The Digital Geneva Convention

Abstract

Microsoft’s 2017 call for a Digital Geneva Convention is a welcome contribution to the debate on how the global technology sector and the international civil society should respond to increased State-led cyberattacks. However, Microsoft’s portrayal of cyberspace as a space devoid of regulation is inaccurate, especially in light of the rules contained in the Tallinn Manual 2.0. Microsoft’s call for the establishment of an international attribution organization overlooks existing international legal mechanisms. The characterization of global technology firms as ‘first responders’ providing services akin to those provided by the Red Cross societies is imperfect since technology companies are, compared to the Red Cross, non-neutral and profit-making enterprises.