From the Battlefield to the Digital Sphere: Rethinking International Legal Protection of Children in Light of UN Security Council Resolution 2832 (Part II)

Dr. Sattar Azizi - Prof. of International law, Tarbiat Modares University and Dr. MohammadMehdi Seyed nasseri - Lecturer and researcher in children's rights
2026/11/10

In Part I, we examined how Security Council Resolution 2832 (2026) brings the digital dimension of violations against children affected by armed conflict into sharper focus, while explaining why existing international legal frameworks remain relevant when recruitment, exploitation or other prohibited conduct is facilitated by technology. Building on that analysis, Part II addresses the distinct responsibilities of technology companies, the challenges of identifying and assessing digital evidence, the safeguards needed to protect children without imposing disproportionate restrictions on freedom of expression, and the implementation measures necessary to turn legal commitments into meaningful protection.

V. Technology Companies and Responsibility: Between State Obligations and Corporate Responsibility

One of the most challenging aspects of this issue concerns the role of companies that own or operate digital platforms. Through service design, content-recommendation systems, communication tools, content-moderation policies, and data-management practices, these companies may influence the extent to which armed groups can reach children and identify or recruit them. This does not mean, however, that every company hosting harmful content automatically becomes responsible for a violation of international law or for aiding and abetting a war crime. The first legal distinction must be drawn between the international obligations of states and the potential responsibility of companies. Unlike states, private companies are not, as a general matter, parties to human rights treaties simply by virtue of conducting commercial activities. Nevertheless, the corporate responsibility to respect human rights is recognised as an important international standard under the 2011 United Nations Guiding Principles on Business and Human Rights. These Principles emphasise the independent responsibility of business enterprises to respect human rights, assess adverse impacts arising from their activities, and take appropriate preventive and remedial measures. The Guiding Principles are not, in themselves, a legally binding treaty, and they should not be equated with the rules governing state responsibility under international law or the elements of aiding and abetting an international crime. They nevertheless provide an important framework for assessing corporate conduct. In the present context, this framework may require companies to identify specific risks to children, assess how their digital services are used in situations of armed conflict, establish effective reporting and response mechanisms, protect children’s data, and reconsider the design or operation of services that increase the risk of exploitation. At a different level, individual criminal responsibility or corporate legal liability may arise under the applicable legal system, but establishing either requires satisfying distinct elements and standards. For example, the mere fact that a platform has been used to facilitate communication among members of an armed group is insufficient to establish aiding and abetting a war crime. The nature of the contribution, the requisite knowledge or intent, the significance of the assistance, and its connection to the crime must be examined under the applicable law and on the evidence available. Moreover, the rules governing corporate civil liability and the jurisdiction of domestic courts differ across national legal systems. An appropriate legal policy should therefore avoid reducing the issue to a simplistic choice between complete corporate immunity and automatic corporate liability. The challenge is to establish mechanisms that require or encourage companies to assess risks to children meaningfully, respond to credible reports, preserve relevant evidence, and cooperate lawfully with competent authorities without abandoning the legal standards governing responsibility.

Another important concern is the risk of shifting the burden of protecting children onto the children themselves. Digital literacy, which is also emphasised in the agenda reflected in the new resolution, is essential. It cannot, however, replace the responsibilities of states, armed groups, and businesses that exercise greater control over the digital environment. A child recruited through deception, threats, or the exploitation of personal vulnerabilities should not be held responsible for the consequences of violations of their rights merely because they failed to recognise a danger or make a decision that others expected of them. Effective prevention must combine children’s empowerment with accountability for actors who possess greater power and control.

VI. The Evidentiary Challenge: Digital Evidence and the Limits of the Monitoring and Reporting Mechanism

If Resolution 2832 is to move beyond a statement of principle, improving the mechanisms for collecting and assessing information will be one of the principal areas of implementation. Security Council Resolution 1612 established the Monitoring and Reporting Mechanism for grave violations against children, with the aim of collecting accurate, timely, objective, and reliable information. The digital environment, however, raises additional questions concerning data authenticity, the identification of perpetrators, the preservation of message integrity, the verification of the time and location of communications, and the connection between online activity and conduct occurring in the context of armed conflict. For example, an account may operate under a false identity; messages may be deleted or manipulated; images may be separated from their original context; and data relating to a communication may be held by a company or state in another jurisdiction. In addition, the public disclosure of a child’s name, image, or correspondence may expose the child to threats, social stigma, retaliation, or renewed psychological harm. Monitoring mechanisms must therefore balance the need to document violations against the obligation to protect children.

The first requirement is to develop clear standards for collecting and preserving digital evidence. Recording when data were obtained, their source, the methods used to authenticate them, any subsequent alterations, and the individuals who accessed them can play a decisive role in assessing their reliability. The second requirement is to distinguish raw data from inferential analysis. For instance, evidence of communication between an account and a child does not, by itself, establish that the account holder belonged to an armed group or intended to recruit the child. Such conclusions require additional corroborating evidence and an assessment of the context in which the communication occurred. The third requirement is to establish specific protocols for data concerning children. Data minimisation, restricted access, anonymisation where appropriate, risk assessments before publication, and clear rules governing the sharing of information with investigative or judicial bodies should form part of the protective framework. The fourth requirement is to address cross-border jurisdiction and international cooperation, since relevant information may be held by platforms operating outside the territory of the state where the violation occurred.

Financial constraints and limited human resources are also far from secondary concerns. Reports relating to the children and armed conflict agenda have demonstrated that the collection and verification of information depend on specialised mechanisms and sustained resources. Analyses of the negotiations surrounding the new resolution have also referred to concerns about implementation capacity and the resources needed to carry out monitoring responsibilities. If United Nations bodies are expected to extend monitoring to digital risks without receiving adequate resources, technical expertise, and appropriate safeguards, there is a danger that the announced commitments will produce only limited practical results. The success of the resolution should therefore be measured not simply by the number of reports published, but by the quality of the information collected, its verifiability, the safety of children, the potential use of evidence in accountability processes, and the actual impact of preventive measures.

VII. Child Protection and Freedom of Expression: Avoiding Disproportionate Restrictions

One important point in the discussion surrounding the new resolution is the emphasis placed by its proponents on the fact that its purpose is not to regulate every technical aspect of digital content or restrict freedom of expression, but to address violence committed or exacerbated through such content. This distinction is legally significant. Although child protection is a legitimate and fundamental objective, it does not provide an unlimited licence for controlling communications, imposing pervasive surveillance, or restricting all forms of controversial content. Article 13 of the Convention on the Rights of the Child recognises the child’s right to freedom of expression. Article 16 protects children against arbitrary or unlawful interference with their privacy and correspondence. Article 17 emphasises children’s access to information and material from a diversity of sources, while Article 15 recognises their rights to freedom of association and peaceful assembly. These rights must be interpreted alongside states’ protective obligations, rather than treated as being categorically opposed to them. Accordingly, any restrictive measure must be assessed against the requirements of a clear legal basis, a legitimate aim, necessity, and proportionality, and must include appropriate safeguards against arbitrary interference. For example, broadly blocking a platform merely because armed groups may use it could also disrupt children’s access to education, communication with family members, vital information, and support services. Conversely, ignoring documented risks in the name of freedom of expression would not be an adequate response to the exploitation, threats, or organised recruitment of children.

The appropriate legal response is therefore neither a general prohibition on technology nor the unconditional delegation of the digital environment to private actors. A distinction must be maintained between lawful content and criminal conduct, between the expression of an opinion and organised recruitment, and between targeted monitoring and pervasive surveillance. The more intrusive the intervention by a state or company, the greater the need for transparency, opportunities to challenge decisions, independent oversight, and assessments of the measure’s effects on children’s rights. Furthermore, children must not be treated merely as the objects of protective measures. They are rights-holders with an evolving capacity to participate in decisions affecting them. Digital literacy should enable children to recognise risks, use reporting mechanisms, and make informed decisions about their rights. It should not shift the structural responsibility for preventing violence onto them.

VIII. From Identifying Violations to Effective Prevention: An Implementation Agenda

Resolution 2832 should be regarded as a starting point for strengthening implementation capacity, rather than the end of the legal discussion. At least five practical priorities can be identified to translate its direction into effective protection. First, the United Nations Monitoring and Reporting Mechanism should, within its mandate and available resources, develop methods for documenting violations committed, facilitated, or exacerbated through digital technologies. Such efforts must be accompanied by rigorous verification standards and safeguards for children’s data. Second, states should review their domestic laws and practices to determine whether they adequately cover conduct carried out through digital means. The purpose of this review should not be to create vague or overbroad offences, but to ensure that existing prohibitions do not cease to apply merely because the means of commission have changed, while preserving the principle of legality. Third, cooperation with technology companies should move beyond general commitments. Secure reporting channels, responses to lawful requests, targeted preservation of relevant data, risk assessments concerning children in conflict-affected areas, and transparent reporting on protective measures could all be pursued within the framework of applicable law and relevant legal safeguards. Such cooperation must not result in unrestricted government access to private information or the unnecessary disclosure of children’s identities. Fourth, digital education should be accompanied by institutional protection and accountability for powerful actors. Teachers, social workers, child-protection personnel, and families need training suited to the circumstances of armed conflict. They should not, however, be expected to confront organised exploitation networks on their own, without adequate resources, specialised expertise, or effective referral mechanisms. Fifth, the protection framework must continue to support children after a violation has been identified. The resolution and related frameworks should not be confined to identifying perpetrators or collecting evidence. Access to psychological and social services, protection against retaliation, recovery and reintegration, legal assistance, and measures to prevent the recirculation of harmful images or information are essential to the realisation of children’s rights. In this respect, Article 39 of the Convention on the Rights of the Child provides an important basis for emphasising the physical and psychological recovery and social reintegration of child victims. Ultimately, implementation should be assessed against measurable indicators. Are reports of digital recruitment examined promptly? Is the information collected capable of verification? Are children who report violations exposed to additional risks? Do preventive measures reduce recruitment and exploitation? And are protection and accountability mechanisms genuinely accessible, particularly in cross-border situations? Without evidence-based answers to these questions, normative progress may remain disconnected from tangible improvements in children’s lives.

Conclusion: The Digital Frontier Must Not Become a Frontier of Impunity

UN Security Council Resolution 2832 should be assessed as part of the gradual evolution of the international system for protecting children in armed conflict. Its significance lies neither in suggesting that international law was previously indifferent to digital conduct nor in assuming that every harmful use of technology requires a new crime or prohibition. Its real importance is that it highlights the need for existing rules to remain effective as the methods through which grave violations are committed continue to evolve. Where the legal elements of prohibited recruitment are satisfied, recruiting a child through a messaging application does not fall outside the scope of the relevant rules merely because there was no physical contact. The use of digital data to threaten, track, or exploit children must likewise be assessed in light of the applicable rules and the elements of each violation. The role of technology companies must be examined through a clear distinction between state responsibility, corporate responsibility, and the individual criminal responsibility of natural persons not on the assumption of absolute corporate immunity, nor through the automatic attribution of responsibility to every digital intermediary. At the same time, strengthening legal protection without regard to fair-trial guarantees, privacy, freedom of expression, and the principle of legality may itself become a source of disproportionate interference. Children in digital environments need protection against violence, but they also possess rights that protective measures must respect. An effective response to digital risks therefore requires an integrated approach combining prevention, education, monitoring, data protection, reliable investigation, accountability, and rehabilitation.

The ultimate test of the resolution lies not in its declaratory language, but in the international system’s ability to translate the recognition of risk into effective action. If digital tools can connect children to networks of violence, those same tools, together with appropriate institutional capacities, should also serve the investigation of violations, their prevention, and the protection of victims subject to the necessary legal limitations and safeguards. Otherwise, the international community may acknowledge the danger without developing a proportionate capacity to address it. Three decades after the Security Council established children and armed conflict as a central item on its agenda, the fundamental question is no longer simply how to protect children on the battlefield. It is also how to prevent the transfer of aspects of warfare into digital networks from rendering children invisible to the law. International law’s answer must be clear: technological change does not, in itself, render existing prohibitions ineffective. Their effective implementation, however, requires capable institutions, reliable evidentiary standards, and a sustained commitment to accountability.