On October 25, 2025, a major step in global digital governance took place in Hanoi, where 72 countries signed the United Nations Convention against Cybercrime.
Adopted by consensus at the UN General Assembly in December 2024 after five years of negotiation, the treaty is the first international agreement devoted entirely to cybercrime. It establishes a legal framework for countries to investigate and prosecute on offenses such as ransomware, financial fraud, online abuse, and the unauthorized sharing of intimate images.
The Convention was introduced as a necessary response to the rise in criminal activity on digital platforms. It outlines measures for sharing electronic evidence across borders, creating a 24/7 cooperation network among states.
Supporters view it as progress in international law enforcement cooperation, but civil society groups and the tech industry have raised concerns about privacy protections and possible misuse by governments.
Why It Matters: The Convention against Cybercrime is the first treaty to set out a unified framework for enforcing cyber laws across borders. The treaty seeks to strengthen international cooperation on evidence collection and prosecution. Its provisions on digital surveillance and data sharing have also prompted discussion about balancing security needs with the protection of human rights and privacy.
- Establishing the First Global Cybercrime Framework: The treaty defines and criminalizes a range of cyber-related offenses, including hacking, denial-of-service attacks, financial fraud, and online exploitation. Previously, no single international framework guided how countries collected and exchanged digital evidence in cybercrime cases. The Convention addresses this by introducing a common approach across legal systems.
- Recognizing Emerging Forms of Online Harm: In a significant legal development, the Convention is the first international treaty to explicitly recognize the non-consensual dissemination of intimate images as a criminal offense. This provision aims to address growing concerns about online abuse and digital harassment, particularly in cases where existing national laws have proven insufficient.
- A Real-Time Enforcement Infrastructure: The agreement establishes a global 24/7 cooperation network for law enforcement agencies, allowing states to make time-sensitive requests related to investigations, prosecutions, extraditions, and the seizure of criminal assets. This mechanism is designed to make international collaboration more efficient and to support countries with limited cybercrime infrastructure.
- Human Rights and Privacy Concerns Raised: Several digital rights groups, including Human Rights Watch and Access Now, have warned that the treaty could expand state surveillance and weaken data protection. Critics say it lacks strong safeguards for privacy, free expression, and the work of cybersecurity researchers. Some also fear its provisions could be used for offenses with little connection to information and communication technologies.
- Mixed Reactions from Key Governments and Industry: The United States initially opposed the treaty when it was proposed by Russia in 2019, but later offered support after human rights language was added. U.S. officials said participation was important to help shape the treaty’s implementation. Some lawmakers and technology companies, including Microsoft, Meta, and Cisco, remain concerned about its impact on privacy, cybersecurity research, and digital freedom. Civil society groups also noted that the signing took place amid broader restrictions on digital rights in some participating countries.
US to attend UN cybercrime treaty signing in Hanoi despite industry concerns – The Record
Trusted insights for technology leaders
Our readers are CIOs, CTOs, and senior IT executives who rely on The National CIO Review for smart, curated takes on the trends shaping the enterprise, from GenAI to cybersecurity and beyond.
Subscribe to our 4x a week newsletter to keep up with the insights that matter.
