Data Privacy & Tech

#52026XG02667EU continues cyber-attack sanctions list

🇪🇺European Union··Other·Medium Impact·View source ↗

AI-generated summary for informational purposes only. Not legal advice. See the original source for the authoritative text.

🇬🇧 English

The EU keeps existing asset freezes and related restrictions in place for people, companies, and groups listed under its cyber-attack sanctions regime. These measures target actors linked to cyber-attacks that threaten the EU or its Member States. Listed parties may ask national authorities for permission to use frozen funds for basic needs or specific payments. They can also ask the Council to reconsider their listing by 15 January 2027, and may challenge the decision before the EU General Court.

AI-generated summary. May contain errors. Refer to official sources for legal decisions.

Key Changes

  • Existing EU cyber-attack sanctions remain in force for listed persons, entities, and bodies.
  • Listed parties may apply to national authorities to use frozen funds for basic needs or specific payments.
  • Listed parties may ask the Council to reconsider their listing before 15 January 2027.

Obligations

What this law requires

critical

Persons, entities and bodies listed in the Annex to Council Decision (CFSP) 2019/797 and Annex I to Council Regulation (EU) 2019/796 must continue to comply with the restrictive measures applicable under the EU cyber-attack sanctions regime, including asset-freeze related restrictions.

listed natural personslisted legal personslisted entitieslisted bodies
prohibition
high

Listed persons, entities and bodies seeking to use frozen funds for basic needs or specific payments must apply to the competent authorities of the relevant EU Member State for authorisation before using those funds.

listed natural personslisted legal personslisted entitieslisted bodies
licensing
medium

Listed persons, entities and bodies requesting reconsideration of their inclusion on the sanctions lists must submit the request with supporting documentation to the Council of the European Union before 15 January 2027.

listed natural personslisted legal personslisted entitieslisted bodies
before 15 January 2027
reporting

Affected Parties

Persons and entities listed under the EU cyber-attack sanctions regimeBanks, payment providers, and compliance teams handling sanctions screening+1 more…

Tags

EU sanctions,cybersecurity,asset freezes…