title: Commission Implementing Regulation (EU) 2020/1121 of 29 July 2020 on the collection and sharing of user statistics and feedback on the services of the single digital gateway in accordance with Regulation (EU) 2018/1724 of the European Parliament and of the Council (Text with EEA relevance)

text:
                  30.7.2020

                  EN

                  Official Journal of the European Union

                  L 245/3

         COMMISSION IMPLEMENTING REGULATION (EU) 2020/1121
         of 29 July 2020
         on the collection and sharing of user statistics and feedback on the services of the single digital gateway in accordance with Regulation (EU) 2018/1724 of the European Parliament and of the Council
         (Text with EEA relevance)
         THE EUROPEAN COMMISSION,
         Having regard to the Treaty on the Functioning of the European Union,
         Having regard to Regulation (EU) 2018/1724 of the European Parliament and of the Council of 2 October 2018 establishing a single digital gateway to provide access to information, to procedures and to assistance and problem-solving services and amending Regulation (EU) No 1024/2012 (1), and in particular Article 24(4) and Article 25(5) thereof,
         Whereas:

                     (1)

                     Article 24 of Regulation (EU) 2018/1724 requires the competent authorities of the Member States and the Commission to ensure that statistics are collected in relation to users’ visits on the single digital gateway established pursuant to Article 2(1) of that Regulation (‘the gateway’) and on the webpages to which the gateway links. It also requires the competent authorities, the providers of assistance and problem-solving services as referred to in Article 7(3) of Regulation (EU) 2018/1724 and the Commission to collect and exchange, in an aggregated way, the number, the origin and the subject matter of requests for assistance and problem-solving services and their response times.

                     (2)

                     Article 25 of Regulation (EU) 2018/1724 requires the Commission to provide users of the gateway with a feedback tool enabling them to comment anonymously on the quality and availability of the services provided through the gateway, of the information made available therein and of the common user interface. It also requires the Commission to ensure that users can access that tool from all webpages that are part of the gateway. The same obligation applies to the competent authorities unless they already have in place on their webpages another user feedback tool with similar functionalities.

                     (3)

                     The method and rules for collecting and sharing user statistics and user feedback are combined in a single implementing act because the data covered will be collected and made accessible through a common dashboard and a common data repository. The data will be used in combination by the national coordinators and by the Commission to monitor whether the services provided through the gateway comply with the quality criteria and to improve the functionality of the single digital gateway.

                     (4)

                     In order to collect user statistics and feedback that is comparable and useable for the purposes set out in Regulation (EU) 2018/1724 and to facilitate matching between the data and the related service, it is necessary to specify the context data that must be made available together with the user statistics and feedback. These context data should include the URL and information on the content of the relevant webpage. Service providers should include this information as tags in the metadata of the webpages, or insert it directly in the repository for links. The Commission should use a tool to retrieve the tagging information from the webpages in an automated way. For that purpose, the tagging information should be structured and formatted in a way that is recognised by the tool.

                     (5)

                     To facilitate the collection of user statistics related to the users’ views of webpages accessible through the gateway, pursuant to Article 24 of Regulation (EU) 2018/1724, such statistics should be collected through web data analytics tools in an automated way and transmitted to a common data repository automatically and regularly.

                     (6)

                     In cases where further technical clarifications are needed to ensure the interoperability between the national ICT solutions and the common IT tools, the Commission should provide such clarifications in consultation with the gateway coordination group. Specific operational arrangements required for the collection and transmission of data from assistance and problem solving services as well as the detailed survey questions, should be discussed by the gateway coordination group.

                     (7)

                     Regulation (EU) 2018/1724 establishes the later time-limit of 12 December 2023 for digitalisation of the procedures listed in its Annex II. Consequently, prior to 12 December 2023, user statistics and feedback related to such procedures should only be collected in relation to webpages on which the explanation of a procedure is published.

                     (8)

                     Regulation (EU) 2018/1724 establishes the later time-limit of 12 December 2022 for the provision of information, explanations and instructions by municipal authorities. Consequently, prior to 12 December 2022, the requirements laid down in this Regulation should only apply to municipal level webpages notified to the repository for links ahead of this deadline.

                     (9)

                     Taking into account the different case-handling systems in use, both the automated and manual collection of the categories of statistics referred to in Article 24(2) of Regulation (EU) 2018/1724 should be allowed for.

                     (10)

                     The single digital gateway aims to make it easier for citizens and businesses to exercise their single market rights by providing user friendly access to information on rights and rules applicable to cross-border activities. In order to understand the specific needs and interests of cross-border users, statistics related to the use of services provided through the gateway by these users, such as statistics about the countries from which users are accessing the webpages of the gateway and the number of cross-border users turning to the gateway assistance and problem-solving services for help, should be collected.

                     (11)

                     The providers of assistance and problem-solving services as defined in this Regulation should collect the number of requests that relate to the rights, obligations, rules and procedures laid down in Union and national law applicable to users exercising or intending to exercise their rights derived from Union law in the field of internal market, in the areas of information listed in Annex I to Regulation (EU) 2018/1724. Where an assistance and a problem-solving service receives requests falling outside the scope of Regulation (EU) 2018/1724, it should distinguish between such requests and requests concerning areas covered by that Regulation, as far as possible.

                     (12)

                     Where assistance and problem-solving services are already collecting statistics on the basis of existing Union law or arrangements with the Commission, the providers of assistance and problem-solving services or the network managers should ensure that statistics to be covered in accordance with Regulation (EU) 2018/1724 are also collected and transferred to the common data repository.

                     (13)

                     The service providers should enable users to leave their feedback on all webpages that are part of the gateway irrespectively of whether users have accessed these pages from the common user interface referred to in Article 2(1) of Regulation (EU) 2018/1724, or through any web portal or a search engine.

                     (14)

                     In order to ensure comparability of feedback, common rules are needed for the transmission of the user feedback on the services provided through the gateway to the common data repository. In addition, service providers should either map and correlate the feedback questions and ratings used in their own user feedback tools with those in the common user feedback tool or adapt their questions and ratings where needed. The service providers should not be obliged to include a link to the survey with detailed questions if their alternative user feedback tools already include similar questions. In such cases they should also map and adapt these questions to those of the detailed survey that is part of the common user feedback tool.

                     (15)

                     Users should be able to provide feedback on the user friendliness of information about procedures and about the ease of use of online procedures, referred to in Article 2(2)(b) of Regulation (EU) 2018/1724 and the common user interface referred to in Article 2(1) of that Regulation. Service providers should be able to decide the best time and place to invite users of procedures to give feedback. They may choose to include a link to a feedback tool on a webpage where the procedure can be launched, in the confirmation of receipt of the application, in the output of a procedure, if it is displayed to users immediately after the submission of the request, or on the webpage with online information about the procedure. In case there would be two invitations to provide feedback on one webpage: one on the quality and availability of the procedure and another on the information about this procedure made available therein, the purpose of providing feedback on both issues should be clearly explained to avoid confusion on the part of the user.

                     (16)

                     In case of assistance and problem-solving services listed in Annex III and referred to in Article 7 of Regulation (EU) 2018/1724, the invitation to provide feedback should be sent to users who can be contacted by digital means immediately after the service is provided. Where the nature of the service requires some time for the solution or advice to be put into practice, the services should be allowed to send the invitation for submitting feedback shortly after the final response to the request has been provided as this allows the user to verify whether the solution or advice works in practice.

                     (17)

                     The collection and exchange of user statistics and feedback under this Regulation should not involve the processing of personal data (2) of citizens and business using the services offered as part of the gateway. The common user feedback tool should warn users not to provide any personal data in the free text box.

                     (18)

                     Commission Decision (EU, Euratom) 2017/46 (3) applies to the common user feedback tool, the interconnection service allowing the transmission of the user feedback when the alternative user feedback tool is used and the common data repository.

                     (19)

                     Article 24(1), (2) and (3) and Article 25(1) to (4) of Regulation (EU) 2018/1724 apply from 12 December 2020, therefore the requirements laid down in this Regulation should also apply from this date.

                     (20)

                     The measures provided for in this Regulation are in accordance with the opinion of the Single Digital Gateway Committee,

               HAS ADOPTED THIS REGULATION:

            CHAPTER I

            General provisions

            Article 1
            Definitions
            For the purposes of this Regulation, the following definitions shall apply:

                        (1)

                        ‘common user feedback tool’ means the feedback tool provided by the Commission pursuant to Article 25(1) of Regulation (EU) 2018/1724;

                        (2)

                        ‘alternative user feedback tool’ means any other feedback tool which has similar functionalities as the common user feedback tool and is available on the webpages of a competent authority for the purpose of monitoring service quality, as referred to in Article 25(4) of Regulation (EU) 2018/1724 or is available to users of the assistance and problem-solving services listed in Annex III and referred to in Article 7 of Regulation (EU) 2018/1724;

                        (3)

                        ‘common dashboard’ means the interface providing service providers with access to the management functionalities of the gateway, including access to the repository for links as set out in Article 19 of Regulation (EU) 2018/1724;

                        (4)

                        ‘common data repository’ means the data management tool linked to the common dashboard allowing for the collection, storage, sharing, analysis and displaying of user statistics and feedback collected in accordance with Articles 24 and 25 of Regulation (EU) 2018/1724;

                        (5)

                        ‘service providers’ means all of the following:

                                    (a)

                                    competent authorities within the meaning of point 4 of Article 3 of Regulation (EU) 2018/1724;

                                    (b)

                                    the Commission and bodies, offices and agencies of the Union providing information, procedures and assistance or problem-solving services covered by Regulation (EU) 2018/1724;

                                    (c)

                                    providers of assistance and problem-solving services as referred to in Article 7(3) of Regulation (EU) 2018/1724;

                        (6)

                        ‘network manager’ means the Commission and bodies, offices and agencies of the Union or an entity responsible for the coordination of the work of assistance and problem-solving services performing similar tasks in all or in the majority of Member States.

            Article 2
            Context data

               1.   Together with the user statistics and user feedback data related to information webpages linked to the gateway, the service providers shall transmit the URL of the webpage to which the user statistics or user feedback relate.

               2.   The service providers shall ensure that context data including descriptive elements to enable the identification of the substance covered by the webpage to which the URL relates are provided as follows:

                           (a)

                           as part of the meta-data of all pages which are part of the gateway structured and formatted in a way that it can be recognised by the tool referred to in paragraph 4; or

                           (b)

                           directly to the repository for links together with the relevant URL.

               3.   The descriptive elements referred to in paragraph 2 shall consist of the following indicators, to be associated with the different types of pages as set out in Annex I:

                           (a)

                           the Member State;

                           (b)

                           a regional or local indicator, where the information provided only applies regionally or locally;

                           (c)

                           the language in which the information is provided on the page;

                           (d)

                           a marker that the page is part of the gateway;

                           (e)

                           the type of service or services covered on the page: information, procedure or assistance and problem-solving service;

                           (f)

                           an indication of the topic covered as set out in Annex I of Regulation (EU) 2018/1724 or the assistance and problem-solving service covered as set out in Annex III of that Regulation or included in the gateway in accordance with Article 7 of that Regulation.

               4.   The Commission shall provide a tool to retrieve the tagging information directly from the webpages that are part of the gateway for storage in the common data repository together with the relevant URLs.

            CHAPTER II

            Statistics

            Article 3
            Collection and transmission of statistics relating to information services

               1.   All service providers shall collect and transmit for all the webpages providing information on rules and obligations, on procedures and on assistance and problem solving services that are part of the gateway and for which they are responsible, the number of page views within the reporting period broken down into:

                           (a)

                           the countries from which users are visiting the webpage;

                           (b)

                           the type of devices used to visit the webpage.

               2.   The service providers shall ensure that the web data analytics tool used to collect the statistics referred to in paragraph 1, fulfils the technical interoperability requirements listed in Annex II to enable the automatic transmission of statistics to the common data repository.

               3.   The service providers shall transmit the statistics referred to in paragraph 1, together with the URLs of the webpages to which the statistics relate, to the common data repository once per month through an application programming interface developed by the Commission.

               4.   An automatic confirmation of a successful transmission or an alert if the transmission was not successful shall be provided to a service provider having attempted to transmit statistics to the common data repository pursuant to paragraph 3.

            Article 4
            Collection, aggregation and transmission of statistics relating to assistance and problem-solving services

               1.   For the purposes of this Chapter, a request for an assistance and problem-solving service means any request submitted through an online form, email or any other communication means. Where the providers of an assistance and problem-solving service or network managers decide that it is not feasible to include statistics on requests received through phone calls, online chats, or visits in person, they shall inform the Commission thereof.

               2.   Providers of assistance and problem-solving services or network managers shall communicate the number of requests to the common data repository broken down into requests:

                           (a)

                           from citizens or from businesses;

                           (b)

                           from users in a cross-border situation or from those in a national situation.

                     The division of requests into categories referred to in point (a) and (b) shall not apply where the service is only offered to one of the two categories of users referred to in points (a) and (b).

               3.   For the purpose of paragraph 2(b) a user in a cross-border situation means a user in a situation which is not confined in all respects within a single Member State.

               4.   For the purpose of collecting statistics on the subject matter of specific requests made, the provider of assistance and problem-solving service or a network manager shall provide the Commission with a list of categories for the subject matters, prior to the inclusion of such service in the gateway.

               5.   The response time shall be calculated from the receipt of the request to the final response or closure of the case, on the same basis as the applicable deadlines to be respected or the average or estimated time required to deliver the service, referred to in Article 11(1)(d) of Regulation (EU) 2018/1724.

               6.   The response times shall be calculated as an average in calendar days of the response times over a period of 6 months.

               7.   The statistics shall be collected and aggregated at the level of each individual provider of the assistance and problem-solving service and shall indicate the Member State of the provider of the service. The Commission shall agree on the modalities of transmission of statistics to the common data repository with the provider of the assistance and problem-solving service or with a network manager prior to the inclusion of service in the gateway.

               8.   The providers of assistance and problem-solving services or the network managers shall transmit the aggregated statistics twice a year. For the period from 1 January to 30 June the aggregated statistics shall be transmitted by 31 August, and for the period from 1 July to 31 December by 28 February of the following year, unless otherwise agreed with the Commission.

            Article 5
            Access to and storage of statistics

               1.   The statistics aggregated and transmitted in accordance with this Chapter shall be kept in the common data repository for a maximum of 3 years from the transmission date. It shall be automatically deleted after this period has lapsed.
               The deletion shall not apply to the data made available to the public in accordance with Article 24(3), last sentence of Regulation (EU) 2018/1724.

               2.   The Commission shall ensure that the common dashboard enables the national coordinators, the service providers and the Commission to:

                           (a)

                           search, sort and filter the data;

                           (b)

                           visualise the data in graphs and charts;

                           (c)

                           extract the data in a form of reports and download them.

            CHAPTER III

            User feedback

            Article 6
            Functionalities of the common user feedback tool

               1.   The common user feedback tool referred to in Article 25(1) of Regulation (EU) 2018/1724 shall contain the following elements:

                           (a)

                           questions to solicit user feedback, user ratings and a free text box, relevant for the webpages with information, procedures and assistance and problem solving services, as included in Annex III;

                           (b)

                           surveys with detailed questions on the quality of information, of online procedures and of the assistance and problem-solving services, to be invited to participate once that user has submitted the initial feedback;

                           (c)

                           automatic transmission of the user feedback to the common data repository;

                           (d)

                           capture and transmission of the URL of the webpage to which the user feedback relates together with the user feedback.

               2.   For the collection of user feedback on information and on procedures, service providers shall be able to choose between a version of the common feedback tool with or without a free text box.

               3.   The Commission shall ensure that the common dashboard sends regular email messages to all service providers using the common user feedback tool to remind them that they can consult the feedback regarding their services in the common dashboard.

               4.   The Commission shall make the common user feedback tool available in all official languages of the Union.

            Article 7
            Functionalities of the alternative user feedback tools

               1.   Alternative user feedback tools used by service providers shall include:

                           (a)

                           similar questions and a rating system producing comparable results to the one used in the common user feedback tool and, for the assistance and problem-solving services a free text box allowing users to leave free text comments;

                           (b)

                           links to the surveys included in the common user feedback tool according to the type of the service;

                           (c)

                           a mechanism provided by the Commission allowing the transmission of the feedback data together with the URLs of the webpages to which the feedback relates, to the common data repository.

                     For the collection of user feedback on information and on procedures, service providers shall be able to choose whether to include a free text box or not.

               2.   Once a user submits responses to the questions referred to in paragraph 1(a), the user shall receive a confirmation message with an invitation to provide more detailed comments by clicking on a link referred to in paragraph 1(b). The link shall direct users to a page on the common user feedback tool containing a survey on compliance with the quality requirements laid down in Regulation (EU) 2018/1724.

               3.   Point (b) of paragraph 1 and paragraph 2 shall not apply where a service provider already collects feedback on questions which are similar to those included in the survey.

            Article 8
            Collection of user feedback on online procedures
            The service providers shall integrate the common or an alternative user feedback tool in a way that makes it easy for users to provide their feedback either following submission of the request or in case they choose not to submit a request in the end.

            Article 9
            Collection of user feedback from users of assistance and problem-solving services
            The providers of assistance and problem-solving services shall ensure that users of their services who can be reached by digital means receive an invitation to provide their feedback on the service received that is sent either in conjunction with the final response provided by the assistance and problem-solving service provider or within a short time thereafter, which shall not exceed ten working days.

            Article 10
            Transmission of user feedback

               1.   All feedback provided by users through the common user feedback tool together with the URL links referred to in Article 2 shall be transferred automatically, as soon as it is provided by users, to the common data repository.

               2.   The service providers collecting feedback through an alternative user feedback tool shall use the mechanism referred to in Article 7(1)(c) and shall comply with the technical interoperability requirements set out in Annex II to enable the transfer of user feedback as soon as it is provided by users, simultaneously to the national user feedback recipients and to the common data repository.
               Alternatively, they shall transfer asynchronously, in bulk, all feedback provided during a calendar month, within five working days following the end of that calendar month.

               3.   Service providers using an alternative user feedback tool shall ensure that:

                           (a)

                           only the feedback to questions and ratings corresponding to those in the common user feedback tool are transferred to the common data repository;

                           (b)

                           feedback provided as free text is not transmitted to the common data repository;

                           (c)

                           the URLs of the webpages from which feedback is collected are transmitted together with the feedback to the common data repository.

               4.   Where service providers qualify for the exception laid down in Article 7(3), they shall ensure that the feedback on questions that are similar to those included in a survey is transmitted to the common data repository.

            Article 11
            Access to and storage of user feedback

               1.   The data on user feedback shall be stored in the common data repository linked to the common dashboard.

               2.   The Commission shall provide the following access rights to the user feedback stored in the common data repository:

                           (a)

                           national coordinators and the Commission shall have access to user feedback with the exception of free text comments;

                           (b)

                           service providers shall have access to user feedback concerning services for which they are responsible, including free text comments provided by users using the common feedback tool.

               3.   The Commission shall ensure that the user feedback is stored in the common data repository for a maximum of 3 years and is automatically deleted after this period.

               4.   The Commission shall ensure that the common dashboard enables its users to:

                           (a)

                           search, sort and filter the feedback;

                           (b)

                           visualise it in charts and graphs;

                           (c)

                           extract the data in the form of reports and download them.

            Article 12
            Responsibilities

               1.   The service providers using alternative user feedback tools shall be responsible for:

                           (a)

                           the functioning of their own tools through which they collect user feedback under Regulation (EU) 2018/1724;

                           (b)

                           the transfer of the feedback to the common data repository through the interconnection service provided by the Commission, in bulk or in any other form of transfer;

                           (c)

                           complying with the technical requirements laid down in this Regulation;

                           (d)

                           the security of the national tools collecting and participating in the transmission of the user feedback.

               2.   The service providers using the common user feedback tool shall be responsible for the insertion of links to that tool in accordance with this Regulation.

               3.   The Commission shall be responsible for:

                           (a)

                           the functioning, security and the accessibility of the common user feedback tool;

                           (b)

                           the links to the common feedback tool to be included in the Union-level webpages;

                           (c)

                           the functioning of the interconnection service referred to in point (b) of paragraph 1;

                           (d)

                           maintaining and ensuring the availability of the infrastructure necessary for receiving data transfers.

            CHAPTER IV

            Final provisions

            Article 13
            Personal data

               1.   The service providers or network managers in case of assistance and problem-solving services shall ensure that the statistics aggregated and transmitted by them to the common data repository do not contain any personal data.

               2.   The common user feedback tool shall allow users to comment anonymously about their experience with the services provided through the gateway. The free text box shall include a warning to users not to include personal data.

            Article 14
            Entry into force
            This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
            It shall apply from 12 December 2020.

            This Regulation shall be binding in its entirety and directly applicable in all Member States.
            Done at Brussels, 29 July 2020.

                  For the Commission

                  The President

               Ursula VON DER LEYEN

            (1)  OJ L 295, 21.11.2018, p. 1.

            (2)  Personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1).

            (3)  Commission Decision (EU, Euratom) 2017/46 of 10 January 2017 on the security of communication and information systems in the European Commission (OJ L 6, 11.1.2017, p. 40).

            ANNEX I
            Indicators for tagging referred to in Article 2(3)

                           Elements that must form part of the tagging information to be included in the metadataof the webpages that are part of the single digital gateway

                           Generic part

                           Country code

                           Sub-national code (where applicable)

                           Type of service
                            (*1)

                           Language of the page

                           Area covered by Annex I to Regulation (EU) 2018/1724

                           Service covered by Annex III or Article 7 of Regulation (EU) 2018/1724

                        Single Digital Gateway (SDG)

                        Following ISO 3166 –Alpha 2 code (EL for Greece)

                           Following NUTS 1-3 or LAU

                        Following ISO 639-1 Alpha 2 Code

                        A-Q

                        01-09

                        Full title of service

                        Webpages with information on rules, rights and obligations

                        X

                        x

                           x

                        Information

                        x

                        x

                        x

                        Not applicable

                        Webpages with information on procedures

                        X

                        x

                           x

                        Procedure

                        x

                        x

                        x

                        Not applicable

                        Webpages with information on assistance or problem solving services

                        x

                        x

                           x

                        Assistance

                        x

                        Not applicable

                        Not applicable

                        x

               (*1)  If a page contains information on more than one type of service or covers more than one information area, all relevant elements must be included in or associated with that page.

            ANNEX II

               Technical requirements referred to in Article 3(2) and Article 10(2)

               Data transmission

            An Application Programming Interface (API) gateway will expose a Representational State Transfer (REST) API. Each service provider collection system can call this API:

                        (1)

                        in real time – no limitation to the number of calls;

                        (2)

                        regularly, according to a schedule chosen by the service provider.

               API security

            Communication with the API Gateway will be secured via an API Key. Each service provider will have a specific API Key. This key will allow to secure the communication (encryption of the channel) and to know which service provider is sending data (authentication).
            API Keys will be available on a dedicated back-office web application. Each service provider will generate his key on the web application, download it and install on its premises.

               Requirements enabling the data transmission

            For the purpose of ensuring automatic transmission, the web analytics tool referred to in Article 3(2) and the alternative user feedback tool referred to in Article 10(2) shall:

                        (a)

                        allow transmission of data in JSON format via REST APIs;

                        (b)

                        support secure connections with Hyper-Text Transfer Protocol (HTTP) over Secure Sockets Layer (SSL);

                        (c)

                        support ISO 8601 for the representation of date and time. Date and time data shall be expressed in Coordinated Universal Time (UTC);

                        (d)

                        support a unique identifier for transmissions. A service provider pushes the data with a unique identifier provided through the API. If a service provider decides to change this data, it must push a correction with the same unique identifier.

                  The frequency of transmission of statistics should not change the structure of the JSON file. For example, the JSON could contain array of objects (one per set of statistics for the reference period), an array of length n;
            The Commission shall provide a detailed technical description of the API for user feedback and statistics.

            ANNEX III

               User feedback questions in the common user feedback tool, referred to in Article 6(1)(a):

                        (1)

                        Questions related to information on webpages

                                    •

                                    Found what you were looking for? (mutually exclusive options: YES/NO/PARTLY) [mandatory field] (*1)

                                    •

                                    Rate this page (star rating: from 1 to 5) [mandatory field]

                                    •

                                    Help us improve (free text box) [optional field]

                        (2)

                        Questions related to procedures

                                    •

                                    Rate how easy it was to use this procedure (star rating from 1 to 5) [mandatory field]

                                    •

                                    Help us improve (free text box) [optional field]

                        (3)

                        Questions related to assistance and problem-solving services

                                    •

                                    Rate the service provided (star rating from 1 to 5) [mandatory field]

                                    •

                                    Help us improve (free text box) [optional field]

                  The user feedback tool for information and procedures will be prepared in two versions: one with the free text box and another without the free text box enabling the service providers to choose which one to use in accordance with Article 6(2).

               (*1)  The text in brackets ‘[…]’ informs about the fields that will be used in the common user feedback tool.


title: Council Implementing Regulation (EU) 2020/1124 of 30 July 2020 implementing Regulation (EU) 2016/1686 imposing additional restrictive measures directed against ISIL (Da’esh) and Al-Qaeda and natural and legal persons, entities or bodies associated with them

text:
                  30.7.2020

                  EN

                  Official Journal of the European Union

                  L 246/1

         COUNCIL IMPLEMENTING REGULATION (EU) 2020/1124
         of 30 July 2020
         implementing Regulation (EU) 2016/1686 imposing additional restrictive measures directed against ISIL (Da’esh) and Al-Qaeda and natural and legal persons, entities or bodies associated with them
         THE COUNCIL OF THE EUROPEAN UNION,
         Having regard to the Treaty on the Functioning of the European Union,
         Having regard to Council Regulation (EU) 2016/1686 of 20 September 2016 imposing additional restrictive measures directed against ISIL (Da’esh) and Al-Qaeda and natural and legal persons, entities or bodies associated with them (1), and in particular Article 4(1) thereof,
         Having regard to the proposal from the High Representative of the Union for Foreign Affairs and Security Policy,
         Whereas:

                     (1)

                     On 20 September 2016 the Council adopted Regulation (EU) 2016/1686.

                     (2)

                     In view of the continued threat posed by ISIL (Da’esh) and Al-Qaeda and natural and legal persons, entities or bodies associated with them, one person should be added to the list of natural and legal persons, entities or bodies set out in Annex I to Regulation (EU) 2016/1686.

                     (3)

                     Regulation (EU) 2016/1686 should therefore be amended accordingly,

               HAS ADOPTED THIS REGULATION:

            Article 1
            Annex I to Regulation (EU) 2016/1686 is amended as set out in the Annex to this Regulation.

            Article 2
            This Regulation shall enter into force on the date of its publication in the Official Journal of the European Union.

            This Regulation shall be binding in its entirety and directly applicable in all Member States.
            Done at Brussels, 30 July 2020.

                  For the Council

                  The President

               M. ROTH

            (1)  OJ L 255, 21.9.2016, p. 1.

            ANNEX
            The following entry is added to the list set out in Annex I to Regulation (EU) 2016/1686:

                           ‘6.

                           Bryan D’ANCONA; date of birth: 26 January 1997; place of birth: Nice (France); nationality: French.’.


title: Council Implementing Regulation (EU) 2020/1125 of 30 July 2020 implementing Regulation (EU) 2019/796 concerning restrictive measures against cyber-attacks threatening the Union or its Member States

text:
                  30.7.2020

                  EN

                  Official Journal of the European Union

                  L 246/4

         COUNCIL IMPLEMENTING REGULATION (EU) 2020/1125
         of 30 July 2020
         implementing Regulation (EU) 2019/796 concerning restrictive measures against cyber-attacks threatening the Union or its Member States
         THE COUNCIL OF THE EUROPEAN UNION,
         Having regard to the Treaty on the Functioning of the European Union,
         Having regard to Council Regulation (EU) 2019/796 of 17 May 2019 concerning restrictive measures against cyber-attacks threatening the Union or its Member States (1), and in particular Article 13(1) thereof,
         Having regard to the proposal from the High Representative of the Union for Foreign Affairs and Security Policy,
         Whereas:

                     (1)

                     On 17 May 2019 the Council adopted Regulation (EU) 2019/796.

                     (2)

                     Targeted restrictive measures against cyber-attacks with a significant effect which constitute an external threat to the Union or its Member States are among the measures included in the Union’s framework for a joint diplomatic response to malicious cyber-activities (the cyber diplomacy toolbox) and are a vital instrument to deter and respond to such activities. Restrictive measures can also be applied in response to cyber-attacks with a significant effect against third States or international organisations, where deemed necessary to achieve common foreign and security policy objectives set out in the relevant provisions of Article 21 of the Treaty on European Union.

                     (3)

                     On 16 April 2018 the Council adopted conclusions in which it firmly condemned the malicious use of information and communications technologies, including in the cyber-attacks publicly known as ‘WannaCry’ and ‘NotPetya’, which caused significant damage and economic loss in the Union and beyond. On 4 October 2018 the Presidents of the European Council and of the European Commission and the High Representative of the Union for Foreign Affairs and Security Policy (the ‘High Representative’) expressed serious concerns in a joint statement about an attempted cyber-attack to undermine the integrity of the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands, an aggressive act which demonstrated contempt for the solemn purpose of the OPCW. In a declaration made on behalf of the Union on 12 April 2019, the High Representative urged actors to stop undertaking malicious cyber-activities that aim to undermine the Union’s integrity, security and economic competiveness, including acts of cyber-enabled theft of intellectual property. Such cyber-enabled thefts include those carried out by the actor publicly known as ‘APT10’ (‘Advanced Persistent Threat 10’).

                     (4)

                     In this context, and to prevent, discourage, deter and respond to continuing and increasing malicious behaviour in cyberspace, six natural persons and three entities or bodies should be included in the list of natural and legal persons, entities and bodies subject to restrictive measures set out in Annex I to Regulation (EU) 2019/796. Those persons and entities or bodies are responsible for, provided support for or were involved in, or facilitated cyber-attacks or attempted cyber-attacks, including the attempted cyber-attack against the OPCW and the cyber-attacks publicly known as ‘WannaCry’ and ‘NotPetya’, as well as ‘Operation Cloud Hopper’.

                     (5)

                     Regulation (EU) 2019/796 should therefore be amended accordingly,

               HAS ADOPTED THIS REGULATION:

            Article 1
            Annex I to Regulation (EU) 2019/796 is amended in accordance with the Annex to this Regulation.

            Article 2
            This Regulation shall enter into force on the date of its publication in the Official Journal of the European Union.

            This Regulation shall be binding in its entirety and directly applicable in all Member States.
            Done at Brussels, 30 July 2020.

                  For the Council

                  The President

               M. ROTH

            (1)  OJ L 129I, 17.5.2019, p. 1.

            ANNEX
            The following persons and entities or bodies are added to the list of natural and legal persons, entities and bodies set out in Annex I to Regulation (EU) 2019/796:

               ‘A.   Natural persons

                           Name

                           Identifying information

                           Reasons

                           Date of listing

                           1.

                           GAO Qiang

                           Place of birth: Shandong Province, China
                           Address: Room 1102, Guanfu Mansion, 46 Xinkai Road, Hedong District, Tianjin, China
                           Nationality: Chinese
                           Gender: male

                           Gao Qiang is involved in “Operation Cloud Hopper”, a series of cyber-attacks with a significant effect originating from outside the Union and constituting an external threat to the Union or its Member States and of cyber-attacks with a significant effect against third States.
                           “Operation Cloud Hopper” targeted information systems of multinational companies in six continents, including companies located in the Union, and gained unauthorised access to commercially sensitive data, resulting in significant economic loss.

                           30.7.2020

                           The actor publicly known as “APT10” (“Advanced Persistent Threat 10”) (a.k.a. “Red Apollo”, “CVNX”, “Stone Panda”, “MenuPass” and “Potassium”) carried out “Operation Cloud Hopper”.
                           Gao Qiang can be linked to APT10, including through his association with APT10 command and control infrastructure. Moreover, Huaying Haitai, an entity designated for providing support to and facilitating “Operation Cloud Hopper”, employed Gao Qiang. He has links with Zhang Shilong, who is also designated in connection with “Operation Cloud Hopper”. Gao Qiang is therefore associated with both Huaying Haitai and Zhang Shilong.

                           2.

                           ZHANG Shilong

                           Address: Hedong, Yuyang Road No 121, Tianjin, China
                           Nationality: Chinese
                           Gender: male

                           Zhang Shilong is involved in “Operation Cloud Hopper”, a series of cyber‐attacks with a significant effect originating from outside the Union and constituting an external threat to the Union or its Member States and of cyber‐attacks with a significant effect against third States.
                           “Operation Cloud Hopper” has targeted information systems of multinational companies in six continents, including companies located in the Union, and gained unauthorised access to commercially sensitive data, resulting in significant economic loss.
                           The actor publicly known as “APT10” (“Advanced Persistent Threat 10”) (a.k.a. “Red Apollo”, “CVNX”, “Stone Panda”, “MenuPass” and “Potassium”) carried out “Operation Cloud Hopper”.

                           30.7.2020

                           Zhang Shilong can be linked to APT10, including through the malware he developed and tested in connection with the cyber-attacks carried out by APT10. Moreover, Huaying Haitai, an entity designated for providing support to and facilitating “Operation Cloud Hopper”, employed Zhang Shilong. He has links with Gao Qiang, who is also designated in connection with “Operation Cloud Hopper”. Zhang Shilong is therefore associated with both Huaying Haitai and Gao Qiang.

                           3.

                           Alexey Valeryevich MININ

                           Алексей Валерьевич МИНИН
                           Date of birth: 27 May 1972
                           Place of birth: Perm Oblast, Russian SFSR (now Russian Federation)
                           Passport number: 120017582
                           Issued by: Ministry of Foreign Affairs of the Russian Federation Validity: from 17 April 2017 until 17 April 2022
                           Location: Moscow, Russian Federation
                           Nationality: Russian
                           Gender: male

                           Alexey Minin took part in an attempted cyber-attack with a potentially significant effect against the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands.
                           As a human intelligence support officer of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), Alexey Minin was part of a team of four Russian military intelligence officers who attempted to gain unauthorised access to the Wi-Fi network of the OPCW in The Hague, the Netherlands, in April 2018. The attempted cyber-attack was aimed at hacking into the Wi-Fi network of the OPCW, which, if successful, would have compromised the security of the network and the OPCW's ongoing investigatory work. The Netherlands Defence Intelligence and Security Service (DISS) (Militaire Inlichtingen- en Veiligheidsdienst – MIVD) disrupted the attempted cyber-attack, thereby preventing serious damage to the OPCW.

                           30.7.2020

                           4.

                           Aleksei Sergeyvich MORENETS

                           Алексей Сергеевич МОРЕНЕЦ
                           Date of birth: 31 July 1977
                           Place of birth: Murmanskaya Oblast, Russian SFSR (now Russian Federation)
                           Passport number: 100135556
                           Issued by: Ministry of Foreign Affairs of the Russian Federation Validity: from 17 April 2017 until 17 April 2022
                           Location: Moscow, Russian Federation
                           Nationality: Russian
                           Gender: male

                           Aleksei Morenets took part in an attempted cyber-attack with a potentially significant effect against the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands.
                           As a cyber-operator for the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), Aleksei Morenets was part of a team of four Russian military intelligence officers who attempted to gain unauthorised access to the Wi-Fi network of the OPCW in The Hague, the Netherlands, in April 2018. The attempted cyber-attack was aimed at hacking into the Wi-Fi network of the OPCW, which, if successful, would have compromised the security of the network and the OPCW's ongoing investigatory work. The Netherlands Defence Intelligence and Security Service (DISS) (Militaire Inlichtingen- en Veiligheidsdienst – MIVD) disrupted the attempted cyber-attack, thereby preventing serious damage to the OPCW.

                           30.7.2020

                           5.

                           Evgenii Mikhaylovich SEREBRIAKOV

                           Евгений Михайлович СЕРЕБРЯКОВ
                           Date of birth: 26 July 1981
                           Place of birth: Kursk, Russian SFSR (now Russian Federation)
                           Passport number: 100135555
                           Issued by: Ministry of Foreign Affairs of the Russian Federation Validity: from 17 April 2017 until 17 April 2022
                           Location: Moscow, Russian Federation
                           Nationality: Russian
                           Gender: male

                           Evgenii Serebriakov took part in an attempted cyber-attack with a potentially significant effect against the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands.
                           As a cyber-operator for the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), Evgenii Serebriakov was part of a team of four Russian military intelligence officers who attempted to gain unauthorised access to the Wi-Fi network of the OPCW in The Hague, the Netherlands, in April 2018. The attempted cyber-attack was aimed at hacking into the Wi-Fi network of the OPCW, which, if successful, would have compromised the security of the network and the OPCW's ongoing investigatory work. The Netherlands Defence Intelligence and Security Service (DISS) (Militaire Inlichtingen- en Veiligheidsdienst – MIVD) disrupted the attempted cyber-attack, thereby preventing serious damage to the OPCW.

                           30.7.2020

                           6.

                           Oleg Mikhaylovich SOTNIKOV

                           Олег Михайлович СОТНИКОВ
                           Date of birth: 24 August 1972
                           Place of birth: Ulyanovsk, Russian SFSR (now Russian Federation)
                           Passport number: 120018866
                           Issued by: Ministry of Foreign Affairs of the Russian Federation Validity: from 17 April 2017 until 17 April 2022
                           Location: Moscow, Russian Federation
                           Nationality: Russian
                           Gender: male

                           Oleg Sotnikov took part in an attempted cyber-attack with a potentially significant effect against the Organisation for the Prohibition of Chemical Weapons (OPCW), in the Netherlands.
                           As a human intelligence support officer of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), Oleg Sotnikov was part of a team of four Russian military intelligence officers who attempted to gain unauthorised access to the Wi-Fi network of the OPCW in The Hague, the Netherlands, in April 2018. The attempted cyber-attack was aimed at hacking into the Wi-Fi network of the OPCW, which, if successful, would have compromised the security of the network and the OPCW's ongoing investigatory work. The Netherlands Defence Intelligence and Security Service (DISS) (Militaire Inlichtingen- en Veiligheidsdienst – MIVD) disrupted the attempted cyber-attack, thereby preventing serious damage to the OPCW.

                           30.7.2020

                     B.   Legal persons, entities and bodies

                           Name

                           Identifying information

                           Reasons

                           Date of listing

                           1.

                           Tianjin Huaying Haitai Science and Technology Development Co. Ltd (Huaying Haitai)

                           a.k.a.: Haitai Technology Development Co. Ltd
                           Location: Tianjin, China

                           Huaying Haitai provided financial, technical or material support for and facilitated “Operation Cloud Hopper”, a series of cyber-attacks with a significant effect originating from outside the Union and constituting an external threat to the Union or its Member States and of cyber-attacks with a significant effect against third States.
                           “Operation Cloud Hopper” has targeted information systems of multinational companies in six continents, including companies located in the Union, and gained unauthorised access to commercially sensitive data, resulting in significant economic loss.
                           The actor publicly known as “APT10” (“Advanced Persistent Threat 10”) (a.k.a. “Red Apollo”, “CVNX”, “Stone Panda”, “MenuPass” and “Potassium”) carried out “Operation Cloud Hopper”.
                           Huaying Haitai can be linked to APT10. Moreover, Huaying Haitai employed Gao Qiang and Zhang Shilong, who are both designated in connection with “Operation Cloud Hopper”. Huaying Haitai is therefore associated with Gao Qiang and Zhang Shilong.

                           30.7.2020

                           2.

                           Chosun Expo

                           a.k.a.: Chosen Expo; Korea Export Joint Venture
                           Location: DPRK

                           Chosun Expo provided financial, technical or material support for and facilitated a series of cyber-attacks with a significant effect originating from outside the Union and constituting an external threat to the Union or its Member States and of cyber-attacks with a significant effect against third States, including the cyber-attacks publicly known as “WannaCry” and cyber-attacks against the Polish Financial Supervision Authority and Sony Pictures Entertainment, as well as cyber-theft from the Bangladesh Bank and attempted cyber-theft from the Vietnam Tien Phong Bank.
                           “WannaCry” disrupted information systems around the world by targeting information systems with ransomware and blocking access to data. It affected information systems of companies in the Union, including information systems relating to services necessary for the maintenance of essential services and economic activities within Member States.
                           The actor publicly known as “APT38” (“Advanced Persistent Threat 38”) or the “Lazarus Group” carried out “WannaCry”.
                           Chosun Expo can be linked to APT38 / the Lazarus Group, including through the accounts used for the cyber-attacks.

                           30.7.2020

                           3.

                           Main Centre for Special Technologies (GTsST) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU)

                           Address: 22 Kirova Street, Moscow, Russian Federation

                           The Main Centre for Special Technologies (GTsST) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU), also known by its field post number 74455, is responsible for cyber-attacks with a significant effect originating from outside the Union and constituting an external threat to the Union or its Member States and for cyber-attacks with a significant effect against third States, including the cyber-attacks publicly known as “NotPetya” or “EternalPetya” in June 2017 and the cyber-attacks directed at an Ukrainian power grid in the winter of 2015 and 2016.
                           “NotPetya” or “EternalPetya” rendered data inaccessible in a number of companies in the Union, wider Europe and worldwide, by targeting computers with ransomware and blocking access to data, resulting amongst others in significant economic loss. The cyber-attack on a Ukrainian power grid resulted in parts of it being switched off during winter.

                           30.7.2020’

                           The actor publicly known as “Sandworm” (a.k.a. “Sandworm Team”, “BlackEnergy Group”, “Voodoo Bear”, “Quedagh”, “Olympic Destroyer” and “Telebots”), which is also behind the attack on the Ukrainian power grid, carried out “NotPetya” or “EternalPetya”.
                           The Main Centre for Special Technologies of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation has an active role in the cyber‐activities undertaken by Sandworm and can be linked to Sandworm.


title: Council Implementing Regulation (EU) 2020/1128 of 30 July 2020 implementing Article 2(3) of Regulation (EC) No 2580/2001 on specific restrictive measures directed against certain persons and entities with a view to combating terrorism, and repealing Implementing Regulation (EU) 2020/19

text:
                  31.7.2020

                  EN

                  Official Journal of the European Union

                  L 247/1

         COUNCIL IMPLEMENTING REGULATION (EU) 2020/1128
         of 30 July 2020
         implementing Article 2(3) of Regulation (EC) No 2580/2001 on specific restrictive measures directed against certain persons and entities with a view to combating terrorism, and repealing Implementing Regulation (EU) 2020/19
         THE COUNCIL OF THE EUROPEAN UNION,
         Having regard to the Treaty on the Functioning of the European Union,
         Having regard to Council Regulation (EC) No 2580/2001 of 27 December 2001 on specific restrictive measures directed against certain persons and entities with a view to combating terrorism (1), and in particular Article 2(3) thereof,
         Having regard to the proposal of the High Representative of the Union for Foreign Affairs and Security Policy,
         Whereas:

                     (1)

                     On 13 January 2020, the Council adopted Implementing Regulation (EU) 2020/19 (2) implementing Article 2(3) of Regulation (EC) No 2580/2001, establishing an updated list of persons, groups and entities to which Regulation (EC) No 2580/2001 applies (‘the list’).

                     (2)

                     The Council has provided, where practically possible, all the persons, groups and entities with statements of reasons explaining why they were entered into the list.

                     (3)

                     By way of a notice published in the Official Journal of the European Union, the Council informed the persons, groups and entities on the list that it had decided to keep them thereon. The Council also informed those persons, groups and entities concerned that it was possible to request a statement of the Council’s reasons for entering them into the list where such a statement had not already been communicated to them.

                     (4)

                     The Council has reviewed the list as required by Article 2(3) of Regulation (EC) No 2580/2001. When carrying out that review, the Council took into account the observations submitted to it by those concerned as well as the updated information received from the competent national authorities on the status of listed individuals and entities at the national level.

                     (5)

                     The Council has verified that competent authorities, as referred to in Article 1(4) of Council Common Position 2001/931/CFSP (3), have taken decisions with regard to all persons, groups and entities on the list to the effect that they have been involved in terrorist acts within the meaning of Article 1(2) and (3) of Common Position 2001/931/CFSP. The Council has also concluded that the persons, groups and entities to which Articles 2, 3 and 4 of Common Position 2001/931/CFSP apply should continue to be subject to the specific restrictive measures provided for in Regulation (EC) No 2580/2001.

                     (6)

                     The Council has concluded that there are no longer grounds for keeping one person on the list of persons, groups and entities to which Articles 2, 3 and 4 of Common Position 2001/931/CFSP apply.

                     (7)

                     The list should be updated accordingly, and Implementing Regulation (EU) 2020/19 should be repealed,

               HAS ADOPTED THIS REGULATION:

            Article 1
            The list provided for in Article 2(3) of Regulation (EC) No 2580/2001 is set out in the Annex to this Regulation.

            Article 2
            Implementing Regulation (EU) 2020/19 is hereby repealed.

            Article 3
            This Regulation shall enter into force on the day following that of its publication in the Official Journal of the European Union.

            This Regulation shall be binding in its entirety and directly applicable in all Member States.
            Done at Brussels, 30 July 2020.

                  For the Council

                  The President

               M. ROTH

            (1)  OJ L 344, 28.12.2001, p. 70.

            (2)  Council Implementing Regulation (EU) 2020/19 of 13 January 2020 implementing Article 2(3) of Regulation (EC) No 2580/2001 on specific restrictive measures directed against certain persons and entities with a view to combating terrorism, and repealing Implementing Regulation (EU) 2019/1337 (OJ L 8 I, 14.1.2020, p. 1).

            (3)  Council Common Position 2001/931/CFSP of 27 December 2001 on the application of specific measures to combat terrorism (OJ L 344, 28.12.2001, p. 93).

            ANNEX

               LIST OF PERSONS, GROUPS AND ENTITIES REFERRED TO IN ARTICLE 1

            I.   PERSONS

                        1.

                        ABDOLLAHI Hamed (a.k.a. Mustafa Abdullahi), born 11.8.1960 in Iran. Passport number: D9004878.

                        2.

                        AL-NASSER, Abdelkarim Hussein Mohamed, born in Al Ihsa (Saudi Arabia), citizen of Saudi Arabia.

                        3.

                        AL YACOUB, Ibrahim Salih Mohammed, born 16.10.1966 in Tarut (Saudi Arabia), citizen of Saudi Arabia.

                        4.

                        ARBABSIAR Manssor (a.k.a. Mansour Arbabsiar), born 6.3.1955 or 15.3.1955 in Iran. Iranian and US national, Passport number: C2002515 (Iran); Passport number: 477845448 (USA). National ID number: 07442833, expiry date 15.3.2016 (USA driving licence).

                        5.

                        ASSADI Assadollah, born 22.12.1971 in Teheran (Iran), Iranian national. Iranian diplomatic passport number: D9016657.

                        6.

                        BOUYERI, Mohammed (a.k.a. Abu ZUBAIR, a.k.a. SOBIAR, a.k.a. Abu ZOUBAIR), born 8.3.1978 in Amsterdam (The Netherlands).

                        7.

                        EL HAJJ, Hassan Hassan, born 22.3.1988 in Zaghdraiya, Sidon, Lebanon, Canadian citizen. Passport number: JX446643 (Canada).

                        8.

                        HASHEMI MOGHADAM Saeid, born 6.8.1962 in Teheran (Iran), Iranian national. Passport number: D9016290, valid until 4.2.2019.

                        9.

                        IZZ-AL-DIN, Hasan (a.k.a. GARBAYA, Ahmed, a.k.a. SA-ID, a.k.a. SALWWAN, Samir), Lebanon, born 1963 in Lebanon, citizen of Lebanon.

                        10.

                        MELIAD, Farah, born 5.11.1980 in Sydney (Australia), Australian citizen. Passport number: M2719127 (Australia).

                        11.

                        MOHAMMED, Khalid Shaikh (a.k.a. ALI, Salem, a.k.a. BIN KHALID, Fahd Bin Adballah, a.k.a. HENIN, Ashraf Refaat Nabith, a.k.a. WADOOD, Khalid Adbul), born 14.4.1965 or 1.3.1964 in Pakistan, passport number 488555.

                        12.

                        ŞANLI, Dalokay (a.k.a. Sinan), born 13.10.1976 in Pülümür (Turkey).

                        13.

                        SHAHLAI Abdul Reza (a.k.a. Abdol Reza Shala’i, a.k.a. Abd-al Reza Shalai, a.k.a. Abdorreza Shahlai, a.k.a. Abdolreza Shahla’i, a.k.a. Abdul-Reza Shahlaee, a.k.a. Hajj Yusef, a.k.a. Haji Yusif, a.k.a. Hajji Yasir, a.k.a. Hajji Yusif, a.k.a. Yusuf Abu-al-Karkh), born circa 1957 in Iran. Addresses: (1) Kermanshah, Iran, (2) Mehran Military Base, Ilam Province, Iran.

                        14.

                        SHAKURI Ali Gholam, born circa 1965 in Tehran, Iran.

                  II.   GROUPS AND ENTITIES

                        1.

                        ‘Abu Nidal Organisation’ – ‘ANO’ (a.k.a. ‘Fatah Revolutionary Council’, a.k.a. ‘Arab Revolutionary Brigades’, a.k.a. ‘Black September’, a.k.a. ‘Revolutionary Organisation of Socialist Muslims’).

                        2.

                        ‘Al-Aqsa Martyrs’ Brigade’.

                        3.

                        ‘Al-Aqsa e.V’.

                        4.

                        ‘Babbar Khalsa’.

                        5.

                        ‘Communist Party of the Philippines’, including ‘New People’s Army’ – ‘NPA’, Philippines.

                        6.

                        Directorate for Internal Security of the Iranian Ministry for Intelligence and Security.

                        7.

                        ‘Gama’a al-Islamiyya’ (a.k.a. ‘Al-Gama’a al-Islamiyya’) (‘Islamic Group’ – ‘IG’).

                        8.

                        ‘İslami Büyük Doğu Akıncılar Cephesi’ – ‘IBDA-C’ (‘Great Islamic Eastern Warriors Front’).

                        9.

                        ‘Hamas’, including ‘Hamas-Izz al-Din al-Qassem’.

                        10.

                        ‘Hizballah Military Wing’ (a.k.a. ‘Hezbollah Military Wing’, a.k.a. ‘Hizbullah Military Wing’, a.k.a. ‘Hizbollah Military Wing’, a.k.a. ‘Hezballah Military Wing’, a.k.a. ‘Hisbollah Military Wing’, a.k.a. ‘Hizbu’llah Military Wing’ a.k.a. ‘Hizb Allah Military Wing’, a.k.a. ‘Jihad Council’ (and all units reporting to it, including the External Security Organisation)).

                        11.

                        ‘Hizbul Mujahideen’ – ‘HM’.

                        12.

                        ‘Khalistan Zindabad Force’ – ‘KZF’.

                        13.

                        ‘Kurdistan Workers’ Party’ – ‘PKK’ (a.k.a. ‘KADEK’, a.k.a. ‘KONGRA-GEL’).

                        14.

                        ‘Liberation Tigers of Tamil Eelam’ – ‘LTTE’.

                        15.

                        ‘Ejército de Liberación Nacional’ (‘National Liberation Army’).

                        16.

                        ‘Palestinian Islamic Jihad’ – ‘PIJ’.

                        17.

                        ‘Popular Front for the Liberation of Palestine’ – ‘PFLP’.

                        18.

                        ‘Popular Front for the Liberation of Palestine – General Command’ (a.k.a. ‘PFLP – General Command’).

                        19.

                        ‘Devrimci Halk Kurtuluș Partisi-Cephesi’ – ‘DHKP/C’ (a.k.a. ‘Devrimci Sol’ (‘Revolutionary Left’), a.k.a. ‘Dev Sol’) (‘Revolutionary People’s Liberation Army/Front/Party’).

                        20.

                        ‘Sendero Luminoso’ – ‘SL’ (‘Shining Path’).

                        21.

                        ‘Teyrbazen Azadiya Kurdistan’ – ‘TAK’ (a.k.a. ‘Kurdistan Freedom Falcons’, a.k.a. ‘Kurdistan Freedom Hawks’).


title: Council Implementing Regulation (EU) 2020/1130 of 30 July 2020 implementing Article 21(2) of Regulation (EU) 2016/44 concerning restrictive measures in view of the situation in Libya

text:
                  31.7.2020

                  EN

                  Official Journal of the European Union

                  L 247/14

         COUNCIL IMPLEMENTING REGULATION (EU) 2020/1130
         of 30 July 2020
         implementing Article 21(2) of Regulation (EU) 2016/44 concerning restrictive measures in view of the situation in Libya
         THE COUNCIL OF THE EUROPEAN UNION,
         Having regard to the Treaty on the Functioning of the European Union,
         Having regard to Council Regulation (EU) 2016/44 of 18 January 2016 concerning restrictive measures in view of the situation in Libya and repealing Regulation (EU) No 204/2011 (1), and in particular Article 21(2) thereof,
         Having regard to the proposal from the High Representative of the Union for Foreign Affairs and Security Policy,
         Whereas:

                     (1)

                     On 18 January 2016 the Council adopted Regulation (EU) 2016/44.

                     (2)

                     In accordance with Article 21(6) of Regulation (EU) 2016/44, the Council has reviewed the list of designated persons and entities set out in Annex III to that Regulation.

                     (3)

                     The Council has concluded that the restrictive measures against all persons and entities in the list set out in Annex III to Regulation (EU) 2016/44 should be maintained, and that the identifying information for one person should be updated.

                     (4)

                     Annex III to Regulation (EU) 2016/44 should therefore be amended accordingly,

               HAS ADOPTED THIS REGULATION:

            Article 1
            Annex III to Regulation (EU) 2016/44 is amended in accordance with the Annex to this Regulation.

            Article 2
            This Regulation shall enter into force on the day following that of its publication in the Official Journal of the European Union.

            This Regulation shall be binding in its entirety and directly applicable in all Member States.
            Done at Brussels, 30 July 2020.

                  For the Council

                  The President

               M. ROTH

            (1)  OJ L 12, 19.1.2016, p. 1.

            ANNEX
            In section A (Persons) of Annex III to Regulation (EU) 2016/44, entry 18 is replaced by the following:

                           ‘18.

                           GHWELL, Khalifa
                           a.k.a. AL GHWEIL, Khalifa
                           AL-GHAWAIL, Khalifa
                           GHAWIL, Khalifa Mohamed

                           d.o.b. 1 January 1956 or 1 January 1951
                           Place of birth: Misurata, Libya
                           Nationality: Libya
                           Passport: A005465 (Libya), issued 12 April 2015, expired 11 April 2017
                           and
                           J690P666 (Libya), issued 12 June 2016, expires 11 June 2024
                           Gender: male
                           Address: Qasr Ahmed Street, Misurata, Libya

                           Khalifa Ghwell was the so-called “Prime Minister and Defence Minister” of the internationally unrecognised General National Congress (“GNC”) (also known as the “National Salvation Government”), and as such was responsible for their activities.
                           On 7 July 2015 Khalifa Ghwell showed his support for the Steadfastness Front (Alsomood), a new military force of 7 brigades to prevent a unity government from forming in Tripoli, by attending the signing ceremony to inaugurate the force with GNC “President” Nuri Abu Sahmain.
                           As GNC “Prime Minister”, Ghwell has played a central role in obstructing the establishment of the GNA established under the Libya Political Agreement.
                           On 15 January 2016, in his capacity as the Tripoli GNC’s “Prime Minister and Minister of Defence”, Ghwell ordered the arrest of any members of the new Security Team, appointed by the Prime Minister Designate of the Government of National Accord, who set foot in Tripoli.
                           On 31 August 2016 he ordered the “Prime Minister” and the “Defence Minister” of the “National Salvation Government” to return to work after the HoR had rejected the GNA.

                           1.4.2016’.