Cybercrime policies/strategies
Jordan Government is committed to enhance its cyber security and, with the publication of its National Information Assurance and Cyber Security Strategy (NIACSS) in 2012, to set out its priorities for cyber security for Government, business and citizens. A National Cyber Security Strategy was adopted in 2018, that needs to establish two new structures: the National Cybersecurity Council and National Center for Cybersecurity.
Cybercrime legislation
State of cybercrime legislation
The Hashemite Kingdom of Jordan amended Law 27/2015 of 1 June 2015 on cybercrime, through Law 17/2023, that entered into force on 12 September 2023. It includes penal substantive and procedural rules. Only 1 article referes to international cooperation.
In 2019, Jordan has also adopted a CyberSecurity Law.
Substantive law
The Cybercrime Law 17/2023 includes the following: definitions (Article 2), illegal access (Article 3), public institution network and information system illegal access (Article 4), forgery (Article 5), system interference (Article 6), unlawful interception (Article 7), fraud (Article 8, 9, 10), misuse of devices (Article 11), pornography cybercrime (Article 13), slander and denigration (Article 15, 16, 20). Articles 14, 17, 18 and 19 include provisions that are not envisaged by the Budapest Convention.
In addition, the penal code also criminalizes any actions used by cyber means and the communication law also includes provisions on cyber enabled crimes.
Procedural law
The following procedural powers are included in Law 17/2023 on cybercrime: search and seizure (articles 31 and 32), collection and interception of traffic and content data (article 33 par 1 A), production order (article 33 par 2 A), expedited preservation of stored computer data (article 33 par 3 A). The last three paragraphs mentioned, from article 33, are not in line with the Budapest Convention provisions.
Article 36 refers to electronic evidence, without including the necessary safeguards from article 15 of the Budapest Convention.
The general law which governs all criminal procedures is the Criminal Procedure Law number 9 from 1960 which is applicable to all crimes including cybercrime procedures.
Safeguards
General rules and safeguards apply. In particular, Articles 6,15,18 of the Constitution:
Article 6. Personal freedom shall be guaranteed.
Article 15.
- (i) The State shall guarantee freedom of opinion. Every Jordanian shall be free to express his opinion by speech, in writing, or by means of photographic representation and other forms of expression, provided that such does not violate the law.
- (ii) Freedom of the press and publications shall be ensured within the limits of the law.
- (iii) Newspapers shall not be suspended from publication nor shall their permits be revoked except in accordance with the provisions of the law.
- (iv) In the event of the declaration of martial law or a state of emergency, a limited censorship on newspapers, publications, books and broadcasts in matters affecting public safety and national defence may be imposed by law.
- (v) Control of the resources of newspaper shall be regulated by law.
Article 18. All postal, telegraphic and telephonic communications shall be treated as secret and as such shall not be subject to censorship or suspension except in circumstances prescribed by law.
Besides, the law mentions sometimes a requirement of intervention of a judge to authorise certain procedural measures and all the procedures are mentioned in the criminal procedures law.
Related laws and regulations
Besides an extensive legal framework on technical aspects, there are important acts on this field respecting:
- Communication Law
- Electronic Transactions Law
- Penal Code
- Prevention of Terrorism Law
Specialised institutions
Within the Public Security Directorate there is a cybercrime unit, competent for all police investigations related to cybercrime.
Within the Prosecution, there is a specialized Cybercrime Office, with the scope to coordinate all the activities of the prosecutors, nationwide. There is no such structure for judges.
Furthermore, every judge goes through a qualification program of two years in the Judicial Institute. This training program includes cybercrime courses to be used for training of future judges. The institute provides courses on cybercrime.
In 2018, a National Centre for Cyber Security was established.
International cooperation
Jurisprudence/case law
There are a few cases on cybercrime in Jordan, however they are not published on the courts website.
Sources and links
Penal Code (English, prior to 2011 amendments) - http://www.ahtnc.org.jo/sites/default/files/penal_code.pdf
On the Cybersecurity law and Strategy - https://www.mei.edu/publications/jordan-adopts-sweeping-cybersecurity-legislation