Table of Contents
If you screen customers and suppliers, you need to know how sanctions lists are updated. The names on these lists move. Governments add parties, remove others, and fix details all the time. A list you downloaded last month may already be stale.
This guide explains who updates the main lists, how often, and how each change is published. It also covers what triggers an update, how a name gets added or removed, and what all of this means for your denied party screening program.
Who Actually Updates Sanctions Lists
No single office controls every list. Different agencies own different lists. Each one follows its own process and its own timing. That is the first thing to understand.
In the United States, three departments do most of the work. Treasury runs financial sanctions. Commerce runs export control lists. State handles certain proliferation and defense lists. Other countries and the United Nations keep their own lists too.
| List | Who maintains it | How updates are published |
|---|---|---|
| SDN List and Consolidated (non-SDN) lists | OFAC, part of the U.S. Treasury | Recent Actions page, Sanctions List Service, email alerts |
| Entity List, Denied Persons List, Unverified List | BIS, part of the U.S. Commerce Department | Federal Register notices |
| Consolidated Screening List | International Trade Administration | Combined feed, downloads, and an API |
| UN Consolidated List | UN Security Council committees | Committee press releases and data files |
| EU and UK lists | EU Council and UK OFSI | Official Journal and consolidated list files |
Because the owners differ, the update styles differ too. Some lists change through formal rulemaking. Others change with a short notice and take effect the same day.
How Often Sanctions Lists Change
There is no fixed schedule. This is the point people get wrong. OFAC does not update on a set day each week. It updates when a designation is ready.
Some weeks bring several rounds of changes. Other weeks bring none. During major geopolitical events, updates can come in large batches on the same day. You cannot predict the timing, so you plan for constant change.
- OFAC lists: updated with no set calendar, often multiple times a month.
- BIS lists: updated whenever a rule publishes in the Federal Register.
- Consolidated Screening List: refreshed as its source lists change.
- UN, EU, and UK lists: updated after their own committees or councils act.
Treat every list as if it could change today. That mindset drives how you set your screening frequency, which we cover below.
What Triggers an Update
A list changes for a few clear reasons. Knowing them helps you read a change and judge its impact.
New designations
An agency identifies a party that meets the legal criteria. It could be a person, a company, a vessel, or an aircraft. The party gets added, and the sanction takes effect.
Removals and delistings
A party can be taken off a list. This happens after a policy change, a settlement, or a successful petition. Once removed, the party is no longer blocked under that program.
Edits to existing entries
Many updates are not new names at all. They fix or add detail on names already listed. A new alias, a passport number, a corrected address, or a linked company. These edits matter because they change how your screening tool matches.
Ownership changes also matter. Under the 50 percent rule, a company owned by listed parties can be blocked even if its own name never appears. So an update to one entry can pull in many unlisted businesses.
How a Name Gets Added
The path to a listing follows a pattern, even though details stay confidential. Here is the general flow for a U.S. designation.
- An agency investigates a party based on intelligence, referrals, or its own review.
- It builds an evidentiary record and confirms the party meets a sanctions program’s legal basis.
- Senior officials approve the designation.
- The party is added to the list, and the change is published.
- The sanction is effective on the publication date, not later.
For OFAC, the new entry shows up on the Recent Actions page and in the downloadable data. For BIS, the addition runs as a rule in the Federal Register. The BIS Entity List and the Denied Persons List both follow that route.
How a Name Gets Removed
Removal is possible, but it takes work. A listed party, or someone acting for them, can ask the agency to reconsider. This is often called a delisting petition.
The party submits arguments and evidence. Common grounds include a claim of mistaken identity, a change in behavior, or a change in circumstances that removed the reason for the listing. The agency reviews, may ask questions, and then decides.
Lists can also shrink through policy. When a program ends or narrows, a batch of parties may come off at once. Either way, the removal is published just like an addition, and your list should reflect it fast.
How Updates Are Published and Delivered
Knowing that a list changed is only useful if you can get the change quickly. Each source offers ways to pull updates. The Consolidated Screening List is a helpful starting point because it gathers many U.S. lists in one feed.
Data formats
OFAC publishes its lists in several formats so tools can read them. These include XML, a fixed-field format, and CSV. It also offers human-readable PDF and text versions for people.
Delta files
OFAC’s Sanctions List Service offers delta files. A delta file shows only what changed since the last version. That lets a screening system update without pulling the whole list every time.
Alerts and notices
You can subscribe to OFAC email alerts. BIS changes appear in the Federal Register, which you can track by rule. The Consolidated Screening List provides downloads and an API for automated pulls.
| Delivery method | Best for |
|---|---|
| Email alerts | People who watch changes by hand |
| Full data downloads | Loading a fresh copy into a tool |
| Delta files | Fast, small updates between full loads |
| API feed | Automated, always-current screening |
What This Means for Your Screening
Updates only protect you if your screening uses the current data. A tool that runs on an old list will miss new names. That gap is where violations happen.
- Use a tool that refreshes its lists on a short, automatic cycle.
- Screen new customers and vendors at onboarding, before any deal.
- Rescreen your existing base on a set schedule, because good parties can become listed later.
- Rescreen after major list changes tied to your markets or products.
- Keep records of when you screened and which list version you used.
How often you rescreen depends on your risk. For guidance, see our note on how often to screen suppliers and customers. For the mechanics of running a check, read denied party screening 101.
Frequent updates also raise the odds of a false match. A common name or a new alias can flag the wrong party. Watch for the red flags of sanctions evasion, but confirm each hit before you act.
Frequently Asked Questions
How often are sanctions lists updated?
There is no set schedule. OFAC updates whenever a designation is ready, sometimes several times a month. BIS updates when a rule publishes in the Federal Register. You should assume any list can change on any business day.
When does a new sanction take effect?
Usually on the date it is published. A new SDN entry is effective when it posts. There is no grace period, so a party you could deal with yesterday may be off limits today.
Do I need to reload the whole list every time?
No. You can load a full list, then apply delta files for the changes in between. Many screening tools do this for you and pull updates automatically through a feed or API.
Does one list cover everything?
No single list covers all risk. The Consolidated Screening List combines many U.S. lists, but you may also need EU, UK, or UN lists based on your trade. Match your list coverage to where you operate.
Key Takeaways
Sanctions lists change constantly, and no single office or schedule controls them. Different agencies add names, remove names, and edit entries, then publish those changes through Recent Actions pages, the Federal Register, delta files, and feeds. New sanctions usually take effect the moment they post. Your job is to screen against current data, rescreen on a sensible cycle, and keep records that show you did. If you want help building a program that keeps pace with these updates, contact us.