Differences

This shows you the differences between two versions of the page.

--- law:eu:cyber_sanctions [2026/09/27 18:19] – Entry created (draft) lfpo
+++ law:eu:cyber_sanctions [2026/10/01 14:09] (current) – Disclaimer reference added lfpo
@@ Line 1: / Line 1: @@
-====== EU restrictive measures against cyber-attacks threatening the Union or its Member States (Council Decision (CFSP) 2019/797 and Council Regulation (EU) 2019/796) and the Cyber Diplomacy Toolbox ======
+====== EU cyber sanctions regime (2019) ======
-//Draft – editorial review pending. As of 27 September 2026.//
+//As of 1 October 2026. Information only, not legal advice – see the [[about:disclaimer|disclaimer]].//
+^ Full title | EU restrictive measures against cyber-attacks threatening the Union or its Member States (Council Decision (CFSP) 2019/797 and Council Regulation (EU) 2019/796) and the Cyber Diplomacy Toolbox |
 ^ Type | EU Council decision (CFSP) and Council regulation; Council conclusions (toolbox) |
 ^ Adopted by | Council of the European Union |
@@ Line 8: / Line 9: @@
 ^ Legal status | Framework in force; renewed until 18 May 2028; individual listings renewed until 18 May 2027; binding (Regulation directly applicable; Decision binding on Member States) |
 ^ Official text | [[https://eur-lex.europa.eu/eli/dec/2019/797/oj|EUR-Lex (Decision (CFSP) 2019/797)]] · [[https://eur-lex.europa.eu/eli/reg/2019/796/oj|EUR-Lex (Regulation (EU) 2019/796)]] |
-^ Matrix position | syntactic · State–EU |
+^ Subject area | Use of force, intervention and cyber operations |
 ===== Overview =====
@@ Line 25: / Line 26: @@
   * 2025-01-27: Three GRU officers listed in connection with cyber-attacks against Estonia.
   * 2026-03-16: Three entities and two individuals listed (entities based in China and Iran); according to the Council, the regime then applied to 19 individuals and 7 entities.
-  * 2026-07-13: Further listings of Russian individuals and entities under the cyber regime, adopted together with a listing under the separate regime for Russia's destabilising activities (Council Decision (CFSP) 2024/2643) [to be verified: updated total number of listings].
+  * 2026-07-13: Eight individuals and four entities described by the Council as part of Russia's cyber ecosystem listed under the cyber regime (Council Decision (CFSP) 2026/1713, Implementing Regulation (EU) 2026/1714), together with one individual listed under the separate [[law:eu:russia_destabilisation_sanctions|regime for Russia's destabilising activities]] (Council Decision (CFSP) 2026/1707).
 ===== Recent developments =====
@@ Line 39: / Line 40: @@
   * [[law:national:germany]]
   * [[law:soft:tallinn_manual]]
+  * [[law:eu:russia_destabilisation_sanctions]]
 ===== Sources =====
@@ Line 51: / Line 53: @@
 ===== Change log =====
   * 2026-09-27: Entry created (draft).
+  * 2026-09-30: Entry reviewed and finalised.
+  * 2026-10-01: Link to the regime on Russia's destabilising activities added.