Sanctions are binding restrictive measures adopted by the United Nations Security Council or the Council of the European Union to change the behaviour of a state, an entity or an individual. In the Netherlands, EU sanctions regulations apply directly, without any implementing statute, and the Sanctiewet 1977 provides the national framework for supervision and enforcement. Breaching them is an economic offence, and liability does not depend on knowing that a counterparty was listed.
For a Dutch business, sanctions compliance in the Netherlands is rarely a question about foreign policy. It is whether a particular customer, supplier, shipment or payment is caught, who decides, and what has to be done when a match appears. This guide sets out the legal structure, the two prohibitions that catch most companies, the Dutch supervisory landscape and the practical steps that sanctions compliance in the Netherlands requires.
Where the rules come from
Three layers operate at once, and confusing them is the most common source of error.
At the international level, the UN Security Council adopts non-military measures under Article 41 of the UN Charter. These bind member states but do not by themselves create obligations for a Dutch company; they have to be brought into EU or national law first.
At EU level, sanctions begin as a decision of the Council under the common foreign and security policy, taken unanimously. That decision is binding on member states but is not directly applicable to businesses. Where the measures fall within Union competence, and financial and trade measures do, the Council adopts a regulation under Article 215 of the Treaty on the Functioning of the European Union. That regulation is directly applicable in every member state, including the Netherlands, and it is the instrument your compliance team must actually read. Measures that remain outside Union competence, notably arms embargoes and entry bans, are implemented by the member states themselves.
At national level, the Sanctiewet 1977 provides the basis for Dutch implementing regulations (sanctieregelingen), designates the supervisory authorities and links breaches to the Wet op de economische delicten. Note the structure: the Netherlands does not amend the Sanctiewet 1977 each time the EU adopts a package. The EU regulation applies of its own force, and the Dutch instruments deal with supervision, national measures and enforcement.
EU regulations and EU decisions compared
| Feature | Council regulation (Article 215 TFEU) | CFSP decision (Article 29 TEU) |
|---|---|---|
| Legal effect | Directly applicable to businesses and individuals in the Netherlands | Binding on member states; not directly applicable to businesses |
| Typical content | Asset freezes, financial restrictions, import and export bans, service bans | The political decision, plus arms embargoes and entry bans |
| National implementation | None required; a Dutch regulation deals only with supervision and enforcement | Required for the elements outside Union competence |
This is why a financial measure takes effect the moment the regulation is published in the Official Journal, while an arms embargo or a visa ban depends on national machinery.
The main types of measure
Financial sanctions freeze the funds and economic resources of designated persons and entities, and prohibit anyone from making funds or economic resources available to them. Designations appear on the EU consolidated list of persons, groups and entities subject to financial sanctions, which is maintained by the European Commission and updated frequently, sometimes several times in a week.
Trade measures prohibit the export, import, sale, supply or transfer of specified goods and technology, whether or not a designated person is involved. The Russia regime, built on the sectoral regulation adopted in 2014 and greatly expanded since 2022, is the most extensive example, covering energy, dual-use items, advanced technology, luxury goods, iron and steel products, and diamonds. Country-specific arms embargoes operate alongside them, as do restrictions on conflict minerals.
Service bans are the category most often overlooked, because they catch businesses that ship nothing at all. Depending on the regime, the provision of accounting, auditing, tax advisory, legal advisory, IT, engineering, architectural and management consulting services to entities established in a targeted country can be prohibited outright.
Travel and diplomatic measures include entry bans applied across the Schengen area and the suspension of diplomatic contacts. These matter mostly to individuals rather than to trading companies, but they signal how a listing is likely to develop.
The two prohibitions that catch most companies
An asset freeze does two separate things, and businesses tend to understand only the first. It freezes what the designated person holds, and it prohibits anyone from making funds or economic resources available to that person, directly or indirectly. The second limb is the one that produces liability, because it applies to ordinary commercial transactions that have nothing to do with a bank account: delivering goods, providing a service, paying an invoice, releasing a security deposit or extending credit.
Ownership and control
The word indirectly is given content by the Council's EU Best Practices for the effective implementation of restrictive measures. Under the version updated in July 2024, an entity is treated as owned by a designated person where that person holds fifty per cent or more of its proprietary rights or has a majority interest, and holdings by several designated persons are aggregated to reach that threshold. Separately, an entity may be caught because a designated person controls it, which can follow from the power to appoint or remove management, from a dominant influence exercised in fact, or from arrangements that leave formal ownership below the threshold while real decision-making sits elsewhere.
The guidance also lists indicators that should trigger closer scrutiny: shares transferred shortly before or after a designation, buy-back options, family members or long-standing associates appearing as shareholders, and corporate chains routed through jurisdictions with limited transparency. Screening a customer name against a list does not answer any of this. Ownership analysis has to go through the chain to the ultimate beneficial owners, and where structures are opaque the safe course is to decline rather than to assume.
Note that this fifty per cent test is not the same as the twenty-five per cent threshold used to identify ultimate beneficial owners under anti-money-laundering law. The two exercises overlap in the data they use but answer different questions, and applying the anti-money-laundering threshold to a sanctions assessment is a recurring and expensive mistake.
Circumvention
Every EU sanctions regulation contains a prohibition on participating, knowingly and intentionally, in activities whose object or effect is to circumvent the measures. This is a free-standing offence. Restructuring a transaction so that goods reach a targeted market through a third country, inserting an intermediary to obscure an end user, or splitting a payment to stay below a reporting threshold can breach it even where each individual step, viewed alone, would be lawful. Since 2023 several regimes have also imposed a due diligence obligation on exporters to prevent re-export of listed items to Russia, which shifts part of the burden onto the contract.
Who supervises and enforces in the Netherlands
Responsibility is divided, and knowing which authority to approach saves considerable time.
De Nederlandsche Bank and the Autoriteit Financiële Markten supervise compliance with the Sanctiewet 1977 by the financial institutions within their respective remits. They assess whether an institution's procedures for identifying relations and transactions against sanctions lists are adequate, and they can impose administrative fines and orders subject to a penalty. Where an institution identifies a designated person among its relations, it must notify its supervisor without delay using the prescribed reporting form; DNB and the AFM pass those reports to the Ministry of Finance.
Customs, and within it the Centrale Dienst voor In- en Uitvoer, enforces the trade measures at the border and handles licences and authorisations for goods. The Ministry of Foreign Affairs leads on sanctions policy and on the national implementing regulations. Criminal investigation is a matter for the FIOD and prosecution for the Openbaar Ministerie, because a breach of the Sanctiewet 1977 is an economic offence under the Wet op de economische delicten.
For a company that is not a financial institution there is no single supervisor and no periodic inspection, which is often misread as an absence of obligation. The prohibitions in the EU regulations apply directly to everyone, and the absence of a supervisor simply means that the first contact with the authorities is likely to be an investigation rather than a compliance visit.
Penalties and criminal liability
Breach of a sanctions regulation is an economic offence in the Netherlands. It can be prosecuted as a misdemeanour or, where committed intentionally, as a crime, and the sanctions available include imprisonment, fines, forfeiture of the proceeds, and orders closing a business or withdrawing rights. Fine levels are set by statutory categories that are periodically revised, and for companies the court may impose a fine of a higher category where the standard maximum is inadequate; the figures should always be checked against the current text rather than against a number quoted in an article. Administrative fines imposed by DNB or the AFM on financial institutions run in parallel with, and are not an alternative to, criminal liability.
At EU level, Directive (EU) 2024/1226 on the definition of criminal offences and penalties for the violation of Union restrictive measures was published on 29 April 2024 and had to be transposed by member states by 20 May 2025. It requires member states to criminalise a defined list of conduct, including making funds available to a designated person, concealing beneficial ownership, failing to report where reporting is required, and breaching trade restrictions, and it sets minimum maximum penalties running to at least five years' imprisonment for the most serious categories. It also makes sanctions breaches a predicate offence for money laundering, which matters because it opens a second route to prosecution and to reporting obligations under anti-money-laundering law. Our article on money laundering and unusual transactions under Dutch law deals with that overlap.
Liability is not confined to the company. Directors and officers can be prosecuted personally where they gave the instruction or, knowing of the conduct, failed to intervene. Reputational and banking consequences frequently arrive before any legal outcome: a bank that identifies a sanctions concern will typically freeze the payment first and ask questions afterwards.
What compliance actually requires
The core of sanctions compliance in the Netherlands is small and unglamorous. Screen customers, suppliers, intermediaries, shareholders and end users against the EU consolidated list, and rescreen the existing portfolio whenever the list changes rather than only at onboarding, because designations take effect immediately and an existing relationship becomes unlawful overnight. Analyse ownership and control through the chain, not just the name on the contract. Establish the end use and end user of goods, and record how you established them.
Build the position into the contract. Sanctions representations and warranties, an obligation to notify a change in ownership, a no-re-export clause for the regimes that require one, and a termination or suspension right that operates without breach are all standard and all considerably easier to agree before signature than after a designation. Our guidance on international commercial contracts covers how these clauses interact with the rest of the agreement.
When a hit appears, stop. Do not release the goods, do not make the payment and do not tell the counterparty that you are investigating, since that can itself assist circumvention. Verify whether it is a true match, record the analysis, freeze what has to be frozen, and notify the competent authority. Financial institutions report to their supervisor without delay; other businesses should take advice on which authority to approach for the regime in question. Acting first and asking afterwards is the wrong order here, because the freeze obligation bites immediately.
Exemptions, derogations and delisting
Sanctions regulations contain their own escape valves, and using them is a formal process rather than a negotiation. Each regulation lists the national competent authority for every member state in an annex, and an application for a derogation goes to the authority named there for the Netherlands. Trade authorisations are handled by Customs through the Centrale Dienst voor In- en Uitvoer; derogations from a financial freeze are handled by the responsible ministry.
The grounds are defined in the regulation itself and are narrower than most applicants expect. Typical categories include basic needs of a designated natural person, reasonable professional fees, payments due under a contract concluded before the designation, humanitarian purposes and, in some regimes, the sale of a business by a Union party. An application succeeds or fails on documentation: the contract, its date, the payment flow, the end user and the reason the derogation ground applies. Processing takes as long as it takes, and no timetable can sensibly be promised, so applications should be made as early as the facts allow.
A designated person or entity can also challenge the listing itself, by asking the Council to review it and, if that fails, by bringing an action for annulment before the General Court of the European Union within the applicable time limit. That is a specialist route, distinct from a derogation, and the deadlines are strict.
Where the recurring problems arise
Ownership chains cause the most trouble. A counterparty that is not itself listed may be owned or controlled by someone who is, and the register entry two levels up will not say so. Where the structure cannot be resolved, treat the uncertainty as a finding rather than as an absence of one.
The second recurring problem is scope creep in the regimes themselves. Sanctions packages add categories of goods, extend service bans and tighten thresholds several times a year, so a screening tool configured two years ago will be checking against yesterday's rules. Subscribe to the updates and review the configuration, not only the alerts.
The third is conflicting obligations. United States sanctions frequently reach further than EU measures, and a contractual clause requiring compliance with US measures can put a Dutch company in breach of Regulation (EC) 2271/96, the EU blocking statute, which prohibits compliance with certain listed extraterritorial measures. Where both regimes bear on the same transaction, this needs legal analysis before the clause is signed, not after a payment is refused.
The fourth is the assumption that intra-group transactions are safe. They are not: a transfer to a subsidiary in a targeted jurisdiction, or a service provided from the Netherlands to a group entity there, is assessed on the same basis as a transaction with a third party.
Where to check
Three primary sources are worth using directly rather than through summaries. The Official Journal of the European Union carries the authentic text of every regulation and every amendment, and is the only version on which advice should be based. The European Commission maintains the EU sanctions map and the consolidated list of designations, together with frequently asked questions on the individual regimes. De Nederlandsche Bank publishes guidance on the Sanctiewet 1977 for supervised institutions, including the reporting form and the division of responsibilities between authorities. Where a proposed transaction is genuinely borderline, an application for guidance or a derogation is preferable to a commercial judgement recorded nowhere.
How Law & More can help
We advise Dutch and international businesses on the application of EU and Dutch sanctions law to specific transactions, on ownership and control analysis, on the drafting of sanctions clauses in commercial contracts, on applications for derogations and licences, and on defence where an investigation has been opened. If you have identified a possible match, or a bank has frozen a payment, contact us before responding. Our corporate law guides cover the wider compliance framework in which sanctions sit.
