The formal name is Directive (EU) 2024/1226 — “on the definition of criminal offences and penalties for the violation of Union restrictive measures, and amending Directive (EU) 2018/1673.” “Harmonization Directive” isn’t its official title, but it’s a fair and widely used shorthand; several firms (White & Case, Gleiss Lutz) use “harmonized” or “harmonised” in their own headlines for it, so I’ll treat that as the subject and flag the naming distinction for your readers up front.

Where it comes from

Sanctions violations weren’t always something the EU could legislate criminal minimums for. Article 83(1) TFEU limits that competence to a defined list of “euro-crimes” (terrorism, trafficking, corruption, money laundering, and similar). Council Decision (EU) 2022/2332 of 28 November 2022 added violation of Union restrictive measures to that list, which cleared the way for a directive. The Commission proposed the text in December 2022, Parliament and Council reached provisional agreement in December 2023, Parliament adopted it on 12 March 2024, and Council gave final approval on 12 April 2024. It was published in the Official Journal on 29 April 2024, entered into force 19 May 2024, and set a transposition deadline of 20 May 2025.

What conduct it criminalizes (Article 3)

Member states must treat the following as criminal offenses when committed intentionally in breach of an EU restrictive measure (or a national provision implementing one):

• Making funds or economic resources available to a designated person, or failing to freeze assets belonging to or controlled by one
• Enabling a designated person to enter or transit through a member state’s territory
• Entering into or continuing transactions with a sanctioned third country, or bodies and entities owned or controlled by it, including public or concession contracts
• Trading, importing, exporting, or providing brokering or technical assistance in breach of trade-control measures
• Providing financial services or carrying out financial activities in violation of restrictive measures
• Providing other services in violation of restrictive measures — legal advisory, trust, PR, accounting, auditing, tax consulting, business or management consulting, IT consulting, architectural and engineering services are all named
• Supplying false or misleading information to conceal that a designated person is the true owner or beneficiary of funds or resources
• Failing to meet a reporting obligation owed to competent administrative authorities
• Breaching conditions attached to an authorization or license issued by a competent authority

Article 4 extends liability to incitement, aiding and abetting, and attempt. Notably, for the trade-control offense involving items on the EU Common Military List or dual-use goods under Annex I/IV of Regulation (EU) 2021/821, member states must also criminalize conduct amounting to serious negligence, not just intent — a real departure from the intent-only baseline elsewhere in the directive.

Threshold and exemptions: member states generally aren’t obligated to criminalize conduct involving less than €10,000 in funds, resources, goods, services, or transactions, though a series of linked acts by the same offender can be aggregated to meet that figure. The threshold doesn’t apply to travel-ban violations. Two exemptions exist: legal professional privilege for advice given in the course of ascertaining a client’s legal position or representing them in proceedings (this falls away if the lawyer knowingly participates in or facilitates the violation), and humanitarian assistance delivered in line with the principles of impartiality, humanity, neutrality, and independence.

Penalties for natural persons (Article 5)

Maximum prison terms scale by offense type and value. Assuming the €100,000 threshold is met — which can also be reached by aggregating linked offenses — maximum terms run from at least one year up to at least five years, calibrated by which category of Article 3(1) conduct is involved. Where the offense involves Common Military List items or Annex I/IV dual-use goods, the maximum must be at least five years regardless of value. Accessory penalties can include disqualification from leadership positions, withdrawal of permits and authorizations, and temporary bans from public office.

Corporate liability and penalties for legal persons (Articles 6-7)

A legal person can be held liable where an offense is committed for its benefit by someone in a leading position, or where a lack of supervision by such a person allowed a subordinate to commit it. Fines are tiered by offense severity: most offenses carry a maximum of at least 5% of total worldwide turnover or €40 million (member states choose the calculation method); two lesser reporting-related offenses carry a maximum of at least 1% of turnover or €8 million. Non-criminal measures can include exclusion from public funding and tenders, judicial supervision, withdrawal of permits, and judicial winding-up.

Aggravating and mitigating circumstances (Articles 8-9)

Aggravating factors include use of false or forged documents, commission by a professional service provider in breach of their professional obligations, and destroying evidence or intimidating witnesses. These push penalties up without changing the underlying offense definitions.

Other structural elements

• Freezing and confiscation (Article 10): member states must be able to freeze and confiscate instrumentalities and proceeds of these offenses, plus the sanctioned funds or resources themselves.
• Limitation periods (Article 11): generally at least five years for offenses carrying a five-year maximum sentence, with a floor of three years permitted in narrower circumstances.
• Jurisdiction (Article 12): territoriality-based, with room to extend to habitual residents, officials acting in an official capacity, and conduct benefiting a locally established legal person.
• Investigative tools (Article 13): member states must make organized-crime-style investigative tools available for these cases.
• Whistleblower protection (Article 14): ties reporting persons back to the protections in the EU Whistleblower Directive (2019/1937).
• Cooperation (Articles 15-16): each member state designates a coordinating unit domestically, and the directive builds in cooperation channels with the Commission, Europol, Eurojust, and the European Public Prosecutor’s Office. It stops short of centralizing enforcement — expanding EPPO’s own mandate to cover these offenses would require a separate unanimous Council decision under Article 86 TFEU, which hasn’t happened.
• Statistics (Article 17): member states report prosecution data to the Commission annually.
• AML predicate offense: the directive amends Directive (EU) 2018/1673 so that violating Union restrictive measures is now itself a predicate offense for money laundering.

Commission reporting obligations run forward: an implementation report is due by 20 May 2027, and a fuller effectiveness evaluation by 20 May 2030.

Where transposition actually stands (as of August 2026)

This is the part worth flagging for readers who assume “harmonization” means it’s already harmonized. It isn’t, in practice. Almost no member state met the 20 May 2025 deadline — the Institute of Legislative Ideas’ transposition study found only Estonia and Finland fully compliant on time, with Lithuania, Latvia, and Sweden close behind. On 24 July 2025 the Commission opened infringement proceedings (letters of formal notice) against 18 member states. By the Commission’s June 2026 infringements package, that had progressed for at least three of them — Spain, France, and Austria received reasoned opinions, the next escalation step before a possible referral to the Court of Justice. Germany, meanwhile, got a separate formal notice over a narrower gap (a residence requirement specific to North Rhine-Westphalia) despite having transposed the bulk of the directive through its Sanctions Act published 5 February 2026. France was still working through its domestic legislative process as of March 2026. So national approaches remain visibly uneven well over a year past the deadline, which somewhat undercuts the “harmonization” framing in the near term even as the underlying legal architecture is genuinely unified at the EU level.

Verification notes

Article-level detail (offense categories, penalty tiers, article numbers for aggravating/mitigating factors, jurisdiction, and cooperation provisions) is cross-checked against the EUR-Lex text itself alongside multiple independent law-firm summaries (Clyde & Co, White & Case, Gleiss Lutz, DLA Piper, Paul Hastings), which converge closely on the figures. The one area I’d flag as an assumption rather than a verified fact: I wasn’t able to pull a complete letter-by-letter mapping of which specific Article 3(1) sub-points carry which exact imprisonment tier from the raw text — the secondary sources agree on the general 1-to-5-year structure and the €100,000/military-goods triggers, but I’m not fully confident in a precise point-by-point table, so I’ve described the structure rather than asserting an exhaustive breakdown. If you want that level of granularity for the piece, it’s worth pulling the full Article 5 text directly before publishing.

Sources

Primary legislative text

• Directive (EU) 2024/1226 of 24 April 2024 — EUR-Lex, https://eur-lex.europa.eu/eli/dir/2024/1226/oj/eng
• Council Decision (EU) 2022/2332 of 28 November 2022 — EUR-Lex, https://eur-lex.europa.eu/eli/dec/2022/2332/oj/eng

Substantive analysis

• eucrim (Max Planck Institute for the Study of Crime, Security and Law), “New Directive Criminalises Violation/Circumvention of EU Restrictive Measures,” 9 July 2024
• Clyde & Co, “EU Sanctions Update: criminal offences and penalties (Directive EU 2024/1226),” 2 May 2024
• White & Case, “EU establishes harmonized enforcement and penalties for sanctions violations”
• Gleiss Lutz, “EU introduces stricter, harmonised rules for criminal prosecution of sanctions violations”
• European Studies Unit (University of Liège), “Publication of Directive (UE) 2024/1226…”

Current implementation status

• Paul Hastings, “Addressing Gaps and Inconsistencies in the EU Sanctions’ Enforcement: The Commission Urges Member States to Transpose Directive (EU) 2024/1226”
• National Law Review, “EU Launches Infringement Actions on Sanctions Directive 2024/1226”
• EUbusiness.com, “June 2026 EU infringements package: key decisions,” 4 June 2026
• Gleiss Lutz, “Stricter criminal sanctions law: Germany’s transposition of the EU Sanctions Directive”
• Lexology (White & Case), “EU: France advances first steps to transpose the EU Sanctions Enforcement Directive”
• Institute of Legislative Ideas, “Transposition of EU Directive 2024/1226 by EU Member States”