Regulatory gaps

As of 30 September 2026.

This subject area records areas in which no instrument specifically addresses a question relevant to peace in the cyber and information sphere. A gap entry does not mean that no law applies: general rules such as the UN Charter, international humanitarian law and human rights law apply according to their terms. It means that no treaty, political commitment or other instrument deals with the matter as such. The finding reflects the research of the editors on the date indicated; see the disclaimer. Each gap entry describes the nearby instruments, the proposals made and by whom, and the status of any negotiations.

• Existence of a gap. Whether the absence of a specific instrument is a gap at all is itself contested: some States and experts consider existing law adequate, while others call for new rules.
• Autonomous weapons. The UN Secretary-General, the ICRC and a group of States call for a legally binding instrument; other States, including the United States and the Russian Federation, have opposed binding requirements. The Seventh CCW Review Conference in November 2026 is expected to consider a future mandate.
• Nuclear command and control. Research institutes have proposed norms of restraint or a code of conduct against cyber operations affecting nuclear command, control and communications systems; no negotiating process is under way.

• Gap: treaty on autonomous weapons systems – calls for a treaty and the state of the CCW process.
• Gap: protection of nuclear command, control and communications – risks described and proposals made.
• UN and CCW processes on autonomous weapons – the forums in which a treaty is discussed.
• UN framework of responsible State behaviour in cyberspace – voluntary norms that apply in the absence of specific rules.

• Artificial intelligence and autonomous weapons
• Use of force, intervention and cyber operations
• UN processes and institutions
• Timeline · Glossary