Kiribati

Kiribati's first comprehensive data-protection statute, the Data Protection Act 2025, has been made by the Maneaba ni Maungatabu and assented to by the Beretitenti, and is not yet in force: section 2 provides that it commences on a date the Minister may appoint by notice, and no appointing notice was located as of this review.

It creates lawful-basis, purpose-limitation, data-subject-rights, breach-notification, cross-border-transfer and enforcement duties administered by the Digital Transformation Office, modelled on the privacy laws of Australia and New Zealand. None of those duties binds anyone until commencement, and section 6(2) then defers application for a further two years for a person who is not a controller of major importance.

The Digital Government Act 2023, which does bind Kiribati's public bodies and their digital infrastructure, defines no personal-data duties of its own; section 34 of the new Act amends it to cross-reference the new rules, on the same commencement.

Kiribati has no scraping-specific statute, so general law governs each dimension separately.

The Cybercrime Act 2021 criminalises unauthorised access to a computer system in broader terms than several neighbouring jurisdictions: section 7 makes access illegal or unauthorised whenever the accessing person is not entitled to control access of that kind and has not obtained the consent of a person who is so entitled, without requiring that the accessor infringe a technical security measure, so a plain reading does not rule out liability for reading a public, unauthenticated page if the site's operator can be shown not to have consented to that kind of access; no reported Kiribati case has tested the point either way.

No Kiribati court has ruled on the enforceability of a browsewrap or clickwrap terms-of-service against a scraper.

The Copyright Act 2018 lists exceptions to copyright infringement for quoting from a work and for copying to report current events to the public, among others, but the operative text of those exceptions is not reproduced in the available copies of the Act, so their specific conditions are not established here; Kiribati has not enacted a text-and-data-mining exception, and its copyright statute confers no sui generis database right, its neighbouring rights covering only performers, producers of sound recordings, and broadcasters.

The Data Protection Act 2025, which would apply Kiribati's first personal-data lawful-basis and purpose-limitation duties to scraped personal data, has passed only a first reading in Parliament and is not yet law, so no privacy-law duty currently reaches personal data scraped from a public Kiribati website.

No Kiribati statute or reported case establishes a scraping-specific unfair-competition, misappropriation, or trespass doctrine, and none assigns legal weight to a robots.txt directive or imposes an AI-training-specific rule.

Kiribati has no press-publisher neighbouring right and no mandatory platform-to-publisher bargaining code; the general copyright framework of the Copyright Act 2018 is the only law reaching an aggregator's reproduction of news content.

Its arrangement of sections names an exception to copyright infringement titled 'Quoting from work' at section 16, among several others running from sections 14 to 21, but the operative text of those sections is not reproduced in the available copies of the Act, so their specific conditions are not established here.

Neighbouring rights under Part III of the Act protect performers, producers of sound recordings, and broadcasters, not print or online news publishers, so there is no publisher-side neighbouring right of the kind the European Union's Digital Single Market Directive Article 15 creates.

No statute or case law addresses whether a hyperlink is itself a communication to the public, or whether framing or inline display changes the answer, and no hot-news or misappropriation doctrine distinct from ordinary copyright law exists. The Act predates the concept of a machine-readable text-and-data-mining reservation, so no opt-out mechanism of that kind exists.