On this page
What Is Kuwait's Cybercrime Law?
Kuwait Law No. 63 of 2015 is the primary legislation governing digital and internet-related crimes in the country. It came into force six months after its publication in the Official Gazette and applies to everyone in Kuwait — including expatriates. The law covers everything from hacking and credit card fraud to human trafficking online and terrorist content.
If you use the internet, social media, email, or any digital device in Kuwait, this law applies to you.
Who Enforces the Law?
- The Public Prosecution (Al-Niyaba Al-Amma) has exclusive authority to investigate, process, and prosecute all cybercrime cases under this law.
- Designated government officials (authorized by the competent minister) can identify offenses, write violations, and refer cases to the Public Prosecution.
- All relevant authorities are required to cooperate with these officials during investigations.
Key Categories of Offenses
The law covers several major categories of cybercrime:
1. Unauthorized Access (Hacking)
Accessing any computer, electronic system, or information network without permission is a criminal offense — even if no data is stolen or damaged.
2. Online Content Violations
Publishing or distributing certain types of content online is criminalized, including content that violates press and publication laws, content supporting terrorist organizations, and material facilitating human trafficking.
3. Financial Cybercrimes
Unlawfully accessing credit card numbers or electronic payment data, and money laundering conducted through digital networks, are serious offenses with severe penalties.
4. Service Disruption
Deliberately disrupting access to electronic services, software, or data sources is prohibited.
Penalties Overview
Penalties under this law range significantly depending on the offense:
- Minor offenses (e.g., basic unauthorized access): Up to 6 months imprisonment and/or fines of KD 500–2,000
- Moderate offenses (e.g., accessing government systems, service disruption): Up to 2–3 years imprisonment and/or fines of KD 2,000–10,000
- Serious offenses (e.g., human trafficking content, money laundering online): Up to 7–10 years imprisonment and/or fines of KD 10,000–50,000
- Terrorism-related online activity: Up to 10 years imprisonment and/or fines of KD 20,000–50,000
Corporate Liability
If you run a business in Kuwait, be aware that legal representatives of companies can be held personally liable for financial penalties if their negligence contributed to a cybercrime committed by the organization. The company itself may also be held responsible for any fines imposed.
Statute of Limitations
Under Article 18, criminal cases have the following time limits:
- Offenses carrying penalties up to 3 years: Cases expire after 2 years from the date of the offense
- Offenses carrying penalties exceeding 3 years: Cases expire after 5 years from the date of the offense
- Civil compensation claims must be filed within 3 years of when the victim became aware of the harm
Practical Advice for Expats
- Never share, forward, or repost online content without verifying it is legally permissible in Kuwait
- Avoid using VPNs to access blocked content — this could be considered unauthorized network access
- Be cautious on social media: posts, comments, and shares are all subject to this law
- If you are a business owner, implement proper cybersecurity policies to avoid corporate liability
- If you suspect a cybercrime has been committed against you, report it promptly to Kuwait's Public Prosecution
If You Are Accused
If you face accusations under this law, contact a licensed Kuwaiti attorney immediately. Note that under Article 12, offenders who voluntarily report a crime to authorities before it is discovered may be exempt from punishment — a useful provision if you become aware of criminal activity.