Sovereign Darkness: Iran’s Internet Blackout and the Four-Body Problem of International Law

By 21 April 2026, Iran’s internet blackout had entered its fifty-third consecutive day, the longest nationwide internet disruption ever recorded (NetBlocks; IODA Iran shutdown report). Connectivity remained at approximately one per cent of pre-war levels. The shutdown was costing the economy an estimated $35–40 million per day in direct losses, rising to $70–80 million when indirect effects were included, with approximately one billion dollars of accumulated damage by day fifty; online sales fell by eighty per cent (NPR). Hospitals operated in an information vacuum, reporting critical shortages of blood and supplies (The Lancet). People crossed the Turkish border for internet access (NPR). Starlink terminal users faced up to ten years’ imprisonment, or execution (IranWire).

The Iranian government imposed this blackout itself. It began on 28 February 2026, hours after U.S.-Israeli airstrikes triggered the conflict, and was administered by the Supreme National Security Council; Iran’s Ministry of Information and Communication Technology stated that the shutdown was, in part, reducing incoming cyberattacks (CNBC). The infrastructure was deliberately routed onto a domestic National Information Network, a state-controlled intranet, with access granted selectively to favoured groups whilst the broader population remained disconnected.

The legal question this raises appears deceptively simple: what does international law say about a state that severs its own population from the internet during wartime? The answer requires navigating not three bodies of law, as most commentators have suggested, but four. State sovereignty over domestic infrastructure, international human rights law (IHRL), and international humanitarian law (IHL) are the familiar three. The fourth, the emergence of a private satellite operator as the de facto guarantor of the right to communicate for a civilian population under wartime shutdown, and the complete absence of any international legal framework to govern that role, is the dimension that existing scholarship has not yet confronted. Together, the four produce a structural lacuna that is not merely a gap in doctrine but a failure of the state-centric architecture of international law itself.

Sovereignty: The Argument and Its Internal Contradiction

Under UN Charter Articles 2(1) and 2(7), establishing sovereign equality and protecting matters “essentially within the domestic jurisdiction of any state”, states exercise sovereign authority over their territory and its infrastructure. A state’s telecommunications networks are sovereign property. The decision to restrict or shut down domestic internet connectivity falls, in principle, within the domestic jurisdiction that international law does not, as a general matter, penetrate.

Iran has made this argument explicitly and in advance. In its 2020 national position on the application of international law in cyberspace, one of over thirty such positions published in the context of the UN Group of Governmental Experts process, Iran adopted a maximalist interpretation of cyber sovereignty, arguing that any intrusion into cyber infrastructure under state control may constitute a violation of that state’s sovereignty. This position is more expansive than even the Tallinn Manual 2.0, which requires a de minimis threshold of interference before a sovereignty violation is established. Iran, alongside France, rejected that threshold entirely.

Iran’s position is not an aberration. It reflects a structural feature of how sovereignty discourse operates in cyberspace. China’s 2017 International Strategy of Cooperation on Cyberspace asserts an identical principle: internet governance is a sovereign prerogative, and external interference with domestic digital infrastructure constitutes a sovereignty violation. Russia operationalised the same logic through its Sovereign Internet Law (2019), which created the technical and legal architecture for domestic internet isolation. India has adopted increasingly similar framing in its engagement with UN cybersecurity processes. Iran’s maximalism is the outer edge of a trend, not an outlier. What makes Iran’s case distinctive, and legally untenable, is the direction in which that logic was simultaneously deployed.

On 10 February 2026, at a meeting of the UN Committee on the Peaceful Uses of Outer Space in Vienna, Iranian representatives formally accused Starlink of violating Iran’s sovereignty, describing terminal operations inside the country as the “illegal operation” of an “unauthorized military use of a commercial satellite mega-constellation.” Iran invoked sovereignty to shut down the internet for its population. It then invoked sovereignty again to condemn the satellite network that was partially restoring connectivity to that same population. The same legal concept, deployed in the same week, to justify the deprivation and to prohibit the remedy.

This is not merely a political contradiction. It is a doctrinal one. A state cannot coherently claim sovereignty as the basis for imposing a connectivity blackout and simultaneously as the basis for prohibiting the private infrastructure that fills the resulting void, unless sovereignty means something so capacious that it licenses whatever the state chooses to do, which is to say that it means nothing at all as a constraining principle.

IHRL: What the Framework Cannot Do That Iran Requires It To

Sovereignty does not suspend Iran’s treaty obligations towards its own population. Iran ratified both the ICCPR and the ICESCR in 1975. HRC General Comment 34 confirmed that ICCPR Article 19’s protections, the right to “seek, receive and impart information and ideas of all kinds”, extend to the internet as a medium, and that restrictions must be “provided by law and necessary” (Article 19(3)). The 2015 Joint Declaration by UN human rights mandate holders held that blanket internet shutdowns can never satisfy that three-part test. Human Rights Watch applied this framework to Iran’s 2026 shutdown and concluded it was unjustifiable under either IHRL or IHL. The Lancet documented the blackout’s direct impact on hospital operations, staff unable to access networked systems, critical shortages of blood and supplies, as directly engaging Iran’s ICESCR Article 12 obligations, which protect “the right of everyone to the enjoyment of the highest attainable standard of physical and mental health” and carry no derogation equivalent.

What is distinctive about Iran’s case is not the applicability of the framework. It is the relationship between Iran’s treaty obligations and its deliberate institutional architecture. Iran built the National Information Network precisely as a parallel structure capable of substituting for global internet access whilst preserving state control. The blackout is not a breakdown; it is the system working as designed. This distinguishes Iran from a wartime disruption caused by infrastructure damage. The infrastructure was not destroyed. It was redirected. The IHRL question is therefore not merely whether the shutdown satisfies the proportionality and necessity test, it is whether a state can, consistently with its treaty obligations, construct a parallel communications system specifically engineered to make blanket shutdown legally defensible as a domestic infrastructure decision.

ICCPR Article 4 permits derogation “in time of public emergency which threatens the life of the nation,” provided measures are “strictly required by the exigencies of the situation” and notified to the UN Secretary-General under Article 4(3). The formal derogation pathway exists. Iran has not used it. HRC General Comment 29 places the burden of demonstrating strict necessity on the derogating state, and the Committee retains authority to assess that justification. Iran’s failure to derogate forecloses the legal justification that derogation would otherwise provide, leaving its IHRL obligations unmodified on paper whilst entirely suspended in practice.

This is the first layer of the gap. IHRL supplies the norm. The Human Rights Committee has no coercive power, the Security Council is paralysed by the conflict’s geopolitical structure, and no regional mechanism applies to Iran. The norm is present; the mechanism to give it effect is absent.

IHL: The ICRC’s Contested Move and the Precautions Problem

The concurrent application of IHL to armed conflict is settled doctrine, reaffirmed by the ICJ in the Nuclear Weapons Advisory Opinion (1996), the Wall Advisory Opinion (2004), and Congo v Uganda (2005). Where IHL and IHRL conflict, IHL operates as lex specialis, but only in respect of matters IHL directly governs. Marko Milanovic’s critique of lex specialis as a conflict-resolution principle is instructive: the principle resolves norm conflicts but cannot fill a normative lacuna. In Iran’s blackout, the problem is not a conflict between IHL and IHRL norms, it is the absence of a directly applicable IHL norm. The gap is not between the frameworks; it is beneath them.

Additional Protocol I Article 48 requires parties to “distinguish between the civilian population and combatants and between civilian objects and military objectives and accordingly…direct their operations only against military objectives.” This rule presupposes an operation directed outward, against an adversary. It does not speak to the decision to sever one’s own population from a global network.

The more analytically promising provisions are the precautions framework: Article 57(1), which requires that “constant care shall be taken to spare the civilian population, civilians and civilian objects,” and Article 58, which obliges parties “to the maximum extent feasible” to “endeavour to remove the civilian population…from the vicinity of military objectives” and to “avoid locating military objectives within or near densely populated areas.” Iran’s National Information Network has done the inverse. By routing all civilian communications through a state-controlled intranet, Iran has deliberately conflated its civilian communications layer with its military infrastructure. The result is not the separation Articles 57–58 require but their structural negation: the civilian communications layer has been placed inside the military objective rather than removed from it. If adversary forces have grounds to treat Iran’s digital infrastructure as a military objective, and the dual-use architecture of the National Information Network gives them substantial grounds, Iran’s civilian population has been structurally exposed by its own government’s design choices.

The ICRC addressed the broader gap in a July 2025 paper by Legal Adviser Tilman Rodenhäuser, arguing that IHL constrains connectivity disruptions whether caused by a belligerent against an adversary’s infrastructure or self-imposed by a state over its own territory. The October 2024 resolution of the 34th International Red Cross and Red Crescent Conference, adopted by consensus, explicitly recognised the importance of connectivity for civilian protection. Iran’s blackout is the first real-world test of whether the ICRC’s July 2025 position can do any normative work. The answer, at present, is that it cannot, not because the argument is wrong, but because there is no forum in which it can be adjudicated.

The Fourth Body: Private Infrastructure, Absent Law

The three-body problem would be complex enough. The fourth dimension makes it structurally novel.

During Iran’s blackout, Starlink became, partially and imperfectly, the communications infrastructure for a civilian population that its own state had disconnected from the world. The Trump administration covertly moved approximately 6,000 Starlink terminals into Iran. SpaceX waived subscription fees for Iranian users. Tens of thousands of smuggled terminals enabled some Iranians to communicate, access information, and document events that would otherwise have been invisible to the outside world.

International law has no framework for this. The Tallinn Manual addresses states. IHRL addresses states. IHL addresses parties to armed conflict. None addresses the obligations, accountability, or legal status of a private satellite operator whose infrastructure becomes, in wartime, the de facto substitute for a state-controlled communications network that a government has deliberately disabled. Three questions arise that existing scholarship has not answered.

First, do the UN Guiding Principles on Business and Human Rights impose a responsibility on SpaceX to respect human rights when its infrastructure becomes the de facto communications layer for ninety million people? The UNGPs establish a corporate responsibility to respect human rights under Pillar Two, but they are non-binding and were not designed for situations in which a private satellite constellation functions as a nation’s entire civilian communications infrastructure in an armed conflict. Whether the UNGPs reach wartime operations of this character remains entirely unaddressed.

Second, should Starlink be treated as a humanitarian actor for IHL purposes? An emerging discourse on “digital humanitarianism” asks whether providers of critical communications infrastructure in conflict settings should attract protections and bear obligations analogous to those of humanitarian organisations. The ICRC’s November 2025 analysis of civilian ICT involvement in armed conflict and its April 2026 paper on upholding IHL protections for ICT activities have begun to press this question. If Starlink is a humanitarian actor, its operations would attract IHL protections. If it is not, it is simply a commercial operator in a conflict zone, and Iran’s jamming and criminalisation, however disproportionate, have no settled legal prohibition.

Third, is Starlink a neutral service provider or a party-adjacent actor? Article 54 of the Hague Regulations 1907, which prohibits the seizure or destruction of “submarine cables connecting an occupied territory with a neutral territory…except in the case of absolute necessity”, reflects a longstanding recognition that communications infrastructure serving civilian functions warrants protection even in wartime. If Starlink’s role is understood as analogous to that of a neutral communications carrier, it should attract something like those protections. But if its terminal network is functionally integrated into military command-and-control, as Iran alleged, the neutrality claim collapses. The dual-use problem, which IHL was not designed to resolve for private satellite operators, determines everything.

Iran’s response, criminalisation, jamming, espionage charges, UN sovereignty claims, proceeded in the complete absence of any applicable legal framework. The operator is not a state. The conduct is not regulated. The accountability framework does not exist. As connectivity from orbit becomes the fallback communications infrastructure for civilian populations under wartime shutdowns, as it already has in Ukraine, Gaza, and now Iran, this is not a technical gap. It is a structural failure of international law to account for the privatisation of the communications layer that human rights depend upon. For further context, see the Armed Groups International Law Blog.

What the Four-Body Problem Requires

The Iran blackout does not call for new law alone. It calls for intellectual honesty about what existing law can and cannot do.

IHRL supplies clear norms and no enforcement. Sovereignty, deployed in two directions simultaneously, has demonstrated its incoherence as a constraining principle. The ICRC’s July 2025 position is the right direction of travel, but the precautions framework of Additional Protocol I Articles 57–58 may prove more tractable than the targeting rules, and Iran’s National Information Network is the test case for that argument. The emergence of private satellite infrastructure as a wartime communications lifeline has created a void that none of the existing frameworks was designed to fill.

What the scholarly community owes to this moment is not a tidy synthesis. It is a recognition that the state-centric architecture of international law, built on the assumption that states control the communications infrastructure of their populations and that international law regulates states, has been structurally disrupted by a private company operating from orbit.

In my view, two trajectories are now live. The first is doctrinal expansion within existing frameworks: progressive development of IHL’s precautions rules, rigorous application of IHRL derogation scrutiny to deliberately designed blackout architecture, and extension of the UN Guiding Principles to wartime satellite operations. This is the path of incremental adaptation, and it is already under way. The second is more fundamental: a reconceptualisation of wartime civilian protection around the reality that duty-bearers and infrastructure-controllers are no longer the same entity. If the communications layer on which human rights depend is privately owned and operated from orbit, the legal framework for civilian protection must account for an actor it was not built to see.

More than fifty days of darkness is a long time to wait for doctrine to catch up. The Iran blackout has not resolved this question. It has made it impossible to defer.