Concerning restrictive measures in view of the situation in Russia

EUROPEISKA UNIONENS RÅD HAR ANTAGIT DENNA FÖRORDNING

med beaktande av fördraget om Europeiska unionens funktionssätt, särskilt artikel 215,

med beaktande av rådets beslut (Gusp) 2024/1484 av den 27 maj 2024 om restriktiva åtgärder med anledning av situationen i Ryssland,

med beaktande av det gemensamma förslaget från unionens höga representant för utrikes frågor och säkerhetspolitik och Europeiska kommissionen, och

Skälen nedan är grundrättsaktens. Ändringsrättsakternas skäl: förordning (EU) 2024/1488 · förordning (EU) 2024/2465 · förordning (EU) 2025/958 · förordning (EU) 2025/1081 · förordning (EU) 2025/1438 · förordning (EU) 2025/2356 · förordning (EU) 2025/2638 · förordning (EU) 2026/431 · förordning (EU) 2026/1147 · förordning (EU) 2026/1362 · förordning (EU) 2026/1708 · förordning (EU) 2026/2193.

(1) Den 27 maj 2024 antog rådet beslut (Gusp) 2024/1484, genom vilket det fastställs en ram för riktade restriktiva åtgärder med anledning av situationen i Ryssland och det interna förtrycket i landet. Den politiska bakgrunden och de politiska skälen för inrättandet av de restriktiva åtgärderna anges i skälen till det beslutet.

(2) Internt förtryck anses inbegripa bland annat tortyr och annan grym, omänsklig och förnedrande behandling eller bestraffning, summariska eller godtyckliga avrättningar, försvinnanden, godtyckliga gripanden och andra allvarliga kränkningar av de mänskliga rättigheter och de grundläggande friheter som anges i relevanta internationella instrument som rör de mänskliga rättigheterna, inklusive den allmänna förklaringen om de mänskliga rättigheterna och den internationella konventionen om medborgerliga och politiska rättigheter.

(3) Beslut (Gusp) 2024/1484 föreskriver reseförbud för fysiska personer som förtecknas i bilagan till det beslutet och frysning av medel och ekonomiska resurser samt förbud mot att göra medel och ekonomiska resurser tillgängliga för fysiska eller juridiska personer, enheter eller organ som förtecknas i den bilagan. I det beslutet föreskrivs också vissa sektoriella exportrestriktioner för produkter som skulle kunna användas för internt förtryck samt produkter avsedda främst för användning vid övervakning eller avlyssning av informationssäkerhet och telekommunikation.

(4) De restriktioner som införs genom denna förordning avseende produkter som förtecknas i bilagorna I och II till denna förordning påverkar inte de restriktioner som är tillämpliga enligt rådets förordning (EU) nr 833/2014. Om en produkt omfattas av en av de kategorier som anges i bilaga I eller II till den här förordningen och även omfattas av tillämpningsområdet för förordning (EU) nr 833/2014, bör de restriktioner som anges i förordning (EU) nr 833/2014 tillämpas.

(5) Bilaga II till denna förordning anger kategorier av produkter som bedöms vara relevanta för använding för internt förtryck på grundval av deras tekniska kapacitet. Om en produkt omfattas av tillämpningsområdet för förordning (EU) nr 833/2014 bör restriktionerna i förordning (EU) nr 833/2014 vara tillämpliga oavsett om produkten har den tekniska kapacitet som anges i bilaga II till den här förordningen.

(6) Information om avsedd användning av utrustning, teknik eller programvara för internt förtryck i Ryssland får erhållas på valfritt sätt, inbegripet genom aktörens egna efterforskningar, information som tillhandahålls av behöriga myndigheter eller offentligt tillgängliga källor.

(7) De åtgärderna faller inom tillämpningsområdet för fördraget om Europeiska unionens funktionssätt och lagstiftningsåtgärder på unionsnivå är nödvändiga för att genomföra dem, särskilt för att de ska tillämpas på ett enhetligt sätt av ekonomiska aktörer i alla medlemsstater.

(8) Denna förordning står i överensstämmelse med de grundläggande rättigheterna och iakttar de principer som erkänns i Europeiska unionens stadga om de grundläggande rättigheterna, i synnerhet rätten till ett effektivt rättsmedel och en rättvis rättegång, rätten till försvar och rätten till skydd av personuppgifter. Denna förordning bör tillämpas i enlighet med dessa rättigheter.

(9) Förfarandet för att ändra förteckningen i bilaga IV till denna förordning bör inbegripa att de fysiska och juridiska personer, enheter eller organ som är uppförda på förteckningen informeras om skälen till detta, så att de ges möjlighet att lämna synpunkter.

(10) För att genomföra denna förordning och för att säkerställa största möjliga rättssäkerhet inom unionen bör namn och andra relevanta uppgifter avseende de fysiska och juridiska personer, enheter och organ vars medel och ekonomiska resurser ska frysas i enlighet med denna förordning offentliggöras. All behandling av personuppgifter bör vara förenlig med Europaparlamentets och rådets förordningar (EU) 2016/679 och (EU) 2018/1725.

(11) Medlemsstaterna och kommissionen bör underrätta varandra om de åtgärder som vidtas enligt denna förordning och om andra relevanta uppgifter med anknytning till denna förordning som de förfogar över.

(12) Medlemsstaterna bör fastställa regler om sanktioner för överträdelser av bestämmelserna i denna förordning. Sanktionerna bör vara effektiva, proportionella och avskräckande.

HÄRIGENOM FÖRESKRIVS FÖLJANDE.

Article1¶

For the purposes of this Regulation, the following definitions apply:

a) ‘brokering services’ means:

i) the negotiation or arrangement of transactions for the purchase, sale or supply of goods and technology or of financial and technical services, including from a third country to any other third country; or

ii) the selling or buying of goods and technology or of financial and technical services, including where they are located in third countries for their transfer to another third country;

b) ‘claim’ means any claim, whether asserted by legal proceedings or not, made before or after the date of entry into force of this Regulation, under or in connection with a contract or transaction, and in particular:

i) a claim for performance of any obligation arising under or in connection with a contract or transaction;

ii) a claim for extension or payment of a bond, financial guarantee or indemnity of whatever form;

iii) a claim for compensation in respect of a contract or transaction;

iv) a counterclaim;

v) a claim for the recognition or enforcement, including by the procedure of exequatur, of a judgment, an arbitration award or an equivalent decision, wherever made or given;

c) ‘contract or transaction’ means any transaction of whatever form and whatever the applicable law, whether comprising one or more contracts or similar obligations made between the same or different parties; for that purpose ‘contract’ includes a bond, guarantee or indemnity, particularly a financial guarantee or financial indemnity, and credit, whether legally independent or not, as well as any related provision arising under, or in connection with, the transaction;

d) ‘competent authorities’ means the competent authorities of the Member States as identified on the websites listed in Annex III;

e) ‘economic resources’ means assets of every kind, whether tangible or intangible, movable or immovable, which are not funds, but may be used to obtain funds, goods or services;

f) ‘financing or financial assistance’ means any action, irrespective of the particular means chosen, whereby the natural or legal person, entity or body concerned, conditionally or unconditionally, disburses or commits to disburse its own funds or economic resources, including but not limited to grants, loans, guarantees, suretyships, bonds, letters of credit, supplier credits, buyer credits, import or export advances and all types of insurance and reinsurance, including export credit insurance; payment as well as terms and conditions of payment of the agreed price for a good or a service, made in line with normal business practice, do not constitute financing or financial assistance;

g) ‘freezing of economic resources’ means preventing the use of economic resources to obtain funds, goods or services in any way, including, but not limited to, by selling, hiring or mortgaging them;

h) ‘freezing of funds’ means preventing any move, transfer, alteration, use of, access to, or dealing with funds in any way that would result in any change in their volume, amount, location, ownership, possession, character, destination or other change that would enable the funds to be used, including portfolio management;

i) ‘funds’ means financial assets and benefit of every kind, including, but not limited to:

i) cash, cheques, claims on money, drafts, money orders and other payment instruments;

ii) deposits with financial institutions or other entities, balances on accounts, debts and debt obligations;

iii) publicly and privately-traded securities and debt instruments, including stocks and shares, certificates representing securities, bonds, notes, warrants, debentures and derivatives contracts;

iv) interest, dividends or other income on or value accruing from or generated by assets;

v) credit, right of set-off, guarantees, performance bonds or other financial commitments;

vi) letters of credit, bills of lading, bills of sale;

vii) documents showing evidence of an interest in funds or financial resources;

j) ‘technical assistance’ means any technical support related to repairs, development, manufacture, assembly, testing, maintenance, or any other technical service, and may take forms such as instruction, advice, training, transmission of working knowledge or skills or consulting services, including verbal forms of assistance;

k) ‘territory of the Union’ means the territories of the Member States to which the Treaty on European Union applies, under the conditions laid down therein, including their airspace.

Article2¶

1. It shall be prohibited:

a) to sell, supply, transfer or export, directly or indirectly, equipment which might be used for internal repression as listed in Annex I, whether or not originating in the Union, to any natural or legal person, entity or body in Russia or for use in Russia;

b) to provide technical assistance or brokering services related to the equipment referred to in point (a), directly or indirectly to any natural or legal person, entity or body in Russia or for use in Russia;

c) to provide financing or financial assistance, including in particular grants, loans and export credit insurance, as well as insurance and reinsurance, related to the equipment referred to in point (a), directly or indirectly to any natural or legal person, entity or body in Russia or for use in Russia.

2. Paragraph 1 shall not apply to protective equipment temporarily exported to Russia by UN personnel, personnel of the Union or its Member States, representatives of the media, and humanitarian and development workers and associated personnel for their personal use only.

3. By way of derogation from paragraph 1, the competent authorities may authorise, under such conditions as they deem appropriate, the sale, supply, transfer or export of equipment which might be used for internal repression as listed in Annex I, and associated financing and financial and technical assistance, intended solely for humanitarian or protective use, for institution-building programmes of the UN or the Union, or for crisis-management operations of the UN and of the Union or of regional and subregional organisations.

4. The authorisations referred to in paragraph 3 may be granted only prior to the activity for which they are requested. The Member State concerned shall inform the other Member States and the Commission of any authorisation granted under this Article within 4 weeks of the authorisation.

5. By way of derogation from paragraph 1, the competent authorities may authorise the sale, supply, transfer, export or provision of the assistance or services referred to therein after having determined that this is necessary for:

a) the functioning of diplomatic and consular representations of the Union and of the Member States or partner countries in Russia, including delegations, embassies and missions, or international organisations in Russia enjoying immunities in accordance with international law;

b) the provision of electronic communication services by Union telecommunication operators, for the provision of associated facilities and services necessary for the operation, maintenance and security of such electronic communication services, in Russia, in Ukraine, in the Union, between Russia and the Union, and between Ukraine and the Union, and for data centre services in the Union.

Article3¶

1. It shall be prohibited to sell, supply, transfer or export, directly or indirectly, equipment, technology or software listed in Annex II, whether or not originating in the Union, to any natural or legal person, entity or body in Russia or for use in Russia, unless the competent authority of the relevant Member State has given prior authorisation.

2. The competent authorities shall not grant any authorisation under paragraph 1 if they have reasonable grounds to determine that the equipment, technology or software in question would be used for internal repression by Russia’s government, public bodies, corporations or agencies, or any person or entity acting on their behalf or at their direction.

3. Annex II shall include information security and telecommunications equipment, technology or software that could be misused for internal repression.

4. By way of derogation from paragraphs 1 and 2, the competent authorities may authorise the sale, supply, transfer, export, or provision of the services referred to therein, under such conditions as they deem appropriate, after having determined that this is necessary for:

a) the functioning of diplomatic and consular representations of the Union and of the Member States or partner countries in Russia, including delegations, embassies and missions, or international organisations in Russia enjoying immunities in accordance with international law;

b) the provision of electronic communication services by Union telecommunication operators necessary for the operation, maintenance and security, including cybersecurity, of electronic communication services, in Russia, in Ukraine, in the Union, between Russia and the Union, and between Ukraine and the Union, and for data centre services in the Union.

5. The Member State concerned shall inform the other Member States and the Commission of any authorisation granted under this Article within 4 weeks of the authorisation.

6. The Member State concerned shall inform the other Member States and the Commission of any authorisation denied under this Article within 4 weeks of that denial.

7. This Article is without prejudice to Article 2a of Council Regulation (EU) No 833/2014.

Article4¶

1. Unless the competent authority of the relevant Member State has given prior authorisation in accordance with Article 3(1), it shall be prohibited to:

a) provide, directly or indirectly, technical assistance or brokering services related to the equipment, technology and software listed in Annex II, related to the installation, provision, manufacture, maintenance, repair and use of the equipment and technology listed in Annex II, or related to the provision, installation, operation or updating of any software listed in Annex II to any natural or legal person, entity or body in Russia or for use in Russia;

b) provide, directly or indirectly, financing or financial assistance related to the equipment, technology and software listed in Annex II to any natural or legal person, entity or body in Russia or for use in Russia;

c) provide any telecommunication or internet monitoring or interception services to, or for the direct or indirect benefit of, Russia’s government, public bodies, corporations and agencies or any person or entity acting on their behalf or at their direction.

2. For the purposes of point (a) of paragraph 1, the prohibition on maintenance and repair of the relevant equipment includes a prohibition on the maintenance, update and repair of any embedded software that is incorporated into the equipment.

3. For the purposes of point (c) of paragraph 1, ‘telecommunication or internet monitoring or interception services’ means those services that provide, in particular using equipment, technology or software listed in Annex II, access to and delivery of a subject’s incoming and outgoing telecommunications and call-associated data for the purposes of its extraction, decoding, recording, processing, analysis or storing, or any other related activity.

Article5¶

1. The prohibitions in Articles 2(1) and 3(1) shall apply where equipment, technology or software not listed in Annexes I and II, are intended, in their entirety or in part, for use in connection with internal repression in Russia. Where the operator becomes aware of this, it shall immediately notify the competent authorities.

2. The prohibitions in Articles 2(1) and 3(1) shall not apply where the operator had no reason to suspect that the equipment, technology or software not listed in Annexes I and II are intended, in their entirety or in part, for use in connection with internal repression in Russia.

Article6¶

1. All funds and economic resources belonging to, owned, held or controlled by any natural or legal person, entity or body listed in Annex IV shall be frozen.

2. No funds or economic resources shall be made available, directly or indirectly, to or for the benefit of natural or legal persons, entities or bodies listed in Annex IV.

3. Annex IV shall include natural or legal persons, entities or bodies that:

a) are responsible for serious violations or abuses of human rights or the repression of civil society and democratic opposition, or whose activities otherwise seriously undermine democracy or the rule of law in Russia;

b) provide financial, technical, or material support for, or are otherwise involved in, acts set out in point (a), including by planning, directing, ordering, assisting, preparing, facilitating, or encouraging such acts;

c) are associated with the natural or legal persons, entities or bodies referred to in point (a) or (b).

Article7¶

1. By way of derogation from Article 6(1) and (2), the competent authorities may authorise the release of certain frozen funds or economic resources, or the making available of certain funds or economic resources, under such conditions as they deem appropriate, after having determined that the funds or economic resources concerned are:

a) necessary to satisfy the basic needs of natural or legal persons, entities or bodies listed in Annex IV, and dependent family members of such natural persons, including payments for foodstuffs, rent or mortgage, medicines and medical treatment, taxes, insurance premiums, and public utility charges;

b) intended exclusively for the payment of reasonable professional fees or the reimbursement of incurred expenses associated with the provision of legal services;

c) intended exclusively for the payment of fees or service charges for the routine holding or maintenance of frozen funds or economic resources;

d) necessary for extraordinary expenses, provided that the relevant competent authority has notified the competent authorities of the other Member States and the Commission of the grounds on which it considers that a specific authorisation should be granted, at least 2 weeks prior to the authorisation;

e) to be paid into or from an account of a diplomatic mission or consular post or an international organisation enjoying immunities in accordance with international law, insofar as such payments are intended to be used for official purposes of the diplomatic or consular mission or international organisation;

f) necessary for the functioning of diplomatic and consular representations of the Union and of the Member States or partner countries in Russia, including delegations, embassies and missions, or international organisations in Russia enjoying immunities in accordance with international law;

g) necessary for the provision of electronic communication services by Union telecommunication operators, for the provision of associated facilities and services necessary for the operation, maintenance and security of such electronic communication services, in Russia, in Ukraine, in the Union, between Russia and the Union, and between Ukraine and the Union, and for data centre services in the Union; or

h) necessary for the sale and transfer by 28 August 2024, or within 6 months from the date of listing in Annex IV, whichever is latest, of proprietary rights in a legal person, entity or body established in the Union where those proprietary rights are directly or indirectly owned by a natural or legal person, entity or body listed in Annex IV, and after having determined that the proceeds of such sale and transfer remain frozen.

2. The Member State concerned shall inform the other Member States and the Commission of any authorisation granted under paragraph 1 within 2 weeks of the authorisation.

Article8¶

1. By way of derogation from Article 6(1) and (2), the competent authorities may authorise the release of certain frozen funds or economic resources, or the making available of certain funds or economic resources, under such conditions as they deem appropriate, after having determined that the provision of such funds or economic resources is necessary to ensure the timely delivery of humanitarian assistance or to support other activities that support basic human needs.

2. In the absence of a negative decision, a request for information or a notification for additional time from the relevant competent authority within 5 working days of the date of receipt of a request for authorisation under paragraph 1, that authorisation shall be considered granted.

3. The Member State concerned shall inform the other Member States and the Commission of any authorisation granted under this Article within 4 weeks of the authorisation.

Article9¶

1. By way of derogation from Article 6(1), the competent authorities may authorise the release of certain frozen funds or economic resources, provided that the following conditions are met:

a) the funds or economic resources are the subject of an arbitral decision rendered prior to the date on which the natural or legal person, entity or body referred to in Article 6 was listed in Annex IV, or of a judicial or administrative decision rendered in the Union, or a judicial decision enforceable in the Member State concerned, prior to or after that date;

b) the funds or economic resources will be used exclusively to satisfy claims secured by such a decision or recognised as valid in such a decision, within the limits set by applicable laws and regulations governing the rights of persons having such claims;

c) the decision is not for the benefit of a natural or legal person, entity or body listed in Annex IV; and

d) recognising the decision is not contrary to public policy in the Member State concerned.

2. The Member State concerned shall inform the other Member States and the Commission of any authorisation granted under paragraph 1 within 2 weeks of the authorisation.

Article10¶

1. By way of derogation from Article 6(1) and provided that a payment by a natural or legal person, entity or body listed in Annex IV is due under a contract or agreement that was concluded by, or an obligation that arose for, the natural or legal person, entity or body concerned, before the date on which that natural or legal person, entity or body was included in Annex IV, the competent authorities may authorise, under such conditions as they deem appropriate, the release of certain frozen funds or economic resources, provided that the competent authority concerned has determined that:

a) the funds or economic resources will be used for a payment by a natural or legal person, entity or body listed in Annex IV; and

b) the payment is not in breach of Article 6(2).

2. The Member State concerned shall inform the other Member States and the Commission of any authorisation granted under paragraph 1 within 2 weeks of the authorisation.

Article11¶

1. Article 6(2) shall not prevent the crediting of frozen accounts by financial or credit institutions that receive funds transferred by third parties onto the account of a listed natural or legal person, entity or body, provided that any additions to such accounts will also be frozen. The financial or credit institution shall inform the relevant competent authority about any such transaction without delay.

2. Article 6(2) shall not apply to the addition to frozen accounts of:

a) interest or other earnings on those accounts;

b) payments due under contracts, agreements or obligations that were concluded or arose before the date on which the natural or legal person, entity or body referred to in Article 6 was included in Annex IV; or

c) payments due under judicial, administrative or arbitral decisions rendered in a Member State or enforceable in the Member State concerned,

provided that any such interest, other earnings and payments are frozen in accordance with Article 6(1).

Article12¶

1. Natural and legal persons, entities and bodies shall:

a) supply immediately any information which would facilitate compliance with this Regulation, such as information on accounts and amounts frozen in accordance with Article 6(1) or information held about funds and economic resources within Union territory belonging to, owned, held or controlled by natural or legal persons, entities or bodies listed in Annex IV and which have not been treated as frozen by the natural and legal persons, entities and bodies obliged to do so, to the competent authority of the Member State where they are resident or located, and transmit such information, directly or through the Member State, to the Commission; and

b) cooperate with the competent authority in any verification of the information referred to in point (a).

2. Paragraph 1 shall apply subject to national or other applicable rules regarding the confidentiality of information held by judicial authorities, and consistent with respect for the confidentiality of communications between lawyers and their clients guaranteed by Article 7 of the Charter of Fundamental Rights of the European Union. For that purpose, such communications include those relating to legal advice provided by other certified professionals who are authorised under national law to represent their clients in judicial proceedings, insofar as such legal advice is provided in connection with pending or prospective judicial proceedings.

3. Any additional information received directly by the Commission shall be made available to the Member States.

4. Any information provided or received in accordance with this Article shall be used only for the purposes for which it was provided or received.

5. The competent authorities, including enforcement authorities, customs authorities within the meaning of Regulation (EU) No 952/2013 of the European Parliament and of the Council, competent authorities within the meaning of Regulation (EU) No 575/2013 of the European Parliament and of the Council, Directive (EU) 2015/849 of the European Parliament and of the Council and Directive 2014/65/EU of the European Parliament and of the Council, as well as administrators of official registers wherein natural persons, legal persons, entities and bodies as well as immovable or movable property are registered, shall process and exchange without delay information, including personal data and, if necessary, the information referred to in paragraph 1 of this Article, with other competent authorities of their Member State, of other Member States and the Commission, if such processing and exchange is necessary to carry out the tasks of the processing authority or the receiving authority under this Regulation, in particular when they detect instances of a breach or circumvention, or attempts at a breach or circumvention, of the prohibitions set out in this Regulation.

Article13¶

1. It shall be prohibited to participate, knowingly and intentionally, in activities the object or effect of which is to circumvent the measures referred to in this Regulation.

2. Natural or legal persons, entities or bodies listed in Annex IV, shall:

a) report within 6 weeks from the date of listing in Annex IV funds or economic resources within the jurisdiction of a Member State belonging to, owned, held or controlled by them, to the competent authority of the Member State where those funds or economic resources are located; and

b) cooperate with the competent authority in any verification of such information.

3. Failure to comply with paragraph 2 of this Article shall be considered as participation, as referred to in paragraph 1 of this Article, in activities the object or effect of which is to circumvent the measures referred to in Article 6.

4. The Member State concerned shall inform the Commission within 2 weeks of the information received pursuant to point (a) of paragraph 2.

5. Any information provided or received in accordance with this Article shall be used only for the purposes for which it was provided or received.

6. Any processing of personal data shall be carried out in accordance with this Regulation and with Regulations (EU) 2016/679 and (EU) 2018/1725 and only in so far as necessary for the application of this Regulation.

Article14¶

1. The freezing of funds and economic resources or the refusal to make funds or economic resources available, carried out in good faith on the basis that such action is in accordance with this Regulation, shall not give rise to liability of any kind on the part of the natural or legal person or entity or body implementing it, or its directors or employees, unless it is proved that the funds and economic resources were frozen or withheld as a result of negligence.

2. Actions by natural or legal persons, entities or bodies shall not give rise to any liability of any kind on their part if they did not know, and had no reasonable cause to suspect, that their actions would infringe the measures set out in this Regulation.

Article15¶

1. No claims in connection with any contract or transaction the performance of which has been affected, directly or indirectly, in whole or in part, by the measures imposed under this Regulation, including claims for indemnity or any other claim of this type, such as a claim for compensation or a claim under a guarantee, in particular a claim for extension or payment of a bond, guarantee or indemnity, in particular a financial guarantee or financial indemnity, of whatever form, shall be satisfied, if they are made by:

a) natural or legal persons, entities or bodies listed in Annex IV;

b) any natural or legal person, entity or body acting through or on behalf of one of the natural or legal persons, entities or bodies referred to in point (a).

2. In any proceedings for the enforcement of a claim, the onus of proving that satisfying the claim is not prohibited by paragraph 1 shall be on the natural or legal person, entity or body seeking the enforcement of that claim.

3. This Article is without prejudice to the right of the natural or legal persons, entities and bodies referred to in paragraph 1 to judicial review of the legality of the non-performance of contractual obligations in accordance with this Regulation.

Article16¶

1. The Commission and Member States shall inform each other of the measures taken under this Regulation and share any other relevant information at their disposal in connection with this Regulation, in particular information in respect of:

a) funds frozen under Article 6 and authorisations granted under the derogations set out in this Regulation;

b) violation and enforcement problems and judgments handed down by national courts.

2. The Member States shall immediately inform each other and the Commission of any other relevant information at their disposal which might affect the effective implementation of this Regulation.

Article17¶

1. Where the Council decides to subject a natural or legal person, entity or body to the measures referred to in Article 2, it shall amend Annex IV accordingly.

2. The Council shall communicate a decision pursuant to paragraph 1, including the grounds for the listing, to the natural or legal person, entity or body concerned, either directly, if the address is known and if such communication can be effected, or through the publication of a notice, providing that natural or legal person, entity or body with an opportunity to submit observations.

3. Where observations are submitted, or where substantial new evidence is presented, the Council shall review the decision concerned and inform the natural or legal person, entity or body concerned accordingly.

4. The list in Annex IV shall be reviewed at regular intervals and at least every 12 months.

5. The Commission shall be empowered to amend Annex III on the basis of information supplied by Member States.

Article18¶

1. Annex IV shall include the grounds for the listing of natural or legal persons, entities or bodies concerned.

2. Annex IV shall contain, where available, the information necessary to identify the natural or legal persons, entities or bodies concerned. With regard to natural persons, such information may include: names and aliases; date and place of birth; nationality; passport and identity card numbers; gender; address, if known; and function or profession. With regard to legal persons, entities or bodies, such information may include names, place and date of registration, registration number and place of business.

Article19¶

1. Member States shall lay down the rules on penalties applicable to infringements of the provisions of this Regulation and shall take all measures necessary to ensure that they are implemented. The penalties provided for must be effective, proportionate and dissuasive. Member States shall also provide for appropriate measures of confiscation of the proceeds of such infringements.

2. Member States shall notify the Commission of the rules referred to in paragraph 1 without delay after the entry into force of this Regulation and shall notify it of any subsequent amendment thereto.

Article20¶

1. The Council, the Commission and the High Representative of the Union for Foreign Affairs and Security Policy (the ‘High Representative’) may process personal data in order to carry out their tasks under this Regulation. Those tasks include:

a) as regards the Council, preparing and making amendments to Annex IV;

b) as regards the High Representative, preparing amendments to Annex IV;

c) as regards the Commission:

i) adding the contents of Annex IV to the electronic, consolidated list of natural and legal persons, groups and entities subject to Union financial sanctions and to the interactive sanctions map, both of which are publicly available;

ii) processing information on the impact of the measures of this Regulation, such as the value of frozen funds and information on authorisations granted by the competent authorities.

2. The Council, the Commission and the High Representative shall process, where applicable, relevant data relating to criminal offences committed by listed natural persons, to criminal convictions of such persons or to security measures concerning such persons only to the extent that such processing is necessary for the preparation of Annex IV.

3. For the purposes of this Regulation, the Council, the Commission and the High Representative are designated as ‘controller’ within the meaning of Article 3, point 8, of Regulation (EU) 2018/1725 in order to ensure that the natural persons concerned can exercise their rights under that Regulation.

Article21¶

1. Member States shall designate the competent authorities referred to in this Regulation and identify them on the websites listed in Annex III. Member States shall notify the Commission of any changes in the addresses of their websites listed in Annex III.

2. Member States shall notify the Commission of their competent authorities, including the contact details of those competent authorities, without delay after the entry into force of this Regulation, and shall notify it of any subsequent amendment thereto.

3. Where this Regulation sets out a requirement to notify, inform or otherwise communicate with the Commission, the address and other contact details to be used for such communication shall be those listed in Annex III.

Article22¶

Any information provided to or received in accordance with this Regulation shall be used only for the purposes for which it was provided or received.

Article23¶

This Regulation shall apply:

a) within the territory of the Union, including its airspace;

b) on board any aircraft or vessel under the jurisdiction of a Member State;

c) to any natural person inside or outside the territory of the Union who is a national of a Member State;

d) to any legal person, entity or body, inside or outside the territory of the Union, which is incorporated or constituted under the law of a Member State;

e) to any legal person, entity or body in respect of any business done in whole or in part within the Union.

Article24¶

This Regulation shall enter into force on the day of its publication in the Official Journal of the European Union.

ANNEX I

Firearms, ammunition and related accessories therefor, as follows:

1.1. Firearms not controlled by ML 1 and ML 2 of the Common Military List of the European Union (ft) (‘Common Military List’);

1.2. Ammunition specially designed for the firearms listed in item 1.1 and specially designed components therefor.

Simulators, other than those controlled by ML 14 of the Common Military List, for training in the use of firearms, and specially designed software therefor.

Bombs and grenades not controlled by the Common Military List.

Other explosives not controlled by the Common Military List and related substances as follows:

a) amatol;

b) nitroglycol;

c) picryl chloride.

Razor barbed wire.

Military knives, combat knives and bayonets with blade lengths in excess of 10 cm.

Production equipment specially designed for the items listed in this Annex.

ANNEX II

General Note

Notwithstanding the contents of this Annex, it shall not apply:

a) to equipment, technology or software which are specified in Annex I to Regulation (EU) 2021/821 of the European Parliament and of the Council or the Common Military List;

b) software which is designed for installation by the user without further substantial support by the supplier and which is generally available to the public by being sold from stock at retail selling points, without restriction, by means of:

i) over-the-counter transactions;

ii) mail order transactions;

iii) electronic transactions; or

iv) telephone order transactions;

c) software which is in the public domain; or

d) where Article 2a of Regulation (EU) No 833/2014 applies.

The sections A, B, C, D and E refer to the sections referred to in Regulation (EU) 2021/821.

A) List of equipment

Deep Packet Inspection equipment

Network Interception equipment including Interception Management Equipment (IMS) and Data Retention Link Intelligence equipment

Radio Frequency monitoring equipment

Network and Satellite jamming equipment

Remote Infection equipment

Speaker recognition/processing equipment

IMSI (4), MSISDN (5), IMEI (6), TMSI (7) interception and monitoring equipment

Tactical SMS (8) / GSM (9) / GPS (10) / GPRS (11) / UMTS (12) / CDMA (13)/PSTN (14) interception and monitoring equipment

DHCP (15) / SMTP (16), GTP (17) information interception and monitoring equipment

Pattern Recognition and Pattern Profiling equipment

Remote Forensics equipment

Semantic Processing Engine equipment

WEP and WPA code breaking equipment

Interception equipment for VoIP proprietary and standard protocol

B) Not used

C) Not used

D) ‘Software’ for the ‘development’, ‘production’ or ‘use’ of the equipment specified in A above.

E) ‘Technology’ for the ‘development’, ‘production’ or ‘use’ of the equipment specified in A above.

Equipment, technology and software under these sections fall within the scope of this Annex only to the extent that they fall within the general description ‘internet, telephone and satellite communications interception and monitoring systems’.

For the purpose of this Annex ‘monitoring’ means acquisition, extraction, decoding, recording, processing, analysis and archiving call content or network data.

Footnotes:

(4) IMSI stands for International Mobile Subscriber Identity. It is a unique identification code for each mobile telephony device, integrated in the SIM card and which allows identification of such SIM via GSM and UMTS networks.

(5) MSISDN stands for Mobile Subscriber Integrated Services Digital Network Number. It is a number uniquely identifying a subscription in a GSM or a UMTS mobile network. Simply put, it is the telephone number to the SIM card in a mobile phone and therefore it identifies a mobile subscriber as well as IMSI, but to route calls through him.

(6) IMEI stands for International Mobile Equipment Identity. It is a number, usually unique to identify GSM, WCDMA and IDEN mobile phones as well as some satellite phones. It is usually found printed inside the battery compartment of the phone. Interception (wiretapping) can be specified by its IMEI number as well as IMSI and MSISDN.

(7) TMSI stands for Temporary Mobile Subscriber Identity. It is the identity that is most commonly sent between the mobile and the network.

(8) SMS stands for Short Message System.

(9) GSM stands for Global System for Mobile Communications.

(10) GPS stands for Global Positioning System.

(11) GPRS stands for General Package Radio Service.

(12) UMTS stands for Universal Mobile Telecommunication System.

(13) CDMA stands for Code Division Multiple Access.

(14) PSTN stands for Public Switch Telephone Networks.

(15) DHCP stands for Dynamic Host Configuration Protocol.

(16) SMTP stands for Simple Mail Transfer Protocol.

(17) GTP stands for GPRS Tunnelling Protocol.

ANNEX III

BELGIUM

https://diplomatie.belgium.be/en/policy/policy_areas/peace_and_security/sanctions

BULGARIA

https://www.mfa.bg/en/EU-sanctions

CZECHIA

www.financnianalytickyurad.cz/mezinarodni-sankce.html

DENMARK

https://um.dk/udenrigspolitik/sanktioner/ansvarlige-myndigheder

GERMANY

https://www.bmwi.de/Redaktion/DE/Artikel/Aussenwirtschaft/embargos-aussenwirtschaftsrecht.html

ESTONIA

https://vm.ee/sanktsioonid-ekspordi-ja-relvastuskontroll/rahvusvahelised-sanktsioonid

IRELAND

https://www.dfa.ie/our-role-policies/ireland-in-the-eu/eu-restrictive-measures/

GREECE

http://www.mfa.gr/en/foreign-policy/global-issues/international-sanctions.html

SPAIN

https://www.exteriores.gob.es/es/PoliticaExterior/Paginas/SancionesInternacionales.aspx

FRANCE

http://www.diplomatie.gouv.fr/fr/autorites-sanctions/

CROATIA

https://mvep.gov.hr/vanjska-politika/medjunarodne-mjere-ogranicavanja/22955

ITALY

https://www.esteri.it/it/politica-estera-e-cooperazione-allo-sviluppo/politica_europea/misure_deroghe/

CYPRUS

https://mfa.gov.cy/themes/

LATVIA

https://www.fid.gov.lv/en

LITHUANIA

https://www.urm.lt/en/lithuania-in-the-region-and-the-world/lithuanias-security-policy/international-sanctions/997

LUXEMBOURG

https://maee.gouvernement.lu/fr/directions-du-ministere/affaires-europeennes/organisations-economiques-int/mesures-restrictives.html

HUNGARY

https://kormany.hu/kulgazdasagi-es-kulugyminiszterium/ensz-eu-szankcios-tajekoztato

MALTA

https://smb.gov.mt/

NETHERLANDS

https://www.rijksoverheid.nl/onderwerpen/internationale-sancties

AUSTRIA

https://www.bmeia.gv.at/themen/aussenpolitik/europa/eu-sanktionen-nationale-behoerden/

POLAND

https://www.gov.pl/web/dyplomacja/sankcje-miedzynarodowe

https://www.gov.pl/web/diplomacy/international-sanctions

PORTUGAL

https://portaldiplomatico.mne.gov.pt/politica-externa/medidas-restritivas

ROMANIA

http://www.mae.ro/node/1548

SLOVENIA

http://www.mzz.gov.si/si/omejevalni_ukrepi

SLOVAKIA

https://www.mzv.sk/europske_zalezitosti/europske_politiky-sankcie_eu

FINLAND

https://um.fi/pakotteet

SWEDEN

https://www.regeringen.se/sanktioner

Address for notifications to the European Commission:

European Commission

Directorate-General for Financial Stability, Financial Services and Capital Markets Union (DG FISMA)

Rue de Spa 2/Spastraat 2

B-1049 Bruxelles/Brussel,

E-mail: relex-sanctions@ec.europa.eu

ANNEX IV

Α. Natural persons

Β. Legal persons, entities and bodies

1 Regulation (EU) No 952/2013 of the European Parliament and of the Council of 9 October 2013 laying down the Union Customs Code (OJ L 269, 10.10.2013, p. 1).

2 Regulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and amending Regulation (EU) No 648/2012 (OJ L 176, 27.6.2013, p. 1).

3 Directive (EU) 2015/849 of the European Parliament and of the Council of 20 May 2015 on the prevention of the use of the financial system for the purposes of money laundering or terrorist financing, amending Regulation (EU) No 648/2012 of the European Parliament and of the Council, and repealing Directive 2005/60/EC of the European Parliament and of the Council and Commission Directive 2006/70/EC (OJ L 141, 5.6.2015, p. 73).

4 Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments and amending Directive 2002/92/EC and Directive 2011/61/EU (OJ L 173, 12.6.2014, p. 349).

5 Regulation (EU) 2021/821 of the European Parliament and of the Council of 20 May 2021 setting up a Union regime for the control of exports, brokering, technical assistance, transit and transfer of dual-use items (recast) (OJ L 206, 11.6.2021, p. 1).