Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
No known legislation or policies.
Mandatory minimum or maximum encryption strength
No known legislation or policies.
Licensing/registration requirements
Section 29 of the Electronic Communications and Transactions Act 25 of 2002: establishes a register of all cryptography providers. Unless they are registered, a cryptography provide cannot provide cryptography products. A copy of the law can be found here .
Import/export controls
No known legislation or policies.
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
Section 21 of the Regulation of Interception of Communications and Provision of Communication-Related Information Act 2002 allows for security and law enforcement agencies to make an application to a judge for a “decryption direction” which would compel a person to provide a decryption key (if they have it) or decryption assistance (access to the encrypted information or facilitate the putting of encrypted information into an intelligible form). The judge may only make a decryption order if he or she is satisfied that particular communications consist of encrypted information, there is a specified decryption key holder in possession of the encrypted information and the key, and it is not reasonably practicable to obtain possession of the encrypted information in an intelligible form without issuing a decryption direction. Failure to comply with a decryption direction is a criminal offence punishable, in the cases of natural persons, with up to ten years’ imprisonment or a fine of up to ZAR 2,000,000; and, for a legal person, a fine of up to ZAR 5,000,000. A copy of the law can be found here .
Obligations on providers to assist authorities
Section 21 of the Regulation of Interception of Communications and Provision of Communication-Related Information Act 2002 allows for security and law enforcement agencies to make an application to a judge for a “decryption direction” which would compel a person to provide a decryption key (if they have it) or decryption assistance (access to the encrypted information or facilitate the putting of encrypted information into an intelligible form). The judge may only make a decryption order if he or she is satisfied that particular communications consist of encrypted information, there is a specified decryption key holder in possession of the encrypted information and the key, and it is not reasonably practicable to obtain possession of the encrypted information in an intelligible form without issuing a decryption direction. Failure to comply with a decryption direction is a criminal offence punishable, in the cases of natural persons, with up to ten years’ imprisonment or a fine of up to ZAR 2,000,000; and, for a legal person, a fine of up to ZAR 5,000,000. A copy of the law can be found here .
Assessment Text Area
In South Africa, all cryptography providers must be registered. Security and law enforcement agencies to make an application to a judge for a “decryption direction” which would compel a person to provide a decryption key or assistance. Failure to comply is an offence punishable by imprisonment and/or a fine.
Murphy's Law