New ICRC–Geneva Academy report examines civilian involvement in wartime cyber activities
A new joint study by the ICRC and the Geneva Academy warns that rising civilian involvement in cyber operations is challenging long-standing protections in armed conflict. The report examines how international humanitarian law applies when civilians engage in hacking or other digital activities, outlines risks to civilian infrastructure, and calls on governments and technology companies to clarify responsibilities and minimise harm as cyber operations become increasingly intertwined with modern warfare.
The International Committee of the Red Cross (ICRC) and the Geneva Academy of International Humanitarian Law and Human Rights have published a joint report analysing how international humanitarian law (IHL) applies when civilians participate in cyber activities during armed conflicts. The study reflects growing concern over the blurred lines between civilian and military behaviour in cyberspace, particularly as digital tools become more accessible and conflicts increasingly involve online operations.
Legal protections and risks in cyberspace
The report explores when civilians – including those who engage in hacking or other digital activities – may lose their protection from attack under IHL if they are deemed to be directly participating in hostilities. It also examines the obligations of states to protect civilians, ensure that their populations comply with IHL, and safeguard critical civilian infrastructure from harm during digital operations.
Technology companies are also addressed in the analysis, which highlights scenarios in which platforms, services or infrastructure could be drawn into conflict-related activities. The report calls for clearer understanding of the roles and responsibilities of private actors when their tools are used during hostilities.
Recommendations for states, companies and humanitarian actors
The ICRC–Geneva Academy report offers practical guidance aimed at limiting civilian involvement in hostilities and reducing the humanitarian consequences of cyber activities. Recommendations include:
- clearer national policies to prevent civilians from being encouraged or incentivised to join cyber operations
- measures to protect civilian digital infrastructure
- stronger engagement with technology companies to ensure compliance with IHL
- increased coordination between governments, humanitarian organisations and the private sector
Growing relevance in contemporary conflict
As cyber operations increasingly accompany traditional military action, the publication highlights the need for states and industry to ensure that long-standing international legal principles remain respected in digital environments. The report emphasises that, despite the advent of new technologies, the core obligation remains unchanged: safeguarding civilians and preventing unnecessary harm during armed conflict.
