Law / Lebanon

Law No. 81/2018 on Electronic Transactions and Personal Data, Illegal Access to an Information System and Related IT-System Offences

Law No. 81 Official Gazette of Lebanon, Part VI Chapter I (Crimes Related to IT Systems and Data, Arts. 110-115), promulgated

In force.

A computer misuse rule binding public and private bodies.

Audit expectation
none

What it requires

  • Do not fraudulently access, enter, or remain in an information system, or a part of it, that you are not authorized to access.NIST AI RMFMAP 4.1
  • Do not fraudulently damage or hinder the operation of an information system, or fraudulently enter, delete, or modify digital data hosted by one.no control in the NIST AI RMF
  • Do not intentionally hinder, disturb, or disrupt access to a service, hardware, software, or data source through the information network.no control in the NIST AI RMF
  • Reading a public, unauthenticated page without defeating any access control has not itself been held to violate this chapter.

These lines are LexLint's reading of the law's text.

In the frameworks

NIST AI RMF
  • MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.

Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law

If you get it wrong

Criminal exposureYes

Criminal exposure note

Imprisonment from three months to two years and/or a fine of one to twenty million Lebanese pounds for illegal access (art. 110), rising to six months to three years and two to forty million pounds where the access alters data or software or jeopardizes the system; imprisonment from six months to three years and/or a fine of three million to two hundred million pounds for compromising system or data integrity (arts. 111-112); imprisonment from three months to two years and/or a fine of two to thirty million pounds for hindering access to a service (art. 113).

What it makes you log

Logging duty

Articles 110 to 115 define the offences of illegal access to an IT system, compromising system or data integrity, hindering or disrupting access, misuse of hardware and software, and attempt. It imposes no duty to create, keep, produce or review a log or record. The cited chapter carries no territorial clause. The Law's Article 72, outside this row, requires an IT service provider to save traffic data for three years, and its Chapter VII governs the seizure and retention of IT evidence.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Article 110 penalizes fraudulently accessing, entering, or staying in an information system, or a part of it, with imprisonment from three months to two years and a fine of one to twenty million Lebanese pounds, rising to six months to three years and two to forty million pounds where the access cancels, reproduces, or amends digital data or software, or jeopardizes the system's operation.

Article 111 penalizes fraudulently damaging or hindering an information system's operation; Article 112 penalizes fraudulently entering, deleting, or modifying digital data hosted by a system; Article 113 penalizes intentionally hindering, disturbing, or disrupting access to a service, hardware, software, or data source through the information network; Article 114 penalizes importing, producing, or distributing hardware, software, or data intended to commit any of these offenses; and Article 115 extends the same penalties to an attempt.

Because each offense turns on fraudulent, unauthorized interference with a system, a person who reads a public, unauthenticated page without defeating any access control falls outside a plain reading of the chapter. Article 136 provides that the Law takes effect three months after its publication in the Official Gazette, and no source located states the day on which it took effect.

When LexLint raises it

When your app profile says your app crawls the web or trains models.

Back to the example  ·  Lint your app

Page updated .