Issue’s And Challenges In International Cyberspace Regulations
Author: LawSphereX
Category: Technology, Cyber & Privacy
Published:
Updated:
ISSUE’S AND CHALLENGES IN INTERNATIONAL
CYBERSPACE REGULATIONS
Fathima Rifa I K, School of Law, Lovely Professional University, Phagwara
ABSTRACT
The rapid growth of internet and digital technologies has brought a unprecedented challenges in the international cyberspace regulation. This research explores to the issues and challenges surrounding the jurisdiction, attribution, privacy and Human rights in the digital era and a comprehensive analysis of the existing regulatory frameworks and conventions. The study will look in to the key issues of development of technology which lead to the cybercrimes and also this study contributes to the ongoing debate international cyberspace regulations, and address the complexities of the digital landscape Keywords: International cyberspace regulations, Cyberspace, International cooperation, Data protection
INTRODUCTION
Cyberspace is a interconnected digital environment, and it is also a virtual world which is popularized in the digital era. The world cyberspace was originally from ancient culture, popular culture from science fiction and art but now it is used as a technological term used by technological strategy, security professionals and governments for describing the domain of global technology, and global network of interdependent information technology platform, along with telecommunication network and computer processing system.
The term cyberspace has become anything associated with computing, internet and diverse internet culture (contributors, 2024) When we look in to the modern daily life virtual space is invaluable and it stands as a backbone of global communication, commerce and also governance but due to this development and globalization in digital realm there is a significant challenges in safeguarding the human rights and global security. Cyberspace touches every aspects of our lives and their benefits are enormous but this also comes with risk. United Nations Human Rights Council also states that the right of freedom of expression covered under Article 19 of the ICCPR1 and UDHR should also protect human rights on internet in regardless of frontiers
INTERNATIONAL REGULATIONS
There are various international regulations governing the cyberspace United Nations Group of Government Experts (GGE) This is a group of government experts (GGE) who are appointed by the secretary general of United Nations for undertaking study on the issues of concern and to report the findings at the UN general assembly and they will be looking in to the category of disarmament and proliferation under this it also deals with the development in the field of information and telecommunications in the context of the international security the resolutions understand the benefits of the development in the scientific and technological advancement in information security and also noted the use of such developments for a malicious purpose GGE in its final report mentioned various issues and emerging threats that can take place in the (Information and communications technologies) ICT’s that is malicious use of ICT’s by the state and Non-
1 International Covenant on Civil and Political Right
state actors have and this threat manifest differently across the regions and stated that there will be increased use of ICT’s in conflicts between the states report also found that the harmful ICT against critical infrastructure that provides domestically, regionally and globally for instance, during the COVID-19 pandemic the risk of ICT activities that seek to exploit vulnerability during the time of extreme enormous strain When we look in to the various state law’s of cyberspace the capacity to secure information’s continue to be different and also to respond to the threat also differs so these differences in capacity and resources as well as the disparities in national law, so this will increase vulnerability and risk for all the states and the report also states that the use of ICT for terrorist purposes, and if this are kept unaddressed then it may threaten the international peace and security (UNGA, 2021) European Union’s General Data Protection Regulations (GDPR) GDPR is the European Union’s (EU) personal data protection law that aims for the protection of privacy of EU citizens which was enacted in may 2018 and this provides a unified set of rules on all organizations that is having personal data which is originating from the EU and as it is including all the organization around the world it is mandatory to follow the rules set forth in the regulations.
The GDPR will be protecting personal data as well as sensitive personal data according to GDPR data protection is a core component of GDPR and they have made various organization compliances such as if any data breach poses a risk to individuals then it must be reported within 72 hours of the awareness of the event by the organization The main principle of GDPR is that the personal data which is gathered by the organization should only be accessible to the employees who are in need of the data for their professional activity.
The cross border transfer of data in GDRP is allowed only in 2 situations, Firstly only few countries are given the cross border transfer by evaluating the law regimes of the other countries and it should be satisfied that the country updates its national data protection regime to a level it is protected in EU and this process involves a long negotiation and given to eleven countries they are: Andorra, Argentina, Canada, Faeroe Islands, Guernsey, Isle of man, Israel, Jersey, New Zealand, Switzerland, Uruguay. Secondly, when a data is transferred to non-EU
country there will be a contractual guarantee between them and the level of data protection should be similar to that of GDPR (Hoofnagle, 2019) Asia-Pacific Economic Cooperation (APEC) Cyber Security Framework The Asia pacific economic cooperation privacy framework2 was developed by the APEC for the greater regional cooperation on the privacy rules enforcement the issues aim to promote consumer trust and business confidence in cross border data flow’s and Australia is a member of the APEC data privacy and they will meet twice a year foe working on privacy issues. The APEC Cross Border Privacy rules (CBPR) system was developed by APEC economies with the assistance from industry and civil society to build consumer, business in cross border flows of the personal information.
APEC objective is to protect informational privacy which arises in the context of promoting trade and investment rather than the protection of Human Rights under EU. The CBPR system adopts an ‘accountability based’ approach where organizations will be held to comply with the CBPR principles (Austin, 2022).
INTERNATIONAL CYBERSPACE REGULATIONS
Budapest convention on cybercrimes The first major inter-governmental cooperation in countering the cybercrime which came in
2001 from the council of Europe which is having 47 member countries including Russia
Budapest convention is a convention on cybercrimes through this convention the aim is to protect the society against the cybercrime through a common criminal policy by adopting a appropriate legislation, the convention was brought as a concern that the risk of computer networks and the electronic information may be used as a tool for committing criminal offences and the evidence relating to the crimes may also be transferred through this network3 (europe, 2001). The aim of the convention is to help the fight against crime which is only committed through technology where the tool and the target of the is through devices and also on the crime in
2 APEC Privacy Framework (2015) | APEC
3 Preamble Budapest convention on cyber crimes
which technology is used to enhance another crime and it act as a guideline for any country which is developing domestic laws on cybercrimes and act as a international cooperation. The convention covers the criminalization of conduct that is illegal access, computer related fraud and child abuse materials also discuss about the investigation process of the cybercrimes and how electronic evidence secured (Union, 2023). EU’s Network and Information security (NIS) Directive It is the first piece of EU-wide legislation on the cybersecurity and the aim is to achieve a high common level of cybersecurity among all the member states. The main aim of the NIS directive is to promote reliable cybersecurity between the European nations.
In addition to the guiding the individual toward better cybersecurity practices NIS directive also encourages penalties for non-compliances and each countries should decide and enforce NIS penalties within its own nations. These rules are applied to the Operators of essential enterprise services (OES) and Digital Service provider (DSP) of EU data’s. later to respond to the growing threats posed with the digitalization and cyber attack the commission submitted a proposal for replacing the NIS and strengthen the security requirements and also to address the security of supply chain, to include stringent supervisory measures and stricter enforcement across the EU.
And then NIS2 came in to force on16 January 2023, and member state is having 21 months now to to transpose its measure in the national law (The NIS'S Directive , 2023) US Cybersecurity and Infrastructure Security Agency (CISA) The cybersecurity and infrastructure security agency (CISA) is a department under the United Security Department of Homeland Security (DHS) which is having the responsibility of cybersecurity and infrastructure protection across the government, coordinating the cybersecurity programs with the United States and protecting the cybersecurity against the private as well as nation- state hackers. CISA’s aim was to grew roles in the securing the elections and the census, managing national security, it also includes involvement in 5G network security and also hardening the US grid against the electromagnetic pulse (contributor, 2024)
ISSUE’S OF CYBERSPACE REGULATIONS
1. There are various cyberspace regulation issues which are to be looked in to some of the
main issues of cyberattacks, including the data breaches, ransomware and also phishing scams and the emerging cybersecurity has a emerged a big concern.
2. The collection as well as utilization of personal information by government and
corporation is bringing a in balance between innovation and protecting the individual privacy.
3. The world faces a big array of cyber threats and the majority of this threats are against
the western democracies and the advanced economies of the world this is because this countries are completely or partially dependent over the cyber means (Bucci, 2012)
4. Disparities and access to technology are different in different countries which make it
difficult to provide same governance and there may be a gap in equitable access to cyberspace.
5. Borderless nature of cyberspace is another aspect of the issue because it will be difficult
to identify the originality of the attack and which regulation is required to be implemented will be in question.
6. Increasing use of cyberspace for terrorist activities such as recruitment, finance and
other warfare may increase the geographical tension and will threaten the international security.
7. Advancement in technology such as Artificial Intelligence, blockchain, cryptocurrency
and other deep faking raise ethical dilemma related to the accountability and create bias and there should be a responsible innovation in cyberspace.
8. Addressing these challenges requires the balancing security with privacy and human
rights through enhancing the international cooperation and information sharing through developing global cybersecurity standards.
9. Lack of trust among the nations is another issue arising in the world of technologies
and it should be covered by establishing international cyber norms.
10. Challenges such as data localization and protection and cross border data transfer along
with cyber security standards and compliance and protection of intellectual property rights.
CHALLENGES OF CYBERSPACE REGULATIONS
JURISDICTIONAL CHALLENGES
Physical space is governed by a clear geographical boundaries but when it comes to cyberspace it doesn’t have a clear cut geographical boundary which makes it complicated to apply the traditional regulations and legal principles. Even in international law we can apply the boundaries territory and nationality but when it comes to cyberspace it is difficult because of the globalization and the interconnected using and nature of the internet For instance cyberattack can be done from multiple locations and also through using the server of various country the hackers or attackers can trick and effect the victims across the globe. So to determine which national law is to be enforced and who is responsible for the same is a complex matter to determine.
As in the case the international community faces urgent question about how to enforce this laws in this and jurisdiction is about the legal authority of state to act and the legal authority is also limited to the population and territory, so jurisdiction is one or the most trouble or challenge in regulating the global internet (Hornle, 2021) Timelessness and boundarylessness of the cyberspace make it easy for the information to cross border without the need of permission as well as visa so the state laws or national legal authority will not be having power in regulating such misuse or cyber attacks and there should be international legislation which will provide a clear and unambiguous legal framework
ATTRIBUTION
It is extremely difficult to find the perpetrator behind the cyber attack so attribution requires finding the leftovers of footprints across the countries but the hackers or cyber attackers using proxy and VPN services escape without getting a trace of them. Without a clear attribution the legal responses stays uncertain according to ITU (international telecommunication union) report more than 80% of the cybercrimes are unreported because of the attribution difficulty and also due to the uncertainty. Cyberattacks are always involved by masked identity which it
makes difficult to track down. International law will only regulate its subject. To apply the international law there should be certainty regarding the responsibility of the act and the identification of the origin of malicious cyber behavior is difficult as well as time consuming and international law should resolve this issues by providing how much control is required to demonstrate it
INTERNATIONAL COOPERATION AND CONFLICT
There is huge gap in the universally accepted rules or norms and treaties in cyberspace governance and which lead to the conflict of law , this is due to the absence of the unified global regulations and diverging regulatory approaches creates a complexity of administration eg- GDPR and the data storage and transfer of the regulations vary from one state to other and which will effect the global business operations when we look in the EU governance they are having their own norms and rules regarding the protection of data and such data protection is only used with business operations which are related to EU and the personal or sensitive personal data will only be shared with the nations who is having a similar standard of protection of data Trust is a big factor for the effective international cooperation and a collaborative effort is very necessary to combat the cyber threats.
And the uneven enforcement of laws across the country will lead to ineffectiveness, so it is very important to have international cooperation to have a standardized norms to avoid the conflict among the nations
HUMAN RIGHT CHALLENGES
In relation to the growing danger of cybercrimes the UN has drafted (UN, n.d.) a legally binding international treaty for countering the threat, it’s been 5 years since the drafting and the negotiation is still going on and the latest meeting was conducted in August 2024 and which also didn’t have a concluded draft. Digital technology can be used as a powerful tool for advancing human progress and can contribute to the promotion and protection of human rights, but the technology now we are having such as artificial intelligence contribute for creating a digital environment in which both state and business can be manipulated to an extreme level As the online sphere increasingly influences the individuals daily life, government and
international organization face a complex dilemma in balancing the interest and the key concerns are safeguarding the freedom of expression online while curbing with the harmful and illegal content and protecting individual privacy while preventing the cyber crimes and terrorism and data protection around the globe. Issue like online harassment, digital divide and excessive surveillance pose a significant human right concern. For addressing this issues there is need of cooperative international effort, clear and unambiguous regulatory framework and commitments to uphold human rights in the digital age.
CONCLUSION
The regulatory landscape of international cyberspace is fraught with variety of challenges. And jurisdictional complexities, attribution difficulties, privacy concerns, and human rights violations threaten the global security and individual freedom.
Existing frameworks like Budapest convention, GDPR, and NIS Directive provides foundation for the guidelines for the cyberspace regulations but the gap still persist Effective regulations demands cooperative international effort from every state and there should be a clear legal frameworks, and also unwavering commitments to upholding the human rights and to address these challenges there is need of unified global standards for cybersecurity and data protection and enhance international cooperation and information sharing this can only be done by balancing security with privacy and human rights Ultimately, safeguarding human rights and global security in cyberspace requires a collaborative, adaptive and rights-respecting approach
SUGGESTIONS
1. Different countries have different legal framework of data privacy, cybersecurity, so
making a unified law will help to regulate the confusion.
2. Should find a balance between national interest and international regulations.
3. Creating a harmonized international data protection that will respect both cultural and
legal difference.
4. Including digital divide and promote inclusivity in regulations.
5. Building trust and transparency among countries in the cyberspace.
References
1. Austin, S. (2022, january 6). The Privacy, Data Protection and Cybersecurity Law
Review:
APEC
Overview. Retrieved from Lexology: https://www.lexology.com/library/detail.aspx?g=129cf7fd-f053-4418-90a2- 2bea1571d135
2. Bucci, s. (2012). joining cybercrimes and cyberterrorism: A likely scenario. cyberspace
and national security: threats opportunities and power in a virtual world,, 57-68.
3. contributor, W. (2024, september 3). cybersecurity and infrastructure security agency.
Retrieved from wikipedia: https://en.wikipedia.org/w/index.php?title=Cybersecurity_and_Infrastructure_Securit y_Agency&oldid=1243844598
4. contributors, W. (2024, september 21). Cyberspace. Retrieved from wikipedia:
https://en.wikipedia.org/w/index.php?title=Cyberspace&oldid=1246918101
5. europe, c. o. (2001, november 23). convention on cybercrimes. Retrieved from council
of europe: https://rm.coe.int/1680081561
6. Hoofnagle, C. d. (2019). The European Union General Data protection regulation.
Information and communication technology law, 65-98.
7. Hornle, J. (2021, 24th march). The jurisdictional challenge of internet regulation.
Retrieved from OUPblog.
8. The NIS'S Directive . (2023, february 08). Retrieved from Think Tank european
parliament: https://www.europarl.europa.eu/thinktank/en/document/EPRS_BRI(2021)689333
9. UN. (n.d.). Ad Hoc committee to elaborate a comprehensive international convention
on countering the use of information and communications of technologies for criminal purposes. Retrieved from
UNODC:
https://www.unodc.org/unodc/en/cybercrime/ad_hoc_committee/home#About
10. UNGA. (2021). GGE on advancing responsible state behaviour in cyberspace in the
context of onternational security. UNGA.
11. Union, P. o. (2023, november 28). EUR-Lex. Retrieved from convention on cybercrime:
https://rm.coe.int/1680081561https://eur-lex.europa.eu/legalcontent/EN/ALL/?uri=legissum:4656911