Entries arranged by layer and scale. Draft, as of 27 September 2026.

The layers follow a model from information law: syntactic (infrastructure and code), semantic (data and content), pragmatic (effect and influence), constitutive (values and basic order). The scales range from the individual and the market to the State/EU and the international order; this site covers the provisions relevant to peace and conflict, which lie mainly at the State/EU and international levels. An entry may appear under more than one layer.

State–EU

• Germany: Basic Law (Arts. 24, 25, 26(1)), Criminal Code (§ 80a StGB) and position paper "On the Application of International Law in Cyberspace" (2021)

international order

• Charter of the United Nations
• Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy and the Rule of Law (CETS No. 225)
• Global Digital Compact
• Military and Paramilitary Activities in and against Nicaragua (Nicaragua v. United States of America)
• Rome Statute of the International Criminal Court – Article 8 bis (Crime of Aggression)

State–EU

• Regulation (EU) 2022/2065 on a Single Market for Digital Services (Digital Services Act)
• Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)
• Regulation (EU) 2024/900 on the transparency and targeting of political advertising

international order

• Convention on the Prevention and Punishment of the Crime of Genocide
• Declaration on Principles of International Law concerning Friendly Relations and Co-operation among States in accordance with the Charter of the United Nations
• International Convention concerning the Use of Broadcasting in the Cause of Peace
• International Covenant on Civil and Political Rights (ICCPR)
• Military and Paramilitary Activities in and against Nicaragua (Nicaragua v. United States of America)

international order

• Court of Justice of the European Union, Case C-311/18, Data Protection Commissioner v Facebook Ireland Ltd and Maximillian Schrems ("Schrems II")
• International Covenant on Civil and Political Rights (ICCPR)

State–EU

• Directive (EU) 2022/2555 (NIS2 Directive) and Directive (EU) 2022/2557 (Critical Entities Resilience Directive)
• EU restrictive measures against cyber-attacks threatening the Union or its Member States (Council Decision (CFSP) 2019/797 and Council Regulation (EU) 2019/796) and the Cyber Diplomacy Toolbox

international order

• Charter of the United Nations
• Council of Europe Convention on Cybercrime (Budapest Convention, ETS No. 185) and its Second Additional Protocol (CETS No. 224)
• No specific instrument protecting nuclear command, control and communications (NC3) against cyber operations
• No treaty on lethal autonomous weapons systems (LAWS)
• Protocol Additional to the Geneva Conventions of 12 August 1949, and relating to the Protection of Victims of International Armed Conflicts (Protocol I)
• Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations
• UN and CCW processes on lethal autonomous weapons systems
• UN framework of responsible State behaviour in the use of ICTs
• United Nations Convention against Cybercrime; Strengthening International Cooperation for Combating Certain Crimes Committed by Means of Information and Communications Technology Systems and for the Sharing of Evidence in Electronic Form of Serious Crimes

• No specific instrument protecting nuclear command, control and communications (NC3) against cyber operations
• No treaty on lethal autonomous weapons systems (LAWS)