First Draft of UN Cybercrime Convention Drops Troubling Provisions, But Dangerous And Open-Ended Cross Border Surveillance Powers Are Still on the Table

This is Part I of a two-part post about the first draft of the UN Cybercrime Convention. Part I provides background on treaty negotiations and analyzes our first take on the Zero draft and its human rights implications. Part II analyzes the draft’s most problematic provisions.

The much-anticipated official first negotiated draft of the proposed UN Cybercrime Convention—shaped by many months of Member States-led negotiations in which EFF has been deeply involved—is now public.

The convention, if approved, will result in the rewriting of criminal laws around the world dealing with law enforcement access to personal data across borders, the use of surveillance technologies by one country to spy on people in another country, and the extent to which countries can force one another to cooperate in, for instance, real-time interception of people’s communications. EFF and its international partners have been standing up for users since the convention was first proposed several years ago, calling for robust human rights protections, reviewing proposed convention language, submitting recommendations and opposing concerning provisions, and addressing Member States in person at negotiating sessions this year and last.

With the release of this “zero draft,” Member States will start article-by-article negotiations to reach a consensus on a final draft during a two-week marathon session from August 21 through September 1. EFF will be there, continuing our push for robust human rights protections in the treaty.

EFF and Privacy International have been poring over the zero draft, and have sent Member States our first set of amendments. But before we delve into the most concerning features of the text, here is a quick recap of how we got here.