Online safety & content laws in Tuvalu (2026)

Section 33 of the Tuvalu Telecommunications Corporation Act 1993 criminalises sending 'grossly offensive' messages and prohibits interception or unauthorised disclosure of communications, providing the primary statutory basis for online content offences in the absence of a standalone cybercrime law.

Tuvalu has no enacted cybercrime statute. The Council of Europe Octopus Community and regional reviews confirm that a Cybercrime Bill has been drafted but its parliamentary passage remains pending, leaving hacking, malware distribution, and online child exploitation without dedicated criminal provisions.

Tuvalu's Department of ICT launched the National ICT Policy (refreshed 2024) with cybersecurity as one of seven strategic focuses, committing to enact cyber laws, establish a cyber task force, and run public-awareness campaigns. The policy is aspirational rather than legally binding.

Tuvalu has emerging data-protection provisions and an official awareness programme (Get Safe Online Tuvalu), but lacks a GDPR-equivalent comprehensive data-protection statute; UNCTAD and DataGuidance list Tuvalu's data-protection status as incomplete or in development, and there are no age-verification or platform-liability rules.

Tuvalu does not practise state censorship or systematic blocking of online content. The internet is provided exclusively by the government-owned Tuvalu Telecommunications Corporation, but access is open; restrictions on expression are not a documented feature of the regime.

Tuvalu participates in the Pacific Cyber Security Operators Network (PaCSON), which provides shared threat intelligence and capacity-building. The ITU country profile and National Cyber Security Index both score Tuvalu low on legal and technical maturity, reflecting its reliance on regional partners rather than domestic institutions.