Source: Arash Parsapour / Zoomit – In recent days, new whispers have been heard from the corridors of the Majlis (Parliament), telling the tale of fresh schemes for Iran’s internet. A bill titled “Regulating Cyberspace,” the draft of which was prepared in late autumn and signed by 37 MPs, now appears to be the most serious and structured attempt to alter the nature of the internet in the country.
Managing the Smart Internet of 2026 with Laws from 2001
Perhaps the strangest part of this document is its reliance on expired legislation. A detailed examination of the bill’s text reveals that its authors, adopting an approach that can be termed “legal regression,” are attempting to manage the era of Artificial Intelligence, the Metaverse, and Blockchain with the logic of 2001.
The laws upon which this bill relies date back to the dial-up internet era; specifically, the time when the “Regulations for Information Networks” (2001) or the “Electronic Commerce Law” (2003) were enacted. This deep gap between law and technology indicates that the drafters lack a proper understanding of the fluidity of technology and are merely seeking to revive archaic tools for further restriction.
The Securitization of Internet Gateways and Criminalization of VPNs
Beneath the surface layers of this bill, the seeds of total control over cyberspace have been sown. According to the provisions, the definition of “domestic services” has changed, and all Iranian user data must mandatorily be hosted inside the country—a matter that makes the internet kill switch more accessible than ever before.
However, the most worrying part lies in Article 3. According to this article, control over internet gateways and border crossings is handed over to the Supreme National Security Council. This means decisions regarding internet speed, quality, and access are removed from the technical phase and become entirely security-oriented.
Furthermore, Article 9 of this bill draws a sword against anti-censorship tools. Any production, distribution, and even use of VPNs and proxies, even for non-commercial purposes, is criminalized and will result in heavy prison sentences and fines.
Heavy Penalties for Businesses and Blocking the Path of Protest
This bill establishes a hierarchical and centralized structure with the Supreme Council of Cyberspace at its helm. The decisions of the commissions under this council are final and binding, effectively closing the door to any effective protest.
The penalties envisioned for technology companies are also staggering: ranging from cash fines of up to 10% of annual revenue to a three-year license suspension and a ban on acquiring new users.
Impossible Conditions for Foreign Platforms
The view toward foreign services in this bill remains coercive. According to the note in Article 7, the operation of foreign platforms is conditional upon introducing a legal representative in Iran. Experience has shown that no reputable international company will accept this condition, and the result will only be the deprivation of Iranian users or access to censored versions.
Profiting from Restrictions: When Filtering Becomes Profitable
Another controversial point is the creation of financial incentives for regulatory bodies. Article 10 stipulates that revenues generated from fines and bandwidth sales must be deposited into the account of the National Cyberspace Center. In other words, the entity responsible for control and restriction profits directly financially from imposing more fines and limitations.
Ultimately, the Cyberspace Regulation Bill, rather than seeking to organize, seeks to normalize mass surveillance and convert the global internet into a limited domestic intranet. It foresees a future where digital walls rise higher, and the country’s digital economy sinks into isolation.
