China, Cybernetics, EU – Baltic States, Legislation, Technology

The restrictive measures are a response to the attempted cyber-attack against the Organization for the Prohibition of Chemical Weapons (OPCW) and cyber attacks that are publicly known as WannaCry, NotPetya, and Operation Cloud Hopper, spokespeople for the Estonian Foreign Ministry said.

Estonia has been part of a group of EU member states leading the preparation efforts since the adoption of the cyber sanctions regime on May 17, 2019. This is the first time that the European Union is implementing these restrictive measures that enable travel bans and asset freezes of individuals and entities that have conducted cyber attacks.

"Estonia has been one of the leading forces within the European Union on cyber diplomacy. Today's decision is the result of our determined efforts and is a remarkable example of cyber attacks being followed by specific measures," Foreign Minister Urmas Reinsalu said.

He added that it sends an ever more important signal at a time when many countries and the medical sector are experiencing increased pressure from cyber attacks.

Cyber-enabled activities conducted by the sanctioned persons and entities or bodies have caused significant damage and economic loss to the European Union, undermined the integrity of the international institutions located in European Union, or have undermined the European Union’s integrity, security and economic competitiveness, including posing a threat to intellectual property.

According to Reinsalu, recent months have increased the need to stand for a rules-based international order in cyberspace.

"It is important that countries recognize the applicability of international law to cyberspace and uphold the cyber stability framework created by the United Nations Group of Governmental Experts, including norms of responsible state behavior. These norms also protect human rights and fundamental freedoms," the minister said.

Estonia has repeatedly condemned or expressed concern about irresponsible state behaviour in cyberspace. In relation to Thursday's decision regarding the cyber sanctions regime, Estonia's foreign minister condemned Russia for the NotPetya attacks in February 2018 and expressed Estonia's support to the United Kingdom and the Netherlands in standing up against irresponsible cyber attacks in October 2018.

In December 2018, the Estonian Ministry of Foreign Affairs shared its concern about malicious cyber activities conducted by the Chinese government.