Operates a social platform, in Kosovo

Law No. 08/L-173 on Cyber Security, Arts. 2, 3, 5 and 7 · Read the law's page

• This duty reaches you if you hold Kosovo-designated national critical infrastructure as an operator of essential services, or if you provide an online marketplace, an online search engine, or a cloud computing service to users in Kosovo as a digital service provider.
• As a digital service provider, identify the risks to the security of your network and information systems, analyze them, and take adequate organizational and technical measures to manage that risk.
• As an operator of essential services, permanently apply organizational, physical and information-technology security measures that prevent a cyber incident, resolve one, and prevent or mitigate its impact.
• Expect the specific security measures required of your sector to be set by a sub-legal act of the Ministry of Internal Affairs rather than by this law directly.

Law No. 08/L-173 on Cyber Security, Arts. 6, 8 and 24 · Read the law's page

• This duty reaches you if you hold Kosovo-designated national critical infrastructure as an operator of essential services, or if you provide an online marketplace, an online search engine, or a cloud computing service to users in Kosovo as a digital service provider.
• As an operator of essential services, notify the Agency for Cyber Security immediately, and no later than 24 hours after becoming aware, of a cyber incident with a significant impact on system security or service continuity, and notify affected persons or the public within a reasonable time where individual notice is impractical.
• As a digital service provider, notify the Agency for Cyber Security immediately upon becoming aware of a cyber incident with a significant impact on the digital service you provide.
• Expect the notification procedure and the content of the incident report to be set by a further sub-legal act of the Ministry of Internal Affairs rather than by this law directly.