operations. The Government of Japan also hopes that the deepening of a shared
understanding — particularly regarding which activities in cyberspace constitute a
violation of international law and which tools are available under international law for
States whose legal interests have been infringed by cyber operations — will deter
malicious activities in cyberspace.3 The Government of Japan's policy is to continue
actively participating in relevant discussions, including ones held under the auspices of
the UN.
It should be noted that international law applicable to cyber operations is not limited to
those mentioned in this document. The Convention on Cybercrime, to which Japan is a
party, is an important element of international law applicable to cyber operations. Treaty
provisions related to the Data Free Flow with Trust principle, for which Japan is
promoting rule-making under the Comprehensive and Progressive Agreement for TransPacific Partnership (CPTPP), the Japan-U.S. Digital Trade Agreement, and the Japan-UK
Economic Partnership Agreement, also constitute international law applicable to some
aspects of cyber operations.
2. International Law Applicable to Cyber Operations
(1) Existing international law and the UN Charter
Existing international law, including the UN Charter in its entirety, is applicable to
cyber operations.
The 2015 GGE report mentions 11 voluntary, non-binding norms of responsible State
behaviour. These items were agreed by Governmental experts as requiring
implementation at least as norms, but they include items which affirm or relate to rights
and obligations under international law. The inclusion of such norms among the 11 items
does not mean that the rights and obligations under existing international law are
extinguished or altered.
(2) Violation of sovereignty and the principle of non-intervention
A State must not violate the sovereignty of another State by cyber operations.
Moreover, a State must not intervene in matters within domestic jurisdiction of another
State by cyber operations.
With respect to the principle of non-intervention, cyber operations may constitute
unlawful intervention when requirements including the element of coercion, which are
clarified in the Nicaragua judgement (1986),4 are met.
On the other hand, regarding a violation of sovereignty that does not necessarily
constitute an intervention, in the Lotus case, the Permanent Court of International Justice
3
4
The term "cyberspace" does not imply the existence of a space which does not belong to real space.
Military and Paramilitary Activities in and against Nicaragua (Nicaragua v. United States of America).
Merits, Judgment. I.C.J. Reports 1986, p.97-98, paragraph 205.
2