Online safety & content laws in Lesotho (2026)

Legal framework

Lesotho Communications Authority (LCA) under Communications Act No. 4 of 2012; Data Protection Act No. 5 of 2011; Computer Crime and Cyber Security Bill 2024 (tabled, not yet enacted)

Key points: internet & online safety in Lesotho

1. 01Cybercrime bill pending

   The Computer Crime and Cyber Security Bill 2024 was introduced in the National Assembly on 23 May 2024 and debated in committee in August 2024, but had not been enacted as of late 2024. It would criminalize unauthorized system access, cyberbullying, and online dissemination of false information; civil-society groups and press-freedom organizations oppose it for overbroad surveillance provisions (Section 66) that would authorize warrantless remote interception.

   nationalassembly.parliament.ls dailymaverick.co.za monitor.civicus.org

2. 02Broadcasting rules extended to online platforms

   In 2020 the LCA consulted on draft rules that would require online platforms, OTT services, and social-media accounts with more than 100 followers to register as 'internet broadcasters' and comply with the Broadcasting Rules 2004, covering community standards, children's protection, accuracy, and impartiality. Freedom House called on authorities to withdraw the proposed regulations; they were not formally adopted.

   freedomhouse.org qz.com praxata.com

3. 03LCA as primary regulator

   The Lesotho Communications Authority, established under the Communications Act No. 4 of 2012, is the statutory body for broadcasting, telecommunications, internet governance, and spectrum management. The 2012 Act broadened its mandate beyond legacy telecoms to encompass internet-service oversight and content broadcast over electronic communications networks.

   lca.org.ls afriwise.com

4. 04Data protection framework

   The Data Protection Act No. 5 of 2011 establishes principles governing the processing of personal information and applies to online platforms operating in Lesotho. Enforcement capacity is limited and no dedicated data-protection authority separate from government has been established.

   nic.ls dlapiperdataprotection.com

5. 05Surveillance and device-registration concerns

   SIM-registration regulations require mobile devices to be registered with the LCA. Freedom House has raised concern that regulations enable the LCA to transfer private communications to security agencies without a court order, creating de facto state surveillance capability over digital communications in the absence of adequate legal safeguards.

   freedomhouse.org freedomhouse.org

6. 06No age-verification or platform-liability regime

   Lesotho has no dedicated age-verification mandate or platform-liability framework for online services. Child protection online is addressed only indirectly through UNICEF-supported capacity-building programs and proposed cybercrime bill provisions on cyberbullying; no statutory duty of care or safe-harbour regime for platforms has been enacted.

   unicef.org chr.up.ac.za

Sources

1. 1.nationalassembly.parliament.ls/2024/05/23/computer-crime-and-cyber-security-bill-2024/
2. 2.lca.org.ls/legislation/
3. 3.freedomhouse.org/article/lesotho-authorities-should-withdraw-communications-regulation
4. 4.freedomhouse.org/country/lesotho/freedom-world/2025
5. 5.dlapiperdataprotection.com/index.html?t=law&c=LS
6. 6.afriwise.com/blog/the-evolution-of-communications-law-in-lesotho-towards-a-digital
7. 7.chr.up.ac.za/images/researchunits/dgdr/documents/resources/Digital_Rights_in_Lesot
8. 8.dailymaverick.co.za/opinionista/2024-09-15-cybercrime-repressive-law-poses-grave-threat-t
9. 9.monitor.civicus.org/explore/csos-denounce-proposed-cyber-law-lack-of-access-to-informatio
10. 10.qz.com/africa/1915941/lesotho-uganda-tanzania-introduce-social-media-rules
11. 11.praxata.com/insights/lesotho-internet-content-rules-consultation
12. 12.nic.ls/lsnic/community/policies/Data_Protection_Act_2011_Lesotho.pdf
13. 13.unicef.org/digitalimpact/stories/how-lesotho-protecting-children-and-their-famil