Liberia signs cybercrime and data protection laws, but capacity gaps remain 🇱🇷

Cliquez ici pour lire en français

Liberia has just cleared a legislative milestone that had been in the works for months. President Joseph Boakai has signed two major pieces of legislation — the Cybercrime Act and the Data Protection Act — in a country where digital infrastructure is still in its early stages, even as ambitions for digital growth accelerate sharply.

A legal framework built for the digital economy ⚖️

The announcement came on Wednesday, August 19, from Post and Telecommunications Minister Sekou Kromah, delivered alongside another tech milestone: the signing of guidelines governing satellite communications by the Liberia Telecommunications Authority. The timing of this legislative double act is no coincidence. It reflects a deliberate push to align the regulatory framework with the expansion of digital activity in the country, whether online transactions, digitized public services, or sensitive data exchanges between government and citizens.

The Cybercrime Act now gives judicial authorities a solid legal basis to identify, prosecute, and punish offenses committed through computer networks and digital tools. The Data Protection Act, meanwhile, for the first time establishes a structured framework for the collection, processing, and storage of personal information by public and private actors alike — closing a legal gap that had until now undermined digital trust in the country.

A $50 million World Bank deal in the background 💰

This dual enactment comes shortly after Liberia secured a $50 million agreement with the World Bank aimed at accelerating the country’s digital transformation. The connection between this funding and the two new laws is not incidental: no international technical or financial partner commits long-term to digital projects without minimum guarantees on cybersecurity and data governance.

A cybersecurity index that exposes the gaps 📉

Despite this regulatory progress, there’s still a long way to go. The International Telecommunication Union ranks Liberia in the second-lowest tier of its Global Cybersecurity Index, while acknowledging progress on the legal and regional cooperation front, notably through initiatives like OCWAR-C in West Africa. The gaps identified concern mainly operational technical capacity, institutional organization, and specialized skills development — all essential ingredients for a law to actually produce results on the ground.

E-government, a project still in its infancy 🖥️

Liberia’s digital lag also shows up in international rankings on electronic government. According to the UN Department of Economic and Social Affairs, Liberia ranks 47th out of 54 African countries and 182nd out of 193 globally for e-government development, with a score of 0.2513 out of 1 — well below both continental and global averages. This context clarifies what’s really at stake with the two new laws: they don’t crown a mature digital ecosystem, but rather lay the legal groundwork before infrastructure and digital public services actually take shape.

One to watch closely 🔍

The real test now lies in implementation. A data protection law only has value if oversight mechanisms, an operational regulatory authority, and enforced sanctions bring it to life. Liberia thus joins a growing list of African countries — from Burundi to South Sudan — legislating on digital issues before having built the technical capacity needed to actually enforce these texts.

What do you think — can a cybercrime law really produce results if the technical and institutional capacity isn’t there yet? Let us know in the comments.