Operates an app store, in Spain

Ley 34/2002, disposición adicional novena, servicios de la sociedad de la información · Read the law's page

• If you provide an information society service from an establishment in Spain, or operate a domain name registry or act as a registrar there, this binds you.
• Cooperate with the competent CERT in resolving cybersecurity incidents that affect the internet, and act on the security recommendations it indicates or that the codes of conduct establish (Disposición adicional novena, apartado 1).
• Supply the CERT and the competent authorities with the information needed to manage an incident, including the IP addresses that may be compromised or involved, while respecting the secrecy of communications (apartado 2).
• Identify the users affected by an incident the CERT notifies to you, tell them what they must do and by when, and, if they do not act within the recommended period, isolate the equipment or service from the network when the CERT requires it (apartado 4).