RAPPORTEUR GROUP

Legal co-operation

GR-J(2023)15

22 August 2023[1]

Convention on Cybercrime (ETS No. 185) – Request by the Democratic Republic of Sao Tome and Principe to be invited to accede   Item to be considered by the GR-J at its meeting on 26 September 2023

 

 

1.         By a Note verbale No. 147/MNECC/DPE/BOR-2023 dated 26 May 2023, received and registered at the Secretariat General on 12 July 2023, the Ministry of Foreign Affairs, Co-operation and Communities of the Democratic Republic of Sao Tome and Principe transmitted a letter from H.E. Mr Alberto PEREIRA, Minister of Foreign Affairs of the Democratic Republic of Sao Tome and Principe, expressing to the Secretary General of the Council of Europe the interest of the Government of the Democratic Republic of Sao Tome and Principe to be invited to accede to the Convention on Cybercrime (ETS No. 185). (see Appendix 1).

2.         According to Article 37, paragraph 1, of the Convention and in line with the practice of the Council of Europe, the Secretariat proceeded to a consultation of member States of the Council of Europe and non-member States which are Contracting States to the Convention, requesting them to communicate to the Secretariat whether their authorities would object to the accession of the Democratic Republic of Sao Tome and Principe to the Convention on Cybercrime if the request to be invited to accede was formally submitted to the Committee of Ministers. The deadline for replying was 28 August 2023. No objection was communicated to the Secretariat.

3.         An information note of the Secretariat of the Cybercrime Convention Committee (T-CY) on co-operation with the Democratic Republic of Sao Tome and Principe appears in Appendix 2.

4.         The relevant provisions of the Convention on Cybercrime can be summarised as follows.

a.         Summary of the Convention

5.         TheConvention on Cybercrime (ETS No. 185) was opened for signature by the member States of the Council of Europe and by non-member States having participated in its elaboration, in Budapest, on 23 November 2001. It entered into force on 1 July 2004. The chart of signatures and ratifications appears in Appendix 3.

6.         The Convention is the first international treaty on crimes committed via the Internet and other computer networks, dealing particularly with infringements of copyright, computer-related fraud, child pornography and violations of network security. It also provides a series of procedural powers, such as the search for computer networks and the interception of data. Its main objective, set out in the preamble, is “to pursue a common criminal policy aimed at the protection of society against cybercrime, inter alia by adopting appropriate legislation and fostering international co-operation”.

7.         The Convention has been complemented by an Additional Protocol concerning the criminalisation of acts of a racist and xenophobic nature committed through computer systems (ETS No. 189), which was opened for signature on 28 January 2003 and entered into force on 1 March 2006, and by a Second Additional Protocol to the Convention on Cybercrime on enhanced co-operation and disclosure of electronic evidence (CETS No. 224) which was opened for signature on 12 May 2022. States having acceded to the Convention are entitled to accede to the Protocol (ETS No. 189) and to sign and ratify the Protocol CETS No. 224 without a specific invitation by the Committee of Ministers being necessary.

b.         Procedure for accession

8.         Article 37, paragraph 1, of the Convention on Cybercrime provides that:

"After the entry into force of this Convention, the Committee of Ministers of the Council of Europe, after consulting with and obtaining the unanimous consent of the Contracting States to the Convention, may invite any State which is not a member of the Council and which has not participated in its elaboration to accede to this Convention. The decision shall be taken by the majority provided for in Article 20.d. of the Statute of the Council of Europe and by the unanimous vote of the representatives of the Contracting States entitled to sit on the Committee of Ministers.”

9.         Given the above, the Deputies may wish to invite the Democratic Republic of Sao Tome and Principe to accede to the Convention on Cybercrime.

Appendix 1

COPY (*)                                                                                                  Annex to letter JJ79/2023    dated 12 July 2023

______

(*)         Letter registered at the Secretariat General on 12 July 2023 – Or. Engl.

Appendix 2

www.coe.int/cybercrime

Strasbourg, 10 July 2023

T-CY (2023)9 Restricted

Cybercrime Convention Committee (T-CY)

Co-operation with Sao Tome and Principe

Note by the Secretariat

 

Contents

1          Introduction_ 6

2          Co-operation with Sao Tome and Principe_ 6

3          Cybercrime legislation_ 7

3.1 Substantive and procedural law_ 7

3.2 Safeguards 8

4          Conclusion_ 8

5          Contact 8

In case of need for additional information please contact:

Alexander Seger Executive Secretary Cybercrime Convention Committee Directorate General of Human Rights and Rule of Law Council of Europe, Strasbourg, France

Tel        +33-3-9021-4506          Fax       +33-3-9021-5650 Email    [email protected]

1.       Introduction

The Government of Sao Tome and Principe, by letter of the Minister of Foreign Affairs H.E. Alberto Pereira dated 26 May 2023, submitted a request for accession to the Budapest Convention on Cybercrime (ETS 185).

The purpose of the present note is to provide supplementary information on the state of co-operation with Sao Tome and Principe in cybercrime matters, including an overview of implementation of the principles of the Convention on Cybercrime.

2.       Co-operation with Sao Tome and Principe

The authorities of Sao Tome and Principe have been co-operating with the Council of Europe on cybercrime since 2018 in a number of activities:

Date	Place	Title
5 - 7 February 2018	Lisbon, Portugal	Forum on Cybercrime (GLACY+ project)
16 – 18 October 2018	Addis Ababa, Ethiopia	African Forum on Cybercrime – Policies and Legislation, International Co-operation and Capacity Building (GLACY+ project)
11 - 12 April 2019	Praia, Cape Verde	International Conference Fight against Cybercrime – the Public Prosecution Services of the CPLP in the Global Context - and 2nd Meeting of the Cybercrime Forum (GLACY+ project)
19-20 November 2019	Santa Maria, Sal Island, Cabo Verde	International Conference Cybercrime and Electronic Evidence: Harmonization of Legislation and the Budapest Convention in the Community of Portuguese-Speaking Countries (CPLP) (GLACY+ project)
22 November 2019	Santa Maria, Sal Island, Cabo Verde	16th Conference of Ministers of Justice of CPLP (GLACY+ project)
5 November 2020	Online	Data Protection Series of Regional Webinars in Africa: The right to Data Protection in the Digital Era (GLACY+ project, in co-operation with African Data Protection Authorities Network and Data Protection Unit of Council of Europe)
18-20 November, 2020	Online	International Conference on Cybercrime for the CPLP countries and online meeting of the Ministers of Justice of the CPLP countries
7 April, 2021	Online	Data Protection Series of Regional Webinars in Africa: International Transfers of Personal Data and International Co-operation (GLACY+ project, in co-operation with African Data Protection Authorities Network and Data Protection Unit oof Council of Europe)
28 – 30 June, 2021	Online	Second African Forum on Cybercrime (GLACY+ and Octopus projects)
20 – 22 July, 2021	Online	Forum of FIUs in PALOP countries: Streamlining parallel financial investigation in cybercrime cases. Trends and challenges (GLACY+ project in co-operation with PACED project)
13 July 2021	Online	Series of regional webinars to Promote Universality and Implementation of the Budapest Convention on Cybercrime in Africa (GLACY+ and Octopus projects, in co-operation with Parliamentarian for Global Action)

Date	Place	Title
6-7 March 2023	Bouznika, Morocco	International Conference Strengthening Co-operation on Cybercrime and E-evidence in Africa
23-24 May 2023	Brasilia, Brazil	International Conference on Budapest Convention and Second Additional Protocol and Forum de Cibercrime (GLACY+ and Octopus projects)

3.       Cybercrime legislation^[2]

In 2017, Sao Tome and Principe adopted Law no. 15/2017 on cybercrime. In combination with relevant provisions of the Penal Code, it brings domestic criminal legislation in line with the substantive and procedural law provisions of the Budapest Convention on Cybercrime.

3.1         Substantive and procedural law

Provisions of Budapest Convention	Domestic legislation
Substantive law
Illegal access (Art. 2)	Article 7 Law 15/2017
Illegal interception (Art. 3)	Article 8 Law 15/2017
Data interference (Art. 4)	Article 5 Law 15/2017
System interference (Art. 5)	Article 6 Law 15/2017
Misuse of devices (Art. 6)	Articles 4, 6 and 7 Law 15/2017
Forgery (Art. 7)	Article 4 Law 15/2017
Fraud (Art. 8)	Article 240 Penal Code
Child pornography (Art. 9)	Article 180 Penal Code
Copyright and related rights (Art. 10)	Article 9 Law 15/2017
Attempt, aiding and abetting (Art. 11)	Articles 22 and 23 Penal Code
Corporate liability (Art. 12)	Article 11 Penal Code
Procedural law
Expedited preservation (Art. 16)	Article 15 Law 15/2017
Expedited preserv. & partial disclosure (Art. 17)	Article 16 Law 15/2017
Production order (Art. 18)	Article 17 Law 15/2017
Search and seizure (Art. 19)	Articles 18 - 20 Law 15/2017
Real-time collection of traffic data (Art. 20)	Article 21 Law 15/2017
Interception of content data (Art. 21)	Article 21 Law 15/2017
International co-operation
Chapter III	Articles 23 – 29 Law 15/2017

In terms of substantive criminal law, domestic legislation seems to broadly cover the conduct criminalised in the Budapest Convention on Cybercrime. 

The procedural law provisions of the Convention are also available in domestic legislation and their scope extends to electronic evidence of any offence as required by Article 14 of the Convention.

3.2         Safeguards

Article 15 of the Budapest Convention requires Parties to:

“… ensure that the establishment, implementation and application of the powers and procedures provided for in this Section are subject to conditions and safeguards provided for under its domestic law, which shall provide for the adequate protection of human rights and liberties, including rights arising pursuant to obligations it has undertaken under the 1950 Council of Europe Convention for the Protection of Human Rights and Fundamental Freedoms, the 1966 United Nations International Covenant on Civil and Political Rights, and other applicable international human rights instruments, and which shall incorporate the principle of proportionality.”

Sao Tome and Principe is a Party to some international human rights treaties, such as the International Covenant on Civil and Political Rights, the International Covenant on Economic, Social and Political Rights, the Convention against Torture and Cruel Inhuman or Degrading Treatment or Punishment, the Convention on the Rights of the Child and two of its Protocols, and others.

Intrusive procedural powers require approval by a judicial authority.

Law no. 03/2016 establishes a framework for the protection of personal data. 

In 1990, Sao Tome and Principe abolished capital punishment.

4.       Conclusion

The authorities of Sao Tome and Principe have been co-operating with the Council of Europe in cybercrime matters in a number of activities since 2018. Domestic legislation on cybercrime and electronic evidence in force is based on Portuguese legislation and largely in line with the Budapest Convention. The conditions and safeguards required by Article 15 of the Convention are similarly required under domestic law.

In terms of legislation, Sao Tome and Principe seems to meet the requirements of the Budapest Convention. Further capacity building support will be needed; an invitation to accede would facilitate such support through projects such as Global Action on Cybercrime (GLACY) or the Octopus Project.

5.       Contact

In case of need for additional information please contact:

Alexander Seger Executive Secretary Cybercrime Convention Committee Directorate General of Human Rights and Rule of Law Council of Europe, Strasbourg, France

Tel        +33-3-9021-4506          Email    [email protected]

Appendix 3 – Chart of signatures and ratifications of Convention CETS No. 185

CHART OF SIGNATURES AND RATIFICATIONS OF TREATY 185

Convention on Cybercrime

Status as of 09/08/2023

Title	Convention on Cybercrime
Reference	ETS No. 185
Opening of the treaty	Budapest, 23/11/2001 – Treaty open for signature by the member States and the non-member States which have participated in its elaboration and for accession by other non-member States
Entry into Force	01/07/2004 – 5 Ratifications including at least 3 member States of the Council of Europe

Members of Council of Europe

	Signature	Ratification	Entry into Force	Notes	R.	D.	A.	T.	C.	O.
Albania	23/11/2001	20/06/2002	01/07/2004				A.
Andorra	23/04/2013	16/11/2016	01/03/2017		R.	D.	A.
Armenia	23/11/2001	12/10/2006	01/02/2007				A.
Austria	23/11/2001	13/06/2012	01/10/2012		R.	D.	A.
Azerbaijan	30/06/2008	15/03/2010	01/07/2010		R.	D.	A.	T.
Belgium	23/11/2001	20/08/2012	01/12/2012		R.	D.	A.
Bosnia and Herzegovina	09/02/2005	19/05/2006	01/09/2006				A.
Bulgaria	23/11/2001	07/04/2005	01/08/2005		R.	D.	A.
Croatia	23/11/2001	17/10/2002	01/07/2004				A.
Cyprus	23/11/2001	19/01/2005	01/05/2005				A.
Czech Republic	09/02/2005	22/08/2013	01/12/2013		R.	D.	A.
Denmark	22/04/2003	21/06/2005	01/10/2005		R.		A.	T.
Estonia	23/11/2001	12/05/2003	01/07/2004				A.
Finland	23/11/2001	24/05/2007	01/09/2007		R.	D.	A.
France	23/11/2001	10/01/2006	01/05/2006		R.	D.	A.
Georgia	01/04/2008	06/06/2012	01/10/2012			D.
Germany	23/11/2001	09/03/2009	01/07/2009		R.	D.	A.
Greece	23/11/2001	25/01/2017	01/05/2017		R.	D.	A.
Hungary	23/11/2001	04/12/2003	01/07/2004		R.	D.	A.
Iceland	30/11/2001	29/01/2007	01/05/2007		R.		A.
Ireland	28/02/2002
Italy	23/11/2001	05/06/2008	01/10/2008				A.
Latvia	05/05/2004	14/02/2007	01/06/2007		R.		A.
Liechtenstein	17/11/2008	27/01/2016	01/05/2016		R.	D.	A.
Lithuania	23/06/2003	18/03/2004	01/07/2004		R.	D.	A.
Luxembourg	28/01/2003	16/10/2014	01/02/2015				A.
Malta	17/01/2002	12/04/2012	01/08/2012			D.
Monaco	02/05/2013	17/03/2017	01/07/2017				A.
Montenegro	07/04/2005	03/03/2010	01/07/2010	55	R.		A.
Netherlands	23/11/2001	16/11/2006	01/03/2007				A.	T.
North Macedonia	23/11/2001	15/09/2004	01/01/2005				A.
Norway	23/11/2001	30/06/2006	01/10/2006		R.	D.	A.
Poland	23/11/2001	20/02/2015	01/06/2015		R.		A.
Portugal	23/11/2001	24/03/2010	01/07/2010			D.	A.
Republic of Moldova	23/11/2001	12/05/2009	01/09/2009			D.	A.	T.
Romania	23/11/2001	12/05/2004	01/09/2004				A.
San Marino	17/03/2017	08/03/2019	01/07/2019				A.
Serbia	07/04/2005	14/04/2009	01/08/2009	55			A.
Slovak Republic	04/02/2005	08/01/2008	01/05/2008		R.	D.	A.
Slovenia	24/07/2002	08/09/2004	01/01/2005				A.
Spain	23/11/2001	03/06/2010	01/10/2010			D.	A.
Sweden	23/11/2001	28/04/2021	01/08/2021		R.		A.
Switzerland	23/11/2001	21/09/2011	01/01/2012		R.	D.	A.
Türkiye	10/11/2010	29/09/2014	01/01/2015
Ukraine	23/11/2001	10/03/2006	01/07/2006		R.	D.	A.
United Kingdom	23/11/2001	25/05/2011	01/09/2011		R.		A.

Non-Members of Council of Europe

	Signature	Ratification	Entry into Force	Notes	R.	D.	A.	T.	C.	O.
Argentina		05/06/2018 a	01/10/2018		R.		A.
Australia		30/11/2012 a	01/03/2013		R.		A.
Benin		a		4
Brazil		30/11/2022 a	01/03/2023			D.	A.
Burkina Faso		a		4
Cabo Verde		19/06/2018 a	01/10/2018				A.
Cameroon		a		4
Canada	23/11/2001	08/07/2015	01/11/2015		R.	D.	A.
Chile		20/04/2017 a	01/08/2017		R.	D.	A.
Colombia		16/03/2020 a	01/07/2020		R		A
Costa Rica		22/09/2017 a	01/01/2018			D.	A.
Côte d’Ivoire		a		4
Dominican Republic		07/02/2013 a	01/06/2013			D.	A.
Ecuador		a		4
Fiji		a		4
Ghana		03/12/2018 a	01/04/2019				A.
Guatemala		a		4
Israel		09/05/2016 a	01/09/2016		R.		A.
Japan	23/11/2001	03/07/2012	01/11/2012		R.	D.	A.
Kazakhstan		a		4
Kiribati		a		4
Mauritius		15/11/2013 a	01/03/2014				A.
Mexico		a
Morocco		29/06/2018 a	01/10/2018				A
New Zealand				4
Niger		a		4
Nigeria		06/07/2022 a	01/11/2022		R.		A.
Panama		05/03/2014 a	01/07/2014				A.
Paraguay		30/07/2018 a	01/11/2018				A
Peru		26/08/2019 a	01/12/2019		R.	D.	A.
Philippines		28/03/2018 a	01/07/2018				A
Republic of Korea		a		4
Senegal		16/12/2016 a	01/04/2017				A.
Sierra Leone		a		4
South Africa	23/11/2001
Sri Lanka		29/05/2015 a	01/09/2015		R.		A.
Timor-Leste		a		4
Tonga		09/05/2017 a	01/09/2017				A.
Trinidad and Tobago		a		4
Tunisia		a		4
United States of America	23/11/2001	29/09/2006	01/01/2007		R.	D.	A.
Uruguay		a		4
Vanuatu		a		4

Total number of signatures not followed by ratifications	2
Total number of ratifications/accessions	68

Notes

(55) Date of signature by the state union of Serbia and Montenegro.

(4) Since 2013 the decision to invite a non-member State to accede to the treaty is valid five years as from its adoption. See the chart on https://rm.coe.int/16806cac22.

a: Accession s: Signature without reservation as to ratification su: Succession r: Signature "ad referendum".
R.: Reservations D.: Declarations, Denunciations, Derogations A.: Authorities T.: Territorial Application C.: Communication O.: Objection.

Source: Treaty Office on https://conventions.coe.int - * Disclaimer.