The Legal Boundaries of Digital Autonomy: AI Agency, Liability in Cyber Operations, and New Threats to Individual Protection

The rapid emergence of digital autonomy, encompassing advanced artificial intelligence, autonomous cyber systems, and algorithmic decision-making, is reshaping the foundations of legal responsibility and human rights protection. Traditional doctrines of liability, grounded in human agency, intent, and foreseeability, struggle to address harms caused by systems whose actions are opaque, adaptive, and often unforeseeable even to their designers. Negligence and strict liability doctrines prove inadequate, while proposals for electronic personhood risk creating accountability vacuums. More promising are risk-based liability frameworks and insurance mechanisms that ensure compensation while distributing responsibility proportionally to systemic risks. At the international level, autonomous cyber operations destabilize established legal categories, challenging definitions of “armed attack” under Article 51 of the UN Charter and undermining compliance with principles of distinction, proportionality, and attribution under international humanitarian law. The unpredictability of autonomous systems complicates state responsibility, highlighting the urgent need for new international instruments that mandate human oversight, impose transparency, and ensure accountability for deployment. Equally significant are the impacts on individual rights. Algorithmic bias perpetuates systemic discrimination; behavioral manipulation erodes personal autonomy and freedom of thought; and mass data processing undermines privacy and democratic participation. Existing human rights protections must be reinterpreted and reinforced through algorithmic transparency requirements, impact assessments, independent oversight bodies, and effective remedies. This article concludes that legal systems must shift toward a human-centered paradigm that reasserts accountability, transparency, and dignity as guiding principles. Only by embedding human rights protections into the design and governance of autonomous systems can law preserve its legitimacy while enabling innovation to serve humanity rather than threaten it.