欧盟网络制裁机制的国际法透视

EU Cyber Sanctions Regime:An International Law Analysis

欧盟网络外交近年来发展迅猛。随着恶意网络活动的日渐增多,欧盟在网络外交的框架下快速建立了网络制裁机制,并正式付诸实施。欧盟网络制裁的制度设计形式上与欧盟以往的制裁机制保持了一致,但存在法律方面的不确定性:“网络攻击”的界定过于宽泛;“严重后果”的适用难以客观化;回避网络攻击的归因与证据问题;过分强调审慎原则的规制效用;倡导集体制裁的倾向。这些问题将不同程度地制约欧盟制裁机制的顺利运作。由合法性角度观之,欧盟目前针对个人或实体的网络制裁措施尚无法以国际法上的还报或反措施来证立;由实效性角度观之,欧盟网络制裁机制的威慑和劝诫效果不宜过分夸大。有鉴于此,欧盟应谨慎使用网络制裁。现阶段,在欧盟网络制裁尚未扩大化的情况下,中国可以对欧盟的网络制裁机制保持适度的克制和警惕。

The EU’s cyber diplomacy has been developing rapidly in the past few years.With the increasing number of malicious cyber activities,the EU has swiftly set up and put into operation the regime for cyber sanctions.The brand-new cyber sanctions regime is formally consistent with its pre-existing sanction regimes,which,however,bears the following legal uncertainties:the over-extensive definition of“cyber attacks”,the lack of objectivity in applying the criteria of“significant effect”,the ignorance of cyber attribution and evidence,the over-emphasis of the regulatory effect of due diligence principle,and the inclination towards collective cyber sanctions.In the light of legality,the EU’s sanctions against targeted individuals or entities can hardly be justified by retorsion or countermeasures under international law.In the light of effectiveness,the deterrence and dissuasive effect of the EU’s cyber sanctions should not be exaggerated.Accordingly,the EU should apply cyber sanctions with caution.