LexLint.ioBeta

Know the law your code answers to.

Law / Côte d'Ivoire

Cybercrime Act, unauthorized access to an information system

Loi n° 2013-451 du 19 juin 2013 relative à la lutte contre la cybercriminalité, art. 4 (accès frauduleux à un système informatique)

archived copyRead from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://www.artci.ci/images/stories/pdf-english/lois_english/loi_2013_451_english.pdf

In force.

A computer misuse rule binding public and private bodies.

Obligation class
Access restriction
Audit expectation
none

What it requires

  • Do not access, or attempt to access, all or part of an information system without the operator's authorization, and do not remain fraudulently within one once inside.
  • Whether reading a public, unauthenticated page without defeating any access control falls inside this prohibition has not been settled by a reported decision.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
NIST AI 600-1
OWASP LLM Top 10
OWASP Agentic Top 10
  • ASI03Identity and Privilege Abuse
MIT mitigations Draft
  • 2.1Model & Infrastructure Security
  • 3.2Data Governance
FINOS AIGF
ETSI EN 304 223
  • 5.1.2-6Access the AI system gets to other systems and data sources is minimal and risk assessed.

Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law

Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI.

If you get it wrong

Criminal exposureYes

Criminal exposure note

Unauthorized access to or fraudulent presence within an information system is punishable by one to two years' imprisonment and a fine of 5 million to 10 million CFA francs (arts. 4-5); theft of information from an information system is punishable by five to ten years' imprisonment and a fine of 3 million to 5 million CFA francs (art. 26), rising to ten to twenty years and 5 million to 10 million CFA francs with an aggravating circumstance (art. 27) or where the system is protected by a secret access code (art. 30).

Penalty structure

Article 4's fine ceiling for unauthorized access to an information system; the Act's related computer-intrusion offenses (arts. 5-10, 26-30) carry their own, higher fine ceilings up to 60 million CFA francs and longer imprisonment terms up to twenty years.

Rule
Fixed only
As of
Currency
XOF
Fixed cap
10,000,000

What it makes you log

Logging duty

Article 4 punishes unauthorized access to all or part of an information system with imprisonment and a fine. It imposes no duty to create, keep, produce or review a log or record, and names no audit, no auditor and no one who may demand a record. The article states no territorial hook.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Article 4 punishes by one to two years' imprisonment and a fine of 5 million to 10 million CFA francs anyone accessing or attempting to access all or part of an information system, and article 5 separately punishes fraudulently remaining within all or part of an information system on the same terms.

Article 6 punishes hindering or distorting the functioning of an information system, article 7 punishes introducing data into it, and articles 8 to 10 punish intercepting, altering or fabricating computer data, each with escalating imprisonment terms of up to ten years and fines of up to 60 million CFA francs.

Article 26 separately punishes theft of information, defined as fraudulently becoming aware of, copying, or removing the physical medium carrying information within an information system, by five to ten years' imprisonment and a fine of 3 million to 5 million CFA francs, rising to ten to twenty years and 5 million to 10 million CFA francs where an aggravating circumstance listed in article 27 is present, and article 30 raises the minimum to ten years where the system or data was protected by a secret access code.

None of these articles conditions the offense on defeating a technical security measure, so whether they reach a scraper reading a public, unauthenticated page is not addressed by the text. No commencement notice for the Act has been located in the Official Gazette.

When LexLint raises it

When your app profile says your app crawls the web or trains models.

Back to the example  ·  Lint your app

Page updated .