ICRC calls for stronger application of international humanitarian law to cyber operations
The International Committee of the Red Cross has urged states participating in the UN Global Mechanism on ICTs to strengthen their shared understanding of how international humanitarian law applies to cyber operations during armed conflicts, with particular attention to protecting civilians, critical digital infrastructure, and civilian data.
During the first substantive plenary session of the UN Global Mechanism on Developments in the Field of ICTs in the Context of International Security, held in New York on 22 July 2026, the International Committee of the Red Cross (ICRC) outlined its priorities for the application of international law to the use of information and communication technologies (ICTs) in armed conflict.
Delivering the statement on behalf of the ICRC, Noa Schreuer, Legal Adviser, noted that cyber capabilities are increasingly being used by both states and non-state actors in contemporary armed conflicts. Against this backdrop, the organisation emphasised that existing international law, particularly international humanitarian law (IHL), already governs the military use of ICTs during armed conflict.
The ICRC stressed that all military cyber operations conducted in armed conflicts must comply with established IHL rules designed to protect civilians and civilian objects. It also recalled the 2024 Resolution on ICT Activities during Armed Conflict, adopted by the 34th International Conference of the Red Cross and Red Crescent, which affirmed that IHL protects civilian populations and infrastructure from risks arising from ICT activities during armed conflicts.
According to the ICRC, future discussions within the Global Mechanism should focus on building greater consensus among states regarding how IHL applies to cyber operations. The organisation highlighted particular concern over cyber activities that cause non-physical damage, arguing that modern societies rely heavily on digital infrastructure and data to deliver essential civilian services. It therefore called for further discussion on how IHL protects civilian ICT systems and digital data against damage or destruction during armed conflicts.
The ICRC also encouraged states to build on work undertaken through the Global Initiative to Galvanize Political Commitment to International Humanitarian Law, which has involved more than 100 states and other stakeholders. The organisation referred to the initiative’s forthcoming guidance document on the application of IHL to ICT activities during armed conflicts, describing it as a practical resource for implementing existing legal obligations.
Looking ahead, the ICRC recommended that the Global Mechanism’s thematic working groups examine several emerging issues related to cyber conflict. These include developing practical measures to prevent the recruitment and use of children through ICT-related activities during armed conflict, addressing the growing role of civilian hackers in cyber operations, and improving protection for civilian digital infrastructure, including data centres that may become exposed to military operations.
The organisation also drew attention to the increasing use of AI in cyber operations. While reaffirming that existing international humanitarian law applies to cyber operations involving AI, the ICRC argued that states should assess whether current legal frameworks provide sufficient safeguards against the risks posed by increasingly autonomous cyber capabilities or whether additional international legal limits may be required.
ICRC in the statement emphasised that discussions under the Global Mechanism should focus on strengthening the implementation of existing international law while adapting to technological developments that affect the conduct of armed conflict.
