Internet & Online Safety · Lesotho
Online safety & content laws in Lesotho (2026)
Lesotho shaded by its internet & online safety status
Lesotho's online safety regime is fragmented across existing broadcasting, telecommunications, and data-protection legislation, with no dedicated comprehensive online safety law in force. The LCA has sought to extend broadcasting content standards to online platforms and proposed registration requirements for internet broadcasters, while the Computer Crime and Cyber Security Bill 2024 — which would criminalize cyberbullying and online dissemination of false information — was tabled in Parliament in May 2024 but remained under deliberation amid significant civil-society opposition as of late 2024. No specific age-verification or platform-liability framework exists.
Key points
The Computer Crime and Cyber Security Bill 2024 was introduced in the National Assembly on 23 May 2024 and debated in committee in August 2024, but had not been enacted as of late 2024. It would criminalize unauthorized system access, cyberbullying, and online dissemination of false information; civil-society groups and press-freedom organizations oppose it for overbroad surveillance provisions (Section 66) that would authorize warrantless remote interception.
In 2020 the LCA consulted on draft rules that would require online platforms, OTT services, and social-media accounts with more than 100 followers to register as 'internet broadcasters' and comply with the Broadcasting Rules 2004 — covering community standards, children's protection, accuracy, and impartiality. Freedom House called on authorities to withdraw the proposed regulations; they were not formally adopted.
The Lesotho Communications Authority, established under the Communications Act No. 4 of 2012, is the statutory body for broadcasting, telecommunications, internet governance, and spectrum management. The 2012 Act broadened its mandate beyond legacy telecoms to encompass internet-service oversight and content broadcast over electronic communications networks.
The Data Protection Act No. 5 of 2011 establishes principles governing the processing of personal information and applies to online platforms operating in Lesotho. Enforcement capacity is limited and no dedicated data-protection authority separate from government has been established.
SIM-registration regulations require mobile devices to be registered with the LCA. Freedom House has raised concern that regulations enable the LCA to transfer private communications to security agencies without a court order, creating de facto state surveillance capability over digital communications in the absence of adequate legal safeguards.
Lesotho has no dedicated age-verification mandate or platform-liability framework for online services. Child protection online is addressed only indirectly through UNICEF-supported capacity-building programs and proposed cybercrime bill provisions on cyberbullying; no statutory duty of care or safe-harbour regime for platforms has been enacted.
Lesotho - other topics
Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →