Law on Cyber Security

Summary

This is Mongolia's first law on cyber security: it sets principles, common rules, risk assessment and information security audits. It creates a Cyber Security Council to coordinate activities and three centres to combat attacks: a national centre within the intelligence agency, a public centre under the digital development authority and an Armed Forces centre. Operators of critical information infrastructure, including energy, water, health, banking, telecommunications and transport, must adopt incident response plans, assess risk every year, undergo an audit every two years and report attacks that disrupt their services.

Information

Jurisdiction

Mongolia

Issuing body

Улсын Их Хурал (State Great Khural)

Type

Law

Available languages

Mongolian

Topics

• Governance and coordination
• Critical infrastructure
• Incident management / CSIRT
• Cyber defence and military

Notes

Passed by the State Great Khural on 17 December 2021 and applied from 1 May 2022. The link leads to the consolidated text on the official legal portal legalinfo.mn, in Mongolian.

Улсын Их Хурал (State Great Khural). (2021). Кибер аюулгүй байдлын тухай хууль. https://legalinfo.mn/mn/detail?lawId=16390365491061

Улсын Их Хурал (State Great Khural). "Кибер аюулгүй байдлын тухай хууль." 17 December 2021. https://legalinfo.mn/mn/detail?lawId=16390365491061.

@misc{mn_kiber_ayulgui_baidlyn_tukhai_khuuli_2021,
  author       = {{Улсын Их Хурал (State Great Khural)}},
  title        = {{Кибер аюулгүй байдлын тухай хууль}},
  year         = {2021},
  url          = {https://legalinfo.mn/mn/detail?lawId=16390365491061},
  urldate      = {2026-10-27}
}