VPNs with servers in Belize

A service provider is any public or private entity that gives users the ability to communicate by means of a computer system, or that processes or stores computer data for such a service or its users.

The Interception of Communications Act (Cap. 229:01), in force from 29 November 2023 by Statutory Instrument 137 of 2023, requires anyone providing a public postal service or a service over a public or private communication network to facilitate the equipment and execution that an interception direction or disclosure order needs (s. 18). Encrypting data to commit a crime is an offence (s. 4). Whether a VPN operator falls within either definition is not established.

On an ex parte application by the Director of Public Prosecutions or a police officer of the rank of superintendent or above, the Supreme Court may order a service provider, or an entity within a domain name server, that is storing, transmitting or giving access to computer data in contravention of the Cybercrime Act or any other law to remove or disable access to that data (s. 28).

The Cybercrime Act punishes using a computer system to intimidate or threaten a person with violence (s. 15(1)); to publish obscene or indecent data with intent to humiliate or harass (s. 15(3)); to disseminate information known to be false with intent to harm a person’s reputation or expose them to ridicule, contempt or hatred (s. 15(4)); and to threaten to publish private information to extort (s. 15(5)).

Summary conviction carries a fine of $10,000 and five years; conviction on indictment $15,000 and ten years (s. 15(6)).

A Production Order may direct a service provider in Belize to produce traffic data and subscriber information about a person who uses the service (s. 26), and a Storage Direction may direct it to keep that data for a stated period (ss. 19–20).

Under the Interception of Communications Act a direction is issued by a Judge of the Supreme Court, who must be satisfied that interception is necessary for national security, public order, public safety or public health, for a scheduled offence, or to give effect to a mutual legal assistance agreement (s. 6).

The judge may require the authorised officer to report on progress, modify the direction and terminate it (ss. 10–12). Unauthorised interception of protected information or traffic data is itself an offence (s. 13). The order of the rows is the security score, and a server’s location is not a recommendation.