SOVEREIGNTY — EU and NON-EU Member States' Responses

Use this table to compare the EU bloc with individual state positions across our four coding categories (Y, N, Ambiguous, Silent). Hover over the responses to see the sources of different perspectives.

Legend: EU institutional response (reference) State response matches EU State response differs from EU Question label

Comparison of EU vs NON Members

QuestionEUAUAUSBOLBRACANCHLCHNCOLCRICUBECUGUYGTMIRNISRJPNKAZKENKORNZLNORPAKPERRUSSGPCHETHAGBRUSA
2. Does sovereignty confer on states authority over cyber infrastructure located in their respective territories and over the actions they take with respect to that infrastructure?YesYesYesYesSilentYesYesYesYesYesSilentYesYesSilentYesSilentSilentSilentSilentYesSilentYesSilentSilentSilentYesYesYesSilentYes
2(a) Does sovereignty encompass the right to protect cyber infrastructure and safeguard cyber activity that is located in, or takes place on, its territory?YesYesSilentSilentSilentYesYesYesYesYesSilentSilentAmbiguousSilentYesSilentSilentSilentSilentYesAmbiguousSilentSilentSilentSilentYesYesYesSilentYes
2(b) Is the exercise of such sovereign authority subject to international human rights law and other fundamental freedoms?YesYesYesSilentSilentYesYesSilentYesYesSilentYesSilentYesSilentSilentYesSilentSilentYesYesYesSilentSilentSilentAmbiguousYesYesYesYes
3. Is sovereignty a stand-alone, primary rule of international law, the breach of which can incur international responsibility?YesYesSilentSilentYesYesAmbiguousYesAmbiguousYesYesSilentYesAmbiguousAmbiguousAmbiguousYesSilentSilentSilentYesYesSilentSilentSilentAmbiguousYesYesNoAmbiguous
3(a) Can violations of sovereignty not amounting to prohibited interventions constitute internationally wrongful acts?YesYesSilentSilentYesYesAmbiguousYesAmbiguousYesAmbiguousSilentYesSilentAmbiguousAmbiguousYesSilentSilentSilentYesYesSilentSilentSilentAmbiguousYesYesNoAmbiguous
4. Does the State indicate how to identify a violation of any stand-alone sovereignty rule?YesYesSilentSilentNoYesNoYesNoYesNoNoYesSilentAmbiguousSilentAmbiguousSilentSilentNoSilentYesSilentSilentSilentNoYesYesNoSilent
4(a). Is there a de minimis threshold below which a violation of sovereignty would not occur?SilentNoSilentSilentSilentYesSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentYesAmbiguousSilentSilentSilentSilentSilentSilentSilentYes
5. Is it a violation of territorial sovereignty for an organ of a State, or others whose conduct is attributable to the State,SilentYesSilentSilentSilentSilentSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentNoSilent
6. Can state cyber operations that cause physical effects in another state’s territory constitute a violation of sovereignty as a rule?YesYesSilentSilentAmbiguousYesSilentYesSilentYesSilentSilentSilentSilentAmbiguousSilentYesSilentSilentSilentYesYesSilentSilentSilentSilentYesAmbiguousNoSilent
6(a) Do any physical effects constitute a violation?SilentYesSilentSilentSilentNoSilentAmbiguousSilentAmbiguousSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentNoAmbiguousSilentSilentSilentSilentAmbiguousSilentNoSilent
6(b) Must the effects involve physical damage to computer infrastructure or other tangible things, or injury to persons, to constitute a violation of sovereignty as a rule?NoNoSilentSilentNoNoSilentNoSilentNoSilentSilentSilentSilentAmbiguousSilentNoSilentSilentSilentAmbiguousNoSilentSilentSilentSilentNoSilentNoSilent
6(b)(i) Must the effect of a cyber operation to computer infrastructure require repair or replacement of physical components to qualify as damage?SilentSilentSilentSilentSilentAmbiguousSilentSilentSilentNoSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoSilent
6(c) Do only cyber operations generating significant physical effects within another State’s territory constitute a violation?SilentNoSilentSilentSilentNoSilentNoSilentNoSilentSilentSilentSilentAmbiguousSilentNoSilentSilentSilentAmbiguousNoSilentSilentSilentSilentSilentSilentNoSilent
7. Can state cyber operations that cause a loss to computer functionality in another State’s territory constitute a violation of sovereignty as a rule?SilentYesSilentSilentSilentYesSilentAmbiguousSilentYesSilentSilentSilentSilentSilentSilentYesSilentSilentSilentAmbiguousYesSilentSilentSilentSilentAmbiguousYesNoSilent
7(a) Is the rule violated by a cyber operation generating any functionality losses within another state’s territory?SilentNoSilentSilentSilentNoSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentAmbiguousNoSilentSilentSilentSilentSilentNoNoSilent
7(b) Is the rule violated by a cyber operation generating significant functionality losses within another state’s territory?SilentAmbiguousSilentSilentSilentAmbiguousSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentAmbiguousNoSilent
7(c) Is the rule violated by a cyber operation generating systemic functionality losses within another state’s territory?SilentAmbiguousSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoSilent
8. Can state cyber operations that interfere with another state’s “inherent governmental functions” constitute a violation of sovereignty as a rule?YesSilentSilentSilentSilentYesSilentAmbiguousSilentYesSilentSilentYesSilentSilentSilentSilentSilentSilentSilentSilentYesSilentSilentSilentSilentYesSilentNoSilent
9(a) Must the state cyber operation generate prohibited effects directly?SilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoSilent
9(b) Do prohibited effects indirectly generated by a state cyber operation constitute a violation of sovereignty as a rule?SilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoSilent
10. Can state cyber operations that deny access to or degrade data in the control of another State constitute a violation of sovereignty as a rule?SilentAmbiguousSilentSilentSilentYesSilentYesSilentYesSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentYesSilentSilentSilentSilentSilentYesNoSilent
10(a) Do state sponsored ransomware operations violate the sovereignty of another State?SilentSilentSilentSilentSilentSilentSilentSilentSilentYesSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentNoSilent
10(b) Can state cyber operations against data residing in cloud servers outside of a State’s territorial jurisdiction constitute a violation of sovereignty as a rule?SilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentAmbiguousSilentNoSilent
10(c) Does the exercise of one State’s law enforcement tools via cyber means in the networks or systems of another State’s territory violate the sovereignty of the latter State? SilentYesSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoSilent
11. Do State cyber operations that interfere at any level with critical infrastructure in another State constitute a violation of sovereignty as a rule? SilentAmbiguousSilentSilentSilentNoSilentSilentSilentNoSilentSilentSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoNoSilent
12. Can State cyber operations that cause significant national economic impacts for another State constitute a violation of sovereignty as a rule? SilentSilentSilentSilentSilentYesSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoSilent
13. Does cyber espionage by one State in or transiting networks or hardware resident in another State constitute a violation of sovereignty as a rule? SilentAmbiguousSilentSilentYesNoSilentYesSilentAmbiguousSilentSilentSilentSilentSilentSilentSilentSilentSilentSilentNoSilentSilentSilentSilentSilentSilentSilentNoSilent
13(a) Can gaining unauthorized access to computer systems or data within a State’s sovereign control violate the rules of sovereignty? SilentYesSilentSilentYesAmbiguousSilentYesSilentYesSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentAmbiguousSilentSilentSilentSilentSilentYesSilentNoSilent
14. Are violations of sovereignty assessed on a case-by-case basis?SilentSilentSilentSilentSilentYesSilentYesSilentSilentSilentSilentAmbiguousSilentSilentSilentAmbiguousSilentSilentSilentYesYesSilentSilentSilentSilentYesSilentNoSilent