58
Fifth Report
Annex B
The lack of any public U.S. endorsement of due diligence as a legal rule in
either the GGE context or elsewhere may be indicative of U.S. doubts as to
its legal status.
50. In the June 2020 Chatham House discussion, several Member States
expressed support for due diligence as an (important) rule of international
law in the cyber context. However, one Member State’s representative did
express some hesitation about endorsing due diligence given the risk of
non-compliance that might occur for States unable to adequately respond
to cyberthreats because of a lack of technical capacity.
Question 10
Are there other rules of international law that your government believes are important to highlight in assessing the regulation of cyber
operations by States or actors for which a State is internationally
responsible?
51. The final, tenth, question invited States to identify additional areas of international law on which the Committee should focus improving transparency
in the cyber context. Responses focused on different issues. Bolivia called for
more attention to protecting people’s “fundamental rights” wherever they
operate, including in cyberspace.133 Several other responses focused on cybercrime, particularly the Council of Europe’s Budapest Convention.134 Others
emphasized the contributions of the Tallinn Manuals.135
huge sections of the population, such as the case of critical infrastructure, hospitals, public transportation, and other infrastructure affecting state security.”136
Guyana suggested that “it might be prudent to have a set of international law
principles that are tailored to the special nature of cyberspace,” noting that
existing legal principles were developed for a different time and context.137
53. In the June 2020 Chatham House consultations, multiple Member States
called for more attention to the duty of non-intervention (and the question of
what cyber activities constitute coercion). Several participants echoed a call
for more attention to legal issues “below” the use of force threshold set by the
UN Charter’s Article 2(4) prohibition. Others suggested less focus on issues of
international peace and security in favor of more attention to the application
of international human rights law to cyberspace. Additional topics receiving
attention included diplomatic law, the principle of good faith, countermeasures, and the standards of proof for attribution of cyber operations to a State.
54. Finally, at least one participant called for developing a distinctly Latin
American perspective on the international governance and legal framework
of cyberspace. The participant noted how most ideas on international law
in cyberspace have been developed by European States, or scholars from
the Global North. Instead of duplicating existing efforts (e.g. UN GGE, UN
OEWG, etc.), Latin American countries could build on these foundations to
develop a Latin American framework for understanding international law in
cyberspace based on a shared political culture of democratic institutions and
Ibero-American history. The OAS was cited as the ideal venue for articulating
such a shared vision.
52. Two States – Ecuador and Guyana – indicated that there may be a need for
new international law in the cyber context. Ecuador emphasized establishing
how “to regulate attacks against military and/or civilian targets that affect the
Bolivia Response, supra note 1, at 6-7.
Guatemala Response, supra note 1, at 4; Bolivia Response, supra note 1, at 6-7.
135
Costa Rica Response, supra note 1, at 2 (emphasizing Costa Rican interest in joining the
Budapest Convention); Guatemala Response, supra note 1, at 4 (citing the Budapest Convention).
133
134
Inter-American Juridical Committee
Ecuador Response, supra note 1, at 3.
Guyana Response, supra note 1, at 5-6 (emphasizing anonymity as a particular challenge
to applying existing law).
136
137
International Law and State Cyber Operations
59
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents