Law No. 5 of 2022 on Combating Cybercrimes, unauthorised access and system interference
Law No. 5 of 2022 Concerning Combating Cybercrimes, arts. 10-16
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 27 September 2022.
A computer misuse rule binding public and private bodies.
As of 5 September 2026.
What it requires
- Do not breach a website's or information system's protection measures to access it without authorization, in whole or in part.
- Do not delete, alter, disclose, or copy data, or disable or deface a system, once inside it without authorization.
- Do not intercept an information system to obtain digital data, and do not possess or distribute a tool prepared to reveal passwords or break protection measures.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Base unauthorized access (art. 12) carries up to one year's imprisonment and a fine of 100 to 500 Libyan dinars; access intended to delete, alter, disclose, or copy data, disable a system, or deface or impersonate a website's owner carries at least one year and 500 to 5,000 dinars; access that disables an information system or disrupts a network's operation carries imprisonment and a fine of no less than 10,000 dinars with no stated ceiling. Interception (art. 13) carries at least one year and 1,000 to 5,000 dinars, and possessing or distributing password-breaking tools (art. 14) carries at least one year and 1,000 to 10,000 dinars.
Penalty structure
Article 14's 1,000 to 10,000 dinar range for possessing or distributing password-breaking tools is the highest ceiling stated among the computer-misuse offences; article 12's system-disruption tier sets only a floor of no less than 10,000 dinars with no stated ceiling in the text, so exposure for that specific offence is not capped by this figure.
- Rule
- Fixed only
- As of
- 5 September 2026
- Currency
- LYD
- Fixed cap
- 10,000
Who enforces it
Enforcement body
National Authority for Information Security and Safety; ordinary criminal courts
What it reaches
Obligation class
Access restriction
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 11 of Law No. 5 of 2022 makes accessing a computer system, information system, information network, or website unlawful only where its protection measures are intentionally breached, wholly or partially, without authorization or in violation of an authorization.
Article 12 punishes unauthorized access with up to one year's imprisonment or a fine of 100 to 500 Libyan dinars, rising to at least one year and 500 to 5,000 dinars where the access deletes, alters, discloses, or copies data or disables or defaces a system, and to imprisonment and a fine of no less than 10,000 dinars where the access disables an information system or disrupts a network's operation.
Article 10 separately prohibits influencing an electronic system, network, or record by obtaining, disclosing, transmitting, or publishing a password, code, or other confidential data with intent to gain an unauthorized benefit or harm another.
Article 13 punishes intercepting an information system to obtain digital data with at least one year's imprisonment and a fine of 1,000 to 5,000 dinars, and article 14 punishes possessing or distributing a device or program prepared to reveal passwords or access codes or to break protection measures with at least one year's imprisonment and a fine of 1,000 to 10,000 dinars.
When LexLint raises it
crawls_web
Read the law
English translation of Law No. 5 of 2022 from The Law Society of Libya (Almajma Legal Directory) legislation database
lawsociety.ly, not an official government-published translation the same site's Law No. 6 of 2022 page carries a leftover machine-translation sign-off, so this rendering is treated as an unofficial translation of the Arabic text