Internet & Online Safety · Zambia
Online safety & content laws in Zambia (2026)
Zambia shaded by its internet & online safety status
Zambia enacted two cybersecurity laws in April 2025 — the Cyber Security Act and the Cyber Crimes Act — which together create criminal offences for online conduct, establish sweeping state surveillance powers, and introduce child online protection rules. The framework does not constitute a comprehensive EU DSA/UK OSA-style platform accountability regime; it is primarily a criminal and enforcement model with broad executive authority, without systematic platform liability or algorithmic-risk duties.
Key points
Signed into law on 8 April 2025 (Act No. 3 of 2025), the Cyber Security Act establishes the Zambia Cyber Security Agency under the direct supervision of the President and creates a Central Monitoring and Coordination Centre empowered to lawfully intercept electronic communications. Critics note insufficient checks and balances on these surveillance powers.
Act No. 4 of 2025, in force from 15 April 2025, criminalises a broad range of online conduct including computer-related fraud, harassment, and humiliation via digital platforms (Section 22). Vague language around 'harassment or humiliation' has been flagged by civil society as susceptible to misuse against political speech and criticism of public officials.
The Cyber Crimes Act 2025 dedicates specific provisions to child online protection, criminalising child pornography (15–25 years imprisonment), child solicitation, and child grooming for sexual conduct conducted via digital means. No standalone age-verification mandate for platforms is established.
The 2025 laws can compel any entity — including social-media platforms and civil society organisations — to store data on local servers, granting authorities easier access. ICT companies may be required to intercept and provide access to digital communications; however, there is no formal platform-liability or content-moderation duty framework comparable to the EU DSA.
ZICTA, established under the ICT Act No. 15 of 2009, remains the primary telecom and ICT regulator. Following enactment of the 2025 cyber laws, ZICTA publicly warned in early 2026 that social-media misuse and AI-generated disinformation would be prosecuted. ZICTA is bound by a 2022 court-agreed commitment not to shut down internet access outside its legal authority after the 2021 election-day shutdown was overturned by court order.
The International Center for Not-for-Profit Law (ICNL), CIPESA, GNI, and IFEX have all criticised the 2025 laws for overbroad language, minimal public consultation, and potential to suppress online expression and privacy. Freedom House's Freedom on the Net 2024 report also documented ongoing concerns about Zambia's internet freedom environment preceding the 2025 legislation.
Zambia - other topics
Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →