Saudi Arabia: Anti-Cyber Crime Law
The Anti-Cyber Crime Law is legislation enacted in Saudi Arabia to combat cybercrime in the country. The law defines a range of cyber offences, including hacking, identity theft, cyberbullying, and spreading extremist ideologies. It also imposes harsh penalties for those convicted of these crimes, including imprisonment and fines.
The law also establishes the Saudi National Cybersecurity Authority (NCA), a government agency responsible for protecting the country’s critical information infrastructure and promoting cybersecurity awareness. The NCA works with other government agencies, private organizations, and international partners to enhance Saudi Arabia’s cybersecurity capabilities.
Overall, the Anti-Cyber Crime Law represents Saudi Arabia’s commitment to protecting its citizens from the harms of cybercrime. The law takes a comprehensive approach to address cybercrime, with prevention, prosecution, and incident response provisions. Its emphasis on partnership and collaboration also underscores the importance of a coordinated and cooperative approach to cybersecurity in today’s interconnected world.
Article 1 – The following terms and phrases, wherever mentioned in this Law, shall have the meanings expressed next to them, unless the context requires otherwise:
Article 2 – This Law aims at combating cyber crimes by identifying such crimes and determining their punishments to ensure the following:
Article 3 – Any person who commits one of the following cyber crimes shall be subject to imprisonment for a period not exceeding one year and a fine not exceeding live hundred thousand riyals or to either punishment:
Article 4 – Any person who commits one of the following cyber crimes shall be subject to imprisonment for a period not exceeding three years and a fine not exceeding two million riyals, or to either punishment:
Article 5 – Any person who commits one of the following cyber crimes shall be subject to imprisonment for a period not exceeding four years and a fine not exceeding three million riyals or to either punishment:
Article 6 – Any person who commits one of the following cyber crimes shall be subject to imprisonment for a period not exceeding five years and a fine not exceeding three million riyals or to either punishment:
Article 7 – Any person who commits one of the following cyber crimes shall be subject to imprisonment for a period not exceeding ten years, and a fine not exceeding five million riyals or to either punishment:
Article 8 – The imprisonment and the fine may not be less than half the maximum if the crime is coupled with one of the following:
Article 9 – Any person who incites, assists or collaborates with others to commit any of the crimes stipulated in this Law shall be subject to a punishment not exceeding the maximum punishment designated for such crimes
Article 10 – Any person who attempts to commit any of the crimes stipulated in this Law shall be subject to a punishment not exceeding half the maximum punishment designated for said crimes.
Article 11 – The competent court may exempt an offender from such punishments if he informs the competent authority of the crime prior to its discovery and prior to the infliction of damage.
Article 12 – Application of this Law shall not prejudice the provisions of relevant laws, especially those pertaining to intellectual property rights, nor relevant international agreements to which the Kingdom is party.
Article 13 – Without prejudice to the rights of bona fide persons, equipment, software, and means used in perpetrating any of the crimes stipulated in this Law or the proceeds generated therefrom may be confiscated.
Article 14 – The Communications and Information Technology Commission, pursuant to its powers, shall provide the assistance and technical support to competent security agencies during the Investigation stages of such crimes and during trial.
Article 15 – The Bureau of Investigation and Public Prosecution shall carry out the investigation and prosecution of crimes stipulated In this Law.
Article 16 – This Law shall be published in the Official Gazette and shall enter into force one hundred twenty days after the date of publication.
