网络主权：理论与实践（2.0版)

武汉大学

中国现代国际关系研究院

上海社会科学院

联合发起

中国社会科学院

清华大学

复旦大学

南京大学

对外经贸大学

中国网络空间安全协会

联署发布

纵观世界文明史，国家主权的含义因时而变、不断丰富。人类先后经历了农业革命、工业革命、信息革命，每一次产业技术革命，都给国家主权的内涵外延带来巨大而深刻的影响。农业时代，人类活动空间主要集中在陆地，国家主权的重点在于捍卫领土完整。工业时代，人类活动空间从陆地拓展到了海洋、天空，国家主权的范围也随之延伸扩展。进入信息时代，网络空间与人类活动的现实空间高度融合，成为了现代国家的新疆域、全球治理的新领域，网络主权由此而生。

主权国家是开展网络空间活动、维护网络空间秩序的关键行为体。《联合国宪章》确立的主权平等原则是当代国际关系的基本准则，覆盖国与国交往各个领域，其原则和精神也适用于网络空间。实践中，各国都将国家主权延伸适用于网络空间，但对在网络空间行使主权的理念和具体做法仍存在不同认识。为推动全球互联网治理朝着更加公正合理的方向迈进，构建网络空间命运共同体，国际社会应坚持以人类共同福祉为根本，秉持网络主权理念，平等协商、求同存异、积极实践。

一、网络主权的涵义

（一）网络主权的权利维度

网络主权是国家主权在网络空间的自然延伸，是一国基于国家主权对本国境内的网络设施、网络主体、网络行为及相关网络数据和信息等所享有的最高权和对外独立权。具体而言，主要包括以下权利：

1.独立权

主权国家有权自主选择网络发展道路、治理模式和公共政策，不受任何外来干涉。

2.平等权

按照《联合国宪章》的主权平等原则，主权国家有权平等参与网络空间国际治理，共同制定国际规则。

3.管辖权

立法规制权。主权国家为保障国家安全、社会公共利益，保护公民、法人和其他组织的合法权益，有权对本国境内的网络设施、网络主体、网络行为及相关网络数据和信息等制定法律法规。

行政管理权。主权国家为维护良好的网络空间秩序，有权依法对本国境内的网络设施、网络主体、网络行为及相关网络数据和信息等加以管理。

司法管辖权。主权国家有权依法对本国境内的网络设施、网络主体、网络行为及相关网络数据和信息等进行司法管辖。

主权国家有权基于公认的国际法原则，对本国境外与本国具有真实充分联系的特定网络行为，以及与之相关的网络设施、网络主体等行使必要且合理的属人管辖权、保护性管辖权和普遍性管辖权。为顺利实施此类管辖权，主权国家可以本着克制、礼让和对等的精神，寻求相关国家和地区的协助。

4.防卫权

主权国家有权开展本国的网络安全能力建设，并有权在《联合国宪章》框架下采取合法合理措施，维护本国在网络空间的正当权益不受外来侵犯。

（二）网络主权的义务维度

无论在物理世界还是网络空间，主权都意味着权利和义务的统一。各国在网络空间的互联互通和相互依存，更要求各国在享有网络主权所衍生权利的同时，应遵守国际法基本原则和一般规则，切实履行国际法所规定的相关义务。

第一，不侵犯他国。各国未经许可不得进入另一国关键网络基础设施，或进入与另一国主权安全和发展利益有密切联系的网络系统，不得实施网络监控、窃密或破坏活动。

第二，不干涉他国内政。各国不得干涉其他国家在网络空间享有的生存、安全与发展的权利，不得干涉其他国家维护其自身网络秩序、安全和发展的权利。

第三，审慎预防义务。各国不得蓄意允许其领土，或在政府控制下的领土或网络设施、网络数据和信息，被用于实施损害他国国家安全和利益的网络活动。

第四，保障义务。各国有义务保障其管辖范围内相关网络主体的合法权益，也有义务在保障网络空间秩序、安全和发展的同时，促进网络空间开放与自由。

二、网络主权的体现

国家主权行为延伸至网络空间，并通过网络设施与运行、网络数据与信息、社会与人三个范畴的国家活动使网络主权得到体现。

（一）通过网络设施与运行范畴的国家活动体现。包括：国家管理和利用境内网络基础设施，以支持信息传播的系统应用、数据和协议；国家维护境内网络基础设施和系统安全，避免非法干扰或入侵；国家参与网络基础设施与系统治理、发展和利用的国际合作。

（二）通过网络数据与信息范畴的国家活动体现。包括：国家对境内网络信息传播实施保护、管理与指导，限制侵犯合法权利或损害社会利益的信息传播；国家遏制境外组织在本国境内捏造、歪曲或散播威胁社会安全的网络信息内容；国家参与数据跨境流动、信息治理和网络信息产业发展的国际协调与合作；保护合法网络数据与信息不被侵害；保护涉及国家秘密的网络数据与信息不被窃取或破坏。

（三）通过社会与人范畴的国家活动体现。社会与人是指与网络空间相互影响的社会环境与社会主体。包括：国家自主管理本国社会变迁与网络空间的互动，培育与网络发展相适应的网络主体与社会环境；维护本国独立自主的互联网治理体制，平等参与完善互联网治理模式的国际合作；维护和发展网络空间国际法治精神，防范民粹主义与孤立主义等妨碍和破坏网络空间国际法治发展的行径。

网络主权体现的三个范畴环环相扣，反映了网络主权活动的系统性与完整性，尊重网络主权有利于促进网络空间的有序合作，维护网络空间的和谐稳定，推动网络空间的可持续发展。

三、行使网络主权的基本原则

（一）平等原则

《联合国宪章》提出的主权平等原则，是各国行使网络主权时应遵循的首要原则。主权国家无论大小、强弱、贫富，在法律上是平等的，都有权平等参与网络空间国际事务，也有权受到他国的平等对待，更有义务平等对待他国。

（二）公正原则

各国应坚持网络空间的公平正义，推动互联网治理体系向公正合理的方向发展，使其反映世界大多数国家的意愿和利益，尤其是要维护好广大发展中国家的正当权益，确保网络空间的发展由各国人民共同掌握。各国不应滥用自身在网络领域的设施、技术、系统、数据优势地位，对他国行使网络主权进行干涉，或推行网络霸权、网络孤立等不公正行为。

（三）合作原则

　　网络空间具有全球性，任何国家都难以仅凭一己之力实现对网络空间的有效治理。基于《联合国宪章》所提倡的“善意合作”原则，各国应尊重他国的国际法主体地位，秉持共商、共建、共享的理念，坚持多边参与、多方参与，打造多领域、多层次、全方位的治理体系，致力于维护网络空间的安全与发展。

（四）和平原则

网络空间互联互通，各国利益深度交融。各国应遵守《联合国宪章》的宗旨与原则，和平利用互联网，以和平方式解决网络空间争端。各国应采取有效措施，防范利用信息通信技术从事破坏和平的行动，防止网络空间军备竞赛，预防并打击网络犯罪与网络恐怖主义，维护网络空间的和平与安全。

（五）法治原则

各国应推进网络空间国际治理法治化，共同维护国际法的权威性，反对双重标准。各国应完善国内立法，依法行使网络主权，对内保护本国公民、法人和其他组织在网络空间的合法权利，对外尊重他国网络主权，遵守国际规则和国际法原则，不得利用网络干涉他国内政，不得从事、纵容或支持损害他国国家安全和利益的网络活动。

四、网络主权的实践进程

（一）许多重要的国际文件已经确认了国家主权原则适用于网络空间。

2003年，联合国信息社会世界峰会通过的《日内瓦原则宣言》就提出“互联网公共政策的决策权是各国的主权”；该峰会2005年通过的《突尼斯议程》强调各国政府在峰会进程中的关键作用和责任。

2011年和2015年，中俄等国在《信息安全国际行为准则》中，提出“重申与互联网有关的公共政策问题的决策权是各国的主权”。

2013年和2015年，联合国信息安全政府专家组在其报告中指出“国家主权和在主权基础上衍生的国际规范及原则适用于国家进行的信息通信技术活动”“国家主权原则是增强国家运用信息通信技术安全性的根基”。

2015年，二十国集团领导人《安塔利亚峰会公报》中指出：“确认国际法，特别是《联合国宪章》，适用于国家行为和信息通信技术运用，并承诺所有国家应当遵守进一步确认自愿和非约束性的在使用信息通信技术方面的负责任国家行为准则”。

2016年，金砖国家领导人《果阿宣言》重申：“在公认的包括《联合国宪章》在内的国际法原则的基础上，通过国际和地区合作，使用和开发信息通信技术。这些原则包括政治独立、领土完整、国家主权平等、以和平手段解决争端、不干涉别国内政、尊重人权和基本自由及隐私等。这对于维护和平、安全与开放的网络空间至关重要。”

（二）世界各国也在纷纷通过立法、行政、司法等实践活动行使网络主权。

在倡导和践行网络主权原则方面，中国在2015年第二届世界互联网大会上提出，尊重网络主权是推进全球互联网治理体系变革的一项重要原则；2016年通过《网络安全法》，将“维护网络空间主权”作为网络空间立法的根本宗旨；2016年发布《国家网络空间安全战略》，提出“国家主权拓展延伸到网络空间”，并将网络空间主权作为国家主权的重要组成部分；2017年发布《网络空间国际合作战略》，将主权原则列为网络空间国际合作的基本原则之一，并将“维护主权与安全”作为参与网络空间国际合作的首要战略目标；中国还在联合国信息安全政府专家组和开放式工作组、亚非法律协商组织等多边平台明确主张主权原则适用于网络空间。

在探索互联网发展道路和网络管理模式方面，越南2018年出台《网络安全法》明确将“相互尊重独立、主权、领土完整、互不干涉内政、平等互利”作为网络安全合作的基本原则，并详细列举了各种网络禁止行为，包括歪曲历史、破坏民族团结、触犯宗教等侵犯国家主权、利益、安全的行为。欧盟于2020年2月提出“技术主权”，强化欧盟对网络空间的科技、规则和价值的控制力和主导权。

在保护本国网络免受威胁、干扰、攻击和破坏方面，俄罗斯于2019年5月出台《稳定俄网法案》（Stable Runet Act），旨在确保俄罗斯互联网资源的自主性与可靠性，在无法连接国外服务器情况下仍能保障俄罗斯网络正常运行。

在保障本国公民在网络空间权益方面，欧盟于2018年5月实施《通用数据保护条例》，对个人数据的跨境流动予以严格管制，并通过个人数据处理活动的域外管辖权拓展其主权边界。

五、网络主权的展望

当前，网络空间的发展给传统政治、经济和社会治理结构带来巨大挑战，而网络空间国际法和各国相关法律法规尚不完备，还不足以应对网络空间日益增多的治理需求。网络主权原则的提出，进一步明确了各类主体的权益，有助于规范政府、政党、国际组织、私营部门、研究团体、社会组织、公民个人等的网络空间行为，促进国家在主权平等、互不侵犯的基础上开展有效的国际合作，为有效应对各类网络安全挑战、建立和维护网络空间良好秩序发挥重要作用。

一是防范和抵制网络霸权。尊重网络主权，就是要尊重各国自主选择网络空间发展道路、治理模式和平等参与网络空间国际治理的权利。任何国家都不应搞网络霸权，不应利用网络干涉他国内政，不应从事、纵容或支持危害他国国家安全的网络活动，不应侵害他国信息基础设施。一些国家将本国利益凌驾于他国利益及国际社会共同利益之上，不履行国际法所规定的相关义务，推行长臂管辖、奉行单边主义、构建贸易壁垒，损害他国的正当权益和网络主权，国际社会应共同防范抵制并制定相应制裁措施。

二是建立更具包容性的国际协调与合作框架。网络主权的本质在于各国相互尊重、平等相待、开放包容。倡导和实践网络主权，并不意味着各国在网络空间各行其是、以邻为壑。各国在网络空间行使主权的实践必然会存在多样性，这种多样性将会长期存在。如何在尊重各国主权的基础上，平衡各国主权权利与义务之间的关系，共享数字时代的发展红利，维护网络空间的和平与稳定，是国际社会共同面对的新命题。

三是合理把握网络主权原则的适用边界。作为一个以信息技术为基础搭建的人造空间，网络空间具有多维度、多领域、多主体的特征，打破了传统意义上的地理边界，以属地管辖为主、属人管辖为辅的主权行使方式在网络空间也受到较大的冲击。例如，网络空间的内涵和外延仍然在快速延伸和拓展，主权原则在网络空间的行使需要不断适应新情况新变化，某些权力仍在国家行为体与非国家行为体或机构之间转移、调整、适应。面对潜力巨大的数字时代，网络主权的有效维护与准确行使是国际社会共同面对的新命题，需要各方在实践中共同探索。

倡导与实践网络主权，并不否认各国政府之外的其他主体在网络空间治理中的作用，并不否定网络空间的互联互通性、必要秩序基础上的信息自由流动性和创新性，也绝不意味着封闭或割裂网络空间，而是要在国家主权基础上构建公正合理的网络空间国际秩序，共同构建网络空间命运共同体。希望各国在联合国框架下，加强沟通，平等协商，求同存异，协调立场，在维护国家网络主权的基础上，制定普遍接受的网络空间国际规则和国家行为准则，凝聚广泛共识，贡献智慧力量，共同构建和平、安全、开放、合作、有序的网络空间。

Sovereignty in Cyberspace:

Theory and Practice

(Version 2.0)

Jointly Launched by

Wuhan University

China Institute of Contemporary International Relations

Shanghai Academy of Social Sciences

Jointly Released by

Chinese Academy of Social Sciences

Tsinghua University

Fudan University

NanjingUniversity

University of International Business and Economics

Cybersecurity Association of China

Throughout the history of world civilization, the meaning of national sovereignty has changed and been enriched over time. Humanity has successively undergone agricultural, industrial, and information revolutions, which have had enormous and profound impacts on the connotation and denotation of national sovereignty. In the agricultural age, human activity was mainly confined to land, so the focus of national sovereignty was on protecting territorial integrity. In the industrial age, human activity extended from land to the sea and sky. The scope of national sovereignty expanded accordingly. Highly integrated with the physical space of human activity in the information age, cyberspace has become a new frontier for modern states and a new domain of global governance. It is from this that sovereignty in cyberspace has emerged.

Sovereign states are key actors in carrying out activities and maintaining order in cyberspace. The principle of sovereign equality enshrined in the Charter of the United Nations is a basic norm governing contemporary international relations. Covering all aspects of state-to-state relations, its principle and spirit also apply to cyberspace. In practice, all countries have extended national sovereignty to cyberspace, but different understandings exist around the ideas and practices for exercising it. To facilitate more just and equitable global Internet governance and build a community with a shared future in cyberspace, the international community should, with the common well-being of humanity in mind,follow and practice the notion of sovereignty in cyberspace in line with the principles of equal consultation and seeking common ground while setting aside differences.

The Concept of Sovereignty in Cyberspace

Ⅰ.Rights

Sovereignty in cyberspace is the extension of national sovereignty to cyberspace. It is the supremacy and independence that a state enjoys, on the basis of its national sovereignty, over cyber infrastructure, entities, behavior as well as relevant data and information in its territory. Specifically speaking, it primarily includes the following rights.

•Independence. A sovereign state has the right to independently choose its own path of cyber development, model of cyber governance, and Internet public policies, free from any external interference.

•Equality. In line with the principle of sovereign equality enshrined in the UN Charter, a sovereign state has the right to participate in global governance in cyberspace on an equal footing and jointly formulate international rules.

•Jurisdiction

·Legislative Jurisdiction. A sovereign state has the right to enact legislation to regulate cyber infrastructure, entities, behavior as well as relevant data and information in its territory, in order to protect its national security, public interests, and the legal rights and interests of its citizens, legal persons, and other organizations.

·Administrative Jurisdiction. A sovereign state has the right to administer cyber infrastructure, entities, behavior as well as relevant data and information in its territory according to law, so as to maintain good order in cyberspace.

·Judicial Jurisdiction.A sovereign state has the right to exercise judicial jurisdiction over cyber infrastructure, entities, behavior as well as relevant data and information in its territory according to law.

A sovereign state has the right to exercise, in accordance with the universally recognized principlesof international law, necessary and reasonablepersonal, protective and universal jurisdiction over specific cyber activities outside its territory that have genuine and substantial connection with it. For smooth enforcement of such jurisdiction, it may seek assistance from relevant countries and regions in the spirit of self-restraint, comity and reciprocity.

•Cyber-defense

A sovereign state has the right to conduct capacity building on cyber security andadopt lawful and reasonable measures under the framework of the UN Charter to protect its legitimate rights and interests in cyberspace from external infringement.

Ⅱ.Obligations

Whether in the physical world or cyberspace, sovereignty incorporates both rights and obligations. The connectivity and interdependence among countries in cyberspace all the more requires countries to respect the basic norms and general rules of international law and earnestly fulfill their due obligations specified in international law while enjoying the rights derived from sovereignty in cyberspace.

•Non-infringement on other countries. No country shall without permission access the critical network infrastructure orcyber systems closely related to another country’s sovereign, security and development interests, or engage in acts of cyber surveillance, theft or sabotage.

•Non-interference in other countries’ internal affairs. No country shall interfere in other countries’ rights to survival, security and development in cyberspace, or their rights to maintain cyberspace order, security and development.

•Due diligence. No country shall knowingly allow its territory, or territory or Internet facilities,data and information under the control of its government, to be used for cyber activities undermining national security or interests of other countries.

•Protection. All countries have the obligation to protect lawful rights and interests of relevant cyberspaceentitieswithin their jurisdiction. They also have the obligation to promote openness and freedom of cyberspace while ensuring its order, security and development.

Manifestations of National Sovereignty in Cyberspace

National sovereignty extends to cyberspace, and isembodied through state activities in three aspects, namely Internet facilities and operation, Internet data and information, and society and individuals.

Ⅰ.State activities concerning Internet facilities and operation

A state manages and uses Internet infrastructure in its territory to support system application, data and protocols on information dissemination; a state safeguards the security of Internet infrastructure and systems in its territory and protects them from illegal disruption or intrusion; a state participates in international cooperation on governance, development and utilization of Internet infrastructure and systems.

Ⅱ.State activities concerning Internet data and information

A state guides, coordinates and protects the dissemination of Internet information in its territory and restricts the spread of information that infringes upon others’ lawful interests or undermines social interests; a state bansInternet information that threatens public security being fabricated, distorted or spread in its territory by overseas organizations; a state participates in international coordination and cooperation on cross-border data flow, information governance and Internet information industry development; a state protects lawful Internet data and information from acts of infringement and protects the Internet data and information that involves national secrets from being stolen and destroyed.

Ⅲ.State activities concerning society and individuals

Society and individuals refer to the social environment and actors that have impact on each other in cyberspace. The activities include the following. A stateindependently manages interactions between its own social changes and cyberspace, and nurtures Internet actors and a social environment that fit into cyber development; a state safeguards its independent Internet governance system and takes an equal part in international cooperation aimed at improving Internet governance model; a state upholds and promotes the spirit of internationalrule of law in cyberspace, and guards against acts of populism, isolationism and the like that hinder and undermine international rule of law in cyberspace.

The three aspects that manifest sovereignty in cyberspace are interconnected, which presents the systemic nature and integrity of activities of sovereignty in cyberspace. Respecting sovereignty in cyberspace is conducive to promoting orderly cooperation, harmony and stability in cyberspace as well as its sustainable development.

Fundamental Principles of Sovereignty in Cyberspace

Ⅰ.Equality

The principle of sovereign equality set forth in the UN Charter is the primary principle that all states should follow in the exercise of sovereignty in cyberspace. All sovereign states, regardless of size, wealth, or strength, are equal before the law and have the right to participate on an equal footing in international cyberspace affairs. Each state should be treated equally, and each state is also obligated to treat others as equals.

Ⅱ.Fairness

All states should uphold fairness and justice in cyberspace and facilitate a more just and equitable global Internet governance system that reflects the wishes and interests of the majority of countries, protects the legitimate rights and interests of developing countries, and ensures the people of all countries get to decide on the development of cyberspace. States should not abuse their superiority in Internet facility, technology, system and data to interfere in other countries' exercise of cyber sovereignty or promote unjust acts such as cyber hegemony or isolation.

Ⅲ.Cooperation

Cyberspace is global in nature. It is difficult for any state to achieve effective governance in cyberspace solely through its own efforts. In line with the principle of cooperation in good faith advocated in the UN Charter, states should respect others as subjects of international law, follow the principle of extensive consultation, joint contribution and shared benefits, support multilateral and multi-party participation, and build a holistic governance system across multiple fields and levels to ensure the security and development of cyberspace.

Ⅳ.Peace

In interconnected cyberspace, the interests of all countries are deeply intertwined. All countries should act in conformity with the purposes and principles enshrined in the UN Charter, use the Internet for peaceful purposes, and settle cyber disputes by peaceful means. We should take effective measures to guard against the use of information and communications technology (ICT) to engage in activities that undermine peace, prevent an arms race in cyberspace, and prevent and fight cyberterrorism to maintain peace and security in cyberspace.

Ⅴ.Rule of law

All states should make steady progress in domestic legislation and advance the rule of law in global governance in cyberspace, uphold the authority of international law, and oppose double standards. In the exercise of sovereignty in cyberspace domestically, states should protect the legal rights of their citizens, legal persons, and other organizations in cyberspace, and internationally, states should respect the sovereignty of others in cyberspace, and observe international law; states shall not use the Internet to interfere in the internal affairs of other countries or engage in, encourage, or support cyber activities that endanger the national security of other countries.

Sovereignty in Cyberspace in Practice

Ⅰ.A number of important international documents have confirmed that the principle of national sovereignty applies to cyberspace.

The Declaration of Principles adopted at the World Summit on the Information Society in 2003 stated that “policy authority for Internet-related public policy issues is the sovereign right of States”. The Tunis Agenda for the Information Society adopted at the 2005 WSIS highlighted the key roles and responsibilities of national governments in the summit process.

In 2011 and 2015, the International Code of Conduct for Information Security put forward by China, Russia and other countries reaffirmed that “policy authority for Internet-related public policy issues is the sovereign right of States”.

The reports of the UN Group of Governmental Experts (UN GGE) in 2013 and 2015 stressed that “state sovereignty and international norms and principles that flow from sovereignty apply to State conduct of ICT-related activities”, and emphasized “the principle of sovereignty as the basis for increased security in the use of ICTs by States”.

The Leaders Communiquéof G20 Antalya Summit in 2015 affirmed that “international law, and in particular the UN Charter, is applicable to state conduct in the use of ICTs and commit ourselves to the view that all states should abide by norms of responsible state behavior in the use of ICTs”.

The Goa Declaration at 2016 BRICS Summit reiterated that “the use and development of ICTs through international and regional cooperation and on the basis of universally accepted norms and principles of international law, including the Charter of the UN in particular political independence, territorial integrity and sovereign equality of States, the settlement of disputes by peaceful means, non-interference in internal affairs of other States as well as respect for human rights and fundamental freedoms, including the right to privacy; are of paramount importance in order to ensure a peaceful, secure and open and cooperative use of ICTs”.

Ⅱ.States are exercising sovereignty in cyberspace through legislative, administrative and judicial practices.

With regards to advocating and practicing principle of sovereignty in cyberspace, China stated at the 2nd World Internet Conference that respecting sovereignty in cyberspace is an important principle in the reform of the global Internet governance system. In the Law on Cybersecurity adopted in 2016, China embraces “safeguarding national sovereignty in cyberspace” as a fundamental purpose of cyberspace legislation. The National Cyberspace Security Strategy released in 2016 stresses that “national sovereignty extends to cyberspace” and upholds sovereignty in cyberspace as an important part of national sovereignty. The Strategy on International Cooperation in Cyberspace released in 2017 places the principle of national sovereignty on the list of the basic principles for international cooperation in cyberspace and regards “safeguarding national sovereignty and security” as the primary strategic goal of engaging in such cooperation. China has also made it clear that national sovereignty applies to cyberspace in the UN Group of Government Experts and the Open-Ended Working Group (OEWG), the Asian-African Legal Consultative Organization and in other multilateral fora.

As far as exploring the Internet development path and cyber administration models is concerned, The Law on Cybersecurity of Vietnam in 2018 makes it clear that “mutual respect for independence, sovereignty and territorial integrity, mutual non-interference in internal affairs, equality and mutual benefit” form the basic principles of cybersecurity cooperation. It provides a detailed list of acts that are prohibited in cyberspace such as distorting historical facts, undermining ethnic unity, offending religious belief and other acts that violate national sovereignty, interests and security. The European Union put forward “technological sovereignty” in February 2020 in a bid to reinforce its control and dominance in technologies, rules and values in cyberspace.

As for protecting domestic network from threats, disruptions, attacks and sabotage, Russia adopted the Stable Runet Act in May 2019 to ensure independence and reliability of its own Internet resources so that it can still function properly when it is unable to connect to servers outside the country.

In regard to protecting the rights and interests of citizens in cyberspace, the EU adopted the General Data Protection Regulation in May 2018 to put cross-border flow of personal data under strict control, and expands the confines of sovereignty through extra-territorial jurisdiction over processing of personal data.

Vision on Sovereignty in Cyberspace

Currently, developments in cyberspace pose grave challenges to traditional political, economic and social governance structure, while international law on cyberspace and relevant national laws and regulations are neither comprehensive nor sufficient enough to meet rising demandsfor governance. The introduction of principle of sovereignty in cyberspace has further defined rights and interests of various actors. It helps regulate the behaviors of governments, international organizations, private sectors, research groups, social organizations and individual citizens in cyberspace, and promote effective international cooperation on the basis of sovereign equality and mutual non-aggression, thus playing an important role in addressing all kinds of cybersecurity challenges as well as building and maintaining a sound order in cyberspace.

Ⅰ.Forestall and reject cyber hegemony

Respecting sovereignty in cyberspace means countries should respect each other’s own choice of development path and governance model in cyberspace and equal rights in participating in global cyberspace governance. No country should pursue cyber hegemony, interfere through leveraging Internet in other countries’ internal affairs, engage in, condone or support acts that endanger other countries’ national security, or undermine information infrastructure of other countries. Some countries, by putting their own national interests above those of others and the international community, have failed to honor relevant obligations set forth in the international law, imposed long-arm jurisdiction, pursued unilateralism, built trade barriers and undermined other countries’ legitimate interests and sovereignty in cyberspace. The international community should work together to guard against and reject such acts andadopt corresponding sanction measures.

Ⅱ.Build a more inclusive framework on global coordination and cooperation

The nature of sovereignty in cyberspace comprises mutual respect, equality, openness and inclusiveness. Advocating and practicing sovereignty in cyberspace doesn’t mean that countries can act at will or adopt the beggar-thy-neighbor approach. It is natural to find diverse means of enforcing sovereignty in cyberspace, and the diversity shall exist for a long time to come. For the international community the new task at hand is how to balance sovereign rights and obligations of countries on the basis of respecting national sovereignty, with a view to sharing the benefits and dividends of digital era and maintaining peace and stability in cyberspace.

Ⅲ.Define a proper scope of application for sovereignty in cyberspace

Cyberspace is an artificial space built on the foundation of information technology and characterized by multiple dimensions, wide-ranging areas and diverse actors. It breaks the traditional geographical limits and has a strong impact on the exercise of sovereignty based primarily on territorial jurisdiction and supported by personal jurisdiction. For example, as the concept and scope of cyberspace is fast expanding, there is a need to keep adapting to new circumstances in exercising sovereignty in cyberspace. Some powers are still shifting between state actors and non-state actors or institutions, leading to adjustments and adaptations. In the digital erarife with massive potential, how to effectively uphold and properly exercise sovereignty in cyberspace has become a new topical issue for the international community and requires joint efforts of all parties.

Advocating and practicing sovereignty in cyberspace does not deny the role of entities other than national governments in cyberspace governance. Nor does it dismiss the connectivity of cyberspace or free flow of information and creativity on the basis of proper order, and even less sealing off the cyberspace or breaking it up. Instead, it means facilitating a just and equitable international cyberspace order on the basis of national sovereignty and building a community with a shared future in cyberspace. States should work together under the UN framework and uphold the principles of engaging in discussions as equals, seeking common ground while shelving differences, and pursuing mutual benefits. States should strengthen communication, harmonize positions, and on the basis of upholding sovereignty in cyberspace, formulate universally acceptable international rules and codes of conduct for cyberspace. States should join efforts in consolidating broad consensus and contributing wisdom and strength, so as to build peaceful, secure, open, cooperative, and orderly cyberspace.