The Twentieth Package Reaches a Third Country

Sanctions compliance has, for most operators, been a list-checking exercise. A counterparty is screened, the screen returns clean, the transaction proceeds. The screening question is binary and the answer is a name.

The twentieth package makes that posture insufficient, and it does so through provisions that do not name anybody. Two of its features catch entities that appear on no list, and a third extends the framework's reach to a jurisdiction rather than to a person.

What was adopted, and when it bites

The package was adopted on 23 April 2026. The sectoral measures sit in Council Regulation (EU) 2026/506, amending Regulation 833/2014, and entered into force on 24 April; the individual designations sit in Council Regulation (EU) 2026/511 amending Regulation 269/2014, with Council Implementing Regulation (EU) 2026/509 alongside. The package as a whole runs across nine instruments, which is itself a useful signal about how much of this now sits outside the two regulations most compliance functions monitor.

The dates are staggered, and the staggering is where planning happens.

Transactions between EU persons and crypto-asset service providers established in Russia are prohibited from 24 May 2026 — all such providers, not a listed subset.

From 1 January 2027 it is prohibited to provide LNG terminal services, directly or indirectly, to any person or entity in Russia, or to any EU-established entity more than 50 per cent owned or controlled by a Russian citizen or by a person or entity in Russia. Existing contracts must terminate by that date.

Also from 1 January 2027, the purchase, import or transfer of natural gas condensate from LNG production plants originating in or exported from Russia is prohibited. Vessel-related measures phase differently again: services relating to Russian-flagged, Russian-certified or Russian-owned or managed LNG tankers are caught from 25 April 2026, while equivalent services for tankers operating in or for use in Russia but outside those categories are caught from 1 January 2027.

An operator reading only the adoption date will therefore see a package that appears to have taken effect in April. Several of its most commercially significant provisions take effect on a date eight months later, and one of them requires contracts to have been terminated by then rather than merely stopping performance.

The two provisions that catch unlisted entities

The LNG terminal prohibition contains a threshold test rather than a name. An EU-established entity more than 50 per cent owned or controlled by a Russian person is caught by the prohibition whether or not it has ever been designated, and the entity itself may be a long-standing counterparty with a European address, European management and a clean screening result. Ownership and control are not screening outputs. They are findings, and they require work on the register, the chain above the immediate holder, and the arrangements that confer control without conferring ownership.

The second is subtler. The package targets non-financial operators facilitating circumvention through netting and set-off arrangements. That is a prohibition addressed at a technique rather than at a party. Netting and set-off are ordinary commercial mechanics, used continuously and legitimately, and the provision does not make them unlawful. What it does is put the operator's own arrangements inside the compliance perimeter, where previously the perimeter ended at the identity of the counterparty. An operator can now be the subject of an enquiry about the structure of its settlement arrangements while every name in the transaction screens clean.

Read together, these mark a shift from asking who a counterparty is to asking what a structure does.

The third-country extension

The headline novelty is that the anti-circumvention tool was applied to a third country, Kyrgyzstan, for the first time.

The significance is not the particular jurisdiction. It is that the instrument exists, has now been used, and therefore has a precedent. An anti-circumvention framework that has been deployed once is a different planning object from one that sits unused in a regulation: intermediary jurisdictions are now within scope as a matter of course rather than as a theoretical possibility, and the relevant question for an operator with routing through any transit jurisdiction is no longer whether that jurisdiction is listed but whether the pattern of trade through it is the kind that has attracted the tool.

That question cannot be answered by screening either. It is answered by knowing what has happened to volumes through a corridor, which is corporate-intelligence work rather than compliance work, and the two functions frequently do not speak.

Obligations on the shape of a contract

One further development belongs with the two above, because it points the same way.

Sales of tankers to third countries must now carry a mandatory contractual clause prohibiting resale or transfer to Russia, and the seller must conduct a documented risk assessment of retransfer, implement proportionate controls, and notify the competent member state authority on any sale. The obligation is not to avoid a prohibited counterparty. It is to draft a particular term, to have evidenced the assessment behind it, and to have told a regulator.

That is a compliance obligation discharged in the drafting rather than at the screening stage, and it lands on functions that do not usually think of themselves as sanctions-exposed — commercial, legal and transaction teams rather than the compliance desk. It also creates a durable record: a documented risk assessment either exists or it does not, and its absence is discoverable long after the transaction closed.

The transitional periods work similarly, in that they reward operators who read past the adoption date. Wind-down for most affected imports runs to 25 July 2026, with certain copper alloys to 25 January 2027, and from 24 April 2026 importers of polished diamonds must supply a due-diligence statement at importation confirming the stones were not mined, processed or produced in Russia. Each of those is an operational change with a date, and none is discoverable from a name-based screen.

The arbitration provisions

The package also added protections for EU operators facing retaliatory proceedings in Russia, including a provision permitting transactions that would otherwise be prohibited where they are strictly necessary to ensure access to judicial, administrative or arbitral proceedings in a member state.

The mechanism is worth understanding precisely and the merits are not our subject. What it does is remove a bind that had become common: an EU party needing to participate in proceedings, or to fund participation, and finding that the steps required to do so were themselves prohibited. Whether the wider architecture of frozen assets should be used in one way or another is a political question on which this firm takes no position, and a piece that drifted into it would be commenting rather than describing.

The compliance consequence of the package is therefore structural rather than clerical. A screening function answers a question about names on a date. Ownership above fifty per cent, control exercised through arrangements rather than shares, settlement mechanics inside one's own treasury, and trade patterns through a transit jurisdiction are none of them answerable that way, and all four now sit inside the perimeter. An operator whose only sanctions capability is a screening tool has a capability calibrated to the previous framework.