Cybersecurity and International Trade

The report analyzes the tension between national cybersecurity measures—such as data localization, technical standards, and technology bans—and the goal of open digital trade. It finds that while cybersecurity is essential for trust in the digital economy, divergent domestic regulations create market fragmentation and trade barriers. The document evaluates the lack of specific cybersecurity rules in WTO treaties, the emergence of 'soft' aspirational provisions in Preferential Trade Agreements (PTAs) and Digital Economy Agreements (DEAs), and the significant 'cyber capacity' gap facing developing countries and Least Developed Countries (LDCs). It concludes with recommendations for evidence-based domestic frameworks and enhanced international technical assistance to bridge the digital divide.

• The global cybersecurity industry has seen massive growth, with its market size increasing from USD 75 billion in 2015 to USD 193.73 billion in 2024.
• Cyberattacks cause immense economic damage, with the total cost of cyberattacks estimated at USD 9.5 trillion in 2024 and projected to exceed USD 10.5 trillion in 2025.
• Domestic cybersecurity measures, such as data localization and indigenous technical standards, can act as trade barriers by increasing operational costs and creating market fragmentation.
• WTO treaties lack specific cybersecurity disciplines, meaning countries must rely on general or security exceptions to justify trade-restrictive cybersecurity measures, which leads to legal uncertainty.
• Recent Preferential Trade Agreements (PTAs) and Digital Economy Agreements (DEAs) are introducing cybersecurity provisions, but most remain 'soft' and aspirational, focusing on voluntary cooperation rather than binding obligations.
• Some recent trade agreements include 'self-judging' security exceptions, allowing countries to impose cybersecurity measures that cannot be disputed by other parties before a trade tribunal.
• Developing countries and LDCs face a significant 'cyber capacity' gap, often scoring poorly on the ITU's Global Cybersecurity Index due to limited regulatory capacity and technical expertise.
• The African Continental Free Trade Area Digital Trade Protocol is currently the only PTA that includes detailed provisions on cybersecurity capacity-building and technical assistance.

APA

Mishra, N. (2025). Cybersecurity and International Trade. International Institute for Sustainable Development. https://www.iisd.org/system/files/2025-08/cybersecurity-international-trade-policy.pdf

Chicago

Mishra, Neha. Cybersecurity and International Trade. International Institute for Sustainable Development, 2025. https://www.iisd.org/system/files/2025-08/cybersecurity-international-trade-policy.pdf.

Wikipedia

{{cite report |last1=Mishra |first1=Neha |title=Cybersecurity and International Trade |publisher=International Institute for Sustainable Development |date=August 2025 |url=https://www.iisd.org/system/files/2025-08/cybersecurity-international-trade-policy.pdf |access-date=23 October 2026 |via=Climate Insights Directory}}

BibTeX

@techreport{mishra2025cybersecurity, author = {Mishra, Neha}, title = {{Cybersecurity and International Trade}}, institution = {International Institute for Sustainable Development}, year = {2025}, month = aug, url = {https://www.iisd.org/system/files/2025-08/cybersecurity-international-trade-policy.pdf}, urldate = {2026-10-23}, note = {Indexed by Climate Insights Directory} }