Law No. 6 of 2022, supervisory authority, licensing and penalties

Law No. 6 of 2022, arts. 80-82 (Electronic Transactions, licensing and penalties)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 4 October 2022.

An enforcement supervision rule binding public and private bodies.

As of 19 September 2026.

What it requires

Obtain a license from the National Authority for Information Security and Safety before providing authentication services that involve collecting personal data.
Expect the National Authority for Information Security and Safety to accredit and monitor the electronic authentication processes and sites through which you collect personal data.
Expect imprisonment of at least one year and a fine of three thousand to ten thousand dinars for providing authentication services without a license, rising to a fine of at least ten thousand dinars where the offence disrupts a government, military, security, or banking transaction.
As the legal representative of a legal person, expect the same penalties where your failure to perform your duties contributed to an offence under this law, and expect the legal person to be jointly liable for any resulting financial penalty.

If you get it wrong

Criminal exposureYes

Criminal exposure note

Article 81 punishes providing authentication services without a license from the National Authority for Information Security and Safety, and the other acts article 80 lists concerning forged or misused electronic signatures, records, and authentication certificates, with imprisonment of not less than one year and a fine of between three thousand and ten thousand dinars, rising to a fine of not less than ten thousand dinars where the act disrupts a government, military, security, or banking transaction (art. 81). Article 82 extends the same penalties to a legal representative whose failure to perform their duties contributed to the offence, and makes the legal person jointly liable for any financial penalty (art. 82). Article 81's penalty is stated for the offences article 80 lists, not the personal data restrictions article 79 states, so no criminal exposure is recorded for a breach of the personal data duties themselves.

Who enforces it

Enforcement body

National Authority for Information Security and Safety

What it reaches

Obligation class

Licensing, Prohibition, Governance

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

The law's definitions article names the National Authority for Information Security and Safety as its Authority, and article 27 makes that Authority responsible for accrediting and monitoring the electronic authentication processes and sites through which the entities chapter seven binds collect personal data.

Article 80 bars providing authentication services without a license from that Authority, alongside a further list of prohibited acts concerning forged or misused electronic signatures, records, and authentication certificates.

Article 81 punishes an act listed in article 70 or article 80, which includes the unlicensed provision of authentication services, with imprisonment of not less than one year and a fine of between three thousand and ten thousand dinars, rising to a fine of not less than ten thousand dinars where the act disrupts a government, military, security, or banking transaction.

Article 82 extends the same penalties to the legal representative of a legal person whose failure to perform their duties contributed to the offence, and makes the legal person jointly liable for any financial penalty or compensation where the offence was committed on its behalf.

Article 81's penalty is stated for the offences article 80 lists rather than the personal data restrictions article 79 states, so the text does not clearly arm a separate criminal penalty for a breach of the personal data duties themselves, and no provision gives the Authority or any other body a stated power to investigate or hear a complaint about such a breach.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
high_risk_decisions

Read the law

The Law Society of Libya (Almajma Legal Directory) legislation database
English translation of Law No. 6 of 2022 Concerning Electronic Transactions, not an official government published translation

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app