Budapest Convention on Cybercrime

InternationalGeneral Cybersecurity2001
ByDecipherU Editorial

The Budapest Convention is the first international treaty addressing cybersecurity crimes and electronic evidence. Opened for signature by the Council of Europe in 2001 and now ratified by over 60 countries, it harmonizes domestic criminal law for cyber offenses, sets procedural powers for investigation, and establishes international cooperation mechanisms. The Second Additional Protocol (2022) addresses enhanced cross-border e-evidence access.

Quick Reference

EnactedOpened for signature November 23, 2001; entered into force July 1, 2004
Last AmendedSecond Additional Protocol adopted May 12, 2022
Enforcement BodyNational law enforcement (harmonized through treaty obligations); Council of Europe Cybercrime Convention Committee (T-CY)
PenaltiesDetermined by national law of each ratifying state
Applicable ToSignatory states (68 parties as of 2024) and any state invited to accede

Key Requirements

Article 2 (Illegal access)

Each party must adopt legislative measures to criminalize intentional access to a computer system without right

Article 6 (Misuse of devices)

Each party must criminalize the production, sale, procurement for use, or distribution of devices or passwords for committing offenses under Articles 2-5

Article 29 (Expedited preservation of stored data)

Each party must adopt measures to enable competent authorities to order the expedited preservation of specified computer data, including traffic data

Article 35 (24/7 Network)

Each party must designate a point of contact available 24/7 to provide immediate assistance for investigations involving computer data

How Does Budapest Convention Affect Cybersecurity Careers?

Cybersecurity professionals working in international incident response coordinate with law enforcement under Budapest Convention mechanisms. Digital forensics analysts must understand cross-border evidence preservation requirements. GRC analysts at multinational companies should know which countries are signatories when assessing legal risk for cyber incidents.

Cybersecurity Roles That Work With Budapest Convention

Related Cybersecurity Certifications

Related Cybersecurity Laws

Read the full text of Budapest Convention at the official source: https://www.coe.int/en/web/cybercrime/the-budapest-convention

Frequently Asked Questions

The Budapest Convention is the first international treaty addressing cybersecurity crimes and electronic evidence. Opened for signature by the Council of Europe in 2001 and now ratified by over 60 countries, it harmonizes domestic criminal law for cyber offenses, sets procedural powers for investigation, and establishes international cooperation mechanisms. The Second Additional Protocol (2022) addresses enhanced cross-border e-evidence access.

Cybersecurity professionals working in international incident response coordinate with law enforcement under Budapest Convention mechanisms. Digital forensics analysts must understand cross-border evidence preservation requirements. GRC analysts at multinational companies should know which countries are signatories when assessing legal risk for cyber incidents.

Determined by national law of each ratifying state

Last verified: April 2026?Report an inaccuracy

Explore Related Cybersecurity Resources

Was this page helpful?