Council of Europe Framework Convention on AI and Human Rights, Democracy, and the Rule of Law

The Council of Europe Framework Convention on Artificial Intelligence and Human Rights, Democracy, and the Rule of Law is the first international legally binding treaty on artificial intelligence. It was adopted by the Council of Europe's Committee of Ministers on 17 May 2024 and opened for signature at Vilnius on 5 September 2024. The treaty sets out general principles for AI systems whose lifecycle activities may affect human rights, democracy, and the rule of law, while leaving signatories substantial latitude in domestic implementation.

Status and timeline

The text was negotiated over several years in the Council of Europe's Committee on Artificial Intelligence (CAI), adopted on 17 May 2024, and opened for signature at Vilnius on 5 September 2024.

Initial signatories at opening included the EU, the UK, the US, Israel, Andorra, Iceland, Norway, Moldova, San Marino, and Georgia. The inclusion of the US makes it one of the few binding international instruments the US has signed on technology governance, though signature is not ratification and domestic ratification processes vary.

The convention requires five ratifications to enter into force, including at least three Council of Europe member states. As of the 2024 G'sell report cutoff, the ratification count was below this threshold, with a handful of states having signed without ratifying.

In September 2026 the UK Parliament's Joint Committee on Human Rights recorded that the convention "has not yet entered into force." Its report states in the text that seventeen states and organisations have signed, while its footnote lists nineteen: the UK, the European Union, Andorra, Armenia, Bosnia and Herzegovina, Georgia, Iceland, Liechtenstein, Montenegro, Norway, Moldova, San Marino, Switzerland, Ukraine, Canada, Israel, Japan, the USA and Uruguay. The same footnote cites Article 30(3) for the five-ratification requirement and records that the EU ratified the convention on 15 May 2025 (Human Rights and the Regulation of AI (Joint Committee on Human Rights, HC 160, September 2026)).

United Kingdom

The UK signed at opening. The then Department for Science, Innovation and Technology wrote to the Joint Committee affirming the Government's intention to ratify, and told it that "the UK's domestic legal framework is consistent with the principles set out in" the convention. The committee found that "no timetable or plan has been set out" for ratification. The Minister for AI, Kanishka Narayan, said "I feel no significant obstacles in us being able to put [the Convention] into effect," but that the programme of work required "is pretty extensive." The Law Society of England and Wales said the UK could be "the first state to ratify," and JUSTICE called for a published ratification plan subject to public consultation (Human Rights and the Regulation of AI (Joint Committee on Human Rights, HC 160, September 2026)).

The committee concluded that the convention "provides a strong basis for both effective regulation of AI within the UK, and collective international action," urged the Government to be "an early adopter" (Conclusion 2), recommended a ratification timeline "detailing what steps will be taken and when," subject to public consultation (Recommendation 3), and recommended a new AI Bill to "give full effect to the Framework Convention" (Recommendation 37). It used the convention's principles on equality and non-discrimination (Article 10), privacy and personal data (Article 11), transparency and oversight (Article 8) and remedies (Article 14) as the frame for its assessment of UK law, and cited Article 16(4), which allows a ban or moratorium on uses incompatible with human rights, democracy or the rule of law, in support of statutory prohibitions (Human Rights and the Regulation of AI (Joint Committee on Human Rights, HC 160, September 2026)).

Scope and definitions

The treaty was drafted by the Council of Europe — a 46-member intergovernmental organization that is distinct from the European Union and includes the UK, Switzerland, and Turkey. Non-CoE states, notably the US, Canada, Japan, Israel, Australia, and Argentina, participated in negotiations as observers and can sign.

The convention focuses on AI systems whose lifecycle activities have the potential to affect human rights, democracy, and the rule of law. Per G'sell (2024), the covered activities are the design, development, use, and decommissioning of AI systems within the scope of the convention. Public-sector actors are clearly covered; private-sector coverage depends on signatory implementation. Signatories may limit full obligations to public-sector AI and apply softer commitments to private-sector AI, a carve-out that G'sell notes reduces the treaty's binding force.

Key provisions

Per G'sell (2024), signatories commit to the treaty's core principles: human dignity and individual autonomy; equality and non-discrimination; privacy and data protection; transparency and oversight; accountability and responsibility; reliability; and safe innovation.

Signatories must take "graduated and differentiated" measures appropriate to risk, in accordance with these principles, and establish "iterative risk and impact management" across the AI lifecycle. The treaty also requires effective procedural guarantees, safeguards, and rights — remedies and redress — for persons affected by AI systems. Beyond these general obligations, detailed implementation is delegated to signatories, and the treaty establishes enforcement mechanisms only in the sense that signatories commit to creating them in domestic law.

G'sell (Ch. 7) identifies several limitations typical of international framework instruments. The provisions are deliberately general, with broad latitude left to signatories. The treaty sets no binding AI-capability or compute thresholds: it does not limit model training compute, capability levels, or systemic-risk categories, so the EU AI Act's substantive obligations are not replicated at the treaty level. There is no international compliance commission; enforcement is domestic, with no cross-border tribunal or monitoring body holding binding authority. There is no mutual recognition, so a system certified as safe in one jurisdiction is not automatically recognized in others. The private-sector carve-out option allows signatories to choose weaker private-sector application, narrowing the treaty's scope.

Comparison with the EU AI Act

G'sell characterizes the Framework Convention as a floor — a statement of shared international principles — rather than a ceiling, with the EU AI Act and domestic legislation doing the operational work.

Reception

G'sell (2024) describes the convention as the first binding AI treaty, setting a precedent that binding international instruments on AI are politically achievable. The joint signature by the US and EU is unusual for a technology-governance instrument. The treaty centers human rights, democracy, and the rule of law, a framing G'sell suggests may prove useful if future negotiations aim at more substantive commitments, and it provides a soft-law reference point that domestic regulators can cite when justifying AI-specific legislation.

The convention sits alongside parallel soft-law instruments: the non-binding The Bletchley Declaration (AI Safety Summit, 1–2 November 2023) (Nov 2023) from the AI Safety Summit, the voluntary Frontier AI Safety Commitments (Seoul, 2024) (May 2024) by frontier labs, and the G7 non-binding G7 Hiroshima Code of Conduct for Advanced AI (2023) (Oct 2023).

Relationships

• related: EU AI Act (Regulation 2024/1689) (provides more detailed operational framework within EU); The Bletchley Declaration (AI Safety Summit, 1–2 November 2023); Frontier AI Safety Commitments (Seoul, 2024); Paris AI Action Summit Declaration (2025) (successor summits); G7 Hiroshima Code of Conduct for Advanced AI (2023).
• depends-on: Regulating Under Uncertainty (the epistemic premise for a cautious, principles-based approach).
• instance-of: Regulatory Typology: Self-Regulation, Co-Regulation, Traditional Government Regulation (international-treaty layer of co-regulation).
• supports: (treaty itself supports) AI Compliance Industry / Regulatory Fragmentation mitigation — though only weakly, given signatory latitude.
• supported-by: Human Rights and the Regulation of AI (Joint Committee on Human Rights, HC 160, September 2026) — UK parliamentary committee report urging early UK ratification and a domestic AI Bill giving the convention full effect.

See also

• Regulating Under Uncertainty: Governance Options for Generative AI (G'sell, 2024) — Ch. 6 extensively covers the Framework Convention