.png)

Dr. Sattar Azizi - Prof. of International law, Tarbiat Modares University and Dr. MohammadMehdi Seyednasseri - Lecturer and researcher in children's rights
2026/11/07
A child does not need to cross a front line to be drawn into an armed conflict. Recruitment may begin with a message on a smartphone, a conversation in an online gaming environment, or a carefully targeted appeal on a social media platform. What follows may involve ideological persuasion, promises of belonging or financial support, coercion, threats against family members, or the gradual assignment of tasks that bring a child closer to an armed group. Digital technologies do not necessarily create new forms of prohibited conduct; rather, they can change how that conduct is initiated, facilitated, concealed, and sustained. They can also separate the child from the immediate geography of conflict while leaving the child deeply exposed to its consequences. This distinction matters for international law. The legal challenge is not simply whether cyberspace should be recognised as a new and autonomous domain of child protection. It is whether existing rules can be interpreted and implemented effectively when the means, reach, or consequences of violations are increasingly digital. A recruitment process conducted through a messaging application does not become legally irrelevant because it begins online. Nor, however, does every digital interaction with an armed group automatically amount to recruitment, use in hostilities, or an international crime. The central task is to identify the applicable legal rule, establish the elements of the conduct in question, and determine responsibility on the basis of evidence rather than technological novelty or generalised concern.
United Nations Security Council Resolution 2832, adopted on 19 October 2026, brings this challenge into sharper focus within the Council’s children and armed conflict agenda. By addressing violations and abuses against children affected by armed conflict that are committed, facilitated, or exacerbated through digital technologies, the resolution draws attention to the need for protection mechanisms to respond to changing patterns of harm. Its significance, however, should not be overstated. The resolution should not be understood as having created, by itself, a comprehensive and autonomous legal regime governing children’s rights in digital environments. Its importance lies instead in the opportunity it offers to clarify how existing obligations apply when digital technologies become instruments through which violations are carried out or intensified. That approach raises difficult questions. When does online contact with a child by an armed group cross the legal threshold into recruitment? What preventive obligations may arise for states that know, or ought to assess, the risks of digital recruitment and exploitation? How should the role of technology companies be evaluated without conflating their human rights responsibilities with the international legal responsibility of states or the criminal liability of individuals? And how can digital material be collected and used for monitoring, investigation, and prosecution without exposing children to further harm, compromising evidentiary integrity, or unduly restricting freedom of expression and privacy?
These questions cannot be answered by treating all forms of digital harm as legally equivalent. International law requires distinctions between recruitment and preliminary contact, between a harmful online interaction and conduct satisfying the elements of an international crime, and between a state’s obligations, a company’s responsibility to respect human rights, and an individual’s criminal liability. Such distinctions are not technical obstacles to child protection. They are essential to making protection legally sound, operationally effective, and consistent with the principles of legality and due process. This article argues that the principal contribution of Resolution 2832 should be understood as reinforcing the application of existing international legal frameworks to the digital dimensions of armed conflict, rather than as establishing a wholly new body of law. It examines this proposition through the Security Council’s children and armed conflict agenda and its monitoring and reporting arrangements; the Convention on the Rights of the Child and its Optional Protocol on the involvement of children in armed conflict; the jurisprudence of the International Criminal Court, particularly the Lubanga case; and the distinct responsibilities of states and technology companies. It also considers the evidentiary and human rights challenges associated with digital monitoring and accountability.
The broader claim is that the digital sphere must not become a space in which the protection of children weakens simply because the conduct at issue occurs beyond the physical battlefield. But extending effective protection does not require abandoning legal precision. The task is to apply established rules to changing forms of conduct, identify genuine gaps where they exist, and develop preventive and accountability mechanisms that protect children without stretching criminal law beyond its recognised limits. The question, ultimately, is not whether international law can follow children into the digital sphere, but whether its institutions are prepared to make existing protections effective there.
I. Resolution 2832 and the Evolution of the Children and Armed Conflict Agenda
The Security Council’s children and armed conflict agenda has a history spanning more than three decades. Resolution 1261, adopted in 1999, was an early milestone in establishing the issue as a matter of international peace and security. Subsequent resolutions helped develop mechanisms for prevention, monitoring, reporting, and accountability. Among these, Resolution 1612, adopted in 2005, is particularly important because it established the Monitoring and Reporting Mechanism, designed to collect accurate, timely, objective, and reliable information on grave violations against children in armed conflict.
The mechanism focuses on six categories of grave violations: the recruitment and use of children by armed forces and armed groups; the killing and maiming of children; rape and other forms of sexual violence; attacks on schools and hospitals; the abduction of children; and the denial of humanitarian access. The essential point is that digital technologies may play a direct or indirect role in any of these categories. Recruitment may take place through online communications; location data may be misused to find children or their families; images and personal information may be used for threats, extortion, or sexual exploitation; and digital communications may facilitate the coordination of attacks against educational or medical facilities. The use of a digital tool, however, does not by itself transform conduct into one of these six grave violations. For example, the publication of a threatening message may, depending on the circumstances, constitute a human rights violation or form part of broader criminal conduct, but it will not necessarily amount, in every case, to a separate instance of one of the six categories. Legal classification must be based on the elements of the relevant violation, its connection to the armed conflict, and the available evidence. The significance of technology lies in its potential to alter the means, scale, duration, or evidentiary characteristics of prohibited conduct not to change its legal classification automatically. Resolution 2832 should be understood in this context. It has been described as the fifteenth resolution focused on the children and armed conflict agenda and emphasises the need to adapt protective mechanisms to the digital realities of contemporary warfare. This development is institutionally significant because it moves the discussion of technology beyond general concerns about children’s online safety and connects it to a framework designed to document grave violations, engage parties to conflict, develop action plans, and monitor compliance with protective commitments.
Nevertheless, the resolution’s legal effect must be assessed by distinguishing its adoption by consensus from the binding character of each of its provisions. Under Article 25 of the UN Charter, United Nations Members agree to accept and carry out the decisions of the Security Council. Whether a particular provision constitutes a binding decision, however, requires an examination of its wording, context, the circumstances of its adoption, and the Council’s Charter-based powers in the relevant area. Consensus alone does not establish that every recommendation or call for action in a resolution creates a new and equally binding legal obligation. Some provisions may reaffirm existing obligations, others may express policy directions, and still others may define specific institutional tasks for United Nations bodies. From this perspective, the resolution’s principal contribution lies in reinforcing the interpretation that digital technologies cannot be invoked as an exception to the international protection of children. Legally, this is a more precise and defensible conclusion than claiming that the resolution has established an entirely new and autonomous legal regime for the digital sphere.
II. Digital Recruitment of Children: New Means, Existing Prohibitions
The most important legal test for the new resolution concerns the recruitment and use of children by armed forces and armed groups. When Greece’s representative emphasises that recruitment through a smartphone is still recruitment, the underlying point is that the legal characterisation of conduct should not depend solely on the physical location or means of communication through which it occurs. Interpreted within the framework of existing rules, this proposition has a substantial legal foundation. Article 38 of the Convention on the Rights of the Child requires States Parties to respect the applicable rules of international humanitarian law relevant to children and provides for measures to prevent children under fifteen from taking part in hostilities. The protective framework, however, extends beyond this provision. The Optional Protocol to the Convention on the Rights of the Child on the involvement of children in armed conflict, adopted in 2000, strengthens these protections. Under Article 1, States Parties must take all feasible measures to ensure that members of their armed forces who have not attained the age of eighteen do not take a direct part in hostilities. Article 2 prohibits compulsory recruitment into the armed forces of persons under eighteen. Article 4 provides additional protection by stipulating that armed groups distinct from the armed forces of a state should not, under any circumstances, recruit or use persons under eighteen in hostilities. Article 6 also emphasises implementation measures, dissemination of information, rehabilitation, and social reintegration. These provisions do not limit the relevant prohibitions to any particular method of recruitment. Consequently, when an armed group uses a social media platform, messaging application, or online game to recruit a child into the group or to involve the child in activities connected with an armed conflict, the use of digital technology does not, in itself, prevent the applicable legal rules from being engaged. A distinction must nevertheless be drawn between initial contact, ideological messaging, attempts to recruit, completed recruitment, and the actual use of a child. These concepts are not legally or evidentially interchangeable and may have different consequences. Nor does every digital activity involving a child and an armed group necessarily amount to participation in hostilities or criminal recruitment. Creating public content, sharing a message, joining a chat group, or expressing a political opinion is not sufficient, without examining the requisite conduct and mental elements, to support such a conclusion. Conversely, where digital communication forms part of an organised process of recruiting a child, assigning tasks, transmitting instructions, or facilitating the child’s involvement in hostilities, the non-physical nature of the interaction cannot, by itself, preclude an assessment of responsibility. The distinction between recruitment and use is also important. Recruitment concerns the process of bringing a child into the structure of an armed force or group. Depending on the applicable legal framework, use may encompass a range of roles and is not necessarily confined to carrying weapons or serving on the front line. Whether a particular digital activity reaches the legal threshold of prohibited recruitment or use must nevertheless be determined by reference to the applicable rule and the facts of the case, rather than broad generalisations about the dangers of cyberspace. This approach has an important advantage. It enables international law to respond to changing methods of committing prohibited conduct without requiring a separate prohibition for every new technology. At the same time, it prevents legal concepts from being extended beyond the limits established by the relevant instruments and rules merely in response to political or moral concerns(See here and here).
III. From the Convention on the Rights of the Child to States’ Preventive Obligations
The protection of children in digital environments cannot be analysed solely through the lens of international humanitarian law. The Convention on the Rights of the Child, as a general instrument on children’s rights, establishes a range of obligations that are also relevant to digital risks where the conditions for their application are met. Article 3 provides that the best interests of the child shall be a primary consideration in all actions concerning children. Article 6 recognises every child’s inherent right to life and requires States Parties to ensure, to the maximum extent possible, the child’s survival and development. Article 19 requires States Parties to take appropriate legislative, administrative, social, and educational measures to protect children from all forms of violence, injury, abuse, neglect, negligent treatment, maltreatment, or exploitation, including sexual abuse. Article 32 protects children from economic exploitation and work that is hazardous or harmful, while Article 34 addresses sexual exploitation and sexual abuse. Article 36 provides protection against other forms of exploitation prejudicial to a child’s welfare. Articles 38 and 39, respectively, address protection in armed conflict and the physical and psychological recovery and social reintegration of child victims. None of these provisions, taken individually, establishes a comprehensive regime of digital responsibility. Taken together, however, they provide a legal basis for assessing the adequacy of states’ protective measures. For example, where public authorities are aware of a documented pattern of children being recruited by an armed group through digital platforms, and fail to adopt reasonable preventive or protective measures despite having the relevant capacity and legal obligations, questions concerning the state’s positive obligations may arise. The duty to protect does not, however, amount to an absolute guarantee against every form of harm. An assessment of state responsibility must consider the nature of the applicable obligation, the scope of the state’s jurisdiction, the knowledge of the relevant authorities, the foreseeability of the risk, the reasonable measures available, and the relationship between the alleged act or omission and the violation in question. In situations of armed conflict, the respective scope and conditions of application of international humanitarian law and international human rights law must also be analysed. Not every instance of digital harm can automatically be attributed to a state without examining these factors. Jurisdiction presents an additional layer of complexity. Where the child, the armed group, the technology company, and the servers involved are located in different countries, identifying the state or states with specific obligations towards the child requires a careful analysis of the applicable rules governing jurisdiction and the territorial scope of those obligations. The mere fact that a server is hosted within a state’s territory, or that a company is incorporated there, does not by itself resolve every jurisdictional question. Nevertheless, the cross-border nature of technology must not become a pretext for denying obligations that the applicable law places on a state.
One important implication of Resolution 2832 is therefore the need to move from fragmented responses towards a systematic approach to prevention. This includes adopting appropriate laws and policies, strengthening child-protection institutions, providing digital education, establishing secure reporting channels, promoting cooperation between states and international institutions, and addressing the role of technology companies. Although the details of these measures may require further implementation and policymaking, they should be grounded in existing legal obligations rather than in the assumption that the resolution has, by itself, created all such obligations anew.
IV. International Criminal Court Jurisprudence: The Scope and Limits of the Lubanga Case
An examination of criminal responsibility for the recruitment and use of children would be incomplete without considering the jurisprudence of the International Criminal Court. Prosecutor v. Thomas Lubanga Dyilo is one of the most significant judicial precedents in this field. In 2012, Lubanga was convicted of the war crimes of conscripting and enlisting children under fifteen and using them to participate actively in hostilities. The case demonstrated that the recruitment and use of children in armed conflict may, where the elements of the crime and the relevant jurisdictional requirements are satisfied, give rise to individual criminal responsibility under international law.
The relevance of this case to the present discussion does not lie in any finding by the Court concerning digital recruitment; the Court did not issue such a ruling. Rather, its importance lies in the fact that the legal framework for criminal responsibility is not inherently tied to a particular method of recruiting a child. Where the elements of a crime are realised through digital communications, or digital evidence helps establish the recruitment process, the accused’s intent or role, or the child’s participation in hostilities, the use of technology does not, in itself, prevent the application of criminal law. It is nevertheless important not to attribute findings concerning social media or contemporary technologies to a case that did not address those issues. This distinction is fundamental to international criminal law. The principle of legality, including Article 22 of the Rome Statute, requires criminal responsibility to be established on the basis of pre-defined elements of crimes and calls for strict interpretation of criminal provisions. Accordingly, the mere use of a digital platform by an accused person, or contact between that person and a child, is insufficient to establish the crime of recruitment or use. Depending on the charge, the prosecution must prove the requisite material and mental elements, the connection between the conduct and the armed conflict, and any other applicable legal requirements. The Lubanga case also underscores the importance of protecting children within criminal proceedings. A child recruited by an armed group may simultaneously be a victim of violations of their rights and a significant source of information about the group’s structure and operations. The collection of digital evidence must not expose the child’s identity, reproduce psychological trauma, endanger family members, or place the child at risk of retaliation. Child-witness protection, confidentiality, and safeguards responsive to the child’s age and vulnerability must be considered at every stage of investigation and proceedings. From this perspective, Resolution 2832 may provide an opportunity to strengthen the connection between monitoring mechanisms for grave violations and criminal accountability processes, provided that the collection, documentation, and possible transfer of evidence comply with standards of reliability, authenticity, chain of custody, and child protection. A social media message, without establishing its origin, context, integrity, and connection to the alleged conduct, will not necessarily constitute sufficient evidence for a criminal conviction. Technology may facilitate the discovery of truth, but it cannot replace evidentiary standards or fair-trial guarantees.
Looking Ahead to Part II
Having examined the significance of Security Council Resolution 2832 (2026), the application of existing international legal frameworks to digitally facilitated recruitment and exploitation, and the implications of international criminal jurisprudence, Part I has established the legal foundations for understanding these emerging challenges. Part II turns to the responsibilities of technology companies, the evidentiary challenges surrounding digital violations, the need to reconcile child protection with freedom of expression, and the practical measures required to translate the Resolution’s commitments into effective protection.