You are here: 小蓝视频 School of International Service Centers Security, Innovation, and New Technology Russian Cyber Sovereignty: Global Implications of an Authoritarian RuNet

International

Russian Cyber Sovereignty: Global Implications of an Authoritarian RuNet

By |

Just before Russia鈥檚 parliamentary elections began in September 2021, Apple and Google removed that was created and promoted by supporters of jailed opposition leader Alexei A. Navalny. The app was supposed to help voters who opposed Russian president Vladimir Putin consolidate their votes, and it鈥檚 likely the Kremlin viewed this as a threat. Russian authorities put pressure on Apple and Google to take the app down by threatening to prosecute . Acquiescence by the tech giants not only made headlines, it also exemplified one of the many steps that the Kremlin has taken to achieve an authoritarian and isolated version of cyber sovereignty.

A broad of cyber sovereignty is 鈥渢he ability to create and implement rules in cyberspace through state governance.鈥 Today many states claim to have some over the internet. After all, even are able to intervene in cyberspace to protect citizens鈥 privacy online and combat disinformation and cybercrime. But Russia鈥檚 鈥攚hich mimics China鈥檚鈥攄iffers from this broad rule-based definition, as it enables digital authoritarianism, a government鈥檚 use of digital information technology to repress citizens. For Russia, a sovereign internet is one that the Kremlin can control and surveil as well as isolate from the rest of the world.

What Prompted the Kremlin to Pursue Cyber Sovereignty?

Before 2012, although the Russian government traditional media and many dissidents into silence, the Russian-language part of the internet (dubbed ) was fairly free. In the early 2000s, opposition activists could hold on the Russian blogging and social networking site LiveJournal; journalists could and directly communicate with their audiences through personal blogs; and informal groups could come together, a social networking site for Russian speakers that, at one point, was an unregulated environment for communication. These types of digital activities on RuNet the narratives of traditional Russian media.

During the Russian parliamentary and presidential elections that took place 2011-2012, activists took to social media to , while outlets exposed the scale of fraud in the elections and covered the protests. Activists by sharing internet videos that satirized and belittled the Kremlin and by venting their frustrations about Putin鈥檚 decision to run for president after serving as prime minister. When Putin unveiled his campaign website, a swarm of online comments called for . In response to the mass protests and dissenting voices on RuNet, the Kremlin created legal provisions and developed new technologies to crack down on the cyber public square.

Steps Russia has Taken Toward an Authoritarian and Isolated RuNet

Since 2012, the Kremlin has made a number of legal moves that, according to transatlantic relations expert Alina Polyakova and Brookings fellow Chris Meserole, criticism of the government, legalize unfettered surveillance of citizens鈥 online activities, and increase state control of RuNet.鈥 Russian authorities framed the 2012 internet blacklist law as a way to protect children from harmful internet content by allowing the government to blacklist and force websites offline . , Russia鈥檚 media regulator, was put in charge of overseeing online and media content as well as maintaining of blocked sites. Because Roskomnadzor 听any site without accountability, it has placed major independent news sites and websites run by , among others, on the list.

, the Russian government further tightened its grip on RuNet by instituting a strict data localization law. This law mandates that Russian citizens鈥 data be stored on servers . Though the Kremlin has in enforcing the law, tech companies have faced consequences because of it. For example, Russian regulators from operating in the country because the company refused to locate a data center in Russia.

The Yarovaya law鈥攏amed after the Duma member who proposed them, 鈥攊s a set of so-called 鈥渁nti-terrorist鈥 amendments made in 2016, which include provisions that, according to Human Rights Watch, the right to privacy and are detrimental to freedom of expression on the internet.鈥 For example, the amendments certain information and communications technology (ICT) companies retain copies of all communications content (text messages, voice, data, and images) for six months as well as communications metadata for three years. Companies impacted by the amendments must hand over such information to authorities upon request and without a court order. The Kremlin has also created legislation specifically like virtual private networks (VPNs), which allow users to access content that is banned in their countries.

(小懈褋褌械屑邪 芯锌械褉邪褌懈胁薪芯-褉邪蟹褘褋泻薪褘褏 屑械褉芯锌褉懈褟褌懈泄听or, in English, 鈥淪ystem for Operative Investigative Activities鈥)is the Russian government鈥檚 surveillance system first developed by the KGB to monitor phone calls. Over the years, the Russian government has made updates to this system so it could encompass all Russian telecommunications and serve as the FSB鈥檚 backdoor to the internet. Since Putin鈥檚 rise to power, seven law enforcement and security government agencies have also received : the Interior Ministry, Federal Protective Service, Foreign Intelligence Service, Customs, Federal Drug Agency, Federal Prisons Service, and GRU.

In 2019, legislation came into effect to establish the According to the law, internet providers must install Deep Packet Inspection (DPI) equipment to auto-block banned websites, monitor cross-border communication, and allow Roskomnadzor to take the reins 鈥攁 vaguely defined phrase. In other words, the Kremlin could isolate RuNet from the global web at its own discretion. According to the Kremlin, the country successfully tested an unplugged RuNet , and again . Authorities framed both as important tests of the country鈥檚 cyber security.

The Kremlin is further bolstering an isolated RuNet by building alternatives to foreign tech services and onto the Russian public. Russia鈥檚 government has proposed policies the domestic versions, including taxes on foreign digital services, tax cuts for domestic IT firms, and a requirement that digital devices bought in Russia offer Russian software to users when they turn them on. If Russian citizens become dependent on domestic services, then the Kremlin will more easily ban global platforms.

A Model That鈥檚 Tempting Other Countries

Russia鈥檚 digital authoritarianism not only stifles Russian privacy, freedom of expression, and civil society, the model has also become attractive to other countries. If a state wants to tighten its reins on citizens鈥 internet behavior and online content consumption, it can use aspects of Russia鈥檚 RuNet model to do so. , countries in Russia鈥檚 geopolitical sphere of influence have been importing its SORM tech and replicating its legal framework for surveilling domestic citizens.

Aspects of Russia鈥檚 version of cyber sovereignty are expanding to Brazil, India, and Turkey, where policymakers have been that can enable further crackdowns on free expression, privacy, and other human rights. These developments have set off alarm bells for human rights NGOs; one Freedom House report even states that the listed countries 鈥渕ay prove to be the of internet governance.鈥 听

How the US and Big Tech Should Respond

The original of the internet鈥攊dealizing personal freedom and individual rights鈥攈as evolved as states have adapted to it in ways that reflect governments鈥 (though not necessarily citizens鈥) interests. So how should the US and Big Tech respond to the Kremlin鈥檚 tightening grip on RuNet while prioritizing global connectivity?

While the US may not be able to fully preserve internet freedom for Russia鈥檚 citizens鈥攁s well as the citizens of other countries who choose digital authoritarianism鈥攖he US government should continue to coordinate with like-minded democracies to prevent digital authoritarianism from becoming the global cyber norm. The Biden administration, in fact, is already prioritizing such coordination, as the US government has been working on establishing the , which is meant to bring together democratic countries to develop a set of principles for a secure and open internet.

The US should also work with such democracies to develop of internet governance that is more appealing to states than digital authoritarian models are. Just as Russia has been offering SORM technology, the US鈥檚 and Europe鈥檚 tech sectors and policymakers should offer of digital surveillance tech that can improve security while protecting individual privacy and human rights.

Also, Big Tech must tread carefully when responding to the demands of the Kremlin. When Apple and Google removed the Navalny app in September, Navalny鈥檚 supporters and internet freedom advocates response to Russian government pressure. While it鈥檚 true that Big Tech companies influence global internet freedom, and their responses to authoritarian governments鈥 pressure impact the development of global cyber norms, they cannot always push back with blanket refusals鈥攅specially as RuNet heads closer to being fully functional without foreign platforms.

听like YouTube have served as platforms through which Russian online activism could function and flourish, and opposition leaders like Navalny gained an amplified voice because of such companies. In the face of future demands by the Russian government, western giants like YouTube, Google [Alphabet], Twitter, Facebook [Meta], and Apple should weigh whether their presence in Russia, even with Kremlin-set limitations, can help bolster the internet freedom of Russian citizens before deciding whether or not to comply. It may be better to comply and have some sort of presence in Russia rather than to push back and be banned all together (as in the case of LinkedIn).

All in all, the US should respond to Russia鈥檚 cyber sovereignty efforts by continuing its work to establish an internet alliance of like-minded democracies and working to create a democratic model of internet governance that鈥檚 appealing to other states. Meanwhile, Big Tech companies should not refuse all Kremlin requests and instead should calculate what response would best serve Russian citizens. Understanding the Kremlin鈥檚 cyber isolationist efforts is integral, especially since such sovereignty may embolden the country to more aggressively conduct cyberattacks on its neighbors and adversaries. After all, with a RuNet that鈥檚 fully capable of cutting itself off from the rest of the global internet, big tech鈥檚 leverage on Russia is sure to diminish.


About the Author:听

Emily Tavenner is a current graduate student in the School of International Service鈥檚 Intercultural and International Communication program. Her research interests include security, technology, and public diplomacy.


*THE VIEWS EXPRESSED HERE ARE STRICTLY THOSE OF THE 小蓝视频THOR AND DO NOT NECESSARILY REPRESENT THOSE OF THE CENTER OR ANY OTHER PERSON OR ENTITY AT AMERICAN UNIVERSITY.

more_csint_articles