Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The United Nations Convention against Cybercrime is a new treaty intended to strengthen cybercrime investigations and international cooperation. It also recognizes privacy and human rights in its preamble. Civil-society groups nevertheless warn that its broad investigative and evidence-sharing framework could expose people to rights violations, especially in countries with weak protections. That is a prediction about how the treaty could be used, not a finding that violations are inevitable or have already been adjudicated.

What is the UN cybercrime convention?

The United Nations Convention against Cybercrime is a treaty adopted by the UN General Assembly on 24 December 2024 through Resolution 79/243. The treaty states that its purposes include more effective cybercrime prevention and enforcement, stronger international cooperation, and technical assistance and capacity-building, particularly for developing countries.

The UN Treaty Collection says the convention opened for signature in Hanoi on 25–26 October 2025 and remains open for signature at UN Headquarters through 31 December 2026. Signing and becoming a party are distinct steps: signature alone does not mean a country has ratified the treaty or that it is in force for that country.

Is the treaty in force?

No. The UN Treaty Collection status page, dated 30 September 2026, listed 95 signatories and 3 parties, and said the convention was not yet in force. These are time-sensitive figures; the registry is the place to check for later changes and state-specific reservations or declarations.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Under the treaty’s entry-into-force rule, it takes effect 90 days after the 40th instrument of ratification, acceptance, approval, or accession is deposited, subject to the treaty’s rule for regional economic integration organizations. The signatory count therefore does not indicate that the threshold for entry into force has been met.

What does the treaty say about privacy and human rights?

The convention’s preamble recognizes human rights and fundamental freedoms, the right to protection against arbitrary or unlawful interference with privacy, and the importance of protecting personal data. Those commitments are part of the treaty’s stated framework; they do not, by themselves, resolve how its investigative and cooperation provisions will operate in each country’s legal system.

The central dispute is about that implementation. Human Rights Watch and other civil-society organizations say the treaty’s operative powers and safeguards do not adequately protect rights in practice. Their criticism is not that the text says privacy is unimportant, but that they consider its rights language insufficient to constrain the reach and use of the powers it establishes.

Why do privacy groups warn of human-rights risks?

In a joint statement published by Human Rights Watch on 24 October 2025, a coalition that included Access Now, the Association for Progressive Communications, ARTICLE 19, Derechos Digitales, the Electronic Frontier Foundation, and Privacy International urged governments not to sign or ratify the convention. The coalition argues that the treaty reaches beyond attacks on computer systems and data, creates broad domestic and cross-border electronic-evidence and surveillance powers, and lacks comprehensive human-rights safeguards across the whole treaty.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The serious-crime threshold depends on national law

The coalition says the treaty’s “serious crime” threshold covers an offense punishable by at least four years of imprisonment under domestic law. Because the threshold depends on each country’s penalties, the groups warn that it could apply to conduct that is protected by international human-rights law in some places. They point to countries that criminalize criticism, protest, journalism, whistleblowing, or same-sex relationships as examples of where the risk could arise.

Cross-border evidence cooperation can carry local laws with it

International cooperation on electronic evidence may involve information about activity that one country treats as criminal even when another country’s law protects it as speech or other rights-related conduct. The groups’ concern is that broad cooperation could help a requesting government pursue people for such activity, particularly where domestic legal safeguards are weak. The treaty does not mean every government automatically gains access to private data: the concern is about the powers and cooperation framework being used through national law and in particular cases.

Safeguards are a central point of disagreement

The coalition says protections in the treaty’s criminal-procedure chapter are weak and that the convention does not explicitly apply robust safeguards across the full treaty. It argues that safeguards should reflect legality, non-discrimination, legitimate purpose, necessity, and proportionality. The groups also identify risks for security researchers, activists, journalists, whistleblowers, women, and LGBT people.

Their proposed mitigations include stronger domestic legal safeguards, independent authorization and oversight, transparency in cooperation requests, and meaningful consultation with affected stakeholders. These are the coalition’s recommendations; they should not be mistaken for a statement that the treaty mandates every one of them.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Were these concerns raised during the UN process?

Yes. UN General Assembly committee coverage published on 11 November 2024 recorded delegations warning that some states could misuse the instrument to justify human-rights abuses and urging that it be interpreted consistently with international human-rights obligations. Those concerns show that the issue was raised during the UN process, but they are not a formal ruling that the treaty necessarily violates rights.

What should readers take from the debate?

The treaty combines stated goals of fighting cybercrime and improving cooperation with an express acknowledgment of privacy and human rights. The disagreement is over whether its investigative and international-cooperation powers are sufficiently limited and safeguarded, especially when requests involve countries that criminalize conduct protected elsewhere.

The civil-society coalition predicts that the framework could enable rights violations in those settings; the treaty’s existence alone does not establish that such violations will occur. No published impact statistic quantifies expected violations. For the practical legal position, distinguish the treaty’s text, each country’s implementation, and the changing status and state positions recorded by the UN Treaty Collection.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.