Runs an essential service, in South Africa

Electronic Communications and Transactions Act 25 of 2002, Chapter IX (ss. 52 to 58) · Read the law's page

• This binds a critical database administrator, the person responsible for the management and control of a critical database, which is a collection in electronic form of data the Minister has declared by notice in the Gazette to be of importance to the protection of the national security of the Republic or the economic and social well-being of its citizens (sections 1, 52 and 53; reached by declaring that you operate an essential service).
• Register the critical database with the Department or the body the Minister specifies, recording your full name, address and contact details, the location of the database and a general description of the categories of information it holds, in the manner the Minister determines by notice in the Gazette (section 54).
• Meet the minimum standards and prohibitions the Minister prescribes for the general management of the critical database, access to, transfer and control of it, the rules for securing the integrity and authenticity of critical data, its storage and archiving, and disaster recovery plans (section 55(1)).
• Allow the Director-General to audit your compliance with Chapter IX, by cyber inspectors or an independent auditor (section 57).
• Where an audit finds non-compliance and the Director-General notifies you in writing, take the remedial action within the period the notice states (section 58).