Online safety & content laws in Cyprus (2026)
Online safety rules in Cyprus: comprehensive law.
Cyprus transposed the EU Digital Services Act into national law on 11 July 2025 via three legislative instruments, designating the renamed Radio Television and Digital Services Authority (RTDSA) as the national Digital Services Coordinator. Prior to this, the European Commission had initiated infringement proceedings against Cyprus for delayed implementation; those proceedings were closed in November 2025 following the adoption. Cyprus additionally benefits from the directly applicable EU DSA framework covering very large online platforms and search engines supervised at EU level.
Legal framework
EU Digital Services Act (Regulation (EU) 2022/2065) + Cyprus Law of 2025 on DSA Implementation (CYDSA); Digital Services Coordinator: Radio Television and Digital Services Authority (RTDSA); co-competent authorities: OCECPR and Commissioner for Personal Data Protection
The Digital Services Act in Cyprus
In Cyprus, online platforms and intermediaries are governed by the EU Digital Services Act (DSA), a directly-applicable regulation covering illegal content, transparency and user protection.
- Framework
- the EU Digital Services Act (Regulation (EU) 2022/2065)
- Approach
- notice-and-action on illegal content, transparency reporting, clear terms, and protection of minors
- Applies to
- online intermediaries, hosting services and platforms offering services to users in Cyprus, wherever established
- Very large platforms
- platforms and search engines with 45M+ EU users face extra systemic-risk audits, overseen by the European Commission
- Maximum fine
- up to 6% of global annual turnover
- Oversight
- the national Digital Services Coordinator, plus the European Commission for very large platforms
The DSA is an EU regulation applied directly in Cyprus; the national Digital Services Coordinator handles day-to-day supervision.
Key points: internet & online safety in Cyprus
DSA national implementation (July 2025)
Three legislative instruments were approved by the House of Representatives on 3 July 2025 and entered into force on 11 July 2025: the Cyprus DSA Implementation Law (CYDSA), the Radio and Television Organisations Amendment Law of 2025 (RTO), and accompanying secondary regulations. These impose obligations on intermediary service providers regarding illegal content removal, risk assessments, algorithmic transparency, and user redress mechanisms.
Digital Services Coordinator: RTDSA
The former Cyprus Radio Television Authority (CRTA) was renamed the Radio Television and Digital Services Authority (RTDSA) and designated as Cyprus's Digital Services Coordinator by Council of Ministers decision (published in Official Gazette 1 March 2024). The RTDSA holds investigative, supervisory, and administrative fining powers over all in-scope intermediary services operating from Cyprus, and represents Cyprus on the European Board for Digital Services.
Infringement proceedings and compliance
The European Commission formally decided in April 2025 to refer Cyprus (alongside Czechia, Spain, Poland, and Portugal) to the Court of Justice of the EU for insufficient DSA implementation. Following the July 2025 legislative package, the Commission closed the infringement proceedings against Cyprus in November 2025.
Platform liability and sanctions
The CYDSA establishes administrative fines aligned with the DSA framework (up to 6% of global annual turnover for systemic violations by platforms). Criminal liability applies for obstruction of investigations or repeated non-compliance with binding orders: up to one year imprisonment and/or a financial penalty of up to €10,000 per individual.
Age verification and child protection
Cyprus announced plans to ban social media access for children under 15 using age verification via the national Digital Citizen app, following Greece's model. A parliamentary bill (proposed by DISY MP Dimitris Dimitriou) would raise the minimum age for independent internet access from 14 to 16. Cyprus is also a front-runner participant in the EU Age Verification Solution pilot, integrating age checks into the EUDI Wallet framework.
NIS2 and cybersecurity layer
Cyprus enacted the Network and Information Systems Security (Amendment) Law of 2025 on 25 April 2025, transposing EU NIS2 Directive (2022/2555). The OCECPR serves as the NIS competent authority for critical information infrastructure, complementing the DSA enforcement architecture for digital services.
The Digital Services Act in Cyprus: FAQ
Does the Digital Services Act apply in Cyprus?
Yes. As an EU member, Cyprus is covered by the EU Digital Services Act (Regulation (EU) 2022/2065), which applies directly.
What does the DSA require of platforms in Cyprus?
Notice-and-action mechanisms for illegal content, transparency reporting, clear terms of service, and measures to protect minors.
Who enforces the DSA in Cyprus?
The national Digital Services Coordinator, with the European Commission supervising very large online platforms and search engines.
What are the penalties under the DSA in Cyprus?
Up to 6% of a provider's global annual turnover for serious breaches.
Timeline of decisions
- Law · officialCyprus DSA Transposition Law Enters Into Force
Three legislative instruments implementing EU Regulation 2022/2065 (DSA) were approved by Parliament on 3 July 2025 and published in the Government Gazette on 11 July 2025, entering into force immediately. The Radio Television and Digital Services Authority (formerly the Radio Television Authority) was renamed and designated as Cyprus's Digital Services Coordinator, responsible for overseeing all intermediary service providers and representing Cyprus on the European Board for Digital Services.
MERLIN — Council of Europe Observatory on Media
- Enforcement · officialEuropean Commission Opens Infringement Proceedings Against Cyprus for DSA Non-Transposition
The European Commission sent a letter of formal notice to Cyprus (alongside Czechia and Portugal) for failing to designate a Digital Services Coordinator and transpose the Digital Services Act into national law by the required deadline, triggering formal infringement proceedings that ultimately prompted the July 2025 legislation.
European Commission — Shaping Europe's Digital Future
- GuidanceGovernment Announces Bill to Extend Offensive Internet Material Law to Cover Hate Speech
The Cyprus government announced plans to amend existing legislation on offensive online material — previously limited to child sexual abuse material and terrorist content — to explicitly include racism, xenophobia, and hate speech, responding to long-standing criticism that Law 134(I)/2011 lacked effective enforcement mechanisms online.
Cyprus Mail
- Law · officialLaw 134(I)/2011: Online Hate Speech and Racism Criminalised
Cyprus enacted Law 134(I)/2011 criminalising the use of computer systems to incite or promote racism, xenophobia, and hatred, punishable by up to five years' imprisonment. This was Cyprus's first dedicated legislative response to online hate speech, though subsequent OSCE and Council of Europe reports noted persistent enforcement challenges.
OSCE Hate Crime Reporting Website
- Decision · officialSafenetCY Internet Hotline Launched
Cyprus's internet safety hotline was re-launched as SafenetCY in March 2007 by the Cyprus Neuroscience and Technology Institute with EU co-funding under the Safer Internet Plus Programme, providing the public with a reporting channel for child sexual abuse material, grooming, racism, and other illegal online content — Cyprus's primary civil society internet safety mechanism.
European Commission — Better Internet for Kids
- LawLaw 156(I)/2004: Legal Framework for Information Society Services and E-Commerce
Cyprus enacted Law 156(I)/2004 transposing the EU E-Commerce Directive, establishing liability rules for online intermediaries, transparency obligations for online service providers, and rules for electronic contracts. This remains the foundational statute for digital business regulation and online platform obligations in Cyprus.
ICLG — Telecoms, Media & Internet Laws Cyprus 2025
Sources
- harriskyriakides.law/insights/news/cyprus-transposes-the-eu-digital-services-act-into-nati
- amc.law/cyprus-dsa-law/
- merlin.obs.coe.int/article/10009
- rtdsa.org.cy/en/mission-role.html
- ec.europa.eu/commission/presscorner/detail/en/ip_25_1081
- digital-strategy.ec.europa.eu/en/policies/dsa-dscs
- mdpi.com/2075-471X/15/2/30
- eucrim.eu/news/overview-of-the-latest-developments-on-the-dsa-may-mid-october-2
- kiprinform.com/en/cyprus_news/cyprus-plans-under-15-social-media-ban-using-eu-age-ve
- harneys.com/our-blogs/regulatory/cyprus-adopts-nis2-directive-key-updates-in-2025
- cyprus-mail.com/2025/10/15/cyprus-joins-push-for-eu-digital-age-rules-to-protect-chil
- dsa.cy/en/the-dsa/history
Next for Cyprus: CybersecurityComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026