LiberiaCybercrime Act of 2025
A computer misuse rule binding public and private bodies.
- How the hook was established
- express
- What makes it apply
- Place of effect, Data subject residence
- Audit expectation
- on_request
- Who audits it
- Regulator
What it requires
- Do not intentionally access the whole or part of a computer system or infrastructure without authorization or in excess of authorization.
- Do not intentionally intercept non-public computer data without authorization, possess data you know was acquired unlawfully, commit online fraud, or commit identity theft using a computer system.
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- MAP 4.1Approaches for mapping AI technology and legal risks of its components – including the use of third-party data or software – are in place, followed, and documented, as are risks of infringement of a third party’s intellectual property or other rights.
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
If you get it wrong
Criminal exposureYes
Criminal exposure note
Section 6(1) punishes unauthorized access with imprisonment of not less than two years or a fine of double the gain the defendant realized; where the offence produced no gain, only imprisonment may be imposed.
Who enforces it
Settledness
- As of
- Open questions
- Which day does the Cybercrime Act of 2025 take effect, given that section 47(2) measures the time for regulations from its effective date and the Act fixes no such date?
What it makes you log
Who may demand the log
Regulator, Court
What the log must hold
Event time, Actor identity
Log retention
The period is set in each preservation order, up to a maximum that can be renewed.
- Unit
- Days
- As of
- Basis
- Fixed
- Maximum value
- 90
Logging duty
On the order of the Ministry of Justice or a law enforcement agency, any person including a service provider must preserve computer data it holds, including traffic data and subscriber information, and on a judge's order must hand over specified data. Section 29(5) also has a service provider collect or record content data of specified communications under an interception order. The Act creates no standing duty to keep logs, and the vocabulary has no trigger value for an order, so none is listed. The law has no recital stating what the record is for. The article was read from the OCR text of the official scan.
- Kind
- Implicit
- As of
- Provision
- Sections 24 and 26, with section 29, paragraph (5)
What this law does
Liberia's Cybercrime Act of 2025 provides a legal, regulatory and institutional framework for the prohibition, prevention, detection, prosecution and punishment of cybercrimes in Liberia. Its offences include unlawful access to a computer system or infrastructure, unlawful interception of communications, unauthorized modification of computer data, system interference, computer related fraud and identity theft and impersonation. The House of Representatives passed the bill on .
The Senate passed the bill on . The President of the Republic approved the Act on , as the Ministry of Foreign Affairs' printed copy records. Section 6(1) makes it an offence to intentionally access the whole or part of a computer system or infrastructure without authorization or exceeding authorization. The Act treats access as unauthorized where the person is not entitled to control access to the program or data and has no consent from a person entitled to give it.
The section 6(1) offence carries imprisonment of not less than two years or a fine of double the gain the defendant realized, and imprisonment alone where the offence produced no gain. The Act contains no commencement clause, and section 47(2) refers to its effective date without fixing one.
When LexLint raises it
When your app profile says your app crawls the web or trains models.
Back to the example · Lint your app
Page updated .