Targets persons and entities responsible for cyber-attacks or attempted cyber-attacks with a significant effect which constitute an external threat to the EU or its member states, including attacks against third states or international organisations, as well as those who provide support for or are otherwise involved in such attacks. Under Council Decision (CFSP) 2019/797 and Regulation (EU) 2019/796, designated persons and entities are subject to an asset freeze and a prohibition on making funds or economic resources available to them, and designated individuals are banned from entering or transiting the EU. The regime is thematic and applies regardless of where the attackers are located; it imposes no country- or sector-wide restrictions.
