{
  "url": "https://openlegislation.uk/eu-decision-2019-797/article-3",
  "json_url": "https://openlegislation.uk/eu-decision-2019-797/article-3.json",
  "legislation": "eudn/2019/797",
  "legislation_title": "Council Decision (CFSP) 2019/797 of 17 May 2019 concerning restrictive measures against cyber-attacks threatening the Union or its Member States",
  "legislation_url": "https://openlegislation.uk/eu-decision-2019-797",
  "path": "article/3",
  "kind": "article",
  "number": "3",
  "heading": null,
  "text": "The factors determining whether a cyber-attack has a significant effect as referred to in Article 1(1) include any of the following:\n(a) the scope, scale, impact or severity of disruption caused, including to economic and societal activities, essential services, critical State functions, public order or public safety;\n(b) the number of natural or legal persons, entities or bodies affected;\n(c) the number of Member States concerned;\n(d) the amount of economic loss caused, such as through large-scale theft of funds, economic resources or intellectual property;\n(e) the economic benefit gained by the perpetrator, for himself or for others;\n(f) the amount or nature of data stolen or the scale of data breaches; or\n(g) the nature of commercially sensitive data accessed.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2019/797/article/3",
    "retrieved_at": "2026-11-01T15:12:42.435427+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}