On 17 May 2021, the Council decided to prolong the framework for restrictive measures against cyber-attacks threatening the EU or its member states for another year, until 18 May 2022.
This framework allows the EU to impose targeted restrictive measures on persons or entities involved in cyber-attacks which cause a significant impact, and constitute an external threat to the EU or its member states. Restrictive measures can also be imposed in response to cyber-attacks against third states or international organisations where such measures are considered necessary to achieve the objectives of the Common Foreign and Security Policy (CFSP).
Sanctions are one of the options available in the Union's framework for a joint diplomatic response to malicious cyber activities, and are intended to discourage, deter and respond to continuing and increasing malicious behaviour in cyberspace. ECOPNET (European Cooperation and Partnership Network) welcomes the European Union's efforts to scaled-up its resilience and ability to prevent cyber threats.
Sanctions currently apply to eight individuals and four entities, and include an asset freeze and a travel ban. Additionally, EU persons and entities are forbidden from making funds available to those listed.
Background
In June 2017, the EU stepped up its response by establishing a Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities (the "cyber diplomacy toolbox"). The framework allows the EU and its Member States to use all CFSP measures, including restrictive measures if necessary, to discourage, deter and respond to malicious cyber activities targeting the integrity and security of the EU and its member states.
The EU remains committed to a global, open, stable, peaceful and secure cyberspace and therefore reiterates the need to strengthen international cooperation in order to promote the rules-based order in this area.
Source: Council of the EU Press Releases