Is a listed company, in Ethiopia

Computer Crime Proclamation No. 958/2016, art. 2(13), art. 2(19), art. 17, art. 27, art. 46 · Read the law's page

• Immediately notify the Information Network Security Agency (now the Information Network Security Administration) and report the crime to the police, and take appropriate measures.
• This binds a service provider, defined as a person who provides technical data-processing or communication service or alternative infrastructure to users by means of a computer system, or a government organ; the trigger is knowledge that a crime under this Proclamation is being committed, or knowledge that a third party is disseminating illegal content through the computer system you administer, which on this definition's own terms reaches an app or platform operator whose product is itself that computer system, not only a network, hosting, or telecommunications intermediary.
• The Agency may issue a directive setting the form and procedure for this report; no such directive is confirmed as a separately published text in the primary sources located here.
• No provision of this Proclamation states a separate penalty for failing this reporting duty. The Article 17 offense for failing to cooperate with an investigation lists five other, unrelated articles on data retention, real-time collection, data preservation orders, data-production orders, and search assistance, and does not include this one.

Proclamation No. 1321/2024, arts. 55-64 (enforcement, administrative sanctions and offences) · Read the law's page

• Comply with an enforcement order the Authority serves within the period it specifies, which is never less than twenty-one days, then tell the data subject concerned and, where compliance materially modifies the data, anyone it was disclosed to in the twelve months before the order was served.
• Furnish the Authority with information it requests, in a form that can be taken away and is intelligible and retrievable, and cooperate with it in discharging its powers and functions.
• Expect a data subject to be able to complain to the Authority in writing, and be ready to carry the burden of proving that an exemption applies wherever you refuse a data subject's request.
• Expect administrative penalties for processing in contravention of the Proclamation, reaching four per cent of total worldwide turnover of the preceding financial year where the offender is an institution or the offence concerns sensitive data or a minor's personal data, and criminal liability under article 64 on top of them.