Law / Congo (Democratic Republic)
Digital Code, Book IV: Unauthorized Access to a Computer System
Code du numérique Livre IV, Sécurité et protection pénale des systèmes informatiques, Ordonnance-loi n° 23/010 du 13 mars 2023 (arts. 330 à 334)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 13 March 2023.
A computer misuse rule binding public and private bodies.
As of 7 September 2026.
What it requires
- Do not access, or maintain access to, all or part of a computer system without authorization and with fraudulent intent.
- Do not exceed your lawful access authority over a computer system with fraudulent intent or intent to harm.
- Do not suppress, obtain, or modify data in a computer system, or alter its functioning, through unauthorized access.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Unauthorized or fraudulent access to a computer system draws three to five years' penal servitude and a fine of 50 to 100 million Congolese francs (Article 332); the penalty rises to five to ten years and 100 to 300 million francs where data is altered or removed (Article 333, first paragraph), and to ten to twenty years and 300 to 550 million francs where security measures are breached (Article 333, second paragraph).
Penalty structure
Article 332 sets a base fine of 50,000,000 to 100,000,000 Congolese francs (three to five years' penal servitude) for unauthorized access or exceeding lawful access authority. Article 333 raises this to 100,000,000 to 300,000,000 francs (five to ten years) where the access alters or removes data or system functioning, and to 300,000,000 to 550,000,000 francs (ten to twenty years) where the access breaches security measures.
- Rule
- Fixed only
- As of
- 7 September 2026
- Minimum
- 50,000,000
- Currency
- CDF
- Fixed cap
- 550,000,000
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 330 makes any violation of the Digital Code punishable under a penalty it provides a criminal offence against the digital legislation.
Article 332 punishes with three to five years' penal servitude and a fine of 50,000,000 to 100,000,000 Congolese francs, or either penalty alone, whoever intentionally and without right accesses or maintains access, with fraudulent intent, to all or part of a computer system, and punishes with two to five years' penal servitude and the same fine whoever, with fraudulent intent or intent to harm, exceeds their lawful access authority over a computer system.
Article 333 raises the penalty to five to ten years' penal servitude and a fine of 100,000,000 to 300,000,000 Congolese francs where the access results in the suppression, obtaining, or modification of data in the system, or an alteration of the system's functioning, and to ten to twenty years' penal servitude and a fine of 300,000,000 to 550,000,000 Congolese francs where the same conduct breaches security measures.
When LexLint raises it
crawls_webtrains_models
Read the law
Text of Ordonnance-loi n° 23/010 du 13 mars 2023 portant Code du numérique
reproduced by the Autorité de Régulation de l'Électricité (are.gouv.cd)