As of 30 September 2026. Information only, not legal advice – see the disclaimer.
| Full title | Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations |
|---|---|
| Type | Soft law (non-binding scholarly work by an international group of experts) |
| Adopted by | International Group of Experts, convened at the invitation of the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE); general editor Michael N. Schmitt |
| Adopted | 2017 (Tallinn Manual 2.0, Cambridge University Press); first edition 2013 |
| Legal status | Non-binding; does not represent the views of NATO, the CCDCOE or any State |
| Official text | CCDCOE – The Tallinn Manual (publication by Cambridge University Press; not freely reproduced) |
| Subject area | Use of force, intervention and cyber operations; Armed conflict (international humanitarian law) |
The Tallinn Manual is a scholarly restatement, in the form of rules with commentary, of how its authors consider existing international law to apply to cyber operations. The first edition (2013) addressed cyber operations at the level of the use of force and in armed conflict. Tallinn Manual 2.0 (2017) extended the analysis to cyber operations below those thresholds, covering topics such as sovereignty, due diligence, jurisdiction, State responsibility, human rights, and specialised regimes. The Manual is frequently cited in State positions, academic literature and debates within UN processes on ICTs; some States have expressed agreement or disagreement with particular rules in their national positions. Its content is described here and not reproduced.
National position papers, including the German 2021 paper (see germany), address questions discussed in the Manual, such as whether sovereignty is a rule of international law capable of being violated by cyber operations. States differ on some of these questions; the Manual itself records where members of the International Group of Experts disagreed.