LexLint

Know the law your code answers to.

Law / Libya

Law No. 6 of 2022, protection of personal data collected in electronic transactions

Law No. 6 of 2022 Concerning Electronic Transactions arts. 73-75 (Protection of Personal Data: lawful basis, purpose limitation and confidentiality)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 4 October 2022.

A comprehensive regime rule binding public and private bodies.

As of 19 September 2026.

What it requires

  • Before collecting personal data for issuing, maintaining, or facilitating an authentication certificate, obtain the person's explicit consent, and do not use it for a different purpose without a further explicit consent.
  • Do not collect, disclose, provide, or process personal data without the data subject's consent unless it is necessary to prevent or detect a crime under an official request from investigative bodies, required or permitted by law or a court decision, needed for a tax assessment or collection, or needed to protect the person's vital urgent interest.
  • Keep personal data confidential and do not disclose, transfer, declare, or publish it without the data subject's prior consent.

What it reaches

Obligation class

Consent, Governance, Security

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 73 requires a public entity or an authentication service provider to obtain a person's explicit consent before collecting their personal data, and confines any collection to the purpose of issuing, maintaining, or facilitating a certificate, absent the person's further explicit consent to a different purpose.

Article 74 lists narrow grounds on which collecting, disclosing, providing, or processing personal data is otherwise legitimate without that consent, including a criminal investigation, a court decision, a tax assessment, or protecting a person's vital urgent interest.

Article 75 binds the authentication service provider to follow appropriate procedures to ensure the confidentiality of personal data in its custody, and bars disclosing, transferring, declaring, or publishing it without the data subject's prior consent.

When LexLint raises it

  • crawls_web
  • trains_models
  • deploys_chatbot
  • automated_outreach

Read the law

The Law Society of Libya (Almajma Legal Directory) legislation database
English translation of Law No. 6 of 2022 Concerning Electronic Transactions, not an official government published translation

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app