On 30 July 2020, the Council imposed the first sanctions under the EU cyber sanctions framework, targeting individuals and entities responsible for or involved in significant cyber-attacks.
The decision operationalised the 2019 regime and signalled that the EU would use CFSP instruments to deter cyber operations as part of its broader hybrid-threat posture.