The government has submitted a specialised cyber security bill to the Parliament to establish a National Cyber Security Agency and secure the country’s digital environment, according to the legislative proposal. Hussain Nasih, the Member of Parliament for Central Henveyru, formally introduced the measure on behalf of the administration.
The legislation seeks to guarantee the security of the Maldives' cyber space by defining precise requirements for information systems linked to critical infrastructure in both state and private institutions, according to the proposed bill. The proposal aims to identify domestic and cross-border threats, prevent incidents, and establish a resilient system capable of responding to vulnerabilities. To govern these efforts, the bill mandates the creation of the National Cyber Security Agency.
Under the bill, the National Security Council will determine cybersecurity policies based on strategic advice from the agency, which will be led by a five-member executive board. While the agency will operate as an independent institution with definitive legal authority, it will remain under the oversight of the Ministry of Homeland Security, Labour and Technology.
The framework introduces strict regulations for the private sector, requiring providers of specific cybersecurity services to obtain operational licences. Those operating without a licence face administrative fines ranging from USD 3,243.77 to USD 32,437.72. The law applies to critical information infrastructures and their data across state and private sectors, though the systems and personnel of the nation’s defence and security services are explicitly exempt.