Currently the UK does not have a specific anti-cyberterrorism law, instead relying on existing anti-terrorism laws to deal with cyberterrorism. This approach raises a number of problems insofar as it can lead to legislative uncertainty and unpredictability, as well as impacting on carrying risks of over-criminalisation, a lack of counterbalance, violation of principles of proportionality and arbitrariness. In light of these problems, this article aims to offer a critical evaluation of the UK’s existing legal responses to cyberterrorism with reference to the rule of law and basic human rights principles, mainly focusing on the vague and overly broad definition of terrorism, a tendency towards criminalising a wide range of terrorism precursor offences online, pre-emptive strategies and aggravated punishment of cyberterrorism. Based on this analysis, the article argues that applying the extension of existing anti-terrorism laws to combat low-risk cyberterrorism activities runs the risk of exacerbating harms to the values of the rule of law.