Germany sits at the centre of European trade and finance, making rigorous sanctions compliance both a legal obligation and a business-critical priority for any company operating there. EU sanctions regulations – including the most recent packages adopted in April and July 2026 – apply directly in Germany without separate transposition, and German authorities, including BaFin and customs prosecutors, actively enforce them. Ferraz & Whitmore advises international businesses, funds and GmbH structures on designing, testing and maintaining compliance frameworks that address the full scope of those obligations.
Why Sanctions Compliance Has Become Urgent for Germany-Based Operations
Germany's deep integration into global supply chains means that even a single mis-screened counterparty can trigger asset-freeze violations, export-control breaches or criminal referrals. The pace of regulatory change has accelerated sharply: the EU's 20th sanctions package entered into force on 23 April 2026, followed by the 21st package – Regulation (EU) 2026/1848 – adopted on 23 July 2026. The 21st package, among other measures, introduced a ban on transactions involving the digital rouble (RUBx) with effect from 24 May 2026.
At the same time, Council Regulation (EU) 2026/506 (23 April 2026) created a significant new instrument: anti-suit protection for EU persons who are subjected to proceedings brought by sanctioned Russian persons in Russian courts in breach of valid jurisdiction clauses or arbitration agreements. This matters directly to German exporters and financial institutions that hold or negotiate contracts with Russian counterparties – any threat of parallel Russian litigation now carries a distinct EU-law response mechanism. Switzerland adopted a parallel provision under its own framework (art. 29d), which is relevant for cross-border structures involving both jurisdictions.
Against this backdrop, a compliance programme that was adequate in 2024 may already be materially deficient. Companies that rely on infrequent, manual sanctions screening, or that have not reviewed their supply-chain documentation since the 21st package, carry real enforcement risk.
Core Legal Obligations Under EU Sanctions in Germany
EU sanctions regulations impose obligations that apply to all natural and legal persons within Germany, to German nationals abroad, and – crucially – to transactions processed through German financial institutions or involving goods passing through German territory. The principal obligations include:
- Asset freeze compliance: funds and economic resources belonging to designated persons must be frozen immediately upon designation; no funds may be made available, directly or indirectly.
- Prohibitions on services and transactions: successive packages have progressively restricted financial services, legal advisory services to certain entities, and trade in specified goods and technology.
- Export controls: goods and dual-use items listed under the EU's Common Military List and associated annexes require export licences; Germany's national authority administers these within the EU framework.
- Sanctions screening obligations: there is no single statutory frequency mandated in the regulations, but a best-efforts obligation – recognised in enforcement guidance – requires that screening procedures be proportionate to the risk profile of the business.
- Prohibition on circumvention: the circumvention prohibition, reinforced in each successive package, catches not only direct breaches but also arrangements structured to achieve indirectly what is prohibited directly. German courts and prosecutors interpret this broadly.
- Reporting to competent authorities: holders of frozen assets and certain service providers must report to designated national competent authorities; in the financial sector, BaFin is the primary interlocutor.
Entities established as a GmbH or operating a branch through the Handelsregister should note that corporate form does not limit the scope of these obligations: parent-company instructions do not override the direct applicability of EU regulations.
Particular Risks for International Businesses in Germany
Several patterns of exposure arise with disproportionate frequency in our experience with cross-border clients.
Indirect ownership and control: designated persons often retain influence through layered holding structures. A German subsidiary that transacts with what appears to be a non-designated entity may nonetheless be in breach if a designated individual holds a qualifying ownership or control interest, however indirectly.
Supply-chain entrenchment: German manufacturing and logistics businesses frequently have long-established relationships with component suppliers or freight intermediaries whose beneficial-ownership structures have not been re-examined since earlier designation rounds. Each new sanctions package creates renewed screening obligations.
Professional-services exposure: law firms, accountants and consultants advising German entities must themselves assess whether their services fall within the listed prohibitions. The progressive expansion of service prohibitions in successive packages means that advice lawful in 2023 may be restricted today.
Litigation and arbitration risk: the anti-suit protection introduced by Regulation (EU) 2026/506 creates both an opportunity and an obligation. German parties that have received or anticipate Russian proceedings in breach of their contractual jurisdiction clauses should take prompt legal advice on invoking that protection and on available countermeasures before a German court, including before the Bundesgerichtshof where appellate questions of EU-law interpretation arise.
If your business operates across multiple European jurisdictions, the compliance picture becomes more complex. Our sanctions and trade compliance practice in Austria addresses related issues for businesses with German-Austrian cross-border structures, where enforcement approaches and competent authority contacts differ.
If you are reviewing your sanctions exposure in Germany or managing a potential breach, we invite you to contact the Ferraz & Whitmore team at info@ferrazwhitmore.com or visit our contacts page to discuss your situation.
How a Compliance Programme Should Be Structured
An effective sanctions compliance programme in Germany typically addresses five interconnected areas: governance and ownership of the compliance function; risk assessment calibrated to the business's counterparty profile and transaction types; screening systems and their update frequency; internal escalation and documentation procedures; and staff training tailored to the roles most exposed to sanctions risk.
The detail of how to build, audit and maintain each of those components – including a step-by-step process for German entities – is set out in our Sanctions Compliance Guide for Germany. This service page focuses on when and why businesses need external legal support, rather than duplicating that operational guidance.
In summary, legal support is typically most valuable at three points: (i) during the design or redesign of a compliance programme following a regulatory change; (ii) when a potential breach, adverse screening result or regulatory enquiry is identified and needs to be assessed and, where appropriate, self-reported; and (iii) when a business is contemplating a transaction or structure whose sanctions status is genuinely uncertain and requires a formal legal opinion.
Self-Assessment: Indicators That Your Current Framework May Need Review
The following indicators suggest that a compliance review is warranted:
- Your sanctions screening list was last updated before 23 April 2026 and does not capture the 20th or 21st packages.
- Your business has not assessed exposure to the digital rouble/RUBx ban effective 24 May 2026.
- You have ongoing contracts with Russian counterparties that contain German or EU-law jurisdiction clauses and you have not reviewed them in light of Regulation (EU) 2026/506.
- Your beneficial-ownership verification relies solely on Handelsregister extracts without enhanced due diligence for counterparties in higher-risk jurisdictions.
- You have received a payment, provided a service, or shipped goods to a counterparty that was subsequently added to a sanctions list, and have not assessed whether a reportable event has occurred.
- Your internal compliance policy does not address the circumvention prohibition or the best-efforts obligation under EU regulations.
- Your legal entity structure involves entities in Switzerland, Austria or other jurisdictions and you have not mapped whether the anti-suit provisions under EU and Swiss law interact with your dispute-resolution clauses.
Cross-Border Dimension: Germany Within a Wider Sanctions Architecture
Germany's significance as a financial and trading hub means that a sanctions issue arising in Germany rarely stays within German borders. Correspondent banking relationships, supply chains, holding-company structures and intra-group service agreements all create vectors by which a German compliance failure can generate exposure in other EU member states, Switzerland or beyond.
Ferraz & Whitmore works across multiple European jurisdictions, which allows us to assess how a single regulatory event – for example, a new designation under the 21st package – simultaneously affects a client's German operating subsidiary, its Austrian distribution entity and its Portuguese holding company. Our corporate law practice in Germany provides the structural and transactional foundation for clients who need to address compliance issues alongside restructuring, acquisition or wind-down scenarios.
For businesses headquartered outside the EU, it is worth noting that EU sanctions apply to transactions in euros, to entities incorporated in Germany, and to persons physically present in the EU – meaning that a non-EU parent cannot assume that only its local subsidiary bears the regulatory burden.
How Ferraz & Whitmore Works With Clients on Sanctions Matters
Our approach in sanctions engagements is grounded in precision and pragmatism. We begin with a scoped review of the client's current exposure – counterparty universe, transaction types, contractual frameworks and existing compliance documentation. From that baseline, we identify the gaps that carry the highest regulatory and commercial risk, and we prioritise remediation accordingly.
Where a potential breach has already occurred, we advise on the facts-and-law analysis, voluntary disclosure considerations and the procedural steps involved in engaging with competent authorities, including BaFin where financial-sector obligations are engaged. We do not guarantee outcomes from any such process, but we aim to ensure that clients approach it with a clear understanding of the legal framework, realistic expectations, and a defensible record of their response.
For clients facing Russian-litigation risk following the adoption of Regulation (EU) 2026/506, we advise on the practical use of the anti-suit mechanism and on coordinating that response with any parallel proceedings that may be progressing in German courts.
To discuss a specific compliance concern or to commission a sanctions audit of your German operations, please write to us at info@ferrazwhitmore.com or use our contacts page. We aim to respond to initial enquiries within one business day.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.