EU Anti-Corruption Directive Enters Force, Setting a 2028 Compliance Clock

What happened

Directive (EU) 2026/1021 entered into force on 31 May 2026, according to the Official Journal of the European Union. The directive harmonises the definition of corruption offences and the minimum penalties that apply to them across all EU member states, covering both public-sector and private-sector corruption. Member states must transpose it into national law by 1 June 2028.

The directive represents the EU’s most substantial single move to align anti-corruption criminal law across the bloc. Until now, definitions of what constitutes a corruption offence and the sanctions attached to a conviction have varied considerably from one member state to the next, creating uneven exposure for firms operating across borders.

No immediate obligations fall on private-sector firms directly. The operative change arrives jurisdiction by jurisdiction as each member state implements the directive through domestic legislation before the June 2028 deadline.

Why it matters

Harmonisation of offence definitions matters because it closes definitional gaps that compliance programmes have previously had to manage as country-specific variations. When the same conduct is a criminal offence carrying equivalent minimum penalties in Paris, Warsaw, and Bucharest, the risk calculus for a firm’s anti-bribery and corruption (ABAC) programme becomes more consistent and, for regulators, more enforceable.

The two-year transposition window is the key variable to watch. Member states may go further than the directive’s minimum requirements when writing it into national law. Some are likely to do so, which means the resulting domestic legislation may be stricter or broader in scope than the directive itself signals. Firms operating in multiple EU jurisdictions should not assume that “compliant with the directive” will mean the same thing in every country by June 2028.

The private-sector corruption provisions are particularly relevant for financial institutions. Broad harmonised offences covering non-public actors sit closer to the daily risk environment of banks, asset managers, and payment firms than purely public-sector bribery rules.

Practitioner angle

Anti-financial-crime and compliance teams with EU operations should begin tracking the transposition progress in each member state where their institution operates. Official Journal monitoring, national parliamentary trackers, and country counsel updates are the practical channels. Do not wait for 2028: transposition bills will appear in national legislatures well before the deadline, and early drafts often signal scope choices that affect compliance programmes.

Revisit third-party and intermediary due diligence frameworks now. Harmonised offence definitions make it easier for member state prosecutors to pursue chains of liability through agents, distributors, and joint-venture partners. Existing due diligence questionnaires and contractual ABAC representations should be checked against what a broader, harmonised offence definition would cover.

Gifts and hospitality controls, facilitation payment policies, and political contribution procedures are the ABAC controls most likely to require calibration once domestic legislation firms up. Map those controls by jurisdiction and flag the ones that are currently calibrated to a lower national standard than the directive’s minimum.

The single most important step: assign a named owner, in each material EU jurisdiction, to track the national transposition bill and flag the compliance team when a draft is published.