Processes voice recordings, in Cameroon

Loi n°2010/012 du 21 décembre 2010, art. 6-7, 13-14, 24, 26-30, 32, 61(3) · Read the law's page

• This applies to any operator of an electronic-communications network or an information system that offers a service in Cameroon, directly or indirectly; Cameroon's law does not gate this duty by sector, size, or a government designation, so it reaches a network operator, an electronic-communications service provider, and an information-system operator alike, except that article 2 excludes the specific applications used in national defense and security.
• Take all technical and administrative measures necessary to guarantee the security of the services you offer.
• Adopt standardized systems that let you continuously identify, assess, treat, and manage the risks to your information systems' security.
• Have Cameroon's National Information and Communication Technologies Agency (ANTIC) approve the security mechanisms you put in place for this purpose.
• Submit your networks and information systems to ANTIC's mandatory security audit, conducted at least once a year or whenever circumstances require it.
• Evaluate and revise your security systems as technology evolves, and make the changes your security practices, measures, and techniques need.
• Inform your users of the dangers of using your network or service, the specific security risks it faces, and the technical means available to secure their communications.
• Do not obstruct, resist, or prevent ANTIC's security audit, and do not refuse to provide the information or documents it requires; doing so is a criminal offense.

Loi n°2010/012 du 21 décembre 2010, art. 74 · Read the law's page

• Do not record, fix, or transmit another person's private or confidential electronic data without their consent, and do not intercept personal data while it is in transit between information systems.
• Do not process personal data without complying with the prior declaration or authorization formalities the law requires before implementing the processing.
• Do not collect a person's nominative data by unlawful means in order to harm their privacy or standing.
• Do not put online, keep, or store, without the data subject's express agreement, nominative data revealing tribal origin, political or religious opinions, trade-union membership, or morals, and do not divert such data in the course of recording, filing, or transmitting it.
• Do not retain nominative or encrypted personal data beyond the legal duration stated in the request for opinion or prior declaration for the processing, and do not disclose nominative data in a way that harms the person it concerns.