World Watch/Lesotho/Internet & Online Safety

Internet & Online Safety · Lesotho

Online safety & content laws in Lesotho (2026)

PartialLesotho Communications Authority (LCA) under Communications Act No. 4 of 2012; Data Protection Act No. 5 of 2011; Computer Crime and Cyber Security Bill 2024 (tabled, not yet enacted)Country index 65 · C+

Lesotho shaded by its internet & online safety status

Lesotho's online safety regime is fragmented across existing broadcasting, telecommunications, and data-protection legislation, with no dedicated comprehensive online safety law in force. The LCA has sought to extend broadcasting content standards to online platforms and proposed registration requirements for internet broadcasters, while the Computer Crime and Cyber Security Bill 2024 — which would criminalize cyberbullying and online dissemination of false information — was tabled in Parliament in May 2024 but remained under deliberation amid significant civil-society opposition as of late 2024. No specific age-verification or platform-liability framework exists.

Key points

Cybercrime bill pending

The Computer Crime and Cyber Security Bill 2024 was introduced in the National Assembly on 23 May 2024 and debated in committee in August 2024, but had not been enacted as of late 2024. It would criminalize unauthorized system access, cyberbullying, and online dissemination of false information; civil-society groups and press-freedom organizations oppose it for overbroad surveillance provisions (Section 66) that would authorize warrantless remote interception.

Broadcasting rules extended to online platforms

In 2020 the LCA consulted on draft rules that would require online platforms, OTT services, and social-media accounts with more than 100 followers to register as 'internet broadcasters' and comply with the Broadcasting Rules 2004 — covering community standards, children's protection, accuracy, and impartiality. Freedom House called on authorities to withdraw the proposed regulations; they were not formally adopted.

LCA as primary regulator

The Lesotho Communications Authority, established under the Communications Act No. 4 of 2012, is the statutory body for broadcasting, telecommunications, internet governance, and spectrum management. The 2012 Act broadened its mandate beyond legacy telecoms to encompass internet-service oversight and content broadcast over electronic communications networks.

Data protection framework

The Data Protection Act No. 5 of 2011 establishes principles governing the processing of personal information and applies to online platforms operating in Lesotho. Enforcement capacity is limited and no dedicated data-protection authority separate from government has been established.

Surveillance and device-registration concerns

SIM-registration regulations require mobile devices to be registered with the LCA. Freedom House has raised concern that regulations enable the LCA to transfer private communications to security agencies without a court order, creating de facto state surveillance capability over digital communications in the absence of adequate legal safeguards.

No age-verification or platform-liability regime

Lesotho has no dedicated age-verification mandate or platform-liability framework for online services. Child protection online is addressed only indirectly through UNICEF-supported capacity-building programs and proposed cybercrime bill provisions on cyberbullying; no statutory duty of care or safe-harbour regime for platforms has been enacted.

Lesotho - other topics

Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →