GENEVA – The landscape of global conflict is undergoing a profound and dangerous transformation. According to a landmark report presented this week to the 63rd session of the UN Human Rights Council, the traditional image of the mercenary—a soldier of fortune operating with a rifle—is being rapidly eclipsed by a new, digitized reality. The UN Working Group on the use of mercenaries has officially sounded the alarm on "technology-enabled mercenarism," warning that the integration of artificial intelligence (AI), commercial spyware, and automated information warfare is creating an unprecedented crisis of accountability in international law.
As these private actors gain capabilities once reserved for sovereign states, the legal frameworks designed to govern warfare and protect human rights are struggling to keep pace. The result, experts warn, is a growing "responsibility gap" that threatens to leave victims of human rights abuses without justice or recourse.
The Main Facts: Defining "Technology-Enabled Mercenarism"
At the heart of the UN’s findings is the realization that private military and security companies (PMSCs) are no longer just providers of physical security. They have evolved into high-tech service providers that leverage the digital economy to facilitate conflict.
"Technology-enabled mercenarism" refers to the provision of sophisticated military and security services—such as cyber-attacks, surveillance, intelligence gathering, and automated psychological operations—by private entities for profit. These actors are increasingly blurring the lines between corporate service providers and combatants.
The UN report highlights several key pillars of this phenomenon:
- Surveillance Infrastructure: The deployment of commercial spyware allows non-state actors to extract biometric data, private communications, and geolocation history from targeted individuals, often for the purpose of identifying dissidents or planning extrajudicial actions.
- Information Warfare: Utilizing AI-driven social media bots and deepfake technology, these groups can manipulate political narratives, destabilize regions, and facilitate the illegal recruitment of vulnerable populations, including children.
- Asymmetric Capability: Private actors now possess tools that rival the intelligence-gathering and strike capabilities of medium-sized militaries, allowing them to operate with a level of precision and anonymity that challenges state sovereignty.
Chronology: The Escalation of Private Digital Power
To understand how we reached this inflection point, it is necessary to examine the trajectory of the private security sector over the last decade:
- 2015–2018 (The Rise of Digital Surveillance): The initial emergence of high-end commercial spyware began to capture the attention of human rights monitors. During this period, the use of sophisticated surveillance tools by private actors became a recurring theme in reports on political repression.
- 2020–2022 (Expansion into Information Operations): As social media platforms became the primary battleground for political discourse, PMSCs began offering "influence operations" as a standard service, moving beyond physical protection into the realm of digital destabilization.
- 2023–2025 (The AI Inflection Point): The rapid advancement and accessibility of Generative AI allowed private companies to lower the cost of operations while increasing their reach. Automated propaganda and the use of proprietary algorithms for "target acquisition" became prevalent.
- September 2026 (The UN Call to Action): During the 63rd session of the UN Human Rights Council, the Working Group formalized the term "technology-enabled mercenarism," signaling that the international community has reached a consensus that the current regulatory vacuum is untenable.
Supporting Data: The Anatomy of a Responsibility Gap
The UN report provides a chilling look at why accountability is failing. The "responsibility gap" is not an accidental byproduct of modern tech; it is often a feature built into the business models of these actors.
The Complexity of Supply Chains
Modern technology-enabled operations involve a convoluted web of developers, intermediaries, and end-users spread across multiple legal jurisdictions. For example, an AI model developed in one country may be licensed to a shell company in a tax haven, which then provides a "security service" to a non-state actor in a conflict zone. When that operation leads to a violation of human rights, investigators find it nearly impossible to trace the chain of authorization.
Obfuscation Tactics
The Working Group identified several mechanisms used to shield actors from scrutiny:
- Opaque Corporate Structures: The use of nested shell companies makes it difficult to determine the ultimate beneficial owners of PMSCs.
- Cryptocurrency Transactions: By utilizing decentralized finance, these actors bypass the global banking system, which traditionally acts as a point of oversight for illicit financial flows.
- Encryption and Cloud Architecture: By hosting operations on encrypted, distributed cloud systems, these entities ensure that evidence of their activities remains inaccessible to law enforcement or international investigators.
- Black-Box Algorithms: Proprietary AI models are essentially closed systems. Because investigators cannot audit the training data or the logic behind an AI-driven decision, proving that a system was programmed to commit a human rights violation is often legally impossible under current evidence standards.
Official Responses and Diplomatic Discourse
The presentation of the report triggered significant debate within the Human Rights Council. Member states, particularly from the European Union and the Global South, expressed varying degrees of concern regarding how to reconcile national security interests with the need for international regulation.
The EU representative at the session emphasized that while technological innovation is inevitable, the "outsourcing of state-level violence to the private sector" must be reined in through updated international standards. Conversely, some nations raised concerns about the potential for over-regulation to stifle legitimate cybersecurity and defensive technology development.
The Working Group itself maintained a firm stance: "The evolution of technology does not absolve actors of their responsibilities under international law." They reiterated that existing international humanitarian law and international criminal law apply regardless of whether an operation is conducted via a physical weapon or a lines-of-code attack.
Implications: The Future of Global Conflict
The findings of the UN Working Group carry profound implications for the future of global security and human rights.
1. The Erosion of State Monopoly on Force
Historically, the Westphalian system is built on the state’s monopoly over the legitimate use of force. The rise of tech-enabled mercenarism suggests that this monopoly is being hollowed out from the inside. When private companies can provide superior surveillance or cyber-offensive capabilities to any client with the budget, the state loses its role as the primary arbiter of conflict.
2. The Difficulty of Attribution
In traditional warfare, attribution is relatively straightforward. In digital-mercenary conflicts, attribution is a "wicked problem." Without clear attribution, the international community cannot impose sanctions, initiate criminal prosecutions, or demand reparations. This impunity invites further escalation, as actors feel emboldened to push the boundaries of legality.
3. The Need for "Human-in-the-Loop" Mandates
One of the most critical recommendations from the UN experts is the enforcement of "meaningful human control" over military systems. As AI becomes more autonomous, there is a risk that the decision to use force—or to target an individual—will be delegated to algorithms. The Working Group argued that states must codify a requirement that a human must always be the final decision-maker in any operation involving the use of force, thereby ensuring that there is always a subject who can be held legally accountable.
4. Regulatory Reform
The Working Group called for a radical increase in transparency requirements. This includes:
- Mandatory Human Rights Due Diligence: Technology companies must be legally required to assess the potential for their products to be used in human rights abuses.
- Standardized Oversight of PMSCs: A global framework that requires PMSCs to register their capabilities and report their clients, similar to how arms trade is regulated.
- Remedies for Victims: Establishing a mechanism for individuals affected by technology-enabled violations to seek legal redress, even when the perpetrator is a private entity operating across borders.
Conclusion: A Race Against Time
The UN Working Group’s warning is clear: the technology is already here, and the mercenary entities are already using it. The "responsibility gap" is widening with every passing day as AI models improve and the global digital infrastructure becomes more interconnected.
The challenge now falls to the international community to move beyond rhetoric. As the report concludes, "The failure to adapt our legal mechanisms to the realities of the digital age is not merely a bureaucratic oversight; it is a direct invitation for further suffering." Whether states can summon the political will to regulate these powerful private actors—or whether the digital frontier will remain a lawless space—remains the defining question of modern international security.
