
European Union sanctions (restrictive measures) against cyber-attacks as a legal instrument of cyber diplomacy constitute a new legal solution created in 2019. The Union
used it for the first time in 2020 against China, Russia, and the DPRK cyber-attacks. These sanctions are adopted basing on the provisions of the EU Treaty (Common Foreign and Security Policy, Art. 29) and Art. 215 of the Treaty on the Functioning of the EU. They are a part of a broader political concept for the Union, established in 2015, known as cyber diplomacy. The author explains, in the context of the general assumptions of the application of restrictive measures by the Union and its attitude to cyberspace, how cyber-attacks are understood as a premise for sanctions, what sanctions are envisaged in the event of cyber-attacks,
and what are the rules and procedure for their adoption and implementation. EU regulations concerning restrictive measures in response to cyber-attacks are not an entirely satisfactory legal solution. The author concludes the article with their evaluation