Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
No known legislation or policies.
Mandatory minimum or maximum encryption strength
No known legislation or policies.
Licensing/registration requirements
No known legislation or policies.
Import/export controls
Sections 7 and 9 of the Strategic Trade Act 2010 prohibit the import and export of strategic goods and technology as determined by the Minister of International Trade and Industry. The Minister’s determination includes certain forms of encryption technology. A copy of the law can be found here . A copy of the list of strategic goods and technology can be found here .
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
Section 116B(1) of the Criminal Procedure Code (Act 593) requires a police officer conducting a search under the Code to be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of the computerized data” (s. 116B(3)). A copy of the Criminal Procedure Code can be found here . Section 10(1)(c) of the Computer Crimes Act 1997 (Act 563) allows a police officer, upon obtaining a warrant from a magistrate, to require any information contained in a computer and accessible from the premises to be produced in a form in which it can be taken away and in which it is visible and legible. Failure to comply is a criminal offence punishable by up to three years’ imprisonment and/or a fine of up to MYR 25,000. A copy of the law can be found here . Section 79(1) of the Digital Signature Act 1997 (Act 562) requires that a police officer conducting a search under section 77 or 78 of the Act, or an authorised officer conducting a search under section 77 of the Act, be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of computerized data” (s.79(2)). Failure to comply is a criminal offence punishable by imprisonment for up to four years and/or a fine of up to MYR 200,000. A copy of the law can be found here . Section 249(1) of the Communications and Multimedia Act 1998 (Act 588) requires that a police officer conducting a search under section 247 or 248 of the Act, or an authorised officer conducting a search under section 247 of the Act, be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of computerized data” (s.79(2)). Failure to comply is a criminal offence punishable by imprisonment for up to six months years and/or a fine of up to MYR 20,000. A copy of the law can be found here . Section 32(1) of the Anti-Trafficking in Persons and Anti-Smuggling of Migrants Act 2007 (Act 670) requires that an enforcement officer conducting a search under the Act be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of computerized data” (s.32(2)). Failure to comply is a criminal offence punishable by imprisonment for up to three years and/or a fine of up to MYR 150,000. A copy of the law can be found here . Section 32(1) of the Strategic Trade Act 2010 requires that an enforcement officer conducting a search under the Act be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of the computerized data” (s.32(2)). Failure to comply is a criminal offence punishable by imprisonment for up to five years and/or a fine of up to MYR 5,000,000. A copy of the law can be found here .
Obligations on providers to assist authorities
Section 116B(1) of the Criminal Procedure Code (Act 593) requires a police officer conducting a search under the Code to be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of the computerized data” (s. 116B(3)). A copy of the Criminal Procedure Code can be found here . Section 10(1)(c) of the Computer Crimes Act 1997 (Act 563) allows a police officer, upon obtaining a warrant from a magistrate, to require any information contained in a computer and accessible from the premises to be produced in a form in which it can be taken away and in which it is visible and legible. Failure to comply is a criminal offence punishable by up to three years’ imprisonment and/or a fine of up to MYR 25,000. A copy of the law can be found here . Section 79(1) of the Digital Signature Act 1997 (Act 562) requires that a police officer conducting a search under section 77 or 78 of the Act, or an authorised officer conducting a search under section 77 of the Act, be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of computerized data” (s.79(2)). Failure to comply is a criminal offence punishable by imprisonment for up to four years and/or a fine of up to MYR 200,000. A copy of the law can be found here . Section 249(1) of the Communications and Multimedia Act 1998 (Act 588) requires that a police officer conducting a search under section 247 or 248 of the Act, or an authorised officer conducting a search under section 247 of the Act, be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of computerized data” (s.249(2)). Failure to comply is a criminal offence punishable by imprisonment for up to six months years and/or a fine of up to MYR 20,000. A copy of the law can be found here . Section 32(1) of the Anti-Trafficking in Persons and Anti-Smuggling of Migrants Act 2007 (Act 670) requires that an enforcement officer conducting a search under the Act be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of computerized data” (s.32(2)). Failure to comply is a criminal offence punishable by imprisonment for up to three years and/or a fine of up to MYR 150,000. A copy of the law can be found here . Section 32(1) of the of the Strategic Trade Act 2010 requires that an enforcement officer conducting a search under the Act be given access to computerised data whether stored in a computer or otherwise. “Access” includes “being provided with the necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of the computerized data” (s.32(2)). Failure to comply is a criminal offence punishable by imprisonment for up to five years and/or a fine of up to MYR 5,000,000. A copy of the law can be found here .
Assessment Text Area
The law in Malaysia provides police officers with a warrant from a magistrate with the power to be given access to encrypted data, including through the provision of a “necessary password, encryption code, decryption code, software or hardware and any other means required to enable comprehension of the computerised data”. Failure to comply is an offence punishable by imprisonment or a fine. The law also requires the import and export of certain types of encryption technology to be approved by the Minister of International Trade and Industry.
Murphy's Law