Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
No known legislation or policies.
Mandatory minimum or maximum encryption strength
No known legislation or policies.
Licensing/registration requirements
Article 51(e) of the Telecommunication Law (Law No. 18 of 2010) prohibits telecommunications network operators, service providers, their affiliates, and the users of such services, from using encryption of telecommunications service devices without the approval of the Telecommunications Regulatory Authority, the Ministry of Defence and relevant security agencies. A copy of the law can be found (in Arabic) here and in English here .
Import/export controls
No known legislation or policies.
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
No known legislation or policies.
Obligations on providers to assist authorities
Article 51(b) of the Telecommunication Law (Law No. 18 of 2010) requires all licensed telecommunications service providers to ensure that they have all necessary technical capabilities for installing and using interception and tracing equipment within their telecommunications networks to enable the security agencies to carry out their duties in realisation of national security requirements. Though this does not refer to encryption, it could be interpreted to require the service providers to be able to decrypt any encrypted communications. A copy of the law can be found (in Arabic) here and in English here .
Assessment Text Area
In Syria, the use of encryption by telecommunications network operators, service providers, their affiliates, and the users of such services requires the approval of the Telecommunications Regulatory Authority, the Ministry of Defence and relevant security agencies. Telecommunications service providers are also required to ensure that they have all necessary technical capabilities for installing and using interception and tracing equipment within their telecommunications networks to enable the security agencies to carry out their duties. This could be interpreted as a requirement that the service providers be able to decrypt any encrypted communications.
Murphy's Law