By 21 April 2026, Iran’s web blackout had entered its fifty-third consecutive day, the longest nationwide web disruption ever recorded (NetBlocks; IODA Iran shutdown report). Connectivity remained at roughly one per cent of pre-war ranges. The shutdown was costing the economic system an estimated $35–40 million per day in direct losses, rising to $70–80 million when oblique results had been included, with roughly one billion {dollars} of gathered harm by day fifty; on-line gross sales fell by eighty per cent (NPR). Hospitals operated in an info vacuum, reporting vital shortages of blood and provides (The Lancet). Individuals crossed the Turkish border for web entry (NPR). Starlink terminal customers confronted as much as ten years’ imprisonment, or execution (IranWire).
The Iranian authorities imposed this blackout itself. It started on 28 February 2026, hours after U.S.-Israeli airstrikes triggered the battle, and was administered by the Supreme Nationwide Safety Council; Iran’s Ministry of Data and Communication Know-how acknowledged that the shutdown was, partially, lowering incoming cyberattacks (CNBC). The infrastructure was intentionally routed onto a home Nationwide Data Community, a state-controlled intranet, with entry granted selectively to favoured teams while the broader inhabitants remained disconnected.
The authorized query this raises seems deceptively easy: what does worldwide legislation say a few state that severs its personal inhabitants from the web throughout wartime? The reply requires navigating not three our bodies of legislation, as most commentators have recommended, however 4. State sovereignty over home infrastructure, worldwide human rights legislation (IHRL), and worldwide humanitarian legislation (IHL) are the acquainted three. The fourth, the emergence of a non-public satellite tv for pc operator because the de facto guarantor of the appropriate to speak for a civilian inhabitants beneath wartime shutdown, and the entire absence of any worldwide authorized framework to control that position, is the dimension that present scholarship has not but confronted. Collectively, the 4 produce a structural lacuna that isn’t merely a spot in doctrine however a failure of the state-centric structure of worldwide legislation itself.
Sovereignty: The Argument and Its Inside Contradiction
Beneath UN Constitution Articles 2(1) and a pair of(7), establishing sovereign equality and defending issues “basically throughout the home jurisdiction of any state”, states train sovereign authority over their territory and its infrastructure. A state’s telecommunications networks are sovereign property. The choice to limit or shut down home web connectivity falls, in precept, throughout the home jurisdiction that worldwide legislation doesn’t, as a common matter, penetrate.
Iran has made this argument explicitly and prematurely. In its 2020 nationwide place on the appliance of worldwide legislation in our on-line world, one in every of over thirty such positions revealed within the context of the UN Group of Governmental Consultants course of, Iran adopted a maximalist interpretation of cyber sovereignty, arguing that any intrusion into cyber infrastructure beneath state management might represent a violation of that state’s sovereignty. This place is extra expansive than even the Tallinn Guide 2.0, which requires a de minimis threshold of interference earlier than a sovereignty violation is established. Iran, alongside France, rejected that threshold totally.
Iran’s place shouldn’t be an aberration. It displays a structural function of how sovereignty discourse operates in our on-line world. China’s 2017 Worldwide Technique of Cooperation on Our on-line world asserts an similar precept: web governance is a sovereign prerogative, and exterior interference with home digital infrastructure constitutes a sovereignty violation. Russia operationalised the identical logic by means of its Sovereign Web Regulation (2019), which created the technical and authorized structure for home web isolation. India has adopted more and more related framing in its engagement with UN cybersecurity processes. Iran’s maximalism is the outer fringe of a development, not an outlier. What makes Iran’s case distinctive, and legally untenable, is the route by which that logic was concurrently deployed.
On 10 February 2026, at a gathering of the UN Committee on the Peaceable Makes use of of Outer House in Vienna, Iranian representatives formally accused Starlink of violating Iran’s sovereignty, describing terminal operations contained in the nation because the “unlawful operation” of an “unauthorized army use of a business satellite tv for pc mega-constellation.” Iran invoked sovereignty to close down the web for its inhabitants. It then invoked sovereignty once more to sentence the satellite tv for pc community that was partially restoring connectivity to that very same inhabitants. The identical authorized idea, deployed in the identical week, to justify the deprivation and to ban the treatment.
This isn’t merely a political contradiction. It’s a doctrinal one. A state can’t coherently declare sovereignty as the premise for imposing a connectivity blackout and concurrently as the premise for prohibiting the personal infrastructure that fills the ensuing void, except sovereignty means one thing so capacious that it licenses regardless of the state chooses to do, which is to say that it means nothing in any respect as a constraining precept.
IHRL: What the Framework Can’t Do That Iran Requires It To
Sovereignty doesn’t droop Iran’s treaty obligations in the direction of its personal inhabitants. Iran ratified each the ICCPR and the ICESCR in 1975. HRC Normal Remark 34 confirmed that ICCPR Article 19’s protections, the appropriate to “search, obtain and impart info and concepts of every kind”, prolong to the web as a medium, and that restrictions should be “supplied by legislation and essential” (Article 19(3)). The 2015 Joint Declaration by UN human rights mandate holders held that blanket web shutdowns can by no means fulfill that three-part take a look at. Human Rights Watch utilized this framework to Iran’s 2026 shutdown and concluded it was unjustifiable beneath both IHRL or IHL. The Lancet documented the blackout’s direct influence on hospital operations, workers unable to entry networked programs, vital shortages of blood and provides, as immediately partaking Iran’s ICESCR Article 12 obligations, which shield “the appropriate of everybody to the enjoyment of the very best attainable commonplace of bodily and psychological well being” and carry no derogation equal.
What’s distinctive about Iran’s case shouldn’t be the applicability of the framework. It’s the relationship between Iran’s treaty obligations and its deliberate institutional structure. Iran constructed the Nationwide Data Community exactly as a parallel construction able to substituting for international web entry while preserving state management. The blackout shouldn’t be a breakdown; it’s the system working as designed. This distinguishes Iran from a wartime disruption brought on by infrastructure harm. The infrastructure was not destroyed. It was redirected. The IHRL query is due to this fact not merely whether or not the shutdown satisfies the proportionality and necessity take a look at, it’s whether or not a state can, constantly with its treaty obligations, assemble a parallel communications system particularly engineered to make blanket shutdown legally defensible as a home infrastructure choice.
ICCPR Article 4 permits derogation “in time of public emergency which threatens the lifetime of the nation,” supplied measures are “strictly required by the exigencies of the scenario” and notified to the UN Secretary-Normal beneath Article 4(3). The formal derogation pathway exists. Iran has not used it. HRC Normal Remark 29 locations the burden of demonstrating strict necessity on the derogating state, and the Committee retains authority to evaluate that justification. Iran’s failure to derogate forecloses the authorized justification that derogation would in any other case present, leaving its IHRL obligations unmodified on paper while totally suspended in observe.
That is the primary layer of the hole. IHRL provides the norm. The Human Rights Committee has no coercive energy, the Safety Council is paralysed by the battle’s geopolitical construction, and no regional mechanism applies to Iran. The norm is current; the mechanism to present it impact is absent.
IHL: The ICRC’s Contested Transfer and the Precautions Downside
The concurrent software of IHL to armed battle is settled doctrine, reaffirmed by the ICJ within the Nuclear Weapons Advisory Opinion (1996), the Wall Advisory Opinion (2004), and Congo v Uganda (2005). The place IHL and IHRL battle, IHL operates as lex specialis, however solely in respect of issues IHL immediately governs. Marko Milanovic’s critique of lex specialis as a conflict-resolution precept is instructive: the precept resolves norm conflicts however can’t fill a normative lacuna. In Iran’s blackout, the issue shouldn’t be a battle between IHL and IHRL norms, it’s the absence of a immediately relevant IHL norm. The hole shouldn’t be between the frameworks; it’s beneath them.
Extra Protocol I Article 48 requires events to “distinguish between the civilian inhabitants and combatants and between civilian objects and army aims and accordingly…direct their operations solely in opposition to army aims.” This rule presupposes an operation directed outward, in opposition to an adversary. It doesn’t communicate to the choice to sever one’s personal inhabitants from a world community.
The extra analytically promising provisions are the precautions framework: Article 57(1), which requires that “fixed care shall be taken to spare the civilian inhabitants, civilians and civilian objects,” and Article 58, which obliges events “to the utmost extent possible” to “endeavour to take away the civilian inhabitants…from the neighborhood of army aims” and to “keep away from finding army aims inside or close to densely populated areas.” Iran’s Nationwide Data Community has performed the inverse. By routing all civilian communications by means of a state-controlled intranet, Iran has intentionally conflated its civilian communications layer with its army infrastructure. The end result shouldn’t be the separation Articles 57–58 require however their structural negation: the civilian communications layer has been positioned contained in the army goal quite than faraway from it. If adversary forces have grounds to deal with Iran’s digital infrastructure as a army goal, and the dual-use structure of the Nationwide Data Community provides them substantial grounds, Iran’s civilian inhabitants has been structurally uncovered by its personal authorities’s design decisions.
The ICRC addressed the broader hole in a July 2025 paper by Authorized Adviser Tilman Rodenhäuser, arguing that IHL constrains connectivity disruptions whether or not brought on by a belligerent in opposition to an adversary’s infrastructure or self-imposed by a state over its personal territory. The October 2024 decision of the thirty fourth Worldwide Purple Cross and Purple Crescent Convention, adopted by consensus, explicitly recognised the significance of connectivity for civilian safety. Iran’s blackout is the primary real-world take a look at of whether or not the ICRC’s July 2025 place can do any normative work. The reply, at current, is that it can’t, not as a result of the argument is fallacious, however as a result of there isn’t a discussion board by which it may be adjudicated.
The Fourth Physique: Non-public Infrastructure, Absent Regulation
The three-body drawback can be complicated sufficient. The fourth dimension makes it structurally novel.
Throughout Iran’s blackout, Starlink turned, partially and imperfectly, the communications infrastructure for a civilian inhabitants that its personal state had disconnected from the world. The Trump administration covertly moved roughly 6,000 Starlink terminals into Iran. SpaceX waived subscription charges for Iranian customers. Tens of 1000’s of smuggled terminals enabled some Iranians to speak, entry info, and doc occasions that may in any other case have been invisible to the skin world.
Worldwide legislation has no framework for this. The Tallinn Guide addresses states. IHRL addresses states. IHL addresses events to armed battle. None addresses the obligations, accountability, or authorized standing of a non-public satellite tv for pc operator whose infrastructure turns into, in wartime, the de facto substitute for a state-controlled communications community {that a} authorities has intentionally disabled. Three questions come up that present scholarship has not answered.
First, do the UN Guiding Ideas on Enterprise and Human Rights impose a accountability on SpaceX to respect human rights when its infrastructure turns into the de facto communications layer for ninety million individuals? The UNGPs set up a company accountability to respect human rights beneath Pillar Two, however they’re non-binding and weren’t designed for conditions by which a non-public satellite tv for pc constellation capabilities as a nation’s complete civilian communications infrastructure in an armed battle. Whether or not the UNGPs attain wartime operations of this character stays totally unaddressed.
Second, ought to Starlink be handled as a humanitarian actor for IHL functions? An rising discourse on “digital humanitarianism” asks whether or not suppliers of vital communications infrastructure in battle settings ought to entice protections and bear obligations analogous to these of humanitarian organisations. The ICRC’s November 2025 evaluation of civilian ICT involvement in armed battle and its April 2026 paper on upholding IHL protections for ICT actions have begun to press this query. If Starlink is a humanitarian actor, its operations would entice IHL protections. If it isn’t, it’s merely a business operator in a battle zone, and Iran’s jamming and criminalisation, nevertheless disproportionate, haven’t any settled authorized prohibition.
Third, is Starlink a impartial service supplier or a party-adjacent actor? Article 54 of the Hague Rules 1907, which prohibits the seizure or destruction of “submarine cables connecting an occupied territory with a impartial territory…besides within the case of absolute necessity”, displays a longstanding recognition that communications infrastructure serving civilian capabilities warrants safety even in wartime. If Starlink’s position is known as analogous to that of a impartial communications service, it ought to entice one thing like these protections. But when its terminal community is functionally built-in into army command-and-control, as Iran alleged, the neutrality declare collapses. The twin-use drawback, which IHL was not designed to resolve for personal satellite tv for pc operators, determines all the pieces.
Iran’s response, criminalisation, jamming, espionage prices, UN sovereignty claims, proceeded within the full absence of any relevant authorized framework. The operator shouldn’t be a state. The conduct shouldn’t be regulated. The accountability framework doesn’t exist. As connectivity from orbit turns into the fallback communications infrastructure for civilian populations beneath wartime shutdowns, because it already has in Ukraine, Gaza, and now Iran, this isn’t a technical hole. It’s a structural failure of worldwide legislation to account for the privatisation of the communications layer that human rights rely upon. For additional context, see the Armed Teams Worldwide Regulation Weblog.
What the 4-Physique Downside Requires
The Iran blackout doesn’t name for brand new legislation alone. It requires mental honesty about what present legislation can and can’t do.
IHRL provides clear norms and no enforcement. Sovereignty, deployed in two instructions concurrently, has demonstrated its incoherence as a constraining precept. The ICRC’s July 2025 place is the appropriate route of journey, however the precautions framework of Extra Protocol I Articles 57–58 might show extra tractable than the concentrating on guidelines, and Iran’s Nationwide Data Community is the take a look at case for that argument. The emergence of personal satellite tv for pc infrastructure as a wartime communications lifeline has created a void that not one of the present frameworks was designed to fill.
What the scholarly neighborhood owes to this second shouldn’t be a tidy synthesis. It’s a recognition that the state-centric structure of worldwide legislation, constructed on the belief that states management the communications infrastructure of their populations and that worldwide legislation regulates states, has been structurally disrupted by a non-public firm working from orbit.
For my part, two trajectories are actually reside. The primary is doctrinal growth inside present frameworks: progressive growth of IHL’s precautions guidelines, rigorous software of IHRL derogation scrutiny to intentionally designed blackout structure, and extension of the UN Guiding Ideas to wartime satellite tv for pc operations. That is the trail of incremental adaptation, and it’s already beneath approach. The second is extra basic: a reconceptualisation of wartime civilian safety across the actuality that duty-bearers and infrastructure-controllers are now not the identical entity. If the communications layer on which human rights rely is privately owned and operated from orbit, the authorized framework for civilian safety should account for an actor it was not constructed to see.
Greater than fifty days of darkness is a very long time to attend for doctrine to catch up. The Iran blackout has not resolved this query. It has made it unimaginable to defer.
