Cybersecurity · Niger
Cybersecurity regulation in Niger (2026)
Niger shaded by its cybersecurity status
Niger has no overarching comprehensive cybersecurity law imposing horizontal security and incident-reporting duties on operators; instead it relies on a set of topic- and sector-specific instruments — a criminal cybercrime law, a personal-data protection law with a dedicated authority (HAPDP), and electronic-transactions/telecom rules. These are reinforced by a non-binding National Cybersecurity Strategy 2023-2027 and the newly created National Cybersecurity Centre (CNAC, Oct 2025), which is mandated to coordinate the protection of sensitive and critical information systems. Niger is party to the AU Malabo Convention and the Budapest Convention.
Key points
Law No. 2019-33 of 3 July 2019 criminalizes attacks on the confidentiality, integrity and availability of computer systems and data, and adapts criminal procedure to electronic evidence. It was amended by ordinance in June 2024; controversial defamation/insult provisions used against critics have been revised over time.
Personal-data protection is governed by Law 2017-28 (3 May 2017), repealed/replaced by Law 2022-59 of 16 Dec 2022 (as amended by Law 2023-31 and 2024 ordinances), enforced by the Haute Autorité de Protection des Données à caractère Personnel (HAPDP). Processing requires prior notification to the HAPDP, which can warn, order compliance, and withdraw authorizations.
Adopted by government decree on 27 December 2022, the strategy sets four pillars: strengthening the legal/institutional framework, protecting critical national infrastructure, building trust through prevention/detection/suppression of cyberattacks, and promoting public-private partnerships. It is a policy framework rather than a binding obligations law and aligns with the ECOWAS and AU frameworks.
On 11 October 2025 the government adopted a decree creating the Centre National de Cybersécurité (CNAC), a public administrative establishment tasked with coordinating the security and defense of national information systems and sensitive/critical infrastructure, and supporting public and private entities in sectors such as energy, telecoms and finance.
Law No. 2019-03 of 30 April 2019 governs electronic transactions, and electronic communications are regulated under Law 2018-45 (as amended by Ordinance 2022-04), with sector security handled by the telecom regulator — contributing the sectoral rather than horizontal character of Niger's cyber regime.
Niger has adopted/ratified the African Union (Malabo) Convention on Cyber Security and Personal Data Protection and aligns with the Budapest Convention and the ECOWAS regional cybersecurity/cybercrime strategy, which shape its domestic legislative direction.
Niger - other topics
Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →