🗞️ Why in News External Affairs Minister S. Jaishankar signed the United Nations Convention against Cybercrime for India at UN Headquarters, New York, on 25 September 2026, on the sidelines of the 81st session of the UN General Assembly. The UN Treaty Collection records India’s signature on that date; the Convention now has 95 signatories but only 3 States Parties.
What India Has Signed
The Convention’s full title describes its reach: the United Nations Convention against Cybercrime; Strengthening International Cooperation for Combating Certain Crimes Committed by Means of Information and Communications Technology Systems and for the Sharing of Evidence in Electronic Form of Serious Crimes. It is the first comprehensive global treaty on cybercrime negotiated under the United Nations.
| Milestone | Date and detail |
|---|---|
| Negotiating body set up | An Ad Hoc Committee created by UN General Assembly resolution 74/247 (December 2019) |
| Adoption | By the UN General Assembly, resolution 79/243, on 24 December 2024 |
| Opened for signature | Hanoi, Viet Nam, 25 to 26 October 2025, which is why it is often called the Hanoi Convention |
| Open for signature until | 31 December 2026, at UN Headquarters, New York (Article 64) |
| India signs | 25 September 2026, New York |
| Entry into force | On the 90th day after the 40th instrument of ratification, acceptance, approval or accession (Article 65) |
| Status on 26 September 2026 | 95 signatories; 3 Parties: Qatar (4 February 2026), Azerbaijan (15 April 2026) and Viet Nam (17 April 2026) |
Several other States signed between 22 and 25 September, around the General Assembly’s High-Level Week, among them Kyrgyzstan, the Netherlands, Indonesia, Norway and Kuwait. The United States has not signed.
Signing is not ratifying. A signature records India’s intention and obliges it, under the law of treaties, not to defeat the treaty’s object and purpose. India becomes bound only when it deposits an instrument of ratification with the UN Secretary-General. In India, treaty-making is an executive act of the Union (Article 73), and Parliament can legislate to implement a treaty under Article 253, even on State List subjects.
Inside the Convention
The text has 68 articles in nine chapters.
Offences States must criminalise (Chapter II)
| Article | Offence |
|---|---|
| 7 | Illegal access to an ICT system |
| 8 | Illegal interception |
| 9 | Interference with electronic data |
| 10 | Interference with an ICT system |
| 11 | Misuse of devices |
| 12 | ICT system-related forgery |
| 13 | ICT system-related theft or fraud |
| 14 | Online child sexual abuse or child sexual exploitation material |
| 15 | Solicitation or grooming of a child for a sexual offence |
| 16 | Non-consensual dissemination of intimate images |
| 17 | Laundering of proceeds of crime |
Article 18 extends liability to legal persons (companies), and Article 19 covers participation and attempt.
Investigation tools (Chapter IV)
The Convention asks States to give their agencies powers for expedited preservation of stored data and traffic data (Articles 25 and 26), production orders (Article 27), search and seizure of stored data (Article 28), real-time collection of traffic data (Article 29) and interception of content data (Article 30). Every such power is subject to conditions and safeguards under Article 24, including judicial or independent review and proportionality.
Cooperation across borders (Chapter V)
This is the operational heart of the treaty.
- Electronic evidence for “serious crime”, not only cybercrime. Article 2(h) defines serious crime as an offence punishable by a maximum of at least four years’ imprisonment. States can therefore seek e-evidence (emails, cloud data, transaction logs) for a terrorism, trafficking or fraud case, even if the crime itself was not committed online.
- Mutual legal assistance (Article 40 onwards), extradition (Article 37) and the transfer of sentenced persons and proceedings.
- A 24/7 network (Article 41): every Party designates a point of contact available round the clock, and the UN Secretary-General keeps the register.
- Protection of personal data (Article 36) when data is transferred.
Guardrails and machinery
- Article 5, sovereignty: obligations are to be carried out consistently with sovereign equality, territorial integrity and non-intervention; no State may exercise jurisdiction in another State’s territory.
- Article 6, human rights: nothing in the Convention permits the suppression of rights such as freedom of expression, conscience, religion, assembly and association.
- Article 57: a Conference of the States Parties will be convened within a year of entry into force to review implementation.
- Article 62: at least 60 States Parties are needed before any supplementary protocol can be considered.
Why India Signed, and Why It Matters
1. The evidence problem. Most cybercrime evidence in Indian cases sits on servers abroad, controlled by foreign service providers. Getting it through the traditional Mutual Legal Assistance Treaty (MLAT) route can take many months. A global treaty with a 24/7 network and expedited preservation can shorten this, at least with countries that ratify.
2. A UN process, not a club treaty. India has stayed out of the Council of Europe’s Budapest Convention on Cybercrime (2001), the main earlier instrument, arguing that it was drafted without developing countries and that some of its cross-border access provisions raise sovereignty concerns. The UN Convention was negotiated by all Member States, with explicit sovereignty and non-intervention clauses.
3. The scale of the domestic problem. Cyber fraud, digital-arrest scams, sextortion and mule-account networks increasingly run from compounds abroad. India’s response relies on the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs, the National Cyber Crime Reporting Portal and the 1930 helpline, all of which depend on foreign cooperation once the trail leaves India.
4. Capacity-building for the Global South. Article 1 lists technical assistance to developing countries as one of the three purposes of the Convention, a theme India pursues in its digital public infrastructure diplomacy.
The Criticisms
- Human rights groups and some technology companies argued during negotiations that broad powers to collect data for any “serious crime” could be misused by governments to pursue journalists, dissidents or security researchers, and that the safeguards rest largely on each State’s own law.
- Dual criminality and definitions: since serious crime is defined by the penalty in national law, what one State calls a crime (for example, a speech offence) another may not.
- Ratification pace: with three Parties more than eleven months after Hanoi, entry into force (which needs 40) is still distant.
India’s Domestic Framework
| Instrument | Role |
|---|---|
| Information Technology Act, 2000 | Core cyber offences, for example Section 66 (computer-related offences), 66C (identity theft), 66D (cheating by personation using a computer resource) and 67B (child sexual abuse material) |
| Section 70B, IT Act | CERT-In, the national agency for incident response |
| Section 70A, IT Act | NCIIPC, for the protection of critical information infrastructure |
| Bharatiya Nyaya Sanhita, 2023 | Section 111 on organised crime expressly includes cyber-crimes |
| Bharatiya Sakshya Adhiniyam, 2023 | Treats electronic records as documents and provides for their admissibility |
| Digital Personal Data Protection Act, 2023 | Governs processing of personal data, relevant to cross-border transfers |
UPSC Relevance
GS Paper 2. Important international institutions, agreements and treaties; India’s role in multilateral forums. GS Paper 3. Challenges to internal security through communication networks; basics of cyber security; money laundering and its prevention.
A question worth preparing. “The borderless nature of cybercrime makes international cooperation indispensable, but cooperation must not come at the cost of rights.” Discuss with reference to the UN Convention against Cybercrime. (250 words)
The Mains framing. Start with the evidence problem: data abroad, slow MLATs. Explain what the Convention offers (common offences, expedited preservation, a 24/7 network, e-evidence for serious crime). Set out the criticisms (surveillance risk, weak safeguards, slow ratification). Close with India’s path: ratify with clear domestic safeguards under the DPDP Act and judicial oversight, strengthen I4C and CERT-In, and use the treaty’s capacity-building provisions for South-South cooperation.
📌 Facts Corner, Knowledgepedia
Prelims, statement-ready facts:
- India signed the UN Convention against Cybercrime in New York on 25 September 2026; EAM S. Jaishankar signed.
- Adopted by the UN General Assembly on 24 December 2024 (resolution 79/243).
- Opened for signature in Hanoi on 25 October 2025; open at UN Headquarters until 31 December 2026.
- Enters into force 90 days after the 40th ratification (Article 65); only 3 Parties so far.
- Parties: Qatar, Azerbaijan and Viet Nam; signatories: 95 (UN Treaty Collection, 26 September 2026).
- “Serious crime” means an offence punishable with at least four years’ imprisonment (Article 2(h)).
- Article 41 creates a 24/7 network of contact points.
Prelims, the traps:
- India is not a party to the Council of Europe’s Budapest Convention (2001); the UN Convention is a separate treaty.
- Signature does not bind India; only ratification does.
- E-evidence cooperation covers serious crime generally, not only offences committed online.
Mains, arguments and keywords:
- E-evidence sits abroad; MLATs are slow; a 24/7 network and expedited preservation can cut delays.
- Risk: broad data powers without strong safeguards; answer with judicial oversight and data protection.
- Keywords: Hanoi Convention, electronic evidence, expedited preservation, dual criminality, digital sovereignty.
Interview, be ready for:
- “Why sign a UN treaty after refusing Budapest?” It was negotiated by all UN members, protects sovereignty, and serves India’s interest in faster access to evidence.
Sources: UN Treaty Collection, UNODC, Business Standard
Source: India Signs the UN Convention against Cybercrime: The First Global Treaty on Cyber Offences and Electronic Evidence — Ujiyari.com | Free UPSC & State PCS Current Affairs