18 Improving Transparency: International Law and State Cyber Operations eral participants called for more attention to the role of international human rights law in cyberspace; a topic that the Committee could address alone or in concert with the Inter-American Commission on Human Rights. 27. In addition, the Committee might seek to improve transparency around how international law protects the healthcare sector. The COVID-19 pandemic has severely impacted the region in both humanitarian and economic terms. Unfortunately, cyber threats risk even further harm as witnessed by cyber-attacks on hospitals and, most recently, vaccine research efforts. The Committee thus could focus attention on a topic of critical current interest that would assist Member States and their nationals throughout the region.29 Proposal 3: Support or Undertake Additional Legal Capacity Building Efforts 28. CICTE and several Member States have already undertaken significant and important efforts to build capacity on cyber-issues among Member States—both the capacity to understand the technical nature of ICTs and the threats they pose, as well as the capacity to understand and evaluate the legal issues these threats raise. Yet, both the questionnaire responses and the June 23 consultations make it clear that much more work remains to be done, especially in the context of legal capacity building. The participants in the June 23 consultations where quite vocal about the need for additional capacity building on international law’s application in the cyber context. Similar views were expressed by several Member States (e.g., Argentina, Canada and the United States) in their recent comments to the OEWG.30 Thus, the Committee For one ongoing effort to clarify international law protections of the healthcare sector from cyberthreats, see Dapo Akande, Duncan Hollis, Harold Hongju Koh, and Jim O’Brien, Oxford Statement on the International Law Protections against Cyber Operations Targeting the Health Care Sector, JUST SECURITY (May 21, 2020) (cross posted at OPINIO JURIS & EJILTALK!). 30 See, e.g., Argentina, Initial “Pre-draft” of the report of the OEWG on developments in the field of information and telecommunications in the context of international security; Michael Walma, Canadian Comments on Draft OEWG Report (April 6, 2020); United States, United States Comments on the Chair’s Pre-draft of the Report of the U.N. Open Ended Working Group (OEWG) (April 6, 2020). These (and other) national Statements are available at United Nations, Open-ended Working Group, at https://www.un.org/disarmament/open-ended-working-group/. 29 Inter-American Juridical Committee Fifth Report would appear to have solid support should it choose to signal a willingness to lend its expertise or resources to existing capacity building efforts. 29. Alternatively, the Committee might consider whether it could support or conduct its own additional (and more diverse) capacity building efforts. Courses on international law’s application to cyber-space could be supplemented with courses that offer some “technical training” to non-technical experts to assist State diplomats and other representatives in accurately understanding and gauging how cyber threats operate. Alternatively, the Committee might use its meetings with Foreign Ministry Legal Advisers to “game” certain scenarios involving cyber-threats to give government lawyers more opportunities to apply relevant legal rules and standards (and, in doing so, help facilitate a State’s development of its own view of how the law applies). Finally, the Committee might wish to regularize conversations like those that occurred in June – by hosting and moderating conversations on the application of international law among Member States (and perhaps at some point, other relevant stakeholders from industry and civil society). 30. In short, thru more transparency and capacity building efforts, the Committee could make an important contribution to improving the application (and efficacy) of international law as a regulatory tool in cyberspace. Moreover, it could do this on its own or in concert with other parts of the OAS, certain Member States or other organizations. The ICRC, for example, has expressed enthusiasm for supporting more capacity building efforts around international law in the region. 31. It has been a real privilege to work on this topic during my time on the Committee. I continue to believe that cyber threats – including operations by States and their proxies – create risks that have significant economic, humanitarian, and national security consequences. International law provides a time-tested mechanism for regulating new threats. Yet, technical, political, and legal challenges have made the law generally (and the State practice and opinio juris that comprise custom specifically) less visible—and thus less effective—to date. With more transparency on how States understand the law to operate, it should have a greater opportunity to play a much-needed regulatory role in restraining unwanted behavior and facilitating greater assistance and cooperation. It is my hope that reporting on the questionnaire International Law and State Cyber Operations 19

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents