LexLint

Know the law where your app runs.

Law / Tunisia

Decree-Law on Cybercrime, unauthorised access

Décret-loi n° 2022-54 du 13 septembre 2022 relatif à la lutte contre les infractions se rapportant aux systèmes d'information et de communication, art. 16

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

In force since 16 September 2022.

A computer misuse rule binding public and private bodies.

As of 5 September 2026.

What it requires

  • Do not access, or remain in, a computer system, in whole or in part, without authorization.
  • Do not exceed the limits of any access right that has been granted to you.
  • Reading a public, unauthenticated page that defeats no access control has not itself been held to violate this article.

If you get it wrong

Criminal exposureYes

Private right of actionNo

Criminal exposure note

Three months to one year's imprisonment and a fine of 10,000 dinars for knowingly accessing or remaining in a computer system without authorization, or for exceeding a granted access right (art. 16); an attempt is also punishable.

Penalty structure

Article 16's illegal-access and access-limit offence; the same decree-loi's other Chapter III offences carry separate, higher fixed penalties, up to five years' imprisonment and a 100,000-dinar fine for computer falsification (art. 23) and five years and 50,000 dinars for knowingly spreading false news or data through an information system (art. 24).

Rule
Fixed only
As of
5 September 2026
Currency
TND
Fixed cap
10,000

Who enforces it

Enforcement body

Ministère public (public prosecutor) and judicial police, through the ordinary criminal courts

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 16 punishes anyone who knowingly accesses or remains illegally in a computer system, in whole or in part, and imposes the same penalty on anyone who knowingly exceeds the limits of an access right they have been granted; an attempt is also punishable. The offence carries three months to one year of imprisonment and a fine of 10,000 dinars.

Because the offence's trigger is illegal access or exceeding a granted access right, reading a public, unauthenticated page that defeats no access control falls outside a plain reading of the provision. Article 37 repeals the former articles 199 bis and 199 ter of the Penal Code, which the decree-loi's Chapter III offences supersede.

When LexLint raises it

  • crawls_web
  • trains_models

Read the law

Full French and Arabic text of Décret-loi n° 2022-54
from legislation-securite.tn, a consolidated Tunisian legal-texts database carrying the Journal Officiel publication metadata

Back to the example  ·  Lint your app