Cyber Law at Andorra
Andorra has established a comprehensive legal framework to address cyber law, encompassing cybersecurity, data protection, and cybercrime.
Cybersecurity
In June 2022, Andorra enacted Law 22/2022, aligning with the EU's Directive 2016/1148 on network and information systems security. This legislation mandates that operators of essential and important services implement robust cybersecurity measures to protect critical infrastructure and services. The accompanying regulations, including the National Security Plan and Critical Infrastructure Regulations, set standards for ensuring the resilience of these services against cyber threats.
Data Protection
Andorra's data protection law, Llei 29/2021 (LQPD), effective from May 17, 2022, aligns with the EU's General Data Protection Regulation (GDPR). The law introduces several key provisions:
Data Protection Officer (DPO): Organizations processing sensitive data on a large scale are required to appoint a DPO.
Breach Notification: Data controllers must report security breaches to the Andorran Data Protection Agency within 48 hours.
New Rights for Individuals: The law grants individuals rights such as data portability and the right to be forgotten.
Penalties: Violations can result in fines ranging from €500 to €100,000, depending on the severity of the infringement.
Cybercrime
Andorra's Criminal Code includes provisions addressing cybercrime:
Computer Fraud: Article 210 penalizes unauthorized computer transfers causing property damage exceeding €600, with penalties aligned to those for fraud.
General Fraud: Article 209 outlines penalties for various forms of fraud, including those involving digital means.
International Cooperation
Andorra is a member of the Budapest Convention on Cybercrime, which facilitates international cooperation in combating cybercrime by harmonizing national laws and enhancing investigative techniques.
Recent Developments
In March 2025, the Andorran government initiated a study to determine whether platforms like OnlyFans, which host user-generated adult content, could be equated with prostitution under Andorran law. This move reflects ongoing efforts to adapt legal frameworks to emerging digital platforms and their societal implications.
In summary, Andorra has developed a robust legal infrastructure to address various aspects of cyber law, aligning closely with European standards and international agreements.
RELATED Blog
0 comments