Crawls the web, in the Democratic Republic of the Congo

Ordonnance-loi n° 86-033 du 5 avril 1986 portant protection des droits d'auteur et des droits voisins, arts. 1, 6, 20, 24 à 32 et 96 · Read the law's page

• Do not exploit a protected work without the author's authorization or an assignment of the right of exploitation: the author holds an exclusive intangible property right in the work that is binding on everyone, including the right to exploit it or to assign that right (Articles 1 and 20).
• Treat as a reproduction any material fixation of a protected work by any process that lets it be communicated indirectly to the public, and rely on a limitation in Articles 24 to 32 only where its terms are met; none of those limitations names text-and-data mining or the training of a model on protected works (Article 6(o)).

Loi n° 20/017 du 25 novembre 2020 relative aux telecommunications et aux technologies de l'information et de la communication, Journal officiel de la RDC, 22 septembre 2021

• Do not access or intercept communications systems without authorization.

Code du numérique, Livre IV, Sécurité et protection pénale des systèmes informatiques, Ordonnance-loi n° 23/010 du 13 mars 2023 (arts. 330 à 334) · Read the law's page

• Do not access, or maintain access to, all or part of a computer system without authorization and with fraudulent intent.
• Do not exceed your lawful access authority over a computer system with fraudulent intent or intent to harm.
• Do not suppress, obtain, or modify data in a computer system, or alter its functioning, through unauthorized access.

Code du numérique, Livre IV, Titre II, Chapitre I, et Titre III, Chapitre I, Section 1, Ordonnance-loi n° 23/010 du 13 mars 2023 (art. 276 et 281) · Read the law's page

• Cooperate in detecting cyberattacks in accordance with the applicable legal and regulatory provisions.
• Inform the Agence Nationale de Cybersécurité of every attack, intrusion or other penetration liable to impair the operation of another information system or network, so as to let the Agency take the measures necessary to address it, including isolating the affected system.
• Comply with the measures the Agence Nationale de Cybersécurité prescribes to put an end to the disruption.
• This binds the operator of an information system, public or private, and more broadly any natural or legal person operating in, or possessing expertise in, the digital sector, without any sector limitation.
• No fixed numerical notification deadline is stated; the duty runs from the operator's own awareness of the attack, intrusion or penetration.

Code du numérique, Livre IV, Titre III, Chapitre I, Section 2, Ordonnance-loi n° 23/010 du 13 mars 2023 (art. 295 à 297) · Read the law's page

• This binds a digital services provider (fournisseur des services numériques) generally, regardless of the sector in which it operates.
• Implement systems qualified to detect events likely to affect the security of your own information systems; the qualification of the detection systems and of the service providers operating them is delivered by the Ministry responsible for digital affairs, the Agence Nationale de Cybersécurité having been consulted.
• Submit your information system to controls the Agence Nationale de Cybersécurité conducts to verify its security level and its compliance with security rules, at your own cost.
• Expect the Agence Nationale de Cybersécurité to be able to obtain your users' or system holders' identity, postal address and electronic address when their systems are vulnerable, threatened or attacked, so as to alert them.

Convention de l'Union Africaine sur la Cybersecurite et la Protection des Donnees a Caractere Personnel (Convention de Malabo), adoptee le 27 juin 2014; ratifiee par la RDC par decision du Conseil des ministres du 6 decembre 2022; convention entree en vigueur le 8 juin 2023

• Adopt national data protection legislation that requires informed consent, protects data subject rights, and restricts cross-border data transfers.