordinated between European and Lebanese authorities more easily than before.
- Money laundering risk: The agreement strengthens investigative capacity in cases of money laundering with origin or destination in Lebanon. Financial entities and advisors must exercise extreme due diligence in operations with Lebanese counterparties.
- Data protection in the spotlight: Any transfer of personal data of European citizens to Lebanese authorities under this agreement must comply with European standards. Companies operating in both markets must review their data flows.
- Institutional channel for Spain: For the Spanish judicial system, this agreement represents an additional and formal channel for cases involving Lebanon, which can accelerate proceedings that previously depended on slower diplomatic channels.
Who does it affect?
- Spanish and European judicial and prosecutorial authorities with active cases involving Lebanon.
- Financial and credit entities with operations or clients linked to Lebanon, especially in the prevention of money laundering.
- Companies with commercial activity or investments in Lebanon that may be involved in cross-border investigations.
- Legal advisors and compliance officers managing cases with Lebanese exposure.
- Citizens and companies investigated in cross-border criminal cases involving both jurisdictions.
- Data protection officers in organizations that transfer personal data in judicial or investigative contexts with Lebanon.
Practical example
Imagine a Spanish import company with a Lebanese supplier. Spanish tax authorities detect irregular financial movements and suspect money laundering. Before this agreement, coordination with Lebanese authorities to obtain information about the supplier depended on slow diplomatic channels with no guarantee of response.
With the agreement in force since 4 June 2026, Eurojust can coordinate directly with the competent Lebanese prosecutors to request information, data and assistance in the investigation. The exchange of personal data of the Lebanese supplier is carried out under European data protection guarantees. The result: more agile proceedings and a greater likelihood that the investigation will reach a successful conclusion, with direct implications for the Spanish company involved.
For the compliance officer of that company, the practical conclusion is clear: due diligence on Lebanese counterparties must be strengthened, because the risk of being involved in a criminal proceeding coordinated at European level is now more real.
What should companies do now?
- Review exposure to Lebanese counterparties: Identify whether your company has suppliers, customers, partners or financial flows linked to Lebanon. Assess the level of criminal risk associated.
- Strengthen due diligence in money laundering prevention: If you operate with Lebanese counterparties, update your KYC (know your customer) and AML (anti-money laundering) procedures in light of the new judicial cooperation framework.
- Review personal data flows with Lebanon: If your company transfers personal data of European citizens to Lebanese entities, verify that data protection guarantees comply with European standards required by the agreement.
- Inform the legal and compliance department: Ensure that your legal team is aware of the existence of this cooperation channel and its implications for active or potential cases with Lebanese exposure.
- Consult with specialized advisors: If you have relevant operations in Lebanon or pending cases with cross-border involvement, seek specialized legal advice in international criminal law and European regulatory compliance.
Frequently asked questions
When did the Eurojust-Lebanon agreement come into force?
The agreement came into force on 4 June 2026, the date of signature of Council Decision (EU) 2026/1522. Its publication in the EU Official Journal took place on 3 July 2026.
What offences does the criminal judicial cooperation agreement with Lebanon cover?
The agreement covers organized crime, terrorism and other serious cross-border offences. For Spain, the most relevant areas are drug trafficking, money laundering and terrorism involving Lebanese parties.
Does this agreement impose obligations on all Spanish companies operating with Lebanon?
It does not generate direct obligations for private companies, but the decision is binding on all EU Member States, including Spain. Companies with Lebanese exposure must strengthen their compliance protocols and due diligence, as the risk of being involved in coordinated criminal investigations is now greater.
What data protection guarantees apply to transfers to Lebanon?
The agreement establishes that transfers of personal data to Lebanon must be carried out in accordance with European data protection standards. This implies specific safeguards in each information exchange operation between Eurojust and Lebanese authorities.
What is Eurojust and what role does it play in this agreement?
Eurojust is the European Union Agency for Criminal Justice Cooperation. Under this agreement, it acts as the EU's institutional interlocutor with the judicial and prosecutorial authorities of Lebanon, coordinating cross-border criminal investigations and proceedings between both parties.
Official source
Consult full regulation in official source
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=OJ:L_202601522