Cybersecurity regulation in Djibouti (2026)

The National Assembly passed the Digital Code (Code du Numérique) on 30 June 2025, making Djibouti the first East African country to adopt a single omnibus digital law. It covers cybersecurity obligations, cybercrime offences, data protection, electronic commerce, and e-signatures in one instrument.

The ANC was created by the Digital Code and formally launched in December 2025. It sets national cybersecurity norms for critical sectors, operates a national cyber-incident monitoring and response centre, and coordinates international cooperation on cybercrime.

Under the Digital Code, data controllers must notify the CNDP of personal-data breaches within 72 hours of becoming aware, and must inform affected individuals without undue delay where the breach poses a high risk to their rights. Penalties reach up to DJF 70 million (~USD 393,000) or 5% of turnover.

Approved by Cabinet, the strategy rests on five pillars: strengthening governance and institutions, protecting critical infrastructure, combating cybercrime, building a skilled workforce, and promoting national and international cooperation. Djibouti scored 31.47/100 on the ITU Global Cybersecurity Index 2024 (Tier 4).

Law No. 132/AN/10/6th L (2010) and Penal Code Articles 548-555 (Chapter VII) previously criminalised hacking, illegal interception, data interference, system interference, and computer fraud; these are now integrated into the 2025 Digital Code framework.

Djibouti ratified the African Union Malabo Convention on Cyber Security and Personal Data Protection in November 2023 and signed the UN Convention on Cybercrime in October 2025, aligning national law with multilateral cybercrime obligations.