What Is the Penalty for Hacking or Unauthorized Access to Personal Data in Iran?

Legal Review of Cyber Intrusion and Digital Privacy Violations under Iranian Law

Introduction

In the digital age, where most of our personal and professional lives are managed through smartphones, social media, and email, unauthorized access to someone’s private data — commonly referred to as hacking — is a serious crime under Iranian law. The law explicitly criminalizes any access to private devices, accounts, or digital storage without permission, whether for personal curiosity, revenge, or financial gain.

What Is Considered “Unauthorized Access”?

Any act of entering or infiltrating a computer system, mobile device, email, or online account belonging to another person without their consent is considered unauthorized access or hacking.

This includes:

Hacking into someone’s Instagram, WhatsApp, Telegram, or email

Unlocking or spying on someone’s phone or laptop

Accessing cloud storage or backup files

Entering company databases or confidential systems

Applicable Legal Articles

Article 1 of the Computer Crimes Law:

“Anyone who, without authorization, accesses a computer or telecommunication system shall be sentenced to 91 days to 1 year of imprisonment or a fine between 5 and 20 million IRR, or both.”

Article 2:

If, after gaining access, the person alters, deletes, or disables data, the penalty increases to 6 months to 2 years of imprisonment.

Article 4:

Disclosure or theft of personal or confidential data is punishable by up to 3 years in prison.

What’s the Difference Between Access, Tampering, and Disclosure?

What If the Hacker Is a Spouse, Friend, or Colleague?

The law makes no exceptions based on personal relationships.

How to File a Complaint

Gather evidence of intrusion, such as screenshots, emails, bank alerts, or suspicious logins

Visit an Electronic Judiciary Service Office and file a complaint for “unauthorized access to computer systems”

If needed, Iran’s Cyber Police (FATA) can investigate the IP address, access logs, and identify the offender

You may also request account suspension, data recovery, compensation, or legal injunctions

Conclusion

Unauthorized access to personal data — even checking someone’s messages or email without permission — is a criminal offense under Iranian law. It can lead to imprisonment, fines, and a criminal record. Further actions like tampering with data or leaking information will result in more severe penalties. The law strongly protects digital privacy and data ownership.

Alemohammad Law Office specializes in cybercrime, unauthorized access, data privacy violations, and hacking-related legal matters. We provide professional consultation, complaint filing, and legal representation for clients inside Iran and abroad.

Get Expert Legal Advice

For a consultation with a specialist attorney, contact Alemohammad Law Office.

Related services: Criminal Legal Services · Meet Our Lawyers · Consult Seyed Amir Alemohammad