Sanctions compliance in Portugal means navigating a layered framework in which EU regulations apply directly and with immediate effect, while national authorities – including Banco de Portugal, the CMVM, the Autoridade Tributária, and AIMA – each carry distinct enforcement responsibilities. For international businesses and investors operating through Portuguese entities, the risk of inadvertent breach has grown sharply following the EU's 20th package (23 April 2026) and 21st package (23 July 2026), both of which extended the scope of asset-freeze obligations, tightened circumvention rules, and imposed new restrictions affecting digital assets. Ferraz & Whitmore advises clients on designing and stress-testing compliance programmes that withstand regulatory scrutiny across multiple Portuguese competent authorities.
Why Sanctions Compliance in Portugal Demands Immediate Attention
Portugal is not a passive conduit. As a member of the European Union, it applies EU restrictive measures directly and enforces them through a network of supervisory bodies with overlapping mandates. A breach identified by Banco de Portugal in the financial sector may trigger parallel proceedings before the Autoridade Tributária in relation to fiscal flows and before the CMVM where securities or investment instruments are involved. The consequence is not a single fine – it is simultaneous multi-authority exposure.
The pace of regulatory change has intensified this risk. The EU's 20th sanctions package entered into force on 23 April 2026. The 21st package – Regulation (EU) 2026/1848 – followed on 23 July 2026, bringing further restrictions on intermediaries, additional listing grounds and an enhanced framework targeting circumvention routes. A ban on the digital rouble and the RUBx instrument became effective from 24 May 2026. Any Portuguese entity that has not reviewed its counterparty base, payment channels and contractual portfolio against each of these packages since April 2026 carries unquantified residual exposure.
If your business has not updated its sanctions screening protocols since the spring of 2026, we encourage you to contact our team at info@ferrazwhitmore.com or visit our contacts page to arrange an initial review.
The Legal Instruments You Need to Understand
EU Regulations: Direct Effect and Continuous Amendment
EU sanctions regulations apply in Portugal without the need for domestic transposition. This means that the obligations imposed by each new Council Regulation bind Portuguese companies, their directors and their service providers from the moment of publication in the Official Journal of the European Union – or, in urgent cases, from the moment of announcement. The best-efforts obligation embedded in the EU framework requires regulated entities to take all reasonable steps to ensure compliance, even where certainty about a counterparty's status is not immediately achievable. That standard is assessed objectively by Portuguese supervisors.
Anti-Suit Protection: Council Regulation (EU) 2026/506
A significant structural development for Portuguese companies with cross-border contracts is Council Regulation (EU) 2026/506, adopted on 23 April 2026. This instrument provides anti-suit protection for EU persons who face litigation initiated by sanctioned Russian persons before Russian courts, where that litigation breaches an existing jurisdiction clause or arbitration agreement. In practical terms, a Portuguese company served with proceedings in Russia can now invoke this Regulation before Portuguese courts – including, where relevant, before the Supremo Tribunal de Justiça – to obtain protection against enforcement of any resulting Russian judgment in Portugal or elsewhere in the EU. This provision requires careful contractual audit: clauses that were drafted before 2022 may need to be reviewed in light of the new protection mechanism.
A parallel instrument, art. 29d, was adopted in Switzerland. For clients with structures spanning both Portugal and Switzerland, the interaction between these two provisions matters. Our analysis of the cross-border intermediary landscape is available in our alert on the 21st Sanctions Package and intermediaries.
Export Controls and Trade Restrictions
EU export controls on dual-use items, advanced technology and luxury goods are enforced in Portugal by the competent customs and trade authorities working in coordination with AIMA where foreign nationals or residency-linked transactions are involved. The 21st package tightened restrictions on specific goods categories and added new circumvention-related obligations for operators in Portugal. Any Portuguese company that exports, re-exports or acts as an intermediary in the sale of controlled goods must maintain auditable records and conduct documented sanctions screening at each stage of the transaction chain.
Asset Freeze: Obligations and Practical Consequences
An asset freeze under EU sanctions is self-executing. From the moment a designated person or entity appears on the applicable list, any Portuguese company or financial institution holding or controlling funds or economic resources of that person must freeze those assets immediately and report the freeze to the relevant national authority. There is no grace period. Delayed reporting, even where the freeze itself was implemented promptly, constitutes a separate basis for enforcement action. The reporting channels in Portugal run through Banco de Portugal for financial institutions, the CMVM for capital markets participants, and the Autoridade Tributária in relation to certain fiscal instruments.
Common Pitfalls for International Businesses in Portugal
- Reliance on outdated screening lists: The pace of EU listing decisions since 2022 means that a counterparty database last updated before April 2026 may miss designated persons added across the 20th and 21st packages.
- Circumvention exposure through intermediaries: EU rules prohibit not only direct dealings with designated persons but also transactions structured to route value through third-country intermediaries. Portuguese entities acting as service providers or holding companies within such structures carry primary liability.
- Digital asset blind spots: The ban on the digital rouble and RUBx from 24 May 2026 caught several treasury and payments teams unprepared. Portuguese entities with any exposure to digital currency settlement mechanisms should have reviewed their protocols by that date; if they have not, remediation is urgent.
- Contractual gaps in jurisdiction and arbitration clauses: The anti-suit protection under Regulation (EU) 2026/506 operates only where a qualifying clause exists in the underlying contract. Contracts that lack such clauses, or that contain clauses pointing to Russian courts, confer no protection and may need amendment.
- Failure to document best-efforts compliance: Portuguese authorities will examine not only what a company did, but what it was capable of doing and when it became aware of the relevant facts. Undocumented compliance decisions are difficult to defend in enforcement proceedings.
- Multi-authority notification failures: A freeze or suspected breach that triggers obligations under both banking and securities regulation may require simultaneous notifications. Filing with one authority but not another creates procedural exposure.
How Ferraz & Whitmore Works on Sanctions Compliance Mandates
Our approach begins with a structured fact-finding phase in which we map a client's operational footprint in Portugal against the current EU consolidated list, the specific prohibitions under the most recent packages, and the applicable sector-specific guidance issued by Banco de Portugal and the CMVM. We do not rely on generic checklists. The mapping is specific to the client's counterparty network, contractual architecture, payment flows and product categories.
Where gaps or potential breaches are identified, we advise on the appropriate response sequence, including whether voluntary disclosure to a Portuguese competent authority is warranted and how to structure that disclosure in a way that accurately represents the facts. We also advise on remediation measures – amended screening procedures, contract renegotiation or termination, restructuring of payment channels – and on ongoing monitoring obligations. For clients with cross-border structures, we coordinate with counterpart counsel in other jurisdictions and can advise on the interaction between Portuguese and Swiss frameworks, as our Switzerland sanctions and trade practice operates in parallel.
Our corporate law practice in Portugal supports sanctions mandates that require corporate restructuring, shareholder-level changes or directorship reviews to address beneficial ownership exposure. Further information on our Portuguese corporate law capability is available at our corporate law Portugal page.
For a confidential discussion of your sanctions compliance position in Portugal, please write to us at info@ferrazwhitmore.com or use our contacts page.
Self-Assessment Checklist
The following questions are indicative only and do not constitute legal advice. They are intended to help you identify whether a professional review may be appropriate.
- Has your sanctions screening database been updated to reflect the EU's 20th package (23 April 2026) and 21st package (23 July 2026)?
- Have you reviewed your payment and settlement processes for exposure to the digital rouble or RUBx instruments following the 24 May 2026 ban?
- Do your standard contracts with counterparties in high-risk jurisdictions contain jurisdiction or arbitration clauses capable of engaging the protection under Regulation (EU) 2026/506?
- Have you identified all Portuguese entities in your group that are subject to the best-efforts obligation and ensured they have documented compliance procedures?
- Have you mapped your exposure to third-country intermediaries that may be used, or may be perceived to be used, as circumvention vehicles?
- Do you have a clear notification protocol covering simultaneous obligations to Banco de Portugal, the CMVM and the Autoridade Tributária in a freeze or suspected breach scenario?
- Has your legal counsel reviewed export control compliance for dual-use goods or technology exports processed through Portuguese entities since April 2026?
Timelines and Procedural Expectations
EU sanctions obligations arise instantaneously on publication or announcement. There is no implementation period for companies. Reporting timelines for asset freezes vary by authority and instrument but are typically measured in days rather than weeks under Portuguese national rules; where specific deadlines are not provided in the EU regulation itself, they are subject to national procedural rules issued by the relevant Portuguese supervisors. Clients should not assume that they have a period of weeks to assess whether a freeze obligation has arisen – the risk of breach begins at the moment of knowledge or constructive knowledge.
Enforcement proceedings before Portuguese authorities follow administrative law procedures, with rights of defence and appeal to the competent administrative courts. Where enforcement reaches the level of serious criminal sanctions for natural persons, proceedings are conducted before the criminal courts. Appeals in certain financial regulatory matters may ultimately reach the Supremo Tribunal de Justiça, though the procedural route depends on the nature of the decision and the regulatory instrument under which it was issued.
If you are facing a time-sensitive situation – a potential freeze obligation, an inquiry from a Portuguese authority, or a contractual dispute with cross-border sanctions dimensions – we are available to advise promptly. Contact us at info@ferrazwhitmore.com or through our contacts page.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.