Legislation Without Enforcement: The EU’s Structural Failure in the JCPOA Framework and Its Implications for Strategic Autonomy
The JCPOA as a Test of European Capacity and INSTEX and the Failure of Economic Delivery
The JCPOA, concluded in 2015 and formally endorsed by the EU as a co-signatory committed to monitoring Iranian compliance, represents the most consequential instance of this dynamic (European External Action Service, 2015). The EU used the agreement to legitimise its presence as an extra-regional security actor, arguing that Iran’s nuclear programme constituted a direct threat to European security and stability.
What followed the United States’ withdrawal from the JCPOA in May 2018 was a sustained test of whether the EU possessed the institutional coherence, enforcement capacity, and political will to sustain a complex multilateral arrangement without its primary external guarantor, despite the direct economic and diplomatic costs to itself. The evidence examined in this paper suggests that it did not.
The bilateral trade data establishes the scale of the EU’s commercial exposure and subsequent retreat. EU-Iran trade peaked in 2017, reaching €10,099 million in EU imports from Iran and €10,570 million in EU exports, the highest levels recorded in the dataset, reflecting the post-JCPOA removal of pre-existing sanctions (European Commission DG Trade, 2024).
Following the US withdrawal and the reimposition of US secondary sanctions in 2018, EU imports from Iran collapsed by 92.8%, from €9,425 million to €680 million between 2018 and 2019, and EU exports fell by 49.5%, from €8,711 million to €4,398 million over the same period.
The EU-Iran trade balance, which had turned negative in 2018 at −€714 million as European companies began withdrawing ahead of US secondary sanctions, recovered to a positive €3,718 million by 2019 and remained positive through 2024. This recovery, however, reflects not renewed EU commercial engagement but the near-total elimination of Iranian export capacity into European markets: sanctions rendered Iranian goods structurally non-competitive, and a regime whose investment priorities and governance model had long been flagged as incompatible with sustained bilateral commercial development was left with no meaningful export position.
The positive post-2019 balance is a measure of Iranian economic exclusion, not European commitment. The EU thus found itself, from 2018 onward, in a position of substantial structural leverage over Iran: a major trading partner that Iran could no longer effectively reach, holding the economic relationship in a condition of asymmetric dependence. This leverage was not converted into compliance outcomes.
The Instrument in Support of Trade Exchanges (INSTEX) was established in January 2019 precisely to operationalise continued EU–Iran economic engagement outside the US dollar system, providing Iran with the economic incentives its JCPOA compliance was premised upon. It completed a single transaction across its entire operational lifespan before being liquidated in 2023 (Bourse & Bazaar, 2023).
The gap between the structural power the EU held and the institutional capacity it deployed to use it is the first and most fundamental failure this paper documents.
The Blocking Statute’s Enforcement Gap
The failure of INSTEX did not occur in isolation. It was structurally enabled by the simultaneous collapse of the EU Blocking Statute as an enforcement instrument. Adopted in 1996 and updated in 2018, precisely to shield European companies from the extraterritorial reach of US secondary sanctions, the Blocking Statute prohibited EU operators from complying with the reimposed US measures and required member states to initiate enforcement proceedings against companies that withdrew from Iran in deference to US pressure (Lawfare, 2019).
The data in Figure 2 records what actually occurred: three European companies withdrew from Iran in 2018, the year of US withdrawal, and across the entire period from 2018 to 2023, member states initiated zero enforcement proceedings (European Commission, 2021). A single legislative update was made in 2021, producing no change in enforcement behaviour.
The explanation lies within the Blocking Statute’s own architecture: the waiver provision, designed to allow limited exemptions where compliance with the statute would cause disproportionate harm to a company’s interests, was used in practice as a broad self-exemption mechanism, allowing European firms to exit Iran on commercial grounds without facing legal consequence. The instrument that was meant to guarantee European companies the legal cover to remain in Iran, and thereby provide the economic continuity on which Iranian compliance was premised, instead provided legal cover for their withdrawal.
The result was that the EU publicly committed to protecting Iran’s economic interests under the JCPOA while simultaneously failing to enforce the only domestic instrument it possessed to deliver on that commitment. The absence of any enforcement proceedings across six years is not a marginal implementation gap; it is a structural abdication.
The consequences of these enforcement failures are documented in Figure 3. At JCPOA signature in 2016, Iran’s enrichment stood at 3.67%, and its estimated breakout timeline, the time required to accumulate sufficient weapons-grade material for a nuclear device—was approximately twelve months (Iran Watch/Center for Arms Control and Non-Proliferation, 2016–2025).
From Compliance Incentives to Nuclear Escalation
By November 2021, following the EU’s failure to deliver on INSTEX and the absence of any enforcement action under the Blocking Statute, Iran had escalated to 60% enrichment with a 17.7 kg stockpile, reducing breakout to 2.3 months. By May 2025, the 60% stockpile had reached 408.6 kg, and breakout was estimated at approximately one week. The E3’s triggering of the UNSC snapback mechanism in August 2025 came after Iran had already achieved near-weapons-grade enrichment capability, with IAEA-detected particles at 83.7% recorded as early as February 2023 (Reuters, 2023).
The causal sequence is analytically significant: INSTEX was liquidated in 2023 as a direct response to Iran’s deepening non-compliance and its intensifying military cooperation with Russia, but that non-compliance was itself accelerated by the EU’s prior failure to deliver the economic benefits that were the JCPOA’s primary compliance incentive for Iran. The EU responded to the consequences of its own institutional failure by dismantling the last instrument through which it might have addressed those consequences and then invoked the snapback mechanism only after the non-proliferation objective it was designed to protect had already been functionally compromised.
The Limits of the EU’s Responsibility, Hormuz and the Repetition of Strategic Passivity and Crisis Management Without Operational Leadership
This analysis does not argue that EU enforcement failure was the sole or primary cause of Iranian nuclear escalation. A credible counter-position holds that Iran’s nuclear programme serves domestic political functions and strategic deterrence calculations that were unlikely to be reversed by economic incentives alone, and that the political viability of the JCPOA was fatally compromised by US withdrawal before the EU had any realistic opportunity to compensate for it. This position is not without merit.
The argument advanced here is more specific and, on the available evidence, more defensible: that the EU presented itself as the guarantor of the JCPOA’s economic pillar, made that claim the basis for its continued presence in and authority over the framework after US withdrawal, and then systematically failed to deliver on the institutional commitments that claim required. Whatever weight one assigns to Iran’s independent strategic calculations, the EU’s failure to enforce the Blocking Statute, its inability to operationalise INSTEX beyond a single transaction, and its sequential dismantling of the mechanisms through which Iranian compliance incentives might have been sustained together constitute a significant contributing factor to the outcome the JCPOA was designed to prevent. The particular cost of this failure is not simply that it produced a bad outcome in Iran. It is that the EU claimed ownership of the framework’s success, absorbed the institutional credibility associated with that claim, and then declined to bear the enforcement costs the claim entailed. That gap between declared role and demonstrated capacity is this paper’s central finding.
Figure 4 places this failure in comparative context by tracking European response metrics across two crises: the JCPOA period from 2018 to 2025 and the Hormuz crisis of 2026, which emerged from the U.S.-Israeli military operation against Iran and the subsequent threat to Strait of Hormuz navigation. The data reveals a consistent structural pattern across both episodes. During the JCPOA period, the E3 and EU issued nine statements, created three mechanisms, operationalised one with a positive output and one with no result, enforced four coercive tools of which only one directly addressed nuclear non-proliferation, and deployed zero naval or military assets.
In the Hormuz crisis, the EU issued five statements, created one mechanism, operationalised none, enforced zero coercive tools, and deployed zero naval or military assets (Council of the European Union, 2024). The UK-led coalition of forty countries that emerged in early April 2026 to address Strait of Hormuz navigation, far from representing a coordinated European strategic response, arose as a reaction to the United States’ further distancing from collective Western security responsibilities, forcing European powers into an operational role for which they had neither prepared nor volunteered (Al Jazeera, 2026). The EU’s posture in both crises conforms to the same template: statements issued, mechanisms created without enforcement infrastructure, and definitive positions avoided in international formats while the expectation of US leadership is maintained even as that leadership withdraws.
The trajectory of the Hormuz crisis through April 2026 confirms this structural passivity with particular clarity. The 40-country coalition convened under UK leadership produced no material outcome toward resolving the blockage: European nations had initially refused engagement out of concern about being drawn into the conflict (Al Jazeera, 2026), and several NATO members collectively rejected US requests for military contribution, including Germany, Spain, Italy, the United Kingdom, and the European Union itself.
The UNSC resolution proposed by Bahrain to authorise reopening was vetoed by Russia and China after being repeatedly weakened to eliminate any reference to enforcement authority (PBS News, 2026), confirming that the multilateral legal framework the EU has consistently relied upon as its preferred instrument of crisis management was rendered inoperative at the moment it was most needed.
The temporary reopening of the strait announced on 7 April 2026, conditioned on a two-week ceasefire brokered by Pakistan, was the direct result of sustained US military pressure and Pakistani bilateral mediation, with the EU having no institutional role in either (NBC News, 2026).
The Cost of Normative Under-Enforcement
This outcome does not vindicate the approach that produced it: threats against civilian infrastructure, disregard for UNCLOS transit obligations, and coercive ultimatums represent precisely the kind of conduct that erodes the international legal consensus the EU claims to uphold. The episode nonetheless illustrates the cost of the EU’s chosen posture. A coalition committed to normative frameworks and multilateral consensus watched from the margins while a crisis it had been nominally engaged with since 2018 was partially addressed through instruments it had explicitly refused to employ.
The appropriate response to this outcome is not for the EU to abandon its normative commitments but to build the enforcement capacity and strategic coherence that would allow it to defend those commitments credibly, so that international agreements and consensus are upheld through effective multilateral engagement rather than left to be enforced unilaterally by actors with no obligation to respect them.
Ukraine, Russia, the Redirection of EU Coercion and Strategic Autonomy Without a Theory of Change
The most analytically significant finding in this paper concerns the internal redirection of European coercive measures away from nuclear non-compliance and toward Iran’s military support for Russia. From late 2022 onward, every new EU restrictive measure targeting Iran was triggered not by escalation in the nuclear programme but by Iran’s provision of drones, missiles, and military technology to Russia in the context of the conflict in Ukraine: the dedicated UAV and drone sanctions framework established in July 2023, the expansion to cover missiles following Iran’s April 2024 attack on Israel, and the shipping restrictions targeting IRISL lines in November 2024 (Council of the EU, 2023; 2024).
Only the August 2025 snapback directly addressed nuclear non-compliance, and it arrived, as established above, after the non-proliferation objective had already been functionally undermined. This pattern reveals a foreign policy orientation driven by immediate geopolitical proximity rather than long-term non-proliferation commitments. The EU’s declared rationale for remaining in the JCPOA after US withdrawal was the prevention of Iranian nuclear escalation; its actual coercive activity between 2022 and 2025 was directed almost entirely at managing the spill over effects of Russia’s war in Ukraine. The two objectives are not irreconcilable, but the failure to maintain distinct and adequately resourced policy tracks for each produced a situation in which the EU’s non-proliferation credibility was sacrificed to its more immediate interest in managing Iranian-Russian military cooperation.
Taken together, these dynamics describe a European foreign policy posture that is structurally ambiguous, institutionally under-resourced, and absent a coherent theory of change. Sanctions were imposed and rebranded across seven years without a clear causal logic connecting each coercive measure to the compliance outcome it was meant to produce. Mechanisms were created, INSTEX most visibly, and left to collapse under the weight of member state self-interest the Blocking Statute’s waiver provisions formally accommodated.
The EU consistently avoided taking a definite position in international formats, instead leveraging the initiatives of other actors, whether the US, the UK-led coalition, or the UNSC snapback process to generate multilateral responses that carried the appearance of European participation without the substance of European leadership (International Crisis Group, 2025). The observation that the EU exposes structural limits in its claim to strategic autonomy when confronted with the simultaneous pressures of US extraterritoriality and Iranian non-compliance is not a partisan judgment; it is an inference that the EU’s own institutional record across this period makes difficult to contest (Council on Foreign Relations, 2025).
Conclusion
The JCPOA case does not demonstrate that European multilateral diplomacy is inherently incapable of managing extra-regional security challenges. It demonstrates that it is incapable of doing so when the political will to enforce its own instruments is absent, when self-interest is institutionally protected from accountability through waiver mechanisms, and when the implicit assumption of US enforcement capacity substitutes for independent European strategic planning. These are not structural inevitabilities. They are choices, and they carry measurable costs: a breakout timeline that collapsed from twelve months to one week, a single INSTEX transaction across five years of operation, and zero enforcement proceedings against companies that exited Iran in direct non-compliance with the Blocking Statute.
The Hormuz crisis of 2026 confirms that this pattern has not been revised. The same architecture of statements without enforcement, mechanisms without operationalisation, and definitive positions deferred to other actors is visible in the comparative data of Figure 4. The EU’s reactive posture carries systemic costs that extend beyond Iran: each instance in which the EU declines to enforce its own instruments or take a definite position in international formats erodes the credibility of those instruments for future use and diminishes the EU’s weight as an actor in precisely the multilateral frameworks it presents itself as championing.
The EU’s own stated commitment to strategic autonomy, articulated in the Strategic Compass of 2022 and repeated across successive foreign policy frameworks, provides the internal normative standard against which this record should be evaluated. Strategic autonomy requires not only the capacity to act independently but the demonstrated willingness to do so when the cost of action conflicts with the cost of deference. On both dimensions, the JCPOA period represents a failure relative to the EU’s own declared standard.
A revision of this posture is necessary not as an abstract commitment to assertiveness but as a practical prerequisite for the EU to function as a credible co-leading actor in the management of international security. In the specific context of the Western Balkans and other regions where the EU simultaneously positions itself as an enlargement patron, economic partner, and security actor, the capacity gap documented in the Iran case is not incidental, because it directly informs how non-aligned states assess the reliability of EU commitments and the costs of resisting its conditionality. An EU that cannot enforce its own instruments in an extra-regional context provides limited assurance that its commitments in a regional one are any more durable.
What this paper’s evidence demands is not a broader set of ambitions but a more honest reckoning with the gap between the principles the EU invokes as the basis for engagement and the institutional conduct it is actually willing to sustain when those principles come at a cost. Concretely, this requires three revisions. First, the EU must close the internal contradiction between declaring itself a guarantor of multilateral frameworks and maintaining waiver architectures that allow member states to defect from those frameworks on self-interest grounds without consequence; an actor that formally protects non-compliance within its own institutional structure cannot credibly demand compliance from external partners.
Second, the EU must develop and commit to enforcement mechanisms before crises rather than constructing and abandoning them during them; INSTEX was designed under pressure, operationalised without the political will its function required, and liquidated when sustaining it became inconvenient, a sequence that any future interlocutor will recall when assessing the reliability of the next EU-sponsored framework.
Third, and most fundamentally, the EU must accept that co-leadership in international security is not a status conferred by participation in negotiations or by the issuance of statements; it is earned through the demonstrated capacity to bear the enforcement costs of the positions it takes.
Until the EU is willing to hold itself to the standards it applies to others, to enforce the instruments it creates, and to sustain its commitments independently of whether the United States does the same, its claim to be a principled actor in the international system will remain a normative aspiration rather than an operational reality.
The consequences of these enforcement failures are documented in Figure 3. At JCPOA signature in 2016, Iran’s enrichment stood at 3.67% and its estimated breakout timeline, the time required to accumulate sufficient weapons-grade material for a nuclear device, was approximately twelve months (Iran Watch/Center for Arms Control and Non-Proliferation, 2016–2025).
By November 2021, following the EU’s failure to deliver on INSTEX and the absence of any enforcement action under the Blocking Statute, Iran had escalated to 60% enrichment with a 17.7 kg stockpile, reducing breakout to 2.3 months. By May 2025, the 60% stockpile had reached 408.6kg, and breakout was estimated at approximately one week. The E3’s triggering of the UNSC snapback mechanism in August 2025 came after Iran had already achieved near-weapons-grade enrichment capability, with IAEA-detected particles at 83.7% recorded as early as February 2023 (Reuters, 2023).
The causal sequence is analytically significant: INSTEX was liquidated in 2023 as a direct response to Iran’s deepening non-compliance and its intensifying military cooperation with Russia, but that non-compliance was itself accelerated by the EU’s prior failure to deliver the economic benefits that were the JCPOA’s primary compliance incentive for Iran.
The EU responded to the consequences of its own institutional failure by dismantling the last instrument through which it might have addressed those consequences, and then invoked the snapback mechanism only after the non-proliferation objective it was designed to protect had already been functionally compromised.
Bibliography
Al Jazeera (2026)UK-led coalition of 40 countries vows action on Hormuz Strait gridlock, 2 April. Available at: https://www.aljazeera.com/news/2026/4/2/uk-led-coalition-40-countries-hormuz-strait
Bourse & Bazaar (2023)INSTEX Shuts Down in a Loss for European Economic Sovereignty, 2 February. Available at: https://www.bourseandbazaar.org/articles/2023/2/2/instex-shuts-down-in-a-loss-for-european-economic-sovereignty
Council of the European Union (2024)Iran Sanctions Regimes (Drones, Missiles, Shipping, Snapback). Available at: https://www.consilium.europa.eu/en/policies/sanctions-against-iran/
Council of the EU (2023–2024)EU establishes dedicated UAV/drone sanctions framework against Iran; EU expands framework to cover missiles after Iran’s April 13 attack on Israel; EU widens measures — IRISL shipping lines. Available at: https://www.consilium.europa.eu/en/policies/sanctions-against-iran/timeline-eu-sanctions-against-iran/
Council on Foreign Relations (2025)What are Iran’s nuclear and missile capabilities? Available at: https://www.cfr.org/articles/what-are-irans-nuclear-and-missile-capabilities
Council on Foreign Relations (2026)Europe’s disjointed response to the war with Iran, 6 March. Available at: https://www.cfr.org/articles/europes-disjointed-response-to-the-u-s-israeli-war-with-iran
European Commission (2021)Report on the Status of the Blocking Statute, COM/2021/535. EUR-Lex. Available at: https://eur-lex.europa.eu
European Commission DG Trade (2024)EU–Iran Bilateral Trade Statistics (Eurostat Comext), 2014–2024. European Commission.
European External Action Service (2015)Nuclear Agreement — JCPOA. Available at: https://www.eeas.europa.eu/eeas/nuclear-agreement-jcpoa_en
Iran Watch / Center for Arms Control and Non-Proliferation (2016–2025)Iran Nuclear Milestones and Breakout Timeline Estimates.
International Crisis Group (2025)Iran Sanctions Snapback at the UN. Available at: https://www.crisisgroup.org/middle-east-north-africa/iran/iran-sanctions-snapback-un
Lawfare (2019)INSTEX: A Blow to US Sanctions? Lawfare Media. Available at: https://www.lawfaremedia.org/article/instex-blow-us-sanctions
NBC News (2026)Iran war live updates: Trump, Iran agree to two-week ceasefire after threat of massive attacks, 8 April. Available at: https://www.nbcnews.com/world/iran/live-blog/live-updates-iran-war-trump-deadline-hormuz-infrastructure-ceasefire-rcna267039
PBS News (2026)Russia and China veto watered-down UN resolution aimed at reopening the Strait of Hormuz, 7 April. Available at: https://www.pbs.org/newshour/world/russia-and-china-veto-watered-down-un-resolution-aimed-at-reopening-the-strait-of-hormuz
Reuters (2023) ‘IAEA detects uranium particles enriched to 83.7% at Iran’s Fordow plant’, 28 February. Available at:https://www.reuters.com/world/middle-east/iaea-detects-uranium-particles-enriched-up-to-837-iran-fordo-2023-02-28/
Data Sources
European Commission DG Trade; Eurostat (Comext Database) (2014–2024)EU–Iran Bilateral Trade Data. European Commission.
European Commission (2021) Communication COM(2021) 535 final. EUR-Lex; Lawfare (2018); Mayer Brown (2021)EU Blocking Statute: Corporate Withdrawals and Enforcement Proceedings (2018–2023). (Author’s compilation).
Institute for Science and International Security (ISIS); Iran Watch; Center for Arms Control and Non-Proliferation; International Atomic Energy Agency (2016–2025)Iran Verification and Monitoring Reports and Analysis of IAEA Iran Verification and Monitoring Report (May 2024).
Council of the European Union press releases (2018–2025); EUR-Lex; Baker McKenzie; Council on Foreign Relations; Euronews; POLITICO Europe (2026) (Author’s compilation).
European Commission DG Trade; Eurostat (Comext Database); European External Action Service (2014–2024)INSTEX-related statements and EU–Iran trade balance data.
POLITICO Europe (2026) E. Hartog, ‘Putin’s friendship has limits — as Iran just found out’, 28 February.
