Online safety & content laws in Mali (2026)
Online safety rules in Mali: heavy restriction.
Mali's internet and online environment is governed by a 2019 cybercrime law that has been systematically used by the military junta to prosecute journalists, activists, and critics online. The junta has ordered internet shutdowns in conflict zones, restricted social media during protests, and banned numerous foreign media outlets, creating a climate of heavy state restriction rather than a rights-protective online safety framework. A newly adopted National Cybersecurity Strategy 2026-2030 focuses on infrastructure protection rather than platform accountability or user safety.
Legal framework
Law No. 2019-056 on the Suppression of Cybercrime (December 2019); Law No. 2013-015 on Personal Data Protection; Haute Autorité de la Communication (HAC) broadcast regulator; National Cybersecurity Strategy 2026-2030 (approved December 2025)
Key points: internet & online safety in Mali
Cybercrime Law (2019)
Law No. 2019-056 of 5 December 2019 criminalises unauthorised system access, data interference, and online 'threats' or 'insults' (Arts. 20-21), with penalties of 6 months-10 years imprisonment. Vague content provisions have been used to jail journalists, humorists, and political figures.
Use of law to suppress expression
Internet shutdowns & social media blocks
The Malian government ordered a full internet shutdown in Boni and surrounding areas to disrupt jihadist communications, cutting off civilians for extended periods. Social media was also partially blocked during the 2020 anti-government protests per NetBlocks monitoring.
Foreign media bans
National Cybersecurity Strategy 2026-2030
Approved by the Council of Ministers on 5 December 2025, the strategy focuses on protecting critical infrastructure, standardising security protocols, and improving incident response. It does not establish platform content-moderation obligations or user-facing online safety rules.
No platform liability or age-verification regime
Mali has no DSA-equivalent platform liability framework, no mandatory age-verification rules for online services, and no independent online safety regulator. The Council of Europe Octopus profile confirms Mali has not acceded to the Budapest Convention on Cybercrime.
Sources
- amrtp.ml/en/download/law-no-2019-056-of-december-05-2019-on-the-suppression-of
- cipesa.org/2020/02/new-mali-cybercrime-law-potentially-problematic-to-digital-ri
- ifex.org/sections-of-malis-cybercrime-law-threaten-online-freedom-of-expressio
- hrw.org/news/2026/01/23/malis-junta-cracks-down-on-freedom-of-expression
- carnegieendowment.org/research/2025/10/digital-communication-as-a-weapon-mali?lang=en
- netblocks.org/reports/social-media-restricted-in-mali-amid-protests-against-preside
- ecofinagency.com/news-digital/1112-51302-mali-targets-stronger-infrastructure-protecti
- rsf.org/en/country/mali
- coe.int/en/web/octopus/-/mali
- dataguidance.com/notes/mali-data-protection-overview
- wearetech.africa/en/fils-uk/news/public-management/mali-adopts-2026-2030-cybersecurity
Next for Mali: CybersecuritySectoral rules
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026