Convention against Cybercrime
Context:
In late 2024, the UN convened a signing ceremony for the new 'Convention against Cybercrime', the first multilateral criminal justice instrument negotiated in over two decades.
The text was adopted by the UN General Assembly in December 2024 with support from 72 countries.
The existing global framework is the Budapest Convention on Cybercrime (2001).
About Unite Nations Convention Against Cybercrime:
The Convention was adopted by the United Nations General Assembly on 24 December 2024 in New York by resolution 79/243.
The Convention is the first comprehensive global treaty on this matter, which provides States with a range of measures to be undertaken to prevent and combat cybercrime.
It also aims to strengthen international cooperation in sharing electronic evidence for serious crimes.
The Convention will enter into force after 40 States become Parties, with its implementation reviewed by the Conference of the States Parties.
The Convention establishes an unprecedented platform for collaboration, focusing on evidence exchange, victim protection, and crime prevention, all while safeguarding human rights online.
However, major countries including India, the U.S., Japan, and Canada did not sign it.
India’s Stance:
India, along with the United States, Japan, and Canada, did not sign the convention.
This decision highlights fractures in global cyber governance and India's hesitation to align with a framework originally proposed by Russia in 2017.
Key Issues:
The global order is shifting from broad multilateralism to smaller, fragmented groups (plurilateral or bilateral) for consensus.
This leads to institutional overlaps and complicates state capacity to manage cross-border data flows and crime.
Data Access vs. Privacy:
A major contention is the balance between law enforcement's need for cross-border electronic evidence and the protection of user privacy and human rights.
Critics argue the convention could legitimize intrusive surveillance without adequate safeguards.
Challenges for India:
India risks losing institutional autonomy if it cannot build the technical capacity to engage with multiple governance frameworks simultaneously.
The country faces a vast canvas for regulatory reforms to align its domestic cyber laws with evolving international standards.