Cybersecurity law & regulation in Fiji (2026)

Legal framework

Cybercrime Act 2021 (in force 14 November 2022); Online Safety Act 2018; Reserve Bank of Fiji Prudential Supervision Policy Statement No. 2 (Cybersecurity Risk); National Cybersecurity & Resilience Strategy 2026-2031

Key points: cybersecurity in Fiji

1. 01Cybercrime Act 2021

   Passed 12 February 2021 and brought fully into force on 14 November 2022 (except s.34), the Act criminalises unauthorised access, interception and interference with computer systems and data, and provides procedural powers for electronic-evidence collection and international cooperation aligned with the Budapest Convention on Cybercrime.

   laws.gov.fj parliament.gov.fj

2. 02Online Safety Act 2018

   Establishes the Online Safety Commission to receive complaints about harmful electronic communications; prescribes penalties of up to FJD 50,000 / 7 years imprisonment for individuals. Focuses on online harms rather than technical security obligations.

   laws.gov.fj fiji.gov.fj

3. 03Financial-sector cybersecurity (RBF PSPS No. 2)

   The Reserve Bank of Fiji's Prudential Supervision Policy Statement No. 2 sets mandatory minimum requirements for cybersecurity risk management across all RBF-supervised entities (commercial banks, insurers, FNPF, stockbrokers, etc.), representing the most binding sector-specific security obligations in force.

   rbf.gov.fj rbf.gov.fj

4. 04Breach notification & incident reporting

   There is no general statutory breach-notification obligation in Fiji. The RBF's sector rules impose incident-reporting duties on supervised financial institutions; outside the financial sector no mandatory notification requirement is currently in force. Privacy and data-protection legislation (which would typically introduce breach notification) is pending.

   dlapiperdataprotection.com rbf.gov.fj

5. 05National Cybersecurity & Resilience Strategy 2026-2031

   Endorsed by Cabinet and launched by PM Rabuka in 2025, the strategy establishes a framework for critical infrastructure protection, incident response, and a national CERT. It succeeds the 2016 strategy and is a policy document, not binding legislation; companion privacy legislation and a formal CERT are still being finalised.

   mcttt.gov.fj fbcnews.com.fj

6. 06Budapest Convention alignment & international cooperation

   Fiji's Cybercrime Act 2021 was developed with Council of Europe Octopus Programme support and mirrors Budapest Convention provisions on substantive offences, procedural measures, and mutual legal assistance, enabling cross-border cooperation even before formal accession.

   coe.int parliament.gov.fj

Timeline of decisions

1. 1 Aug 2026Law
   National Cybersecurity and Resilience Strategy 2026–2031 launched; Fiji CERT established

   Prime Minister Sitiveni Rabuka launched Fiji's National Cybersecurity and Resilience Strategy 2026–2031 alongside the inauguration of the Fiji Computer Emergency Response Team (Fiji CERT) and a 24/7 Government Security Operations Centre — providing the primary institutional infrastructure governing AI-adjacent cyber threats.

   Fiji Sun

2. 18 Mar 2026Guidance
   National Cybersecurity and Resilience Strategy 2026–2031 launched

   Prime Minister Sitiveni Rabuka launched Fiji's first dedicated National Cybersecurity and Resilience Strategy at a ceremony in Suva, addressing gaps in cyber preparedness and transnational digital threats. The strategy sets a five-year whole-of-government framework for protecting critical infrastructure and digital services.

   Fiji Village

3. 1 Apr 2025Guidance · official
   Fiji National Digital Strategy 2025–2030 published

   The Ministry of Communications released the National Digital Strategy 2025–2030, which designates cybersecurity governance and AI oversight as priority pillars, targeting 80% of key government services online and 80% digital inclusion by 2030. Development of a standalone National Cybersecurity Strategy was flagged as a 2025 deliverable.

   Fiji Ministry of Communications

4. 1 Apr 2025Law · official
   Fiji National Digital Strategy 2025-2030 Published

   Fiji's first whole-of-government National Digital Strategy embeds cybersecurity as a cross-cutting pillar alongside e-government, digital inclusion, and data governance, committing to secure-by-design digital infrastructure and 80% of public services online by 2030. It provides the overarching framework within which the 2026-2031 Cybersecurity Strategy operates.

   Fiji Digital Government Office

5. 1 Jan 2025Decision · official
   Fiji Computer Emergency Response Team (Fiji CERT) Established

   Fiji stood up its first national CERT to serve as digital first-responders to significant cyber incidents, supported by Australian capacity-building assistance for technical staff. The government simultaneously committed over FJD 5 million to upgrade GovNet infrastructure and launch a 24/7 Government Security Operations Centre.

   Fiji Government

6. 1 Jan 2025Law · official
   National Cybersecurity and Resilience Strategy 2026-2031 Launched by PM Rabuka

   Prime Minister Rabuka launched Fiji's second national cybersecurity strategy, establishing a coordinated framework to protect critical infrastructure, build a skilled cyber workforce, and strengthen international cooperation, alongside a dedicated national cybersecurity public awareness website. Cabinet had separately endorsed the strategy and it was welcomed by Australia's High Commission as a regional milestone.

   Fiji Government

7. 20 Jun 2024Decision · official
   Fiji Formally Accedes to the Budapest Convention on Cybercrime

   Fiji became the 74th Party to the Council of Europe's Budapest Convention, the principal international treaty harmonising cybercrime laws and enabling mutual legal assistance for electronic evidence. Accession completed a process begun with Fiji's invitation in December 2021 and obligates Fiji to maintain its Cybercrime Act 2021 in Convention-compliant form.

   Council of Europe – Octopus

8. 30 Apr 2024Decision · official
   Australia–Fiji MOU on Cybersecurity Cooperation signed

   Australia and Fiji signed a bilateral Memorandum of Understanding on Cyber Security Cooperation, committing Australia to help Fiji formulate its National Cybersecurity Strategy and strengthen local cyber governance and capabilities. The agreement is part of Australia's broader Pacific security-cooperation programme.

   DFAT (Australian Government)

9. 1 Jan 2024Decision · official
   World Bank KoDi Cybersecurity Capacity Maturity Model (CMM) Review of Fiji

   The World Bank's KoDi programme conducted a Cybersecurity Capacity Maturity Model assessment of Fiji, identifying gaps across governance, technical response, and institutional dimensions. The findings directly informed the design of the 2026-2031 strategy and the CERT establishment.

   World Bank

10. 14 Nov 2022Law · official
    Cybercrime Act 2021 Enters into Force

    After a transitional period following parliament's passage in February 2021, the Cybercrime Act (Act No. 3 of 2021) came into full effect, repealing Sections 336-346 of the Crimes Act 2009 and creating a standalone, Budapest Convention-aligned statute covering unauthorised access, data and system interference, computer-related fraud and forgery, and electronic evidence rules.

    Laws of Fiji

11. 12 Feb 2021Law · official
    Cybercrime Act 2021 Enacted by Parliament

    Parliament passed Fiji's first standalone, comprehensive cybercrime statute (Act No. 3 of 2021), covering offences against computer system confidentiality, integrity and availability, computer-related forgery and fraud, child sexual abuse material online, and binding electronic evidence rules, replacing the patchwork Sections 336-346 of the Crimes Act 2009 after a two-year reform process supported by the Council of Europe.

    Parliament of Fiji

12. 1 Jan 2017Decision · official
    Fiji Joins Pacific Cyber Security Operational Network (PaCSON)

    Australia launched PaCSON, a government-to-government cyber threat intelligence and incident coordination network for 16 Pacific nations, with Fiji as a member. PaCSON gives Fiji access to regional threat sharing, joint incident response capability, and bilateral technical capacity-building, anchoring Fiji in the Pacific's collective cyber defence architecture.

    Australian DFAT

13. 1 Jan 2016Law · official
    Fiji Adopts Its First National Cybersecurity Strategy

    Fiji published its inaugural National Cybersecurity Strategy, providing the first whole-of-government framework for cyber governance, awareness, and incident response. The strategy set foundational priorities that later drove legislative reform (the Cybercrime Act 2021) and was eventually superseded by the 2026-2031 strategy.

    Fiji Ministry of Communications

14. 5 Nov 2009Law · official
    Crimes Decree 2009 enacted — Fiji's first computer-offence provisions

    Under military governance, Fiji enacted the Crimes Decree 2009 (Decree No. 44 of 2009), whose Division 6 (ss 336–351) constituted the country's first codified computer-offence framework, criminalising unauthorised computer access and data interference. The provisions were widely criticised as limited and fragmented, ultimately driving the full legislative overhaul completed by the Cybercrime Act 2021.

    Laws of Fiji

Sources

1. 1.laws.gov.fj/Acts/DisplayAct/3165
2. 2.laws.gov.fj/Acts/DisplayAct/2462
3. 3.rbf.gov.fj/wp-content/uploads/2023/04/PSPS-No.2_Minimum-Requirements-for-the-Man
4. 4.rbf.gov.fj/wp-content/uploads/2024/03/Guideline-4-on-Protecion-of-Data-and-Priva
5. 5.mcttt.gov.fj/fiji-ramps-up-digital-defenses-with-ambitious-cybersecurity-strategy/
6. 6.fbcnews.com.fj/news/cabinet-endorses-fijis-national-cybersecurity-strategy-2026-2031
7. 7.coe.int/en/web/octopus/-/fiji
8. 8.dlapiperdataprotection.com/index.html?t=breach-notification&c=FJ
9. 9.parliament.gov.fj/wp-content/uploads/2023/07/Review-Report-on-the-Convention-on-Cybercr
10. 10.worldbank.org/en/programs/kodi/brief/world-bank-s-kodi-supports-fiji-in-strengtheni
11. 11.parliament.gov.fj/wp-content/uploads/2021/03/Act-3-Cybercrime-2021.pdf
12. 12.fiji.gov.fj/Fiji-Laws/Acts/2018/Act-8---Online-Safety-Act
13. 13.rbf.gov.fj/core-functions/financial-stability/regulation/supervision-policies/