Cybercrime Act, illegal access to a computer system
Cybercrime Act, Cap. 106:01 (Act No. 32 of 2020), s. 3
In force since .
A computer misuse rule binding public and private bodies.
- How the hook was established
- express
- What makes it apply
- User location, Place of effect
- Obligation class
- Access restriction
- Audit expectation
- none
What it requires
- Do not access a computer system of another person without authorisation, in excess of authorisation, or by infringing a security measure, and do not continue to exceed authorised access once it is withdrawn.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
- NIST AI 600-1
- GAI-RISK-09Information Security
- GAI-RISK-12Value Chain and Component Integration
- OWASP LLM Top 10
- LLM03:2026Excessive Agency
- OWASP Agentic Top 10
- ASI03Identity and Privilege Abuse
- MIT mitigations Draft
- FINOS AIGF
- AIR-PREV-018Agent Authority Least Privilege Framework
- AIR-PREV-023Agentic System Credential Protection Framework
- ETSI EN 304 223
- 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.
If you get it wrong
Criminal exposureYes
Private right of actionNo
Criminal exposure note
A fine of three thousand dollars and imprisonment of up to three years on summary conviction, or a fine of five thousand dollars and imprisonment of up to five years on conviction on indictment (s. 3(3)).
Penalty structure
The indictable tier; the summary-conviction tier is a fine of three thousand dollars. Either tier also carries imprisonment (three years summary, five years on indictment) alongside the fine.
- Rule
- Fixed only
- As of
- Currency
- BZD
- Fixed cap
- 5,000
What it makes you log
Logging duty
Section 3 makes it an offence to access another person's computer system without authorisation, in excess of authorisation or by infringing a security measure, and section 3(2) adds continuing to exceed authorised access. Neither subsection requires anyone to create, keep or produce a log or record. Section 14 of the same Act separately requires a service provider to store and keep subscribers' traffic data until ninety days after a service agreement ends; this row cites only section 3, so that duty is named here and not read into it. Section 43, the Act's jurisdiction clause for offences under the Act, supplies the territorial hook.
- Kind
- None
- As of
What this law does
Section 3 makes it an offence to intentionally access a computer system of another person either without authorisation or in excess of authorisation, or by infringing a security measure of the system, and section 3(2) separately makes it an offence to continue to exceed authorised access without lawful excuse.
Because the first limb of the offence is disjunctive with the security-measure limb, a plain reading reaches a person who accesses a system without permission even where no security measure was defeated, which is broader than a statute that requires infringing a security measure in every case, though no reported Belizean case has applied section 3 to the scraping of a public, unauthenticated page specifically.
The offence carries a fine of three thousand dollars and imprisonment of up to three years on summary conviction, rising to a fine of five thousand dollars and imprisonment of up to five years on conviction on indictment.
When LexLint raises it
When your app profile says your app crawls the web or trains models.
Back to the example · Lint your app
Page updated .