In discussions to date about how international law applies in cyberspace, commentators have tended to focus their attention on how the rules on the use of force, or the law of armed conflict, apply to cyber activities conducted by states that give rise to physical damage, injury or death.

But in practice, the vast majority of state cyberattacks fall below this threshold. Far more common are persistent, low-level attacks that may leave no physical trace but that are capable of doing significant damage to a state’s ability to control its systems, often at serious economic cost.

Such cyber incursions might include network disruptions in the operation of another government’s websites; tampering with electoral infrastructure to change or undermine the result; or using cyber means to destabilize another state’s financial sector.

For these kinds of cyber operation, the principle of sovereignty, and the principle of non-intervention in another state’s internal affairs, are the starting point.

A UN Group of Government Experts (GGE) agreed in 2013 and 2015 that the principles in the UN Charter, including sovereignty and the prohibition on intervention in another state’s affairs, apply to states’ activities in cyberspace. The 2015 GGE also recommended eleven (non-binding) norms of responsible state behaviour in cyberspace.

However, states have not yet reached agreement on how to apply these principles. Until recently, there has also been very little knowledge of what states actually do in cyberspace, as they usually conduct cyber operations covertly and have been reluctant to put their views on record.

A new Chatham House research paper analyses the application of the principles of sovereignty and non-intervention to state cyberattacks that fall below the principle of use of force. As well as analysing the application of the law in this area, the paper also makes recommendations to governments on how they might best make progress in reaching agreement in this area.

Existing rules or new rules?

As the research paper makes clear, there is currently some debate, principally between countries in the West, about the extent to which sovereignty is a legally binding rule in the context of cyberspace and, if so, how it and the principle of non-intervention might apply in practice.

In the last few years, certain states have put on record how they consider international law to apply to states’ activities in cyberspace, namely the UK, Australia, France and the Netherlands. While there may be some differences in their approaches, which are discussed in the paper, there also remains important common ground: namely, that existing international law already provides a solid framework for regulating states’ cyber activities, as it regulates every other domain of state-to-state activity.

There is also an emerging trend for states to work together when attributing cyberattacks to hostile states, enabling them to call out malign cyber activity when it violates international law. (See, for example, the joint statements made in relation to the NotPetya cyber attack and malicious cyber activity attributed to the Russian government).

However, other countries have questioned whether existing international law as it stands is capable of regulating states’ cyber interactions and have called for ‘new legal instruments’ in this area.

This includes a proposal by the Shanghai Cooperation Organization (led by Russia and China) for an International Code of Conduct on Information Security, a draft of which was submitted to the UN in 2011 and 2015, without success. The UN has also formed a new Open-Ended Working Group (OEWG) under a resolution proposed by Russia to consider how international law applies to states’ activities in cyberspace.

The resolution establishing the OEWG, which began work earlier this year, includes the possibility of the group ‘introducing changes to the rules, norms and principles of responsible behaviour of States’ agreed in the 2013 and 2015 GGE reports. In the OEWG discussions at the UN in September, several countries claimed that a new legal instrument was needed to fill the ‘legal vacuum’ (Cuba) or ‘the gap of ungoverned areas’ (Indonesia).

It would be concerning if the hard-won consensus on the application of international law to cyberspace that has been reached at past GGEs started to unravel. In contrast to 2013 and 2015, the 2017 meeting failed to reach an agreement.

On 9 December, a renewed GGE will meet in New York, but the existence of the OEWG exploring the same issues in a separate process reflects the fact that cyber norms have become an area of geopolitical rivalry.

Aside from the application of international law, states are also adopting divergent approaches to the domestic regulation of cyberspace within their own territory. The emerging trend towards a ‘splinternet’ – i.e. between states that believe the internet should be global and open on the hand, and those that favour a ‘sovereignty and control’ model on the other  – is also likely to make discussions at the GGE more challenging.

Distinct from the international law concept of sovereignty is the notion of ‘cybersovereignty’, a term coined by China to describe the wide-ranging powers it assumes under domestic law to regulate its citizens’ access to the internet and personal data within its territory. This approach is catching on (as reflected in Russia’s recently enacted ‘Sovereign Internet Law’), with other authoritarian states likely to follow suit.

The importance of non-state actors

In parallel with regional and UN discussions on how international law applies, a number of initiatives by non-state actors have also sought to establish voluntary principles about responsible state behaviour in cyberspace.

The Global Commission on the Stability of Cyberspace, a multi-stakeholder body that has proposed principles, norms and recommendations to guide responsible behaviour by all parties in cyberspace, recently published its final report. The Cybersecurity Tech Accord  aims to promote collaboration between tech companies on stability and resilience in cyberspace. President Macron’s ‘Paris Call for Trust and Security in Cyberspace’ has to date received the backing of 67 states, 139 international and civil society organizations, and 358 private-sector organizations.

It remains to be seen in the long term whether the parallel processes at the UN will work constructively together or be competitive. But notwithstanding the challenging geopolitical backdrop, the UN GGE meeting next week at the least offers states the opportunity to consolidate and build on the results of past meetings; to increase knowledge and discussion about how international law might apply; and to encourage more states to put their own views of these issues on the record.

International criminal justice provides a stark reminder that state sovereignty is not an absolute, and that the world’s most heinous crimes should be prosecuted at an international level, particularly where domestic systems lack the capacity or will to hold perpetrators to account. 

The post-Cold War period witnessed a dramatic rise in the number of international tribunals with jurisdiction over war crimes and serious human rights abuses in countries including Cambodia, East Timor, Rwanda, Liberia, Sierra Leone and Yugoslavia. With these processes approaching, or having reached the end of their dockets, many have called for the creation of new tribunals to address more recent conflicts, including the army crackdown in Myanmar in 2017 that resulted in evidence of crimes against humanity against the Rohingya. 

In January this year, the International Court of Justice (ICJ) imposed emergency provisional measures on Myanmar, instructing it to prevent genocidal violence against its Rohingya minority. But a final judgement is expected to take years and the ICJ has no way of enforcing these interim measures. Myanmar has already responded defiantly to international criticism. 

Model for justice

Myanmar is not the first country to face scrutiny for such crimes in Southeast Asia. The Extraordinary Chambers in the Courts of Cambodia (ECCC), more commonly known as the Khmer Rouge Tribunal was established in 1997 to prosecute Khmer Rouge leaders for alleged violations of international law and serious crimes perpetrated during the Cambodian genocide. This provides an opportunity to consider whether the Tribunal can act as a ‘hybrid’ model for justice in the region. 

The first lesson that can be taken from the Cambodian context is that the state must have the political will and commitment to pursue accountability. It was indeed the Cambodian government itself, who requested international assistance from the United Nations (UN), to organize a process for holding trials. The initial recommendation of the UN-commissioned Group of Experts was for the trial to be held under UN control, in light of misgivings about Cambodia’s judicial system. Prime Minister Hun Sen rejected this assessment and in prolonged negotiations, continued to spearhead the need for domestic involvement (arguably, in order to circumscribe the search for justice). This eventually resulted in the creation of a hybrid body consisting of parallel international and Cambodian judges and prosecutors with supermajority decision-making rules.   

It is worth noting that the Hun Sen government initially chose to do business with former Khmer Rouge leaders, until it became more advantageous to embrace a policy of putting them on trial. It is possible to infer from this that there will be no impetus for action in Myanmar until it is domestically advantageous to do so. At present, this appetite is clearly lacking, demonstrated by de-facto leader Aung San Suu Kyi shying away from accountability and instead defending the government’s actions before the ICJ.

One unique aspect of the Khmer Rouge Tribunal has been the vast participation by the Cambodian people in witnessing the trials as well as widespread support for the tribunal. This speaks to the pent-up demand in Cambodia for accountability and the importance of local participation. While international moral pressure is clear, external actors cannot simply impose justice for the Rohingya when there is no domestic incentive or support to pursue this. The reality is that the anti-Rohingya campaign has galvanized popular support from the country’s Buddhist majority. What is more, the Rohingya are not even seen as part of Myanmar so there is an additional level of disenfranchisement.

Secondly, the Cambodian Tribunal illustrates the need for safeguards against local political interference. The ECCC was designed as national court with international participation. There was an agreement to act in accordance with international standards of independence and impartiality, but no safeguards in place against serious deficiencies in the Cambodian judicial system. Close alliances between judges and the ruling Cambodian People’s Party, as well as high levels of corruption meant the tribunal effectively gave Hun Sen’s government veto power over the court at key junctures. Despite the guise of a hybrid structure, the Cambodian government ultimately retained the ability to block further prosecutions and prevent witnesses from being called. 

In Myanmar, political interference could be a concern, but given there is no popular support for justice and accountability for crimes committed against the Rohingya, the prospects of a domestic or hybrid process remain unlikely. However, there are still international options. The investigation by the International Criminal Court (ICC) into crimes that may have taken place on the Myanmar–Bangladesh border represents a potential route for justice and accountability. The UN Human Rights Council has also recently established the Independent Investigative Mechanism for Myanmar (IIMM), mandated to collect and preserve evidence, as well as to prepare files for future cases before criminal courts.

Finally, the Cambodian case illustrates the culture of impunity in the region. The ECCC was conceived partly as a showcase for international standards of justice, which would have a ‘contagion effect’ upon the wider Cambodian and regional justice systems. 

Cambodia was notorious for incidents in which well-connected and powerful people flouted the law. This culture of impunity was rooted in the failure of the government to arrest, try and punish the Khmer Rouge leadership. The Tribunal, in holding perpetrators of the worst crimes to account, sought to send a clear signal that lesser violations would not be tolerated in the same way. Arguably, it did not achieve this in practice as Cambodia still has a highly politicized judicial system with high levels of corruption and clear limits to judicial independence. 

What this illustrates is that the first step towards accountability is strengthening domestic institutions. The United Nation’s Special Rapporteur on the situation of human rights in Myanmar has urged domestic authorities to embrace democracy and human rights, highlighting the need to reform the judicial system in order to ensure judicial independence, remove systemic barriers to accountability and build judicial and investigatory capacity in accordance with international standards. Based on this assessment, it is clear that domestic institutions are currently insufficiently independent to pursue accountability.

The ECCC, despite its shortcomings, does stand as proof that crimes against humanity will not go completely unpunished. However, a process does not necessarily equal justice. The region is littered with justice processes that never went anywhere: Indonesia, Nepal, and Sri Lanka. International recourse is also challenging in a region with low ratification of the ICC, and the absence of regional mechanisms like the Inter-American Court of Human Rights, the European Court of Human Rights, and the African Court on Human and Peoples’ Rights (although their remit is not mass atrocity prosecutions). 

The Cambodian case study illustrates the challenges of ensuring justice and accountability within the region. The end of impunity is critical to ensure peaceful societies, but a purely legalistic approach will fail unless it is supported by wider measures and safeguards. It is these challenges, that undermine the prospects for ensuring justice for the Rohingya within Myanmar.

A controversial debate during COVID-19 is the state of readiness within governments and health systems for a pandemic, with lines of the debate drawn on the issues of testing provision, personal protective equipment (PPE), and the speed of decision-making.

President Macron in a speech to the nation admitted French medical workers did not have enough PPE and that mistakes had been made: ‘Were we prepared for this crisis? We have to say that no, we weren’t, but we have to admit our errors … and we will learn from this’.

In reality few governments were fully prepared. In years to come, all will ask: ‘how could we have been better prepared, what did we do wrong, and what can we learn?’. But after every crisis, governments ask these same questions.

Most countries have put in place national risk assessments and established processes and systems to monitor and stress-test crisis-preparedness. So why have some countries been seemingly better prepared?

Comparing different approaches

Some have had more time and been able to watch the spread of the disease and learn from those countries that had it first. Others have taken their own routes, and there will be much to learn from comparing these different approaches in the longer run.

Governments in Asia have been strongly influenced by the experience of the SARS epidemic in 2002-3 and - South Korea in particular - the MERS-CoV outbreak in 2015 which was the largest outside the Middle East. Several carried out preparatory work in terms of risk assessment, preparedness measures and resilience planning for a wide range of threats.

And, at the international level, there are frameworks for preparedness for pandemics. The International Health Regulations (IHR) - adopted at the 2005 World Health Assembly and binding on member states - require countries to report certain disease outbreaks and public health events to the World Health Organization (WHO) and ‘prevent, protect against, control and provide a public health response to the international spread of disease in ways that are commensurate with and restricted to public health risks, and which avoid unnecessary interference with international traffic and trade’.

Under IHR, governments committed to a programme of building core capacities including coordination, surveillance, response and preparedness. The UN Sendai Framework for Disaster Risk highlights disaster preparedness for effective response as one of its main purposes and has already incorporated these measures into the Sustainable Development Goals (SDGs) and other Agenda 2030 initiatives. UN Secretary-General António Guterres has said COVID-19 ‘poses a significant threat to the maintenance of international peace and security’ and that ‘a signal of unity and resolve from the Council would count for a lot at this anxious time’.

This pandemic looks set to continue to be a grave threat to humanity. But there will also be future pandemics – whether another type of coronavirus or a new influenza virus – and our species will be threatened again, we just don’t know when.

Other disasters too will befall us – we already see the impacts of climate change arriving on our doorsteps characterised by increased numbers and intensity of floods, hurricanes, fires, crop failure and other manifestations of a warming, increasingly turbulent atmosphere and we will continue to suffer major volcanic eruptions, earthquakes and tsunamis. All high impact, unknown probability events.

Preparedness for an unknown future is expensive and requires a great deal of effort for events that may not happen within the preparers’ lifetimes. It is hard to imagine now, but people will forget this crisis, and revert to their imagined projections of the future where crises don’t occur, and progress follows progress. But history shows us otherwise.

Preparations for future crises always fall prey to financial cuts and austerity measures in lean times unless there is a mechanism to prevent that. Cost-benefit analyses will understandably tend to prioritise the urgent over the long-term. So governments should put in place legislation – or strengthen existing legislation – now to ensure their countries are as prepared as possible for whatever crisis is coming.

Such a legal requirement would require governments to report back to parliament every year on the state of their national preparations detailing such measures as:

• The exact levels of stocks of essential materials (including medical equipment)
• The ability of hospitals to cope with large influx of patients
• How many drills, exercises and simulations had been organised – and their findings
• What was being done to implement lessons learned & improve preparedness

In addition, further actions should be taken:

• Parliamentary committees such as the UK Joint Committee on the National Security Strategy should scrutinise the government’s readiness for the potential threats outlined in the National Risk register for Civil Emergencies in-depth on an annual basis.
• Parliamentarians, including ministers, with responsibility for national security and resilience should participate in drills, table-top exercises and simulations to see for themselves the problems inherent with dealing with crises.
• All governments should have a minister (or equivalent) with the sole responsibility for national crisis preparedness and resilience. The Minister would be empowered to liaise internationally and coordinate local responses such as local resilience groups.
• There should be ring-fenced budget lines in annual budgets specifically for preparedness and resilience measures, annually reported on and assessed by parliaments as part of the due diligence process.

And at the international level:

• The UN Security Council should establish a Crisis Preparedness Committee to bolster the ability of United Nations Member States to respond to international crisis such as pandemics, within their borders and across regions. The Committee would function in a similar fashion as the Counter Terrorism Committee that was established following the 9/11 terrorist attacks in the United States.
• States should present reports on their level of preparedness to the UN Security Council. The Crisis Preparedness Committee could establish a group of experts who would conduct expert assessments of each member state’s risks and preparedness and facilitate technical assistance as required.
• Regional bodies such as the OSCE, ASEAN and ARF, the AU, the OAS, the PIF etc could also request national reports on crisis preparedness for discussion and cooperation at the regional level.

COVID-19 has been referred to as the 9/11 of crisis preparedness and response. Just as that shocking terrorist attack shifted the world and created a series of measures to address terrorism, we now recognise our security frameworks need far more emphasis on being prepared and being resilient. Whatever has been done in the past, it is clear that was nowhere near enough and that has to change.

This event is part of the Chatham House Global Trade Policy Forum. We would like to take this opportunity to to thank founding partner AIG and supporting partners Clifford Chance LLP, Diageo plc and EY for their generous support of the forum. 

This event is part of the Chatham House Global Trade Policy Forum and will take place virtually only.

International trade has a crucial role to play in tackling climate change. The production and transport of goods is a major contributor to green-house gas emissions, as is the delivery of certain cross-border services. At the same time, it looks inevitable that the COVID-19 pandemic will lead to a radical re-think of global supply chains as companies and governments seek to build in greater resilience while at the same time preserving as far as possible the efficiency gains and lower costs that global supply chains generate when operating normally.

Future international trade rules will have a crucial role to play in addressing both challenges; they represent both an opportunity and a risk. If designed well, they could play a very important role in re-enforcing moves towards a more sustainable use of resources, greater overall alignment of economies with the Paris Agreement, and greater economic resilience. But they could also, if poorly designed and implemented, or overly influenced by strategic political considerations, have significant unintended and negative implications. These include: reduced economic efficiency, increased poverty, unnecessary economic decoupling and reduced consensus on the broader mitigation and adaptation measures required to meet the challenge of climate change.

Against this background, a number of key questions arise: In what areas, if any, do we need to modify or adapt key principles underlying the system of global trade rules in order to respond to the twin challenges of responding to climate change and building greater economic resilience?  Which are the most promising/practical areas on which trade policy experts should focus now to re-launch/re-energize discussions on WTO reform, including, for example, dispute settlement? What national economic policies will be needed to complement the development of new/reformed trade disciplines in these areas? How might future political changes, such as a change in the US administration, affect the prospects for and political momentum behind such deliberations? What in any eventuality is the best way to build the required political momentum?
 
This roundtable is convened by the Global Economy and Finance Programme and the US and the Americas Programme and it is part of the Chatham House Global Trade Policy Forum. The event will take place virtually only.

We would like to take this opportunity to thank founding partner AIG and supporting partners Clifford Chance LLP, Diageo plc, and EY for their generous support of the Chatham House Global Trade Policy Forum.

Please note this event is taking place between 2pm to 3pm BST.

This event is organized by Chatham House and the Center for Strategic and International Studies (CSIS).

Keynote speaker:

• Lindene Patton, Climate Product Officer, Zurich Financial Services

Other speaker highlights:

• Alexis Livanos, Northrop Grumman
• Sir David King, University of Oxford
• Barend Van Bergen, KPMG
• Mike Keebaugh,Raytheon
• Peter Stott, UK Met Office
• Trevor Maynard, Lloyd's
• Shree Khare, Risk Management Solutions
• Giovanni Rum, Group on Earth Observations
• Greg Withee, US National Oceanic and Atmospheric Administration
• Man Cheung, Marsh Ltd

Following the conclusion of the Paris climate negotiations, this expert roundtable will examine the critical elements of the final agreement and what this means for the future of energy and climate policy in key countries.

The discussion will examine what the agreement means for keeping global average temperatures below two degrees Celsius and assess whether ambition will be ratcheted over time. It will also look at the primary implications of the outcome for key regions and countries such as the EU, United States, China and India. Finally, the session will also consider the next steps in terms of implementing the agreement. 

Attendance at this event is by invitation only. 

Summary

• Plans for an EU-wide Energy Union are taking shape, following the European Commission’s adoption in February 2015 of a ‘Framework Strategy for a Resilient Energy Union with a Forward-Looking Climate Change Policy’. The strategy underlines the EU’s ambition to attain ‘secure, sustainable, competitive, affordable energy for every European’.
• The initiative seeks to transform energy markets and energy/climate policy across the EU. Its goals include cross-border coordination and integration in energy security, supply, market operations, regulation, energy efficiency, low-carbon development, and research and innovation.
• There is an important foreign policy aspect to the Energy Union, given the imperative of managing security and supply risks in Europe’s neighbourhood and further afield. By addressing structural divisions between member states, the Energy Union could have a marked beneficial effect on the EU’s capacity to conduct a unified and effective foreign policy.
• Development of the Energy Union presents abundant challenges, however. Policy and legislative changes will need to be coordinated across 28 countries. Variations in EU member states’ attitudes to security and energy policy may lead to differences in, or clashes between, priorities. The wider context is also complicated. Interrelated challenges rooted in broader policy issues include the partial transition to low-carbon energy, and concerns over competitiveness relative to other major economies.
• The current EU approach to energy security and infrastructure focuses on natural gas. This ‘gas first’ approach risks crowding out other responses to the energy security challenge. It could result in the creation of ‘stranded assets’, if the future gas demand on which investments are predicated does not match projections. A narrow focus on new gas infrastructure could also impede development of other dimensions of the Energy Union.
• The markets for coal, oil, gas and renewables are changing significantly. The shale oil and gas ‘revolution’ in the United States has altered the economics of hydrocarbon fuels, and the plunge in oil prices since mid-2014 is causing energy businesses in the EU to reassess investment plans.
• The EU is rapidly expanding the use of renewable energy. Dramatically falling prices for renewables will challenge traditional energy utility business models. How the Energy Union enables market access for new business models will be key to determining future energy trajectories.