Reuses other publishers' content, in the Central African Republic

Accord de Bangui instituant une Organisation Africaine de la Propriété Intellectuelle, Acte du 14 décembre 2015, Annexe VII (Propriété littéraire et artistique), art. 15 · Read the law's page

• The Bangui Agreement's Annex VII, in the Act of December 14, 2015, applies in the Central African Republic as an African Intellectual Property Organization (OAPI) member state, where the Agreement and its Annexes take the place of national law on the matters they cover; Annex VII is a minimum normative framework.
• You need not obtain permission to use the news of the day or mere facts and data: Annex VII does not protect them (art. 6).
• You may reproduce by print or audiovisual press an economic, political or religious article published in a newspaper or periodical, or a broadcast work of the same character, without the author's authorization or payment, unless the right of reproduction, broadcasting or communication to the public has been expressly reserved (art. 15).
• Credit the source and the author's name where the source gives it.
• You may reproduce or make accessible to the public, to report current events, a work seen or heard in the course of the event, to the extent the informational purpose justifies.
• You may reproduce by print or audiovisual press political speeches, lectures, addresses, sermons and courtroom pleadings for information, unless their authors have expressly reserved their rights; the authors alone keep the right to publish collections of them.
• You may quote a lawfully published work in another work, crediting the source and author, if the quotation accords with good usage and does not exceed what its purpose justifies (art. 11).
• Do not assume the press exception reaches a systematic aggregator's reproduction of headlines and snippets: Annex VII does not say so.

Loi n° 24.002 relative à la cybersécurité et à la lutte contre la cybercriminalité, Titre II, Chapitre II (art. 14, 15 et 25) et Titre III, Chapitre I (art. 43) · Read the law's page

• Submit your networks or information systems to a mandatory security audit and severity-impact assessment by the Agence Nationale de la Cybersécurité at least once a year, or more often where circumstances require it.
• Provide the information and documents a security audit requires, and do not obstruct or resist it: obstructing a security audit is a criminal offense under Article 43.
• This binds a network operator, a certification authority and an electronic-communications service provider by name under Article 14, and Article 25 extends the mandatory security-audit regime to every electronic-communications network and every information system.
• Expect the confidential audit report to reach the Agence Nationale de la Cybersécurité for approval and then the Ministères chargés de la Sécurité Publique and de l'Economie Numérique for decision.

Loi n° 24.002 relative à la cybersécurité et à la lutte contre la cybercriminalité, Titre II, Chapitre III, Sections I et II (art. 16, 19, 20, 21, 23) · Read the law's page

• This binds an electronic-communications network operator or service provider (Article 16) and any information-system operator, whether public or private (Article 19), regardless of the sector in which the network or system is deployed.
• Take all technical and administrative measures necessary to guarantee the security of the services you offer, and adopt standardized systems to continually identify, assess, treat and manage the risks to your information systems' security.
• Put in place technical mechanisms addressing threats to your systems' permanent availability, integrity, authentication, non-repudiation and data confidentiality, and to their physical security, and submit those mechanisms to the Agence Nationale de la Cybersécurité for approval.
• Periodically evaluate and revise your security systems, and introduce necessary changes as technology evolves, under the Agence Nationale de la Cybersécurité's oversight.
• Inform your users of the dangers of using your network or information system, the particular security-violation risks involved, and the technical means available to secure their communications or restrict access to certain services.