Duty LXD-6961
Provides financial services, in Madagascar
Electronic Money Act: Notice to Users of a Major Service Incidentin force2 lines
Loi n° 2016-056 sur la monnaie électronique, art. 92 · Read the law's page
- This binds an electronic money institution (établissement de monnaie électronique): a legal person that the CSBF has licensed to carry out electronic money operations (Article 11), reached by declaring that you are a payment provider.
- Warn the user of any major incident linked to disruptions of your service (Article 92).
Electronic Money Act: Data and Transaction Security of Electronic Money Institutionsin force4 lines
Loi n° 2016-056 sur la monnaie électronique, arts. 51 and 52 · Read the law's page
- This binds an electronic money institution (établissement de monnaie électronique): a legal person that the CSBF has licensed to carry out electronic money operations (Article 11), reached by declaring that you are a payment provider.
- Guarantee the protection of the data you hold while it is transmitted or stored during the retention period (Article 51).
- Operate a technical system or platform that secures the protection, integrity, authenticity and confidentiality of the data and the security of transactions (Article 51).
- Assign each user a personal means of identification that gives secure access to your services and lets the user carry out transactions on the user's electronic money account (Article 52).
Banking Act: Cybersecurity Duties of Credit Institutionsin force6 lines
Loi n°2020-011 sur la loi bancaire, art. 164 · Read the law's page
- This binds a credit institution (établissement de crédit): a legal person that habitually performs one or more of the banking services in Articles 5 to 13 of the Banking Act in Madagascar (Article 2), reached by declaring that you are a bank.
- Comply with the cybersecurity regulation in force, including the rules the CSBF issues by instruction for preventing, managing and mitigating information-technology risk across the banking system (Article 164).
- Define a cybersecurity policy and strategy, and put in place the means needed to prevent, manage and mitigate cyber-risks, with a rapid, effective and proportionate framework for response and control (Article 164).
- Delimit the cybersecurity roles of the board of directors, the general management and the internal control body, and adopt ethics rules for those roles that their members can understand (Article 164).
- Prepare and keep up to date a crisis management plan that your board of directors and the CSBF approve (Article 164).
- Make the security rules for your computer and telecommunications networks conform to the standards issued by the national cybersecurity entity (Article 164).