EU extends cyber sanctions regime amid rising digital threats

The European Council has extended on Monday (12 May) its sanctions regime targeting cyber-attacks for an additional year, until 18 May 2026. Furthermore, the legal framework enabling these measures has been prolonged for three years, through 18 May 2028.

Established in 2019, this framework allows the EU to impose restrictive measures on individuals and entities responsible for cyber-attacks that pose significant threats to the Union or its member states. Sanctions can also be applied in response to cyber-attacks against third countries or international organizations when deemed necessary to achieve the objectives of the Common Foreign and Security Policy (CFSP).

Currently, the EU's cyber sanctions list includes 17 individuals and four entities. Sanctioned parties are subject to asset freezes, prohibitions on making funds or economic resources available to them, and, for individuals, travel bans within the EU.

The decision to extend the sanctions regime underscores the EU's commitment to deterring malicious cyber activities and upholding the international rules-based order. By ensuring that those responsible are held accountable, the EU aims to promote an open, free, stable, and secure cyberspace.

This move comes amid increasing concerns over cyber threats, including recent attacks attributed to state-sponsored actors targeting critical infrastructure and democratic institutions within the EU. The extended framework provides the EU with the necessary tools to respond effectively to such challenges and protect its digital sovereignty.

The Council's decision reflects a broader strategy to enhance the EU's resilience against cyber threats and to foster international cooperation in promoting cyber-security. The EU and its member states will continue to work with global partners to address the evolving landscape of cyber threats and to ensure the safety and security of their digital environments.

Sources: The European Council

Share this article: