In October 2021, North Macedonia became one of the first countries among the Western Balkans partners to issue a digital ID to its citizens [x]; the deployment of the digital identity project is only indicative of the country’s turn towards digitalisation and e-government. With a total population of about 2.08 million, Internet penetration in North Macedonia stands at 84%, while data shows that there are about 2.25 million cellular mobile connections. [x] The rapid drive towards digitalisation, but also its accompanying risks and vulnerabilities, are accounted for by the 2022 Cybersecurity Strategy, the country’s first comprehensive cybersecurity strategy. The document largely reflects the country’s European ambitions and is explicitly based on the “principles of the Cybersecurity Strategy of the European Union and the NATO Cyber Defence Pledge”.

El Salvador is known for its adoption of Bitcoin as a legal tender in 2021. El Salvador’s internet penetration rate stood at 50.5 % of the total population at the start of 2022, with over 4 million social media users. El Salvador is making important progress towards digitalisation in terms of infrastructure capacity and reliability, but there are still challenges to overcome, such as access and affordability to internet connections, especially in rural areas. Regarding data protection, El Salvador still lacks a comprehensive data protection law, although the country has made improvements in the past years.

Nigeria is Africa’s most populous country with a population of 211 million people. Nigeria also has the continent’s largest economy, with a total GDP of $440 billion. Nigeria only emerged as Africa’s largest economy in 2014, overtaking South Africa after a GDP rebasing exercise which accounted for the contribution of emerging sectors of the economy, such as the Information and Communication Technology (ICT) sector. Nigeria’s economy had hitherto been petroleum dominated. In Q4 2021, the ICT sector of the economy contributed 15% to GDP, compared to 5% for the oil and gas sector. The percentage of people who use the Internet in Nigeria is 28%, largely through mobile networks. 91% of the population is covered by a mobile network (i.e. 74% by at least a 3G network and 41% by at least a 4G network). Huawei and ZTE have been responsible for constructing major parts of Nigeria’s broadband network (4G, LTE and 5G). Mobile phone subscription coverage is 99% of the population. Active mobile broadband subscription is 42% of the population, while fixed broadband connection is negligible, under 1%. Nigeria has 6 international submarine cables bringing at least 40TB capacity to its shores. There are 7 Internet Exchange Points (IXPs) in Nigeria with 71 peering networks. NigComSat-1, a communications satellite, made possible by cooperation between Nigeria and China, was launched in May 2007. Nigeria has plans to purchase 2 more communications satellites by 2025. Nigeria banned cryptocurrencies in 2021, but floated perhaps Africa’s largest digital currency the e-naira the same year. Despite the cryptocurrency ban, it is still in use in the country although hosted in foreign accounts.
The European Union is a significant partner in Nigeria’s cyberspace. For example, through its EU-Nigeria Digital Economy Package (Global Gateway Initiative), the EU plans a 820 million Euros investment to support Nigeria’s digitalisation strategy through digital infrastructure investments, digitalisation of public services, digital entrepreneurship, digital skills, and digital governance. However, the EU faces strong competition from China, whose investment in Nigeria’s telecommunications sectors is estimated to be $US 16 billion. China also helped manufacture and launch Nigeria’s Communications Satellite and has an equity stake in the parent satellite communications company. Huawei has been an important partner of the Nigerian government in building smart cities and e-government applications in an effort to improve government public services. Nigeria’s cyberspace is governed by several agencies including the Nigerian Communications Commission (NCC) and the National Information Technology Development Agency (NITDA).

At the first substantive session of the 2021-2025 UNGGE, recalling its candidate status, North Macedonia aligned itself with the EU’s statement that the existing corpus of international law, notably the UN Charter, international humanitarian law, and international human rights law, apply in cyberspace in its entirety. In particular, this includes the principle of state sovereignty, sovereign equality, the settlement of disputes by peaceful means, the provision of the use of force non-intervention in the internal affairs of other states, and the respect for human rights and fundamental freedoms as principles of international law that are applicable to states use of ICTs in cyberspace. [x] North Macedonia has also consistently aligned itself with the EU position in a number of key resolutions at the United Nations, including resolutions A/73/27 and A/74/29.

El Salvador has supported, along with several other states, a Russian-backed proposal to develop a new binding legal instrument to govern responsible state behaviour in cyberspace. It’s the Salvadoran position that the absence of legislation is the main obstacle towards fighting cybercrime internationally.

Nigeria’s stance on international law in cyberspace is primarily shaped by its traditional concern over the growing proliferation of global cybercrime. Nigerian diplomats have emphasised the need for a proper legal framework that reflects the ideals and current trends within the African region. Nigeria has neither signed nor ratified the African Union (UN) Convention on Cybersecurity and Personal Data Protection. Less has been said, however, about the application of international law in cyberspace more generally. However, On 6 July 2022, Nigeria acceded to the Council of Europe Convention on cybercrime. The Convention entered into force in Nigeria on 1 November 2022.

At the first substantive session of the 2021-2025 UNGGE, North Macedonia aligned itself with the EU’s position that the previous UNGGE and OEWG reports, including corresponding UNGA resolutions adopted by consensus, form the unequivocal basis for “any further discussions on the position, role, and implementation of the voluntary non-binding norms, rules and principles of state behaviour in cyberspace (norms)” [x]. North Macedonia was also the only EU candidate country to have co-sponsored the 2020 Programme of Action (PoA), which explored the possibility of ending the dual-track discussions (UNGGE/OEWG) in favour of a permanent UN forum.

El Salvador has been actively involved in promoting a safe cyberspace. The Latin American country, back in 2015, signed a memorandum of understanding with the UN Office on Drugs and Crime to support the fight against cybercrime, with training in capacity building, prevention and cooperation.
El Salvador has expressed views on the use of information and communications technologies for criminal purposes at the UNGA. As part of their statement, it was noted the lack of regulation obliging network administrators of public, private, or non-profit institutions to establish, maintain, and safeguard the connection logs of their internal clients, which can be exploited for the commission of traditional crime and cybercrime.
As part of the OEWG discussions, El Salvador has identified the norm regarding ICT product supply chains as the most important for states, in addition to proposing that the OEWG highlights the efforts and progress that countries are making in cybersecurity, making the spirit of cooperation in this area clear.

Nigeria has been an active participant in the OEWG, contributing to the 2021 consensus report. Nigeria’s position acknowledges the applicability of existing international laws in cyberspace and supports the call for the operationalisation of the 11 Norms of responsible behaviour in cyberspace to address its current challenges. Nigeria also upheld the conclusions of the final report of the GGE: that the precedence set by the 2021 OEWG should be a baseline for international cooperation because of the inclusive nature of stakeholder participation.

The 2018-2022 Cybersecurity Strategy dedicates a full section to cyber resilience and the protection of ICT infrastructure. The stated objectives include expanding the capabilities of the national CERT (MKD-CIRT), identifying types of critical infrastructure, developing national procedures for cyber crisis management, developing incident reporting and monitoring mechanisms, and establishing a single and comprehensive legal framework for cyber resilience. In 2021, upon joining NATO, North Macedonia signed a Memorandum of Understanding aiming at enhancing cyber defence cooperation between NATO and the country’s defence authorities; the MoU particularly focuses on information-sharing, exchanging best practices, and increasing resilience. [x]

El Salvador has taken steps towards addressing cybercrime by establishing a Cybersecurity Policy which aims to ensure the resilience and security of strategic assets. It lays out criteria to develop cybersecurity capacities aimed at protecting critical infrastructure, strengthening response mechanisms, and developing technical and administration skills so that the public and private institutions in El Salvador as well as citizens are aware of cybersecurity and risks related to the use of information technologies.

In the International Telecommunication Union (ITU) Cybersecurity Index 2020 which measures commitment to cybersecurity amongst its members , Nigeria ranked 47^th in the world, and 4^th within the African region. In 2021, Nigeria published the updated National Cybersecurity Policy and Strategy, which lays out detailed cybersecurity obligations for different private sector and public sector actors in critical national information infrastructure (CNII) protection and resilience within a context of multiple stakeholders. The National Cybersecurity Policy and Strategy, together with the Cybercrime Act, are the major policy instruments governing cybersecurity in the country.
The Global Cyber Security Capacity Centre (GCSCC) at Oxford University, in 2018, reviewed the maturity of cybersecurity capacity in Nigeria at the behest of the Office of the National Security Adviser (ONSA), using the Cybersecurity Maturity Model (CMM). Nigeria’s CMM report indicated a maturity stage of either start-up or formative stage (maturity stages 1 and 2 out of 5 stages) for the majority of factors, suggesting opportunities for investment. The United Kingdom has pledged some of this necessary investment, with Nigeria set to benefit from a £22 million investment package which aims to support resilience in Africa and the Indo-Pacific region.

North Macedonia has ratified the Budapest Convention and its Additional Protocol [x]. Nevertheless, full harmonisation of the Macedonian legal regime with Budapest provisions is still a primary issue. In terms of institutional setup, analysis has pointed out that North Macedonia is lagging behind compared to other countries in the Western Balkans [x]. That said, the 2018-2022 Cybersecurity Strategy identifies several priorities regarding the “prevention, research, and adequate response” to cybercrime. These include: harmonising the national with international policies; developing a single, comprehensive legal framework for cybercrime; modernising authorities in charge of cybercrime; establishing formal procedures of information exchange; participating actively in the creation of international cybercrime regulations and standards, as well as their implementation on a national level; and providing continuous education and training for law enforcement entities in the field of cybersecurity, cybercrime, and electronic evidence. The country’s law enforcement authorities regularly cooperate with Europol, following the conclusion of a strategic agreement in 2007 and an operational agreement in 2011. [x]

El Salvador has its own legal framework regarding cybercrime, dating back to 2016, but updated during Bukele’s government, called Special Law against Cybercrime and Related Offenses. The bill establishes a series of crimes related to computer systems and electronic communication, such as unauthorised access to computer systems, the production and dissemination of malicious software, and computer fraud.

The Nigerian 2020-2030 National Digital Strategy, which is in line with the African Union Digital Transformation Strategy 2020-2030, emphasises the significance of adopting ‘collaborating approaches’ to fighting cybercrime; it specifically notes that ‘cybersecurity is not a local issue and it requires collaboration with relevant institutions around the globe’. In 2019, the country voted in favour of UNGA resolution 74/247, which established an Ad Hoc Committee to draw up an international convention on cybercrime. The Nigerian position paper prior to the launch of the first substantive session noted the ‘urgent need to define and sanction criminal conduct in cyberspace, improve synergy in trans-national policing capabilities, improve procedural tools and reform/enhance international cooperation, whilst respecting human rights’. In its capacity as a member of ECOWAS, Nigeria has participated in several socialisation-based capacity-building initiatives, including the OCWAR-C project, the GLACY+ workshops and the African Forum on Cybercrime (organised by the African Union).