Cybersecurity law & regulation in Botswana (2026)

Legal framework

Cybersecurity Act, 2025 (Act 21 of 2025), administered by the Botswana Communications Regulatory Authority (BOCRA) with BwCIRT as the national CSIRT

Key points: cybersecurity in Botswana

1. 01Cybersecurity Act 2025

   Act 21 of 2025 is Botswana's primary, standalone cybersecurity statute. It regulates cybersecurity activities, provides for the designation of Critical Information Infrastructure, mandates mandatory incident reporting, and penalises offences such as cyber-extortion and creation of harmful fake profiles.

   botswanalaws.com bocra.org.bw

2. 02Prior Cybercrime Law (repealed)

   The Cybercrime and Computer Related Crimes Act 2018 (No. 18 of 2018) previously criminalised unauthorised access, data interference, cyber fraud, harassment, and stalking. It has been repealed and is now superseded by the 2025 Act.

   bocra.org.bw botswanalaws.com

3. 03Regulatory Authority, BOCRA

   BOCRA is the principal cybersecurity regulator, responsible for administering the Cybersecurity Act 2025, overseeing BwCIRT operations, and implementing the National Cybersecurity Strategy across public and private sectors.

   bocra.org.bw bocra.org.bw

4. 04BwCIRT, National CSIRT

   The Botswana Computer Incident Response Team (BwCIRT), established in 2019 under BOCRA, is the national point of contact for cyber incident coordination covering government departments, ISPs, and the broader internet community; it handles incidents confidentially with a dedicated hotline.

   bocra.org.bw cirt.org.bw

5. 05Critical Infrastructure Protection

   The Cybersecurity Act 2025 mandates identification and declaration of CNII across sectors including finance, energy, water, health, communications, emergency services, and e-government, with mandatory cybersecurity protocols and incident-reporting duties for designated operators.

   bocra.org.bw bocra.org.bw

6. 06Data Protection Act 2024

   The Data Protection Act 2024, effective 14 January 2025, complements the cybersecurity regime by imposing obligations on personal data processors and controllers, reinforcing breach-notification duties alongside the Cybersecurity Act.

   dlapiperdataprotection.com misa.org

Timeline of decisions

1. 21 Nov 2025Decision
   BOCRA-Cyble MoU to Advance AI-Powered National Cybersecurity

   The Botswana Communications Regulatory Authority (BOCRA) signed a strategic MoU with cybersecurity firm Cyble to strengthen national cyber-defence using AI-native threat intelligence platforms that monitor the open, deep, and dark web. The deal directly shapes the operational environment for AI systems processing sensitive data and underpins the National Cyber Security Authority being created under the 2025 Cybersecurity Bill.

   Cyble Press Release (BOCRA co-signatory)

2. 14 Aug 2025Law · official
   Parliament Passes Digital Services Bill 2025 and Cybersecurity Bill 2025

   Botswana's National Assembly passed both bills under a certificate of urgency. The Digital Services Bill establishes a Digital Services Authority to regulate and promote online platforms and transforms the Digital Transformation Office; the Cybersecurity Bill creates a National Cyber Security Authority and a legal framework for protecting critical information infrastructure, together forming the statutory infrastructure for regulating AI-enabled digital services and AI-related cyber threats.

   BOCRA

3. 1 Jan 2025Law · official
   Cybersecurity Act 2025 (Act 21 of 2025) Enacted

   Botswana's first dedicated cybersecurity law establishes a National Cybersecurity Commission, mandates identification and protection of Critical National Information Infrastructure (CNII) across electricity, water, and healthcare sectors, and formalises the BWCIRT mandate. It introduces binding cybersecurity obligations on CNII operators and imposes penalties for cyber-extortion and creation of harmful fake social media profiles.

   Botswana Laws (Government of Botswana)

4. 1 Oct 2020Guidance · official
   National Cybersecurity Strategy Approved

   Botswana's first National Cybersecurity Strategy was approved and published, establishing objectives for a secure and resilient cyberspace, mandating a Critical National Information Infrastructure (CNII) risk assessment, directing creation of a national CIRT, and providing the policy foundation for the eventual Cybersecurity Act.

   BOCRA (Botswana Communications Regulatory Authority)

5. 1 Jan 2019Decision · official
   Botswana Computer Incident Response Team (BwCIRT) Established

   BOCRA established BwCIRT under the Ministry of Transport and Communications as Botswana's first official national CIRT, tasked with 24/7 monitoring of threats to critical information infrastructure, coordinating incident response, and acting as the national point-of-contact for international cybersecurity cooperation.

   BOCRA (Botswana Communications Regulatory Authority)

6. 29 Jun 2018Law · official
   Cybercrime and Computer-Related Crimes Act No. 18 of 2018 Enacted

   Parliament enacted the Cybercrime and Computer-Related Crimes Act, criminalising unauthorised computer access, data interference, cyber-fraud, cyber-stalking, and related offences. As Botswana's principal statute governing computer-based wrongdoing, it provides the existing legal basis against which AI-enabled cybercrime and AI system misuse are assessed, and it pre-dates and complements the data-protection framework.

   BOCRA

7. 29 Jun 2018Law · official
   Cybercrime and Computer Related Crimes Act 2018 (Act 18 of 2018) Enacted

   A comprehensive overhaul of the 2007 Act, enacted following a 2015 reform decision and Bill No. 33 of 2017, expanded criminal offences to cover unauthorised system access, data interception, identity theft, electronic fraud, and cyber-harassment, while strengthening Botswana's alignment with international cybercrime standards.

   BOCRA (Botswana Communications Regulatory Authority)

8. 1 Jan 2016Guidance · official
   Electronic Records (Evidence) Regulations 2016 Issued

   BOCRA issued implementing regulations under the 2014 Electronic Records Act designating itself as Certifying Authority, establishing the approved certification process for electronic record systems, and ensuring that certified electronic records produced from those systems are admissible as evidence in cybercrime prosecutions.

   BOCRA (Botswana Communications Regulatory Authority)

9. 1 Jan 2007Law · official
   Cybercrime and Computer Related Crimes Act 2007 (Act 22 of 2007) Enacted

   Botswana's foundational cyber law created offences for unauthorised computer access, computer fraud, and data interference, and established extraterritorial jurisdiction for cybercrimes affecting Botswana; it was the country's first statute directly targeting online criminal conduct.

   Botswana Laws (Official Gazette)

10. 1 Jan 2007Law
    Cybercrime and Computer Related Crimes Act 2007 (Act 22 of 2007)

    Botswana's first cybercrime statute criminalised unauthorised access to computer systems, interception of data in transit, and computer-related fraud, while facilitating collection of electronic evidence. It established state-level recognition that electronically stored data required legal protection, predating any dedicated privacy framework by more than a decade.

    UNODC Sherloc — Botswana Legislation

11. 1 Jan 2007Law · official
    Cybercrime and Computer Related Crimes Act 2007 (Act 22 of 2007) Enacted

    Botswana's foundational cybercrime law (Chapter 08:06) first criminalised unauthorised computer access, data interference, and computer-related fraud, establishing the baseline legal framework and jurisdictional rules that all subsequent cybersecurity legislation has built upon; it was repealed and replaced by the 2018 Act.

    UNODC (UN Office on Drugs and Crime)

Sources

1. 1.botswanalaws.com/bulletin/principal-legislation/bulletin-2025/act-21-of-2025---cyberse
2. 2.bocra.org.bw/node/62799
3. 3.bocra.org.bw/cybercrime-and-computer-related-crimes-act-2018
4. 4.botswanalaws.com/consolidated-statutes/repealed-acts/cybercrime-and-computer-related-c
5. 5.bocra.org.bw/national-cybersecurity-strategy-0
6. 6.bocra.org.bw/bw-cirt
7. 7.cirt.org.bw/about
8. 8.bocra.org.bw/sites/default/files/documents/approved%20botswana-national-cybersecur
9. 9.dlapiperdataprotection.com/index.html?t=law&c=BW
10. 10.misa.org/blog/new-botswana-data-protection-act-progressive-step-to-a-more-secu
11. 11.bocra.org.bw/
12. 12.bocra.org.bw/sites/default/files/sites/default/files/documents/Draft_Cybersecurity