The criminal enforcement of EU sanctions in the Netherlands has entered a more demanding phase following the adoption of the EU Sanctions Crime Directive, which obligates member states to treat serious sanctions violations as criminal offences subject to effective, proportionate and dissuasive penalties. For companies operating in or through the Netherlands – whether as a BV, a branch or a fund vehicle – this means that conduct previously addressed through administrative channels, such as breaches of asset freeze obligations or export controls, can now give rise to criminal prosecutions and personal liability for directors. Understanding the Dutch implementation framework, the open questions it leaves, and the cross-border exposure it creates is essential for any organisation with a nexus to the Netherlands.
The Legislative Foundation: Directive, Regulation and Dutch Law
The EU's approach to sanctions enforcement has historically been fragmented, with member states applying divergent standards for penalties and definitions of prohibited conduct. The Sanctions Crime Directive addressed this directly by establishing minimum rules across the EU for the criminalisation of conduct that violates restrictive measures – covering, among other things, making funds available to designated persons, breaching an asset freeze, enabling circumvention, and providing prohibited services.
In the Netherlands, criminal sanctions law sits at the intersection of the Wet economische delicten (Economic Offences Act) and the substantive prohibitions contained in EU regulations such as Council Regulation (EU) 833/2014 and the successive packages of Russia-related restrictive measures. The Economic Offences Act has long been the vehicle for criminalising breaches of EU-derived trade and sanctions obligations, and it remains the principal instrument through which violations are elevated from regulatory infringements to criminal acts. Implementation of the Directive's specific requirements at the national level is subject to ongoing legislative process; where national rules have not yet been enacted or confirmed, the pre-existing Economic Offences Act framework continues to apply, with the Directive setting a floor that Dutch courts are expected to respect.
Supervisory oversight in the financial sector is shared between the national competent authorities identified in the annexes to Regulation (EU) 833/2014 – including the financial market and prudential supervisors, broadly understood as the AFM and DNB – and the Public Prosecution Service (Openbaar Ministerie), which retains sole authority over criminal proceedings. The Hoge Raad, as the Netherlands' highest court in civil and criminal matters, has the final interpretive word on how EU sanctions obligations interact with domestic criminal law.
What Counts as a Criminal Offence: Core Prohibitions and Grey Areas
The Directive identifies a core list of conduct that must be criminalised. In the Dutch context, the most operationally significant categories are:
- Making funds or economic resources available to a designated person or entity, including indirect availability through intermediaries, subsidiaries or agents.
- Circumvention of restrictive measures – structuring transactions, corporate reorganisations or payment flows specifically to avoid the application of a prohibition.
- Failure to freeze assets of designated persons that are held, owned or controlled by a party subject to EU law.
- Breach of export controls on dual-use goods, advanced technology, and items listed under the successive Russia packages.
- Providing prohibited services, including legal advisory, accounting, trust and company services that are banned under Regulation 833/2014 as amended.
Significant open questions remain regarding the best-efforts obligation: the Directive requires member states to criminalise conduct where a person "knows or should have known" that their actions contribute to a violation. Dutch law has traditionally applied a subjective intent standard for the most serious Economic Offences Act categories, but the Directive pushes toward a negligence-adjacent standard in certain circumstances. How the Hoge Raad will ultimately reconcile these standards is not yet settled, and this interpretive uncertainty is itself a material compliance risk for businesses that rely on due diligence procedures as a defence.
Another grey area concerns corporate liability. Dutch criminal law permits the prosecution of legal entities alongside or instead of natural persons. For a BV registered with the KvK, this means the entity itself – not only its directors – can face criminal conviction, reputational consequences and, potentially, restrictions on future business activity. Directors and senior managers who "directed or facilitated" the offending conduct face personal prosecution; the company's registration with the KvK does not insulate individuals.
The Most Recent Sanctions Packages: Cumulative Obligations
The substantive prohibitions that Dutch prosecutors will rely upon have grown considerably in scope and complexity. Several recent developments are directly relevant to the criminal enforcement analysis.
The EU 20th package, adopted on 23 April 2026, introduced a ban on transactions involving the digital rouble and the RUBx instrument, effective from 24 May 2026. Any Dutch entity – bank, payment service provider or corporate treasury – that processed or settled transactions denominated in or convertible to these instruments after that date faces potential criminal exposure if it cannot demonstrate that the transaction fell within a permitted exception or that no knowledge of the instrument's nature could reasonably be attributed to it.
The EU 21st package, adopted on 23 July 2026 under Council Regulation (EU) 2026/1848, extended prohibitions into the energy, financial services and crypto-asset sectors. The Russian LNG import ban applies from 25 April 2026 for most contracts; for long-term contracts concluded before 17 June 2025, the ban takes effect from 1 January 2027. Dutch energy traders and utilities that are parties to such long-term contracts must ensure they have documented the contractual date and structure their wind-down arrangements accordingly, as prosecutors may scrutinise the period between the general ban date and the long-term contract grace deadline.
The divestment derogation allowing EU operators to exit Russian assets has been extended to 31 December 2026. This extension provides a defined operational window, but it does not suspend the underlying prohibitions on new investment or on transactions that fall outside the derogation's defined scope. Entities relying on this derogation must ensure that each step of the exit process is documented against the specific criteria, as partial reliance on a derogation that turns out not to apply is unlikely to be treated sympathetically by prosecutors.
If your organisation is assessing exposure under these packages or is planning transactions that touch on energy, financial services or crypto assets with a Russia nexus, we would encourage you to reach out to our team at info@ferrazwhitmore.com or visit our contacts page to discuss the specific facts of your situation.
Sanctions Screening and the Best-Efforts Standard in Practice
One of the most practically significant aspects of the Directive's transposition in the Netherlands is the standard to which sanctions screening programmes will be held when a violation is alleged. The Directive does not mandate a specific screening methodology, but it requires that member states ensure the criminal provisions can reach conduct where knowledge is imputed on a "should have known" basis.
In practice, this means that the adequacy of an organisation's sanctions screening infrastructure – its list-matching tools, its ownership and control analysis for entities appearing on lists, its transaction monitoring for indicators of circumvention – will be examined by investigators as part of establishing whether the requisite mental element is present. A well-documented, risk-based screening programme that was genuinely applied, reviewed and updated will be material to any defence. Conversely, a programme that existed on paper but was not operationally effective, or that was not updated to reflect the 20th and 21st package changes as they took effect, is unlikely to provide meaningful protection.
The best-efforts obligation is particularly acute in the context of third-party relationships. Dutch companies that engage intermediaries, agents or distributors in jurisdictions with different sanctions frameworks – including, for example, entities with Armenia or other transit-route exposure – must conduct enhanced due diligence on the end-use and end-user of goods and services. The European Commission's guidance on intermediaries and the measures introduced in the 21st package targeting circumvention through third countries are relevant to this analysis; our alert on the 21st package's approach to intermediaries and Armenia provides further detail on those specific risks.
Cross-Border Implications: Switzerland and Other Hubs
The Netherlands sits at the centre of a number of cross-border corporate and trading structures. Dutch holding companies commonly sit above operating subsidiaries in multiple jurisdictions; Dutch banks and payment processors handle flows that originate or terminate in jurisdictions that have adopted different or more limited sanctions regimes.
The Directive's extraterritorial reach – which extends to EU persons and EU-incorporated entities acting outside the EU, and to conduct on EU territory regardless of the actor's nationality – means that a transaction routed through a non-EU hub does not automatically escape EU criminal jurisdiction. Switzerland, for example, maintains its own autonomous sanctions regime that partially mirrors EU measures but diverges on specific items and entities; a structure that is compliant under Swiss law is not automatically compliant under EU law, and Dutch prosecutors are not bound by Swiss regulatory assessments. Clients with Swiss-connected structures should review the interaction of the two regimes carefully; our sanctions and trade practice in Switzerland is available to coordinate on cross-border mandates, and further information is available at our Switzerland sanctions and trade page.
For Dutch entities specifically, the national competent authority listed in the annexes to Regulation (EU) 833/2014 retains the power to issue guidance, grant derogations and refer cases to prosecutors. Administrative clearance from that authority does not, however, preclude criminal prosecution, particularly where a derogation was obtained on incomplete or incorrect information.
Strategic Recommendations for Organisations with Netherlands Exposure
Given the current enforcement environment, organisations with a material nexus to the Netherlands should consider the following practical steps as a matter of priority:
- Gap analysis against the Directive: Map your current compliance programme against the Directive's minimum criminalisation requirements and the specific prohibitions in the most recent EU packages. Identify whether your screening covers the digital rouble and RUBx ban that took effect on 24 May 2026 and the 21st package's crypto and energy provisions.
- Documentation of divestment and wind-down steps: If you are relying on the Russia exit derogation (extended to 31 December 2026), ensure each transaction in the exit sequence is documented against the specific criteria. The derogation is not a general amnesty; it has defined parameters.
- Long-term LNG contract review: If you hold long-term Russian LNG contracts concluded before 17 June 2025, verify contract dates, structure and your obligations between the general ban date and the 1 January 2027 deadline applicable to your category.
- Third-party due diligence enhancement: Review intermediary and distributor relationships with exposure to high-risk transit jurisdictions. Document the due diligence conducted and the red flags assessed, particularly in light of the circumvention-focused provisions of the 21st package.
- Director and officer briefing: Ensure that natural persons who may face personal liability under Dutch criminal law understand the current state of the prohibitions and have received legal advice on their exposure. The Directive explicitly targets those who "directed or facilitated" violations.
- Privilege protection: Where internal investigations or compliance reviews are initiated, structure them from the outset to maximise legal professional privilege under Dutch law, ensuring that communications with a lawyer in the Netherlands are conducted in a manner that preserves their confidential character.
Our sanctions and trade practice in the Netherlands works with companies, funds and financial institutions across the full lifecycle of sanctions compliance – from programme design and gap analysis through to regulatory engagement and, where necessary, defence in criminal and administrative proceedings. You are welcome to contact us at info@ferrazwhitmore.com or through our contacts page to discuss how these issues may affect your organisation.
Outlook: Enforcement Trajectory and Remaining Uncertainties
The trajectory of EU sanctions enforcement in the Netherlands points clearly toward greater criminal prosecution activity. The Sanctions Crime Directive reflects a political commitment at EU level to move beyond administrative fines as the primary deterrent; the Dutch Public Prosecution Service has the tools, and increasingly the expectation, to use criminal law in this space. The succession of sanctions packages – with the 20th and 21st packages introducing new prohibitions across digital currency, energy and financial services in 2026 – means that the body of potentially criminal conduct continues to expand.
Several material uncertainties remain. The precise scope of the best-efforts obligation as it will be interpreted by Dutch courts, the interaction between the Directive's minimum standards and pre-existing Economic Offences Act categories, and the exact procedural mechanics of how the national competent authority's administrative findings will feed into criminal investigations are all questions that will be resolved through practice and, ultimately, through decisions of the Hoge Raad. Organisations should not wait for that jurisprudence to crystallise before reviewing their programmes; the standard of care expected in an enforcement action will be judged against what a reasonably diligent organisation in the same position should have done at the time of the alleged conduct.
For further guidance on the Netherlands-specific sanctions framework, including licensing procedures and competent authority engagement, please see our dedicated Netherlands sanctions and trade practice page. If you have a specific compliance question or are facing a potential enforcement situation, we invite you to write to us at info@ferrazwhitmore.com or visit our contacts page.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.