Libyan Lawmakers Push Cybersecurity and Digital Sovereignty Bill to Protect National Data

Parliament and National Security Council join forces to prepare Libya's first comprehensive cyber law

Libya is taking a decisive step toward securing its digital future. A parliamentary committee and the National Security Council are jointly preparing a comprehensive cybersecurity and digital sovereignty bill — legislation to protect Libya's virtual space, safeguard citizen data, and counter rising cyber threats.

The initiative comes as Libya faces an accelerating wave of digital transformation alongside growing risks from cyberattacks, data breaches, and foreign interference. The new bill seeks to create a unified legal foundation for governing digital activities across the country.

Why Libya Needs a Cybersecurity Law Now

Libya currently operates without a dedicated legal framework for cybersecurity. This gap leaves government networks, financial systems, and private-sector platforms vulnerable. In 2025 alone, multiple Libyan institutions reported incidents ranging from ransomware attacks on state servers to phishing campaigns targeting government employees.

"The absence of clear legislation means that when cybercrimes occur, there is no legal basis for prosecution," the parliamentary committee noted during its meeting with the National Security Council, as reported by the Libyan News Agency (LANA). "This bill will close that gap."

Global trends underscore the urgency: cybercrime damages are projected to reach $10.5 trillion annually by 2025, and nations without robust cyber laws are increasingly targeted as weak links in the global digital chain.

Key Provisions of the Proposed Legislation

While the full text is still under development, early discussions point to several core pillars:

  • National Digital Sovereignty: Affirming Libya's right to govern its digital space independently, including data localization for sensitive government information.
  • Data Privacy: Establishing rules for how public and private entities collect, store, and process personal data of Libyan citizens.
  • Critical Infrastructure Security: Mandating cybersecurity standards for energy, banking, telecom, and healthcare sectors.
  • Cybercrime Penalties: Introducing criminal penalties for hacking, data theft, identity fraud, and related offenses.
  • National Coordination Body: Proposing a centralized authority for cyber incident response and threat intelligence sharing.

Building on Recent Digital Initiatives

The cybersecurity bill follows Libya's adoption of the National Charter for Artificial Intelligence Ethics in June 2026, led by the General Authority for the Identification and Classification of the Digital Space. That charter established principles of justice, transparency, and accountability for AI deployment, alongside commitments to protect digital sovereignty.

The General Authority has also been developing a National Communications Strategy to upgrade Libya's telecom infrastructure and expand internet access. The cybersecurity bill would complement these initiatives by providing the legal backbone for secure digital growth.

Together, these efforts signal a broader strategic push: Libya is proactively building a cohesive digital governance architecture rather than merely reacting to threats.

Coordination Between Parliament and Security Council

Committee member Blihaq emphasized the importance of cooperation between the interim parliamentary committee and the National Security Council in preparing the legislation. The collaborative approach aims to ensure the bill addresses both civil liberties and national security concerns.

The National Security Council brings expertise on threat assessment and critical infrastructure protection, while the parliamentary committee provides the legislative pathway and public accountability.

Challenges Ahead

Passing a cybersecurity bill in Libya's complex political landscape will not be straightforward. Institutional fragmentation has historically delayed major legislation. Questions also remain about enforcement capacity — implementing compliance requires technical expertise and inter-agency coordination that Libya is still building.

Public awareness is another factor. Effective cybersecurity depends not just on laws but on citizens and businesses understanding risks and protections. The bill's success will require accompanying public education campaigns and capacity-building programs.

What This Means for Libyans

For ordinary Libyans, the cybersecurity bill promises that their personal data, financial transactions, and online communications will be protected under law. For businesses, it offers clarity on compliance and legal recourse after cyber incidents. For Libya as a nation, it strengthens the country's position in the global digital economy.

As digital adoption accelerates across Libya — from mobile banking to e-government services — the need for this legislation has never been more urgent. The parliamentary committee and National Security Council have taken the first step toward turning ambition into enforceable reality.

— Libya Press / Tech Desk