Digital operator in the DRC: understanding Minister Augustin Kibassa Maliba’s order and getting compliant

Digital operator in the DRC: understanding Minister Augustin Kibassa Maliba’s order and getting compliant is now urgent. Since 1 July 2026, twin ministerial orders of 11 March 2026 implement the Digital Code: one path requires prior authorization; the other a declaration with a certificate of approval. This guide helps you classify your activity, build the file, and start regularization with the ARPTC.

General information based on published texts and legal commentary. It is not personalized legal advice. Final decisions rest with the competent authorities.

What changed for digital services in the DRC?

On 11 March 2026, Digital Economy Minister Augustin Kibassa Maliba signed two ministerial orders (officially published around 17 March 2026) to implement Ordinance-Law No. 23/010 of 13 March 2023 on the Digital Code:

• Order No. CAB/MIN/ECONUM/AKIM/MLNS/ALM.004/2026 — conditions for reviewing applications and granting authorizations for digital activities and services;
• Order No. CAB/MIN/ECONUM/AKIM/MLNS/ALM/005/2026 — conditions for declaration and issuance of certificates of approval.

On a provisional basis, the ARPTC (Postal and Telecommunications Regulatory Authority of Congo) reviews files pending the full Digital Regulatory Authority. The rules apply to natural or legal persons, Congolese or foreign, when digital services are provided on DRC territory.

Do you need authorization or a declaration?

Not every digital actor follows the same track. First, determine whether you fall under authorization (Order 004) or declaration (Order 005).

Watch-out: an ex-post check can reclassify a declared activity as one requiring authorization, with a formal notice and possible suspension. A legal diagnosis before filing reduces that risk.

Timeline: what to do after 30 June 2026

A transitional period ran until 30 June 2026. From 1 July 2026, the rules apply in full. Operating without the required title exposes you to administrative sanctions (fine, shortened validity, suspension, withdrawal) and possible criminal penalties under applicable law.

If you have not filed yet: prioritize regime diagnosis, file completeness, and ARPTC submission—do not wait for an administrative reminder.

How to obtain authorization (Order 004)

The authorization path runs through the ARPTC, then the minister:

1. Draft the application in French and file two copies with the regulator, against a receipt (date and registration number).
2. Attach proof of payment of the file review fees—without it, the file is inadmissible.
3. The ARPTC reviews a complete file within a maximum of 30 days (additional documents may be requested).
4. A reasoned opinion goes to the minister, who has 15 working days to decide.
5. If approved: authorization by ministerial order, notification, and payment of duties to the Public Treasury.
6. If refused with reasons: one revision request may be refiled free of charge after corrections; after two refusals, a new paid application is required.

Important: the filing receipt is neither a provisional authorization nor a right to operate. Authorization comes with a specifications / licence conditions document (technical, financial and organizational duties, security and data protection). Merger, change of majority shareholding or corporate name trigger a revision. Assignment or transfer requires the minister’s prior consent.

For fintech / payment aggregators, digital authorization may sit alongside Central Bank of Congo approval: plan both tracks.

What must the authorization file contain?

A typical Order 004 file includes:

• signed authorization request letter;
• applicant identification form;
• detailed description of digital activities and services + general terms;
• three-year business plan;
• notarized articles of association (legal entities);
• RCCM or equivalent for foreign-law entities;
• tax identification number and valid tax clearance;
• non-bankruptcy certificate less than three months old (except recent registrations);
• proof of payment of review fees;
• proof of technical reliability (especially for qualified trust service providers).

Declaration regime (Order 005): the essentials

The declarative path is lighter: declaration filing, review fees, processing, and a certificate of approval (three years, renewable six months before expiry). Published information points to roughly a fifteen-day review for a complete file. Ex-post checks cover declared compliance, cybersecurity and data protection. Sanctions may include a fine, suspension or withdrawal of the certificate.

What are the sanctions for non-compliance?

For authorization holders, after the regulator’s opinion and an unsuccessful 15-day formal notice, the minister may impose a fine, shorten the title’s validity, suspend it or withdraw it. Operating without a valid title also triggers sanctions under applicable legislation. Renewal of authorization or certificate should normally be requested six months before expiry.

Common mistakes to avoid

• Confusing a certificate of approval with a ministerial authorization.
• Treating the filing receipt as a right to operate.
• Underestimating the dominant position test for a platform.
• Filing incomplete tax papers or a missing non-bankruptcy certificate.
• Ignoring the Central Bank track for certain fintech activities.
• Choosing declaration without assessing reclassification risk.

How RAHIZI supports every step of the file

RAHIZI has for years supported founders and companies structuring their presence in Central Africa—especially in the Democratic Republic of the Congo—through StartRDC and a network of local lawyers and professionals. We know how desks work, which documents must be current, and how timelines behave for founders based abroad.

On the post–Kibassa Maliba digital compliance track, we work step by step:

1. Diagnosis — authorization (004) vs declaration (005), reclassification risk map.
2. File assembly — legal, tax, technical and business-plan documents, completeness check before filing.
3. Legal coordination — joint work with a specialist attorney in Congolese digital law.
4. Filing and follow-up — ARPTC deposit, responses to document requests, tracking of the opinion and decision.
5. After the title — licence conditions, renewal, revision on merger or shareholding change.

We do not promise approval: authorities decide. Our role is to make the file solid, consistent and followed through.

FAQ — Kibassa Maliba orders and DRC digital compliance

Is a Congolese startup always under declaration?

Often yes if it is not dominant and does not fall into authorization categories. Dominance and the exact nature of the service can move the file to authorization. Case-by-case diagnosis remains necessary.

Is a foreign cloud or marketplace targeting DRC users covered?

Yes, when digital services are provided on Congolese territory, regardless of nationality or seat. Large platforms and dominant providers typically fall under authorization.

Does the filing receipt let me operate while waiting?

No. The acknowledgment is neither a provisional authorization nor a right to operate. Wait for the formal title (authorization or certificate of approval).

What if I did not regularize before 1 July 2026?

Start diagnosis and filing immediately. A complete, coherent file reduces the risk of refusal, formal notice or sanctions for operating without a title.

Does a fintech need two authorizations?

For certain payment aggregators and regulated activities, Central Bank of Congo approval may sit alongside the digital economy minister’s authorization. Build both into the timeline.

How long does the review take?

For authorization: up to 30 days ARPTC review, then up to 15 working days for the ministerial decision, excluding delays from missing documents. For declaration, published timelines are shorter (around fifteen days for a complete file).

Book a meeting with a DRC digital law specialist attorney

Need to know whether your activity requires authorization or declaration, and how to build an admissible file? Fill in the form: we will arrange a meeting with a specialist attorney in Congolese digital law to frame your regularization plan.

Confidential reply. No guarantee as to the outcome before the authorities.