Tunisia

A Single Cybercrime Decree Has Led to Over 80 Arrests

Tunisia's Decree-Law 54 of 2022 was introduced to combat cybercrime, but its practical use has extended well beyond that stated purpose. More than 80 citizens have been arrested under Decree-Law 54 since its issuance through November 2024, including political opponents, activists, lawyers, journalists, human rights defenders, and ordinary social media users. Among those prosecuted is lawyer Sonia Dahmani, whose case drew international attention and led the Committee to Protect Journalists to award her its International Press Freedom Award in 2025 — a case widely cited as illustrating how cybercrime legislation in Tunisia has been applied against legitimate expression.

Authorities Can Seize Your Devices and Access All Stored Data

Beyond prosecuting online speech, Decree-Law 54 grants Tunisian authorities significant technical reach into personal devices. Decree Law 2022-54 allows the public prosecutor, investigating judges, and the judicial police to order the seizure of telecommunications devices and to access all stored data — a broad power that extends well past monitoring what someone posts publicly into direct access to the contents of a personal phone or computer once seized.

A New Biometric ID System Is Being Pushed Without Public Oversight

Tunisia is moving toward mandatory biometric identification for citizens through a process civil society groups say has bypassed meaningful public input. Plans to replace Tunisia's national ID card with a chip-enabled biometric card have advanced with no publicly available copy of the actual draft legislation, and civil society has been excluded from the design of the project through to its effective implementation. Combined with Decree-Law 54's mass communications-collection powers, digital rights advocates warn the initiative could turn from a citizen benefit into a vehicle for expanded state surveillance, particularly since citizens would be legally obliged to hand over biometric data for storage in a government database.

A New Data Protection Bill Is Under Development — But Isn't Law Yet

Tunisia has begun work on a more modern personal data framework, still in progress. The Fundamental Bill on the Protection of Personal Data, drafted in 2025, aims to establish underlying data protection principles — including proportionality and data minimization — that would apply even during criminal investigations, working alongside the existing Cybercrime Law. Until this bill is formally enacted, though, Tunisia's data protection framework remains the older, less comprehensive 2004 law, leaving a meaningful gap between where the country's legal protections currently stand and where they're headed.

What Users in Tunisia Should Do Right Now

A VPN encrypts your internet traffic and masks your real IP address, adding a meaningful layer of protection against network-level monitoring — though it's worth understanding the limits given Decree-Law 54's device seizure powers, which can bypass network encryption entirely by accessing data stored directly on a confiscated device. Choose a VPN with a verified no-logs policy and strong AES-256 encryption for everyday privacy, and be genuinely cautious about political or critical content given the documented pattern of arrests under the current cybercrime law. If you're a journalist, activist, or lawyer facing elevated personal risk in Tunisia, general advice has real limits — organizations like the Committee to Protect Journalists and Access Now's Digital Security Helpline can offer guidance suited to genuinely high-risk circumstances that this overview isn't equipped to address responsibly.

VPN Use Itself Is Legal — The Real Risk Is What You Post Online

VPNs are legal in most countries, and Tunisia has never banned or restricted the technology itself. The real danger in Tunisia isn't the VPN — it's Decree-Law 54, adopted in September 2022 to combat offences linked to information and communication systems, which rights groups and media reporting say has been used against journalists, lawyers, activists, and political figures, raising real concerns about chilling effects on public debate. This guide is purely informational, not legal advice — the online speech environment here carries genuine, documented risk.

Why This Matters: The Scale Is Real and Growing

The numbers are sobering. More than 80 citizens were arrested under Decree-Law 54 between its 2022 introduction and November 2024, including political opponents, activists, lawyers, journalists, human rights defenders, and ordinary social media users. Tunisia reached a troubling milestone with at least five journalists behind bars as of December 2024 — the highest number recorded since monitoring began in 1992 — with four of the five convicted specifically over social media activity. The law criminalizes "false news" broadly enough that a journalist's April 2026 sentence and another's two-year sentence in March 2026 show the pattern is continuing, not slowing down.

What This Means for Your Own VPN Use

A UCN VPN protects your connection and browsing privacy, but it's worth being clear about the actual risk here: Decree-Law 54 targets the content of what's published or shared online, not VPN use itself. For everyday privacy — banking, browsing, and streaming — a UCN VPN carries no legal risk. For anyone engaged in journalism, political commentary, or activism in Tunisia, the greater exposure comes from what's posted, not from the encryption tool used to post it.

What to Look For in a UCN VPN for Tunisia

Given the documented targeting of online speech, a verified no-logs policy is a meaningful safeguard for anyone active in political or journalistic work. Choose a UCN VPN with WireGuard® encryption and an independently audited no-logs policy from a provider with no operational presence inside Tunisia — so there's nothing that could ever be requested or seized in connection with an investigation.

Getting Started in Under a Minute

Download the UCN VPN app, sign in, and tap Connect — your traffic is encrypted immediately. For everyday use this is a simple, low-friction habit; for anyone engaged in journalism, commentary, or activism in Tunisia right now, understand that Decree-Law 54 targets content and speech, and treat online expression with real care regardless of the tool used to access it.

Tunisia's VPN use remains fully legal, but its rapidly deteriorating press freedom record makes the line between private browsing and public speech more important than ever to understand clearly.