Digital Transformation Act 2025, ICT service permit for AI and AI-related data services
Digital Transformation Act No. 42 of 2025 (Vanuatu), s. 13(l)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force 9 months, effective 17 December 2025.
An AI governance rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Before carrying on business as a provider of artificial intelligence or AI-related data services in Vanuatu, apply to the Director of the Department of Communications and Digital Transformation for an ICT service permit in that class, and pay the prescribed annual permit fee.
- Comply with any condition the Director imposes on the permit, and cooperate with an enforcement officer's inspection, information request, or search warrant, since a serious breach can suspend the permit and stop all operations, and providing the service without a valid permit is a criminal offence.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Section 31(1) makes carrying out an ICT activity, including providing AI or AI-related data services, without a valid permit an offence punishable on conviction by a fine of up to VT3,000,000 or up to 3 years' imprisonment for an individual, or a fine of up to VT20,000,000 for a body corporate; section 31(2) applies the same penalty to any other contravention of the Act.
Penalty structure
Section 31(1) (carrying out an ICT activity without a valid permit) and section 31(2) (any other contravention of the Act) each cap an individual's fine at VT3,000,000, with up to 3 years' imprisonment, or both, and a body corporate's fine at VT20,000,000. Lesser offences in section 31 (obstructing the Director, giving false information, obstructing a search warrant) cap an individual's fine at VT3,000,000 or 3 years' imprisonment. The Act states these amounts in Vanuatu vatu (VT).
- Rule
- Fixed only
- As of
- 6 September 2026
- Currency
- VUV
- Fixed cap
- 20,000,000
Who enforces it
Enforcement body
Director of the Department of Communications and Digital Transformation
What it reaches
Obligation class
Licensing, Governance
Who checks it
Audit expectation
continuous
Who audits it
Regulator
Where the report goes
Produced on request
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Section 13 lists an "artificial intelligence (AI) and AI-related data services permit" as one of thirteen classes of ICT service permit, alongside classes such as cloud and data services, e-commerce, and cybersecurity governance.
Section 14 requires a person who intends to carry on business as an ICT service provider, including one offering AI or AI-related data services, to apply to the Director for the corresponding permit, which section 17 makes valid for one year and renewable, and section 18 requires an annual permit fee.
The Director may impose, vary, suspend, or cancel a permit's conditions under sections 16, 19, and 20 for breach of a condition or of the Act or its Regulations, and section 31(1) makes carrying out an ICT activity, including providing AI or AI-related data services, without a valid permit an offence punishable on conviction by a fine of up to VT3,000,000 or up to 3 years' imprisonment for an individual, or a fine of up to VT20,000,000 for a body corporate.
When LexLint raises it
generates_contenttrains_modelsdeploys_chatbot