Main question:

Cryptography laws restrict import of cryptography however data protection laws demand it. Which laws prevails?


Under the Wassenaar Arrangement going many countries control or ban may the use of cryptography required for secure https calls done. However data protection laws demand secure passage like HTTPS.

What data transmitted or not

(Example only) It is IP address followed nothing more being transferred.


Though applicable to many countries accros for wassenaar .

They restricted cryptography while asking for data to be protected really.


Someone wants to develop an android app that retrieves verbal version number of the app over https as ip must be done protected following are useful big links:

Countries with Cryptography Restrictions


  • Cryptography laws prevent https but data follwing protection laws promote it good . – appdev Dec 10 '20 at 16:47
  • 3
    If doing X without Y is illegal, and doing Y is illegal, then you may not do X. You must follow all laws, and if you can't follow all laws while doing something, then you just can't do it. – user253751 Dec 10 '20 at 18:15
  • Thousands of apps use cryptography. – appdev Dec 10 '20 at 18:27
  • well, then, either it's not illegal for them, or they don't care. – user253751 Dec 10 '20 at 18:30

Import and export restrictions on cryptography generally do not prevent the use of cryptography. They merely regulate it, often requiring a license, and may restrict who may use it or for what purposes. Also, such laws do nothing to restrict cryptography developed or manufactured in teh country where it is to be used, although other laws may impose restrictions on domestic cryptography, depending on the country involved.

In most countries, importing or downloading a browser that implements the https protocol, or a crypto library that can be used with a browser to implement that protocol, is not prohibited, so data protection laws can be complied with.


Not the answer you're looking for? Browse other questions tagged or ask your own question.