UN Cyber Processes (AHC & UNCC)
Key facts
- The UN Convention against Cybercrime (UNCC) — also known as the Hanoi Convention — is the first global legally binding instrument on cybercrime. It was adopted by the UN General Assembly on 24 December 2024 (A/RES/79/243) without a vote, and opened for signature in Hanoi, Vietnam on 25–26 October 2025, where more than 70 countries signed.
- The Convention was negotiated by the Ad Hoc Committee (AHC) to Elaborate a Comprehensive International Convention on Countering the Use of Information and Communications Technologies for Criminal Purposes, established by UNGA Resolution 74/247 on 27 December 2019. Negotiations ran from 2022 to 2024.
- The Convention will enter into force 90 days after ratification by 40 states. It remains open for signature at UN Headquarters until 31 December 2026. UNODC serves as Secretariat, based in Vienna.
- The AHC continues to meet. It is currently working on rules of procedure for the Convention’s Conference of States Parties (CoSP) and on the scope of potential additional protocols.
Related events
Why it matters
The UNCC is the first global legally binding instrument on cybercrime, with significant implications for how cybercrime is defined, criminalised, and subject to international cooperation across all jurisdictions.
The Convention was deeply contested during negotiations. Civil society, human rights organisations, and the private sector raised serious concerns about overbroad criminalisation provisions that could be used against security researchers, journalists, whistleblowers, and political dissidents. Surveillance and cross-border data access provisions were criticised for lacking adequate human rights safeguards, despite the inclusion of Article 6, which affirms that nothing in the Convention should be interpreted as permitting the suppression of human rights or fundamental freedoms.
The AHC’s ongoing work on rules of procedure and future additional protocols is critical. Stakeholder participation rights emerged as one of the most contested issues at the January 2026 session — with a number of states opposing civil society access to the CoSP — meaning that civil society influence over implementation may be significantly constrained.
How it works
The UNCC is a legally binding treaty. Once in force, states parties are obligated to criminalise specific conduct, adopt procedural powers for investigations, and cooperate internationally on cybercrime cases. Mandatory cooperation is limited to serious crimes — offences punishable by a maximum of four or more years’ imprisonment.
The Conference of States Parties (CoSP) will serve as the main implementation forum, with two functions: reviewing implementation of the Convention, and enabling its evolution through amendments or additional protocols.
The AHC continues to meet under UNODC auspices to finalise rules of procedure for the CoSP and to address potential additional protocols.
Civil society and private sector organisations may apply for accreditation to AHC sessions on a non-objection basis. However, stakeholder access to the CoSP itself remains unresolved and is expected to be among the most contested issues going forward.
How to engage
Monitor ratification: Track which states are signing and ratifying. Early ratification by states with strong human rights frameworks matters for the normative environment around implementation.
Apply for accreditation: Apply during the accreditation window via UNODC. Organisations without ECOSOC status may still apply but are subject to non-objection by Member States.
Submit written inputs: Written submissions on rules of procedure and additional protocol negotiations are an important channel, particularly where in-person access is uncertain.
Engage on CoSP access: The rules of procedure for the CoSP — including the extent of civil society participation — remain unresolved. This is a priority advocacy issue before and during the January 2027 session.
Engage national delegations: Share analysis on human rights concerns and advocate for strong safeguards in any additional protocols.
Check official sources: Session details are available via the UNODC AHC page (https://www.unodc.org/unodc/en/cybercrime/convention/home.html).