33. Human rights of particular importance in the online environment include the freedoms of opinion, expression, information, and assembly, as well as the rights to privacy and nondiscrimination. Women have been particularly affected by cybercrime and other malicious cyber operations, including electronic surveillance, hate speech, doxing, cyber bullying, and harassment. Thus, Costa Rica reminds States of their obligations to respect, protect and ensure the rights of women online, including those laid down in the Convention on the Elimination of All Forms of Discrimination against Women.68 Furthermore, the COVID-19 pandemic highlighted how cyber operations may also affect the rights to life and health. 34. Most human rights are not absolute and thus subject to limitation in certain circumstances. In this regard, Costa Rica notes that measures to protect the rights of States and individuals in cyberspace may often clash with certain individual human rights and must be balanced against them. For instance, to tackle online disinformation, the rights to receive and impart information freely on the Internet may be limited. Costa Rica stresses that the test for assessing the lawfulness of such limitations generally requires States to assess whether the limitation is grounded in sufficiently clear and accessible laws (legality), fulfils a legitimate purpose (legitimacy), and is necessary and proportionate to achieve this aim (necessity and proportionality).69 This test must always be applied when the application of the rights and obligations discussed above implicates human rights online. Use of force 35. Under Article 2(4) of the UN Charter and its customary counterpart, States ‘shall refrain in their international relations from the threat or use of force against the territorial integrity or political independence of any state’. In Costa Rica’s view, a State uses force against another State if it causes damage to persons or property in the territory of another State. This is true whether or not the military or other armed forces are involved, and regardless of the level of intensity of any hostilities between the States involved. 36. As noted earlier, the prohibition on the use of force applies irrespective of the type of weapon employed by a State.70 Thus, a cyber operation may amount to a prohibited use of force if it can cause harm or destruction analogous to a conventional weapon.71 In Costa Rica’s view, this assessment is to be carried out on the basis of a comparison between the effects of a cyber operation and those of an operation carried out by conventional weapons that would constitute a prohibited use of force.72 Although this assessment can only be carried out on a case-by-case basis, examples of cyber operations likely amounting to a prohibited use of force include those causing physical harm to individuals or significant 68 UN General Assembly, Convention on the Elimination of All Forms of Discrimination Against Women (1981) 1249 UNTS 13. 69 E.g., UN Human Rights Council, ‘The right to privacy in the digital age: Report of the United Nations High Commissioner for Human Rights’, A/HRC/48/31, 13 September 2021, para. 8; UNGA, ‘Report of the Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression’, A/67/357, 7 September 2012, para. 41. 70 Nuclear Weapons case (n 6), para. 39. 71 Tallinn Manual 2.0 (n 4), Rule 69, paras 8-9, at 333. 72 Ibid, Rule 69, para. 1, at 330. 10

Select target paragraph3