Nov
The digital realm has long outpaced international law, creating a critical need for a universal framework to fight online crime. This need culminated in the creation of the United Nations Convention against Cybercrime, a landmark treaty adopted by the UN General Assembly in December 2024 and opened for signature in October 2025 in Hanoi, Viet Nam. While hailed as a victory for global security, the Convention remains highly controversial due to its negotiating history and its approach to digital rights.
The Role of Russia and the Geopolitical Divide
The impetus for this new UN treaty traces directly to Russia, which first proposed the idea in 2017. Russia, along with allies like China and Iran, had long objected to the existing global standard; the Council of Europe’s Budapest Convention on Cybercrime (2001)—on the grounds that it was not inclusive and gave too much sway to Western nations in defining international cooperation norms.
Russia’s primary motivation was to establish a universal treaty rooted in principles of state sovereignty and non-interference, which many critics argue is a mechanism to legitimize state control over the internet and facilitate transnational repression. The Russian-led effort established the UN Ad Hoc Committee to elaborate a convention, leading to a five-year negotiation process. The final text, while a compromise, still reflects a distinct shift from the human rights-centric approach of the Budapest Convention.
Key Provisions and Core Aim
The core aim of the Convention is to create a legally binding global mechanism to strengthen international cooperation and law enforcement efforts against crimes committed using Information and Communications Technologies (ICTs).
- Criminalization: It mandates signatory states to criminalize a core set of cyber-dependent crimes (e.g., illegal access, system interference) and certain cyber-enabled crimes (e.g., online fraud, the non-consensual dissemination of intimate images, and child sexual abuse material).
- Electronic Evidence: A key focus is on establishing robust procedures for the collection, preservation, and cross-border sharing of electronic evidence for a wide range of serious crimes, recognizing the increasing challenge of data stored in the cloud across different jurisdictions.
- Capacity Building: It includes a strong focus on technical assistance and capacity-building for developing nations to help them implement the necessary domestic laws and investigative capabilities.
Initial Signatories and Notable Absences
The signing ceremony in Hanoi saw a broad base of support, with 72 nations becoming initial signatories. This list was geographically diverse and notably included:
- Proponents: Russia and China, who celebrated the treaty’s adoption.
- Key Allies: A significant number of US and European allies, including Australia, France, the United Kingdom, and the EU Commission, also signed, opting to engage with the treaty despite initial reservations.
- Global South: A large contingent of countries from the Global South, including 21 African nations (such as South Africa, Nigeria, and Egypt), embraced the treaty, prioritizing its capacity-building and cooperation provisions.
However, several key nations were notably absent from the initial signatories’ list:
- The United States
- Canada
- New Zealand
These countries, generally strong supporters of the Budapest Convention, have indicated they are still reviewing the new UN treaty, reflecting the underlying tension over human rights and digital due process protections.
While Ethiopia hosted the African Regional Preparatory Meeting for the UN Crime Congress in Addis Ababa earlier in the year, which included discussions about the new Convention, it was not among the nations that signed the treaty during the high-level event in Hanoi.
The Convention remains open for signature at the United Nations Headquarters in New York until December 31, 2026, which means Ethiopia, like any other UN member state, still has the opportunity to sign the treaty before the deadline.
The Crux of the Controversy
The most significant criticism, voiced by civil society, human rights organizations (like Human Rights Watch), and technology companies, centers on the Convention’s lack of sufficient human rights safeguards. Critics argue that the treaty:
- Broadens Scope: It creates a risk that its powerful electronic evidence sharing provisions could be used to prosecute individuals for actions deemed illegal under vague domestic laws (like forms of dissent or political speech), effectively legitimizing transnational surveillance in the absence of robust oversight.
- Defers to Domestic Law: While the Convention includes general language on human rights, it ultimately defers to the “applicable international human rights law” as applied by each State Party, meaning that states with weak judicial and privacy protections are granted significant leeway.
The Convention will enter into force after it is ratified by 40 states. The global community is now watching to see which countries will ratify and how the resulting legal framework will ultimately be used in practice. Read the full text here: UN Cybercrime Convention – Full Text
