Skip to content
World Watch

Cybersecurity law & regulation in South Sudan (2026)

Cybersecurity in South Sudan: comprehensive law.

South Sudan moved from a 2021 Provisional Order to a full statute in 2026: the Cybercrime and Computer Misuse Act, 2026, which entered into force on signature (18 February 2026). It is a comprehensive cybercrime/computer-misuse law that criminalizes hacking, identity theft and cyberstalking, protects critical infrastructure, and establishes national incident-response and prosecution structures. A dedicated personal-data-protection law does not yet exist; the government has said a first-ever Data Protection Bill is being prepared for 2026.

Last verified Official sources first · MethodologyCompare South Sudan with other countries

Legal framework

Cybercrime and Computer Misuse Act, 2026 (signed by President Salva Kiir on 18 February 2026); the National Communication Authority (NCA) is the lead cybersecurity/CIRT body and the National Cybercrime Prosecution Unit sits under the Ministry of Justice and Constitutional Affairs.

Key points: cybersecurity in South Sudan

  1. Enacted comprehensive law

    Parliament (TNLA) passed the Cybercrime and Computer Misuse Bill and President Kiir signed the Act into law on 18 February 2026, which came into force immediately, replacing the earlier Cybercrimes and Computer Misuse Provisional Order 2021.

    telecompaper.com radiotamazuj.org

  2. Scope of offences

    The Act standardizes offences such as hacking, identity theft and cyberstalking, regulates online conduct and social media, and provides for international cooperation and extradition in cyber cases.

    radiotamazuj.org radiotamazuj.org

  3. Critical infrastructure protection

    Among its stated goals is protection of critical infrastructure including banking, telecommunications and government databases.

    radiotamazuj.org

  4. Incident response / reporting (SS-CIRT/CC)

    Under Section 32 the designated authority (NCA) is the lead national responder to cyber threats and must establish a National Computer Incident Response Team Coordination Centre (SS-CIRT/CC) to provide technical analysis, issue alerts/advisories, run awareness training and operate a platform for reporting cyber incidents.

    radiotamazuj.org nca.gov.ss

  5. Enforcement bodies

    The Act creates a National Cybercrime Prosecution Unit under the Ministry of Justice and Constitutional Affairs; the ICT Ministry, in collaboration with the NCA and law enforcement, is responsible for operationalizing the Act.

    radiotamazuj.org onecitizendaily.com

  6. Data protection still a gap

    South Sudan has no comprehensive personal-data-protection law and is not party to the AU Malabo Convention; the government says a first-ever Data Protection Bill (establishing a Data Protection Commission) is being prepared for 2026 to complement the cybercrime Act.

    radiotamazuj.org dataprotection.africa

Sources

  1. telecompaper.com/news/south-sudan-enacts-cybercrime-and-computer-misuse-act-2026--1563
  2. radiotamazuj.org/en/news/article/south-sudan-parliament-passes-controversial-cybercrim
  3. radiotamazuj.org/en/news/article/explainer-cybercrime-and-computer-misuse-act-2026-cha
  4. radiotamazuj.org/en/news/article/explainer-cybercrime-and-computer-misuse-act-2026-key
  5. nca.gov.ss/cirt
  6. onecitizendaily.com/index.php/2026/02/20/ict-ministry-vows-to-ensure-effective-operation-
  7. radiotamazuj.org/en/news/article/south-sudan-to-get-data-protection-bill-in-2026-says-
  8. dataprotection.africa/south-sudan/

Next for South Sudan: Starting a BusinessRestricted

Next topic

Orientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026