Decision No. 150 of 2024 Regulating Cybersecurity Services Activity

The Ministry of Economy mandates that all companies and individuals providing cybersecurity services in Libya must obtain a practice permit from the National Authority for Information Security and Safety. Commercial licenses cannot be issued or renewed without this permit. Existing providers have six months to comply.

Foreign cybersecurity vendors, IT service providers, and consultancies operating in or selling to Libya face new licensing requirements. This creates a mandatory approval layer controlled by a national security-focused authority, likely involving background checks, technical vetting, and potential local partnership requirements. Companies without existing relationships with Libyan authorities should expect extended market entry timelines. The decision also signals Libya's intent to centralize control over cybersecurity infrastructure and may foreshadow data localization or technology transfer requirements.