Digital Sovereignty: A Diplomatic Tool in Modern Cyber Warfare

Abstract

This study looks into the idea of “digital sovereignty,” which means that a country controls its own digital assets, like its infrastructure, data, and technology, in a world where everything is linked. Digital sovereignty is an important national security issue for democratic countries because it protects democratic values like privacy and freedom of speech while also meeting security needs. The study looks at the link between digital sovereignty, the internet, and communication using both qualitative and quantitative methods. As cyber fighting makes it harder to tell the difference between real and virtual wars, the growth of traditional negotiation is emphasized. The paper makes a distinction between regular and cyber fighting by pointing out that there are no clear rules and values in digital areas. As cyber defence and attack powers have grown, they can be seen as a new type of weapon that is used as a political tool in international talks. Besides looking at the problems that come with using diplomacy in cyberwarfare, the study also looks at how hard it is to find the people who are responsible and make sure that the principle of balance is followed. It talks about the different ways to protect digital privacy, like the GDPR in the EU and China’s “cyber sovereignty” method, which is focused on the government.

Introduction

In the 21st century, state authority covers the huge, open world of the internet as well as standard lines of land. Now there is the idea of “digital sovereignty,” which means that a country can control its own infrastructure, data, and technology. This shows its freedom in a world that is connecting more and more. Digital freedom is now an important goal for national security, especially for democracy countries that have to deal with the difficult world of cyber warfare. Digital tools are becoming very important to the health and well-being of people living in states. Digital sovereignty isn’t just a defence strategy anymore, says this chapter. It’s also a powerful diplomacy tool that governments can use to stand up for their values, protect their interests, and set the rules for how people can interact in a digital world that is often challenged.(Pohle & Thiel, 2020)

When a country is a democracy, digital freedom is more than just technical power. It is meant to protect democracy values like free speech and privacy while also meeting security needs. This is because democratic states can’t use control and state tracking, which could go against the values they want to protect. This makes it harder for them to keep their digital ecosystems safe. To improve cyber resilience, this tricky balancing act includes making broad legal and regulatory frameworks, spending in national technological skills, and encouraging public-private partnerships. Within this setting, digital sovereignty turns into a tool for “democratic resilience,” making sure that foreign players don’t use digital infrastructure and information flows to mess up politics or hurt public trust.(Kaloudis, 2024)

The most obvious way that digital sovereignty is being used as a weapon for diplomacy is in international relations and online warfare. The standard Westphalian model of state authority is being tested as online threats cross national lines. In this way, digital sovereignty gives governments a way to regain control and show their power in online. Democratic countries can stop bad people from doing bad things and hold them responsible for their actions by building strong cyber defences and making clear rules for how states should act in cyberspace. This can be done diplomatically through international unity and multinational deals, or it can be done by using their economic and technology power to their advantage. The search for digital sovereignty, on the other hand, could be bad for a free and open internet because some nationalistic measures might break up the global digital space. This conflict between national power and working together as a whole is at the heart of how cyber warfare policy is changing.(Akhtar & Iqbal, 2025)

In the end, the study of digital sovereignty as a diplomatic tool for governments is a living, changing area. It’s important to know how science, politics, economy, and foreign law all affect each other. We will look into these complicated issues in more detail in this chapter. We will see how democratic countries are using digital sovereignty to protect themselves from online risks, shape global digital government, and show their strength and values in the digital age. It will look at the tactics, problems, and effects of this new way of playing politics, giving a full picture of how important digital sovereignty is in modern cyberwarfare.(Timmers, 2022)

Methodology

This research looks at how diplomacy, internet, digital sovereignty, and digitization are connected, mainly when it comes to global issues. It looks at these ideas using both qualitative and quantitative methods, with a focus on cyber resilience and digital sovereignty as new tools for communication. The study looks for possible relationships and direct links by using linear regression and state scores in index comparisons. To find out more about statistical relationships, people use complicated statistical tools such as Spearman and Pearson ratings. The study also looks at the past to show how the role of digital sovereignty in diplomacy has changed over time. This gives us a better understanding of how diplomatic tools have changed and adapted to fit the digital shift.

Diplomacy and Cyber Attacks

Digitalization is expanding the traditional idea of diplomacy, which is seen as sitting down with other countries to negotiate and come to an understanding. Cyberwarfare is when digital tools like hacking or software are used to attack and hurt another country. In the case of a response, hack backs are used. The need to protect against cyberattacks is a new kind of war that makes negotiation more difficult.(Arnold, 2011) It’s getting harder to tell the difference between regular war and cyberwar, so new diplomacy tools and tactics are needed. As a result, defence groups in many NATO countries have had so-called “dimensions” set up for a long time to protect against cyberattacks.  Besides air, navy, army, and space units.(Blessing, 2021) In the fourteenth century BC, Egypt and the Middle East were the first places where communication was used.  The ties between the Italian city-states in the 1300s, on the other hand, are where modern diplomacy got its start. This event in history shows how diplomacy has changed over the ages, from simple interactions between states to a complicated system of ties between countries.(Hall, 2006)
Diplomacy is an important part of foreign relations today because it helps people understand each other, work together, and avoid violence. A lot of different things fall under this umbrella, from official talks and deals to casual conversations and cultural exchanges. Diplomacy has had and continues to have an impact on world politics. This shows how important it is to keep the peace and security in the world. Modern diplomacy isn’t just two countries talking to each other; it also happens on international stages like the United Nations (UN), where it’s very important to the way politics work around the world.(Lancelot, 2020)

Western-oriented countries use cyber diplomacy to set international rules, protect data privacy, and promote basic democracy principles. Along with building cyber defence skills that focus on security and defence, this can be a step toward digital freedom. There is more and more proof that cyberdiplomacy can change the course of world politics by showing how to end global disputes and make peace. There are now cyber policy envoys from more than 30 states. This shows that more and more countries understand how important this area is. A GGE report endorsed in GA resolution 70/237 of the UN General Assembly in 2015, 20 government experts agreed that international law should also apply to things that happen online. The right to self-defence was part of this (Bendiek, 2018). Establishing agreement between state and non-state organizations in internet is largely based on diplomacy. But it’s hard to figure out how to use diplomacy tactics in this area. The fast and wide-ranging progress in online technology makes it hard to tell the difference between digital and real life.  Interactions in the neighborhood. A lot has changed in how countries see their own values in the modern world because of the new online area. It is hard for governments to find the right mix between lowering danger and taking advantage of new opportunities in this area. As the opportunities for new ideas in online grow, so does the chance of competition and possible war.(Manantan, 2021)

Conventional war vs Cyber war

Cyberwar takes place in digital space, while regular war involves fighting in real life and using actual weapons. The idea of space here is different from the usual, geographic idea of state space, which shows the political, parliamentary, and administrative lines of a state. According to historical records, a conventional war is an armed battle between states or groups where normal armed forces are used on land, in the air, at sea, or more recently, in space, in line with certain moral and legal standards. When this kind of war breaks out, territory conflicts are common. The authority and borders of countries are very important. Zimmer, a political scientist, talks about how the Peace of Westphalia in 1648 set the political, legislative, and executive limits of authority that are set by state lines.(Zimmer, 2008)

The problem that hasn’t been fixed yet is that cyberattacks could turn into regular or even nuclear wars. The country that is being hit is the one who decides if an attack has escalated, but there aren’t any rules that everyone agrees on. This might mean that we need to have a better understanding of how internet works in politics, and it shows how important it is to have the right rules or at least a common knowledge. Cyberspace can be thought of as chaos, with no state norms, rules, or ethics, just like the early days of the internet.(Barlow, 1996) In the digital context, efforts are also being made to sway public opinion, such as using social media and occasionally fraudulent information. Presently, this is a relatively undetectable endeavor for states. Contemporary the public and opinions are influenced even more easily by technologies, such as artificial intelligence and the ever-increasing availability of the (mobile) internet. Therefore, the promotion of foreign policy interests is not a novel concept; however, it represents an increasing challenge and cause for concern due to the need to reconcile the disparities between cyberspace and physical, territorial space, as well as the proportionality of the use of cyber warfare instruments.(Hannas & Tatlow, 2020)

Cyber power and digital independence as a diplomatic tool to negotiate the reduction of digital weapon

Arms can be used as a political tool, even though this is often argued and seems to go against common sense. Armed with the right tools, a strong military can keep possible attackers away and give a country more negotiating power with other countries. Strength in the military can also be used as pressure. During international talks, weapons can be used to force other countries to make agreements. However, they can also lead to higher tensions and arms races, which raises the risk of war. Over-arming can hurt trust between countries and make it harder for countries to get along with each other in the long run. A lot of the time, diplomacy means trying to find a balance between showing power and encouraging unity and peace. Armament is only one part of the complicated system of foreign affairs. Historical examples, like the arms race during the Cold War, show how technology power can play a big role in international talks. But this did lead to peace, at least during the nuclear age, thanks to political wins.(Kristensen & Norris, 2013)

Cyber protection and attack technology that keeps getting better can be seen as a modern form of weapons. Not only are these skills useful for possible defence, but they can also help you get better at bargaining. As opposed to the nuclear weapon example given above, which involves looking at the number of nuclear bombs, figuring out the (necessary) amount of armament is a lot harder. Because of the current online dangers, it seems likely that people will first arm themselves and then, after rules and standards are put in place, probably remove themselves. The question of whether this will last for decades or not has not been answered. When you talk about “digital sovereignty,” you should not only talk about a country’s hacking skills, but also about its basic ability to make strategic choices about the technology it uses without having to depend on other countries. Estonia’s Foreign Policy Strategy 2030 shows that building up people’s skills is also an important part of internet diplomacy.(Barrinha, 2018)

Limits of Diplomacy

Through history, we can see that communication has its limits, especially when important ideals or interests are at stake. When it comes to cyber warfare, these lines are even less clear because cyberattackers are often hard to catch and often do their work without anyone knowing. The talk is about how to bring old-fashioned diplomacy methods into the digital age. Although the same diplomatic practices are in effect, the current discourse regarding cyber-attacks and their regulation is being approached from a variety of perspectives by various countries and organizations. The concept of proportionality is of paramount importance in this context. The primary inquiry at hand is: “Which cyber-attack should be addressed through conventional methods?”(Hjorthen & Pattison, 2023)

For instance, the Department of Defence’s Manual on the Law of War in the United States sets the rules for balance when it comes to cyberattacks. If you want to follow the law of war when using conventional weapons, this manual can help you figure out the right time and way to launch cyberattacks. Article 5 of the NATO North Atlantic Treaty says that cyberattacks can lead to a mutual defence situation. This shows how important cyber activities are for achieving joint security. Some countries have come up with the idea of cyber intervention reaction or cyber incident detection as a way to use both attacking and defence strategies in case of war or to keep internet safe.(Kukkola, Ristolainen, & Nikkarila, 2019)

It is also important to note that Russia and China announced a new strategic relationship in 2016, which includes working together in the areas of information technology (IT) and communications (ICT). It was a worry for both countries that ICT could be used to get involved in other countries’ domestic issues. Bendiek points out that this deal could be seen as an attempt to set up an axis and separate the issues. Cyber operations are becoming more and more important in world politics. This shows how some countries are trying to protect and advance their own interests and power in the digital world. China, for example, is limited by its land and institutions, so it makes most of its own digital technologies by following strict rules and staying away from other countries. This is in line with the goal of cyber sovereignty. This shows how the Chinese Communist Party wants to take over private companies and tools to carry out the country’s defence plan. Multi-stakeholder management is not the same as this at all.(Creemers, 2020)

Cyber Resilience

The global cybersecurity index (GCI) and the national cybersecurity index (NCSI) are all ways to measure how safe and resilient a country is online. The e-Governance Academy in Estonia has been putting together the NCSI since 2018. It rates how well 160 countries protect themselves against cyberattacks like denial-of-service attacks and data breaches by using 49 indicators from mostly administrative sectors. For example, the NCSI says that a state’s skills include being able to keep an eye on cyberattacks, teamwork, security strategy, and disaster management. The study of the rankings shows that a lot of countries in the North America, Asia, Europe, and Oceania have a high cyber security rating. As many of these states are also autocratic, cyber defence is also an important part of digital sovereignty when it comes to isolating and protecting authoritarian structures.(Kravets, 2019)

The sovereignty of states is at risk due to the proliferation of cyber-attacks, which is why cyber security is a critical element of digital sovereignty. There are numerous instances of government and industrial organizations, particularly critical infrastructure such as banks, energy suppliers, and hospitals, that have been coerced or compromised by cyber-attacks exemplify the global economic consequences of cyber-attacks.(Balbaa, Eshov, & Ismailova, 2022) The emphasis in Europe is on the advancement of cyber defence technologies, the reinforcement of digital markets and infrastructures, and the promotion of digital sovereignty. The European Commission underscores the significance of enhancing and fostering resilience to cyber-attacks.(Dawda, Janjeva, & Moiseienko, 2021) China has put in place complete national cyber security strategies that put protecting vital assets and building up advanced cyber defence capabilities through compartmentalization at the top of the list. This means it will likely keep strengthening its digital power and freedom.(Holtmann, 2018)

Digital Sovereignty in real world

Digitalization is the comprehensive transformation of society and the economy that is facilitated by the utilization of digital technologies. This process has resulted in a fundamental reorganization of the operations of governments, enterprises, and individuals in a real-world setting. For instance, the pervasive implementation of e-government services in nations such as Estonia has resulted in a more efficient public administration, a decrease in bureaucracy, and an increase in citizen engagement. Nevertheless, this digitalization also establishes reliance on a small number of influential technology companies, many of which are foreign, that provide the fundamental infrastructure, including cloud services and operating systems. Because so many important people are involved, there is a risk that a country might not be able to control its own digital future. This makes the idea of digital sovereignty more important than ever. In this case, digital sovereignty doesn’t just mean a country’s ability to control its own digital space; it also means protecting its economic independence and national security in a world where everything is linked.(Tan, Chi, & Lam, 2023)

In the real world, different national and regional strategies are trying to gain digital sovereignty. These strategies are often driven by worries about economic competition, data privacy, and insecurity. Europe’s General Data Protection Regulation (GDPR) is a well-known example of a way that digital freedom can be protected through rules. The GDPR essentially gives the EU control over data, no matter where the company is located, by imposing strict rules on the gathering and handling of personal data of EU citizens. In the same way, the European Union is putting a lot of money into projects like the European Chips Act. The goal is to improve chip production in Europe and make it less reliant on supply lines in other countries. China and Russia, on the other hand, have taken a more state-centered approach to digital sovereignty, which is sometimes called “cyber sovereignty.” In this approach, domestic social media and search engines are created as replacements to Western ones, and strict rules for content control and data localization are put into place. These different cases show that digital sovereignty is not a single idea, but a set of tactics that depend on the political system and economic goals of a country.(Adler‐Nissen & Eggeling, 2024)

The relationship between digitalization and digital sovereignty has big global effects as well, leading to what some experts call “digital balkanization.” A few tech giants from the US and China have a lot of power, which has led to a global battle for control over digital infrastructure and data flows. This is evident in the tensions that have arisen regarding the use of Chinese 5G technology by companies such as Huawei, which have been prohibited by certain Western nations due to national security concerns. Nations are also investing in their own sovereign cloud infrastructures to ensure that sensitive government and citizen data remains within their legal and physical borders, as a result of the desire for digital self-sufficiency. Although these actions are intended to protect national interests, they have the potential to fragment the global internet and digital economy into distinct, and potentially incompatible, ecosystems. The fundamental challenge of reconciling the advantages of a globally connected digital world with the state’s obligation to preserve security and control is underscored by the ongoing debate.(Timmers, 2024)

Are cyber resilience and digital sovereignty opposing ideas?

National security strategies have increasingly prioritized cyber resilience. In contrast, digital sovereignty is a concept that is used to define and assess the capabilities of states in order to reduce one-sided technological dependencies and thereby safeguard state institutions and critical infrastructures.(Pohle & Thiel, 2021)

Although the top NCSI and Digital Sovereignty Index (DSI) countries are not particularly highly digitalized nor do they stand out due to their high democracy scores if the definition of digital sovereignty used in the previous section is used, the ranking will likely change in 2024 (Poland, Estonia, Ukraine, Latvia, United Kingdom, Albania, Moldova, Georgia, China, Saudi Arabia) following Russia’s war of aggression against Ukraine. It is possible to hypothesize that the European comprehension of digital sovereignty is such that a normative-prescriptive model does not directly contribute to cyber resilience, as it is formulated in a defensive manner. The hypothesis is verified using the two indices previously mentioned: the national cyber security index (NCSI) and the digital sovereignty index (DSI). The DSI assesses parameters related to state sovereignty, essential technologies, and technological sovereignty, whereas the NCSI evaluates cyber security policy, a state’s contribution to global cyber security, education, and professional development.(Kaloudis, 2022)

Cyber resilience and digital sovereignty as diplomatic tools

As with the other parts, looking into digital sovereignty and cyber resilience as diplomacy tools needs a full look at their strategic importance, wide-ranging effects, and many different roles in the world of international relations. Even though they focus on different things, both ideas have an effect on the current state of diplomacy by giving countries a way to express their independence, protect their interests, and encourage unity in a world that is becoming more and more digital. Digital sovereignty basically means that a country can take control and be independent of its digital environment. This includes its infrastructure, data management methods, and new technologies. This important idea lets countries manage the digital world on their own, without outside pressure or interference.(Krings, 2016)

Controlling their own digital areas makes it easier for states to deal with the difficult issues of world politics. It also lowers their risks and shows how powerful they are politically. It’s easier for countries to agree when they have strong digital authority. Peers are also more likely to trust and work with each other when they do. This makes it possible for international laws and rules to be made that encourage good behavior in cyberspace and lower the risk of wars and conflicts. Another important part of current communication is being able to handle cyberattacks. It means how well a country can defend itself against hacks, respond to them, and get back on its feet after they happen. That is, a country that is very resilient to hacks can better defend itself, lessen their effects, and stop possible enemies from doing bad things.(Kravets, 2019)

Conclusion

Digital sovereignty and cyber resistance are important political tools that let countries show their power and handle global issues without outside pressure. Digital sovereignty means that a country can keep control over its infrastructure, data, and technology, which make up its digital environment. But cyber resilience is a country’s ability to handle threats, react to them, and get back to normal after they happen. In a digitalized world, both are seen as political tools that help people work together, stand up for their own rights, and protect their interests. No matter what, trying to get digital sovereignty could lead to “digital balkanization,” which is when the global internet is broken up into different communities that might not work with each other. This shows how hard it is to balance the need for security and control in a state with the ability of the digital world to join people all over the world.

References

Adler‐Nissen, R., & Eggeling, K. A. (2024). The discursive struggle for digital sovereignty: Security, economy, rights and the cloud project Gaia‐X. JCMS: Journal of Common Market Studies, 62(4), 993-1011.

Akhtar, N., & Iqbal, A. R. (2025). Cyber Sovereignty: National Security in the Digital Age. Lahore Institute for Research and Analysis Journal, 3, 87-104.

Arnold, H. (2011). Frieden und Diplomatie. In Handbuch Frieden (pp. 294-309): Springer.

Balbaa, M. E., Eshov, M. P., & Ismailova, N. (2022). The Impacts of Russian Ukrainian War on the Global Economy in the frame of digital banking networks and cyber attacks. Paper presented at the Proceedings of the 6th international conference on future networks & distributed systems.

Barlow, J. P. (1996). A Declaration of the Independence of Cyberspace. Electronic Frontier Foundation.

Barrinha, A. (2018). Virtual neighbors: Russia and the EU in cyberspace. Insight Turkey, 20(3), 29-42.

Bendiek, A. (2018). The EU as a force for peace in international cyber diplomacy.

Blessing, J. (2021). The global spread of cyber forces, 2000–2018. Paper presented at the 2021 13th International Conference on Cyber Conflict (CyCon).

Creemers, R. (2020). China’s conception of cyber sovereignty. Governing cyberspace: Behavior, power and diplomacy, 107-145.

Dawda, S., Janjeva, A., & Moiseienko, A. (2021). The UK’s Response to Cyber Fraud: A Strategic Vision.

Hall, I. (2006). Systems of states. In The International Thought of Martin Wight (pp. 87-110): Springer.

Hannas, W. C., & Tatlow, D. K. (2020). China’s Quest for Foreign Technology: Beyond Espionage: Routledge.

Hjorthen, F. D., & Pattison, J. (2023). Proportionality in cyberwar and just war theory. Ethics & Global Politics, 16(1), 1-24.

Holtmann, D. (2018). Die Performanz von Politik, Wirtschaft und Gesellschaft für 43 Länder und 6 Wohlfahrtsregime.

Kaloudis, M. (2022). From Quality to Quantity: How Can Digital Sovereignty be Parsed into Measurable Components? European Journal of Business Science and Technology, 2022(2), 172-189.

Kaloudis, M. (2024). Digital Sovereignty as a Weapon of Diplomacy in Cyber Warfare in. National Security in the Digital and Information Age, 17.

Kravets, V. (2019). Comparative analysis of the cybersecurity indices and their applications. Theoretical and Applied Cybersecurity, 1(1).

Krings, G. (2016). Digitale Souveränität. In Digitale Souveränität: Vertrauen in der Netzwerkgesellschaft (pp. 351-356): Springer.

Kristensen, H. M., & Norris, R. S. (2013). Global nuclear weapons inventories, 1945–2013. Bulletin of the Atomic Scientists, 69(5), 75-81.

Kukkola, J., Ristolainen, M., & Nikkarila, J. (2019). Game Player. Facing the structural transformation of cyberspace. Riihimäki, Finnish Defence Research Agency.

Lancelot, J. F. (2020). Cyber-diplomacy: cyberwarfare and the rules of engagement. Journal of Cyber Security Technology, 4(4), 240-254.

Manantan, M. B. F. (2021). Advancing cyber diplomacy in the Asia Pacific: Japan and Australia. Australian Journal of International Affairs, 75(4), 432-459.

Pohle, J., & Thiel, T. (2020). Digital sovereignty. Pohle, J. & Thiel.

Pohle, J., & Thiel, T. (2021). Digitale Souveränität-Von der Karriere eines einenden und doch problematischen Konzepts. In Der Wert der Digitalisierung: Gemeinwohl in der digitalen Welt (pp. 319-340): Bielefeld: transcript Verlag.

Tan, K. L., Chi, C.-H., & Lam, K.-Y. (2023). Survey on digital sovereignty and identity: from digitization to digitalization. ACM Computing Surveys, 56(3), 1-36.

Timmers, P. (2022). Cybersecurity and Resilience from a Strategic Autonomy Perspective. Decoding EU Digital Strategic Autonomy, 137.

Timmers, P. (2024). Sovereignty in the digital age. Introduction to digital humanism, 571-592.

Zimmer, M. (2008). Moderne, staat und internationale politik: Springer.