Encryption Law by Country
Where strong encryption is a right, restricted, or compelled. National law and policy, mirrored per country.
Source: Global Partners Digital, World Map of Encryption, updated 2026-07-02. Full data at www.gp-digital.org/world-map-of-encryption
Encryption Law by Country (196)
General right to encryption
No known legislation or policies.
Mandatory minimum or maximum encryption strength
No known legislation or policies.
Licensing/registration requirements
No known legislation or policies.
Import/export controls
No known legislation or policies.
Other restrictions
No known legislation or policies.
Obligations on individuals to assist authorities
Section 9 of the Computer Crimes Act allows for a Magistrate to issue a warrant to a police officer to search and seize computers, computer systems, and computer data or data storage medium if there are reasonable grounds to suspect that they may be material evidence in proving a criminal offence or acquired by a person as a result of a criminal offence. Under section 10(1)(d), a person who is in possession or control of a computer, computer system, computer data or data storage medium that is the subject of a search under section 9 must permit, and, if required, assist the person making the search to obtain an intelligible output from a computer system in a format that can be read. Failure to do so is a criminal offence punishable by up to two years’ imprisonment, a fine of up to 10,000 TOP, or both. A copy of the law can be found here .
Obligations on providers to assist authorities
Section 14 of the Computer Crimes Act provides that where a Magistrate is satisfied on the evidence that there are reasonable grounds to suspect that the content of electronic communications is reasonably required for the purposes of a criminal investigation, they may order an internet service provider to collect or record the content of specified electronic communications (or assist authorities with collecting or recording this data), and to authorise any police officer to collect or record that data through application of technical means. Section 17 provides that it is a criminal offence for an internet service provider to disclose the fact that an order has been made, anything has been done under that order, and any data that has been collected or recorded under that order, punishable by up to 10 years’ imprisonment, a fine of up to 50,000 TOP, or both. A copy of the law can be found here .
Assessment Text Area
In Tonga, a Magistrate can authorise any police officer to collect or record that data through application of technical means. It is a criminal offence for an internet service provider to disclose the fact that an order has been made, anything has been done under that order, and any data that has been collected or recorded under that order.
Murphy's Law