On May 17, 2019, the European Union (“EU”) adopted new legislation for imposing sanctions on persons engaged in cyber-attacks on the EU or its member states, effecting a long-standing initiative and continuing a series of policy and regulatory decisions by various governments—most notably the United States—relating to the threat of cyber warfare.