Maldives plan digital identity and cybersecurity laws
Proposals would regulate private cyber firms, protect personal data and extend digital services to overseas citizens
MALE, Maldives (MNTV) — The Maldives has moved to establish its first comprehensive legal framework governing digital identity and cybersecurity, as lawmakers advanced legislation aimed at securing online services, protecting personal data, and strengthening the country’s defenses against cyber threats.
Parliament heard the first reading of the Digital Identity Bill and, in a separate vote, approved the Cyber Security Bill for committee review, marking a significant step in the Indian Ocean nation’s broader digital transformation agenda.
If enacted, the Digital Identity Bill would pave the way for a national digital identity system that citizens and residents could use to access government services and conduct online transactions with businesses and other service providers.
Officials say the proposed framework is designed to improve the reliability and security of identity verification in the digital space while safeguarding personal information from misuse.
The legislation would apply not only to Maldivian citizens but also to overseas citizens, residence permit applicants and service providers operating in or connected to the Maldives. It would establish rules governing how identity information is collected, processed and used, while prohibiting the use of personal data under specified circumstances.
To oversee implementation, the bill proposes the creation of a Digital Identity Technical Advisory Committee within 90 days of the law taking effect. The body would advise authorities on technical standards, operational rules and the overall functioning of the digital identity system.
In a parallel effort to bolster cyber resilience, lawmakers also advanced the Cybersecurity Bill, which seeks to create a legal framework for protecting the country’s digital infrastructure against evolving threats.
The proposed legislation would establish a National Cyber Security Agency responsible for safeguarding the Maldives’ cyberspace and advising the National Security Council on cybersecurity policy and strategy.
It would also introduce national cybersecurity standards for both public institutions and private entities, require certain cybersecurity service providers to obtain licenses and impose penalties on those operating without authorization. Fines for violations could range from approximately $3,200 to $32,400.
For a country heavily dependent on digital connectivity to support tourism, financial services and government administration spread across nearly 200 inhabited islands, strengthening cyber defenses has become an increasingly important policy priority.
The twin bills signal the Maldives’ efforts to build the legal foundations of a modern digital state, balancing ambitions for expanded online services with growing concerns over data protection, identity security, and the rising risk of domestic and cross-border cyberattacks.