Your communications can potentially be intercepted or surveilled.
For state security, public order or serious crime, the Ministry of Home Affairs or an authority it names can approve monitoring of your calls, messages and data for a set period, and service providers must assist.§97A
What it protects
- In most cases, interception needs prior approval from a court or an authority the government sets up, and must be necessary, proportionate, time-limited, a last resort and fully logged.§97A
- An independent review council periodically checks past interceptions for legality, necessity and accountability.§97A(7)
Where it falls short
- After-the-fact review is different from independent permission before monitoring starts.
- Broad grounds and emergency exceptions can weaken oversight, putting conversations, relationships and lawful activities at risk of surveillance and interception.
You run an internet-based service.
The 2026 amendments appear to extend the law to online intermediaries and over-the-top services, and the law requires a license to provide telecommunication services.§§2, 35
Where it falls short
- The expanded definitions leave it unclear how the licensing requirement applies to digital platforms.
- A platform could face licensing burdens and severe penalties designed for infrastructure and legacy network operators.
- This is an uncertainty in the framework, not a settled claim that every website or app needs a telecom license.
The regulator asks for your data.
The telecom regulator can compel documents and information from service providers and others, and can publicly disclose what it obtains in investigations.§§84, 85
What it protects
- A hearing is allowed before confidential information is disclosed.§85
Where it falls short
- It can demand any information it reasonably believes it needs, limited only by what a civil court could not make you produce.
- An undefined “public interest” lowers the bar for disclosing personal data and trade secrets.
