RegRally Insights: Sanctions Regulation, November 2026

1,569 new sanctions listings took effect in a single day. Was your screening system ready?

On October 12, 2026, the EU added 826 entities and 743 persons from Russia’s military-industrial complex to its asset freeze list, with immediate effect. Obliged entities and businesses with Russia-related counterparties or supply chains should rescreen their customers and counterparties now.

November’s RegRally Insights also examines changes to the Democratic Republic of the Congo (DRC) sanctions regime, effective October 28, 2026, including expanded arms-related restrictions and a broader anti-circumvention clause. It also covers Estonia’s national ban on Russian and Belarusian grain transit, effective October 8, 2026.

EU freezes assets of 1,569 persons and entities linked to Russia’s military-industrial complex

Date: October 12, 2026 | Source: Council Implementing Regulation (EU) 2026/2281 of October 12, 2026
Link (Implementing Regulation (EU) 2026/2281) | Link (Regulation (EU) No 269/2014)

The Council of the European Union adopted Implementing Regulation (EU) 2026/2281 on October 12, 2026. It was published in the Official Journal on October 12, 2026, and entered into force on the day of publication. The regulation adds 826 entities and 743 persons to Annex I to Regulation (EU) No 269/2014, the regime on actions undermining the territorial integrity, sovereignty and independence of Ukraine. All new entries have a listing date of October 12, 2026.

The Council lists these entities because they appear on a Russian government list of companies that belong to Russia’s military-industrial complex and are entitled to state subsidies. The persons are listed as executives of those entities. Each entry gives the name in Latin and Russian script, the function held and, for many entries, a tax identification number. Persons are entered under numbers 2199 to 2941 and entities under numbers 1010 to 1835 of Annex I.

Under Article 2 of Regulation (EU) No 269/2014, all funds and economic resources belonging to, owned, held or controlled by a listed person or entity must be frozen, and no funds or economic resources may be made available to them or for their benefit, directly or indirectly.

Why it matters

The listings applied from the day of publication, with no transition period. From October 12, 2026, payments, deliveries and releases of funds to newly listed persons or entities are prohibited, including through intermediaries, unless an applicable exemption or authorization permits them. Many listed persons are directors of the listed companies, so their names may also appear in beneficial ownership and management records for other customers.

What we recommend

Obliged entities and businesses with Russia-related counterparties should:

• confirm that the screening tool loaded the October 12, 2026 update and rescreen the full customer and counterparty base, including directors and beneficial owners;
• review transactions processed since October 12, 2026, for matches and apply the internal freezing and reporting procedure to any confirmed hit;
• check suppliers, distributors and buyers for entities on the list and for companies owned or controlled by them;
• use the tax identification numbers in the Annex to tune matching rules and reduce false positives.

---

EU expands DRC arms restrictions and anti-circumvention rules

Date: October 27, 2026 | Source: Council Regulation (EU) 2026/2374 of October 26, 2026 amending Regulation (EC) No 1183/2005
Link

On October 26, 2026, the Council adopted Regulation (EU) 2026/2374 amending Regulation (EC) No 1183/2005 on restrictive measures in view of the situation in the DRC. It gives effect to Council Decision (CFSP) 2026/2372 and to UN Security Council Resolution 2825 (2026). It was published in the Official Journal on October 27, 2026, and entered into force on October 28, 2026.

Key changes include:

• Arms and financing ban. It is prohibited to sell, supply, transfer or export items on the Common Military List, firearms and ammunition to any non-governmental entity or person operating in the DRC, and to provide related technical assistance, brokering or other services, or financing or financial assistance. Financing is defined broadly: grants, loans, guarantees, suretyships, bonds, letters of credit, supplier and buyer credits, import and export advances and all types of insurance and reinsurance. Payment of an agreed price on normal business terms is not financing.
• Derogations. Competent authorities may authorize supplies and related services for the United Nations Organization Stabilization Mission in the Democratic Republic of the Congo (MONUSCO) or the African Union Regional Task Force, protective clothing for UN personnel, media and humanitarian workers, non-lethal equipment for humanitarian or protective use, or supplies approved in advance by the UN Sanctions Committee.
• New listing criterion. Persons who deliberately and gravely obstruct MONUSCO’s mandate may now be listed.
• Anti-circumvention. Knowing or intentional participation in circumvention now expressly includes cases where a person does not seek that result but is aware that their participation may have that effect and accepts that possibility.
• Information duty. Persons and entities must immediately supply information that facilitates compliance, such as information on frozen accounts and amounts, to the competent authority and cooperate in its verification, subject to judicial confidentiality and legal professional privilege.
• Territorial scope. The regulation applies within the EU, to EU nationals and EU-incorporated entities anywhere, and to any business done in whole or in part within the EU.

Why it matters

For obliged entities, the amendment defines financing broadly, so the existing ban on financing military supplies to non-governmental buyers in the DRC expressly covers loans, guarantees, letters of credit and insurance. Such financing can breach the regulation even if the buyer is not listed.

What we recommend

Obliged entities should:

• add end-user checks for DRC-related trade finance, guarantees and insurance, focusing on non-governmental counterparties and military or dual-use goods;
• make sure information on frozen funds is reported to the competent authority immediately;
• reflect the “accepting the possibility” standard of circumvention in sanctions training and escalation rules.

---

Estonia bans Russian and Belarusian grain transit from October 8, 2026

Date: October 7, 2026 | Source: Government of Estonia Regulation No 99 of October 2, 2026 amending Regulation No 93 of September 29, 2022 (national sanction)
Link

On October 2, 2026, the Estonian Government adopted Regulation No 99 under section 27(1) of the International Sanctions Act. It amends Regulation No 93 of September 29, 2022, which established a national (Government) sanction banning the purchase of certain goods in connection with Russia’s aggression in Ukraine supported by Belarus. It was published in Riigi Teataja on October 7, 2026, and entered into force on October 8, 2026.

The sanction now also prohibits transporting through Estonian territory, delivering or transferring goods originating in or exported from Russia or Belarus that fall under Combined Nomenclature code 10 (cereals). The title of the regulation now refers to a ban on the purchase and transfer of goods.

Why it matters

The ban is a national Estonian measure adopted under the International Sanctions Act, not an EU regulation, so it is not part of the EU sanctions framework and has to be added to sanctions rulebooks separately. It is a ban on goods movements, and the regulation does not address financial services.

What we recommend

Obliged entities with Estonian trade or logistics clients should:

• add the Estonian national sanction to the sanctions rulebook and to transaction monitoring scenarios for cereals of Russian or Belarusian origin;
• review clients active in transit, port services, freight forwarding and grain trading;
• ask affected clients to confirm how they comply with the ban.

---

Our view

The October package tests how quickly sanctions programs can process a large number of new listings, rather than how they interpret the rules. Close to 1,600 new names took effect on the day they were published, so a firm that relies on a monthly screening cycle or a manual list upload has already been exposed for several weeks.

Use the package to test your controls: check when the screening system received the update, how many alerts it generated and how quickly those alerts were closed. The listed executives also serve on the boards of other companies and appear in their ownership charts, which is where indirect exposure is most often missed.

The DRC amendment and the Estonian grain ban are smaller, but they show two trends. EU regimes are being rewritten to a common template, with a broad definition of financing and an anti-circumvention standard that covers accepting the possibility of circumvention. National measures are also growing alongside the EU lists, and screening built only on EU data will miss them.

---

How ECOVIS ProventusLaw can help with sanctions compliance

We advise obliged entities and businesses trading with sanctioned regions on applying EU sanctions in daily operations.

• Screening review: testing whether screening tools and list updates cover new EU listings on the day they apply, including beneficial owners and directors.
• Exposure assessment: reviewing customers, counterparties and supply chains for listed persons and for entities they own or control.
• Sanctions policies and procedures: drafting and updating sanctions policies, freezing and reporting procedures and internal controls.
• Handling matches: advising on confirmed or potential matches, frozen funds and communication with the competent authorities.
• Training: training compliance teams and management on EU sanctions obligations and red flags.
• National sanctions: mapping Lithuanian, Latvian and Estonian national sanctions and building them into screening and monitoring.

Contact our sanctions team to test your screening against the October 12, 2026 listings.

---

Why ECOVIS ProventusLaw

ECOVIS ProventusLaw has advised financial institutions for many years and is one of the most experienced financial regulatory law firms in the Baltics. The firm is ranked by IFLR1000, The Legal 500 and Chambers and Partners.

Our Banking and Finance & FinTech department has separate regulatory, compliance and audit teams. They work together to provide coordinated legal and operational support across licensing, anti-money laundering and counter-terrorist financing (AML/CFT), sanctions, internal controls and regulatory risk management, and our audit team adds experience in independently testing sanctions controls. Members of our audit team have carried out more than 50 internal and external AML and sanctions audits. When the EU adds as many listings as it did in the October Russia package, our teams can assess both the client’s legal exposure and its screening and freezing processes.

With teams in Lithuania, Latvia and Estonia, we act as a single point of contact for regulatory and compliance matters across the Baltic region. As part of the ECOVIS International network, present in more than 90 countries, we also support clients whose business crosses several jurisdictions.

We were among the first legal advisors to crypto businesses in the Baltics and have advised on more than 40 end-to-end licensing projects, from business structuring and regulatory applications to ongoing supervision and compliance.