A groundbreaking international treaty, the United Nations Convention against Cybercrime (UNCAC), also called the “world-wide cyber-crime pact”, has been signed by 65 nations, meeting both acclaim for its vision and fear for what it will do to privacy and civil liberties.
The treaty, which was endorsed by the United Nations General Assembly in July 2024, aims to fill gaps in cross-border cooperation in cybercrime investigations, such as ransomware attacks, data interference, and online fraud. States that sign the treaty commit, under the terms of the agreement, to criminalise certain cyber offences in domestic law, share digital evidence with foreign counterparts and permit extradition of suspects.
While the treaty is commended for its audacity in an era when cyberattacks recognise no borders, rights organisations and electronic privacy advocates warn that the agreement may enlarge and enhance states’ surveillance capabilities with potentially harmful consequences for privacy, free speech, and due process.
Foremost among these is the fact that many of the states adhering to the treaty already possess checkered digital rights records; therefore, there is an apprehension that the instrument may ultimately be used as an authoritarian tool for surveillance rather than solely for cybercrime fighting. There is a risk that under broadly worded provisions, legitimate online activity will get entangled in enforcement regimes. In the same way, arrangements being envisioned for cross-border data sharing and cooperation may circumvent domestic protections for people’s data and communications.
On the other hand, the proponents of the treaty argue that in its absence, cybercriminals exploit jurisdictional fragmentation and benefit from safe havens, and effective enforcement is not possible. The proponents of the treaty argue that it provides the first international instrument to bring consistency and cooperation to the enforcement of cybercrime laws.
In practical terms, the treaty still needs to be ratified and put into practice by participating states. Its effect will depend on how states enact it, the strength of their national protections, and how civil society observes its operation. For observers in the UK and elsewhere, the present is a moment of stark choice: safeguarding citizens’ digital rights and enhancing the ability to pursue cross-border cybercrime effectively. The balance will determine whether this agreement will be a breakthrough for justice or a setback for digital freedom.
