On 22 July 2026, the European Union and its Member States delivered a statement at the first substantive session of the UN Global Mechanism on ICTs in international security, reaffirming that international law, including the UN Charter, international human rights law, and international humanitarian law, applies fully in cyberspace. The statement, delivered at the session running from 20 to 24 July 2026 in New York, underscores the EU's commitment to the UN framework of responsible state behaviour and calls for enhanced global common understanding of how international law applies to cyberspace.
The EU noted that malicious cyber activities by state and non-state actors are increasing in scale, severity, and sophistication, targeting critical infrastructure and threatening societal and economic stability. It stressed that respect for international law is essential for maintaining international peace and security, especially as cyber tools play a growing role in conflicts. The EU highlighted its 2024 common understanding of legal elements on the application of international law to cyberspace, alongside the African Union's Common Position, noting that over 100 states have now published individual or collective positions on international law in cyberspace. The EU argued that this demonstrates international law is fit for purpose in the digital age and that recognising the application of international humanitarian law does not legitimise cyber warfare or militarise cyberspace.
The statement welcomed the Global Mechanism and its dedicated thematic groups as an opportunity to build on previous discussions, including those from the Open-Ended Working Group, and to further progress on common understanding through practical application in real-world scenarios. The EU also expressed support for cross-regional groups working on international law and committed to continuing capacity-building for third countries on implementing the UN framework.