The United Nations is finding reasons to celebrate, but it comes amid persistent cyber warfare from Russia and China against Western nations. Interestingly, these two countries were key players in crafting a recently signed treaty.
The Convention, which was embraced by 65 nations last month, seems less aimed at combating cybercrime and more about legitimizing authoritarian control over speech. It’s a bit surprising, I think, that President Trump hasn’t taken a firmer stand against this treaty, especially since it was somewhat reluctantly endorsed by his predecessor.
For years, Russia and China have been working to influence global cybersecurity standards. Going back to 1999, Russia proposed international principles for information security, but that didn’t gain much traction. Later, in 2001, both countries opted out of signing the first major international treaty on cybercrime, viewing it as overly intrusive and a threat to their sovereignty.
Still, they didn’t back down. In 2018, Russia initiated a campaign to create a new framework to take the place of the Budapest Treaty, seeking to establish a UN Cyber Working Group that would sidestep the US-favored discussions.
The following year, at the UN General Assembly, Russia pushed through a resolution to start drafting a new international treaty to tackle cybercrime, which gained co-sponsorship from China and other authoritarian nations, facing resistance from the US and its allies.
Faced with the choice of either engaging in the process or leaving it to autocratic regimes, the US and its democratic partners chose to participate. Just before the onset of Russia’s invasion of Ukraine, the Biden administration made attempts to find common ground with Moscow on cyber issues.
While drafting the treaty, the US and allies argued for a traditional definition that would help improve cybercrime investigations. In contrast, Moscow and its allies wanted a broader interpretation that might legitimize crackdowns on political dissent and independent media.
Post-invasion, President Putin enacted a law tightening control over Western news sources and social media, introducing severe penalties for dissent. Russia has also developed its social media platform as an alternative to the global internet.
Similarly, China’s Golden Shield Project permits extensive monitoring and censorship of its citizens. Both countries continue launching cyber attacks against Western entities while encouraging their hackers to target foreign infrastructure.
Ultimately, the Biden administration teamed up with the EU and other Western nations to support a compromise version of the treaty. The UN General Assembly is expected to adopt this agreement by December 2024, and it will become effective 90 days after 40 nations ratify it.
Though there are some enhancements, the current treaty includes troubling provisions. The Cybersecurity Tech Accord, representing over 150 tech and cybersecurity firms, cautioned that the treaty endangers human rights and legitimate business operations. Similar concerns have been raised by human rights organizations.
Even some prominent Democrats have urged the Biden administration to collaborate with allies for a more balanced approach to cybercrime, raising alarms that the treaty could jeopardize privacy and freedom of expression.
Cybersecurity experts have also noted that the treaty could hamper the US’s ability to resist demands from authoritarian regimes, whether under legal agreements or not, limiting its power to deter oppressive investigations initiated by states like Russia and Iran.
In summary, this treaty isn’t merely a benign measure but rather a strategic move by Russia. I’d argue that Washington has been forewarned about the implications of this agreement.
Trump should step back from this treaty and gather support to reject it, favoring the Budapest Convention, which still stands as a benchmark for international regulations on cybercrime.
