Libya

Libya has no comprehensive personal data protection law. A June 2026 verification search confirmed that there is no dedicated data protection statute and no national data protection authority; ATLPF holds no Instrument or Regulator record for the jurisdiction. The closest adjacent instruments are Law No. 5/2022 on Combating Cybercrime and Law No. 6/2022 on Electronic Transactions, which touch on aspects of data handling and online conduct but do not establish a general personal data protection regime, data-subject rights, registration, or breach-notification obligations. Any protection these provide is incidental to their cybercrime and e-commerce objectives rather than a deliberate privacy framework. For anyone assessing data-handling obligations in Libya, the practical position is that there is no statutory data protection regime and no supervisory enforcement; protection of personal data would rest, if at all, on general constitutional or sectoral provisions and the incidental reach of the 2022 cybercrime and electronic-transactions laws. The country's prolonged political fragmentation makes near-term comprehensive legislation unlikely.