Decree-Law No. 2023-17 of 11 March 2023 on cybersecurity (Tunisia)

Summary

The decree-law reforms Tunisia's cybersecurity framework and replaces Law No. 2004-5 on IT security. It creates the National Cybersecurity Agency (ANCS), which takes over from the National IT Security Agency, with tasks of supervision, emergency response (national plan and sectoral centres) and protection of critical digital infrastructure. It imposes a mandatory periodic security audit on public bodies, telecom operators, hosting and cloud providers, companies processing personal data online and critical infrastructure, and classifies these entities into three levels of digital trust. It regulates the "secure" label for software and equipment and the G-Cloud and N-Cloud labels for hosting providers, and provides for downgrading and fines of 50,000 to 100,000 dinars.

Information

Jurisdiction

Tunisia

Issuing body

Président de la République tunisienne

Type

Law

Available languages

Arabic, French

Topics

• Governance and coordination
• Critical infrastructure
• Incident management / CSIRT
• Certification
• Cloud computing
• Telecommunications

Notes

Published in the Journal officiel de la République tunisienne No. 26 of 11 March 2023 and in force six months after publication (September 2023). The link opens the Official Gazette extract published by the ANCS on its page on the regulatory framework for audits. The organisation of audits is still governed by the order of 1 October 2019 on the auditors' specifications. The National Cybersecurity Strategy 2026-2030 builds on this framework.

Président de la République tunisienne. (2023). Décret-loi n° 2023-17 du 11 mars 2023, relatif à la cybersécurité (Décret-loi n° 2023-17). https://www.ancs.tn/sites/default/files/2024-04/Decret-loi2023_17_0.pdf

Président de la République tunisienne. "Décret-loi n° 2023-17 du 11 mars 2023, relatif à la cybersécurité." 11 March 2023. https://www.ancs.tn/sites/default/files/2024-04/Decret-loi2023_17_0.pdf.

@misc{tn_decret_loi_cybersecurite_2023,
  author       = {{Président de la République tunisienne}},
  title        = {{Décret-loi n° 2023-17 du 11 mars 2023, relatif à la cybersécurité}},
  year         = {2023},
  note         = {Décret-loi n° 2023-17},
  url          = {https://www.ancs.tn/sites/default/files/2024-04/Decret-loi2023_17_0.pdf},
  urldate      = {2026-10-29}
}