Provides telecom services, in Cyprus

Ο περί Ρυθμίσεως Ηλεκτρονικών Επικοινωνιών Νόμος του 2022 (24(I)/2022), άρθρο 32(1) · Read the law's page

• If you provide number-based interpersonal communications services, whether publicly available or not, let end-users, including end-users with disabilities, make calls and send short messages (SMS) to the emergency number 112 free of charge (Law Art. 32(1)).
• Allow end-users with disabilities to do so whether or not they are Cypriot citizens, including citizens of other Member States who are not permanently resident in the Republic, with access to 112 where feasible without any pre-registration (Law Art. 32(1); Directive (EU) 2018/1972 Art. 109(5)).
• Route the call to the most appropriate emergency incident management centre (Law Art. 32(1)).

Η περί Καθορισμού του πεδίου της Καθολικής Υπηρεσίας Ηλεκτρονικών Επικοινωνιών Ρυθμιστική Απόφαση του 2022 (Κ.Δ.Π. 297/2022), άρθρα 2, 4(β), 5, 7 και 8 και Παραρτήματα I, II και IV · Read the law's page

• If the Commissioner has designated you as universal service provider, ensure that the services you offer meet the obligations in Annex II on support for users with disabilities and are published widely and adequately (Decision Art. 4(β) and Annex II, para. 2).
• Ensure that your subscribers who need textphones because of their special needs (subscribers who are deaf, deaf and blind or have speech problems) have access to a relay service (Annex II, para. 3).
• Charge those subscribers for voice and text messages sent through the relay service no more than the normal rates, or other charges of yours that correspond to them as far as reasonably possible, calculated as if the transmission had been made directly between the caller and the person called and as if the relay service had added no extra time to the call (Annex II, para. 4).
• Ensure that customers who use textphones have access to a public emergency service, a telephone assistance service and a directory enquiry service by short codes, and can receive voice call-progress messages in a form suitable for textphone users (Annex II, para. 5).
• When notified of a fault in a network element, offer private subscribers with special needs who in good faith need urgent repair a priority fault-correction service, as far as reasonably possible, at charges that do not exceed the usual charges (Annex II, para. 6).
• Without prejudice to the rules on non-payment of bills, give private subscribers whose disability makes them dependent on the telephone a free facility to name in advance an authorised person to whom their bill and non-payment correspondence is sent and who may pay the bill without accepting liability for the subscriber's bills (Annex II, para. 7).
• On request and free of charge, give any private subscriber who is blind or has serious sight problems any contract for fixed public electronic communications services with that subscriber, including its publicly available terms, any amendment and any bill, in large print, in Braille or in an electronic form suited to the subscriber's reasonable needs (Annex II, para. 8).
• By decision of the Commissioner, fund the operation of the relay service for subscribers who need textphones because of their disability (Annex II, para. 9).
• If you are designated to provide the fixed-location voice communications service of the universal service, provide it in accordance with Annexes II and III on services and facilities for users with low income or special social needs (Annex I, para. 2).
• Provide the broadband internet access service of the universal service in accordance with Annexes II and III on support for users with disabilities and on special tariff packages (Annex IV, para. 2).
• Unless an Annex provides otherwise, provide the services and facilities of the universal service at affordable prices as the Commissioner judges them, in accordance with the principles of transparency, non-discrimination and proportionality, and at the quality the Commissioner may set (Decision Art. 5).
• At the Commissioner's request, report to the Commissioner within the time it sets, which does not exceed three months, the measures you have taken to comply with the Decision (Decision Art. 7(1)).

Η περί Καθορισμού των Όρων Γενικών Εξουσιοδοτήσεων Ρυθμιστική Απόφαση του 2023 (Κ.Δ.Π. 279/2023), άρθρα 4, 6 και 8 και Παράρτημα ΙΙΙ, παράγραφος 3(4) · Read the law's page

• If you provide electronic communications services or networks under the general authorisation, other than number-independent interpersonal communications services, provide accessibility for users with disabilities equivalent to that provided to the majority of end-users, including in the contractual information you give under Article 29 of the Law (Decision Annex III, para. 3(4); Directive (EU) 2018/1972 Art. 111(1)).
• Ensure that users with disabilities can choose between the undertakings and services available to the majority of end-users (Decision Annex III, para. 3(4); Directive (EU) 2018/1972 Art. 111(1)(b)).

Art. 35B of the Security of Networks and Information Systems Law of 2020, N. 89(I)/2020, as amended by the Security of Networks and Information Systems (Amendment) Law of 2025, N. 60(I)/2025 · Read the law's page

• Notify the Digital Security Authority without undue delay, and in any event within six (6) hours of becoming aware of a significant incident, with an early warning stating, where applicable, whether the incident is suspected to result from unlawful or malicious acts and whether it may have a cross-border impact.
• Follow with an incident notification within 72 hours of becoming aware, updating the early warning and giving an initial assessment of the incident's severity and impact, including any indicators of compromise where available.
• Submit an intermediate report on the Authority's request, and a final report within one month of the incident notification (or, for an incident still ongoing at that point, a progress report every fifteen days counted from the incident notification until the final report, and a final report within fifteen days of restoring the affected network or information system's normal operation).
• Where you are a trust service provider, notify within 24 hours rather than 72 for a significant incident affecting the trust services you supply.
• Where applicable, notify without undue delay the recipients of your services who may be affected by a significant cyber threat, of any measures or corrective action they can take, and notify them of a significant incident likely to adversely affect their use of the service.
• This binds an essential or important entity established in Cyprus under Article 2A, sized at or above the medium-enterprise threshold of Commission Recommendation 2003/361/EC, or regardless of size for a category the Law names outright (a public electronic communications provider, a trust service provider, a TLD registry), across the sectors listed in Annexes I and II, which name an online marketplace, an online search engine and a cloud computing service among the digital providers they reach; the wider sector classes those Annexes also reach (energy, transport, banking, health, water, digital infrastructure and public administration) are reached too, by declaring that you are an essential or important entity. The obligation runs to this jurisdiction's own row, which is a companion of this jurisdiction's risk-management and governance row.

Arts. 35 and 35A of the Security of Networks and Information Systems Law of 2020, N. 89(I)/2020, as amended by the Security of Networks and Information Systems (Amendment) Law of 2025, N. 60(I)/2025 · Read the law's page

• Take appropriate and proportionate technical, operational and organisational measures to manage the risks to the security of the network and information systems you use for your activities or to provide your services, proportionate to the risk, and to prevent or minimise the impact of an incident on the recipients of your services or on other services.
• Cover at least: risk-analysis and information-system security policies; incident handling; business continuity, including backup management, disaster recovery and crisis management; supply-chain security, including the security of your relationships with your direct suppliers and service providers; secure acquisition, development and maintenance of systems, including vulnerability handling and disclosure; policies to assess the effectiveness of these measures; basic cyber hygiene practices and cybersecurity training; cryptography and, where appropriate, encryption policies; human-resources security, access-control policies and asset management; and, where appropriate, multi-factor or continuous authentication, and secure voice, video, text and emergency communications.
• Have your senior management approve these risk-management measures and oversee their implementation; senior management can be held accountable for the entity's breach of this duty, and must undergo, and offer staff, regular training so they can identify risks and assess cybersecurity risk-management practices.
• This binds an essential or important entity established in Cyprus under Article 2A, sized at or above the medium-enterprise threshold of Commission Recommendation 2003/361/EC, or regardless of size for a category the Law names outright (a public electronic communications provider, a trust service provider, a TLD registry), across the sectors listed in Annexes I and II, which name an online marketplace, an online search engine and a cloud computing service among the digital providers they reach; the wider sector classes those Annexes also reach (energy, transport, banking, health, water, digital infrastructure and public administration) are reached too, by declaring that you are an essential or important entity.

Η περί των Δικαιωμάτων Τελικών Χρηστών Ηλεκτρονικών Επικοινωνιών Ρυθμιστική Απόφαση του 2025 (Κ.Δ.Π. 189/2025), άρθρα 4(1) έως (3), 7, 8, 9 και 12(1) · Read the law's page

• If you provide publicly available electronic communications services, submit the standard text of your service contract to the Commissioner for approval, and include in its minimum content the details of the products and services designed for end-users with disabilities and how updates of that information can be obtained (Decision Art. 4(1) and 4(3), item κθ).
• Give end-users the pre-contract information in Article 4 clearly, on a durable medium or, where that is not feasible, in an easily downloadable document, and on request in a format accessible to end-users with disabilities (Decision Art. 4(2); Directive (EU) 2018/1972 Art. 102(1)).
• Unless you provide only transmission services used for machine-to-machine services, give end-users a short and legible summary contract in the format of Implementing Regulation (EU) 2019/2243, completed and free of charge before the contract is concluded, or, where that is objectively impossible for technical reasons at that moment, without undue delay afterwards, the contract then taking effect when the end-user confirms agreement after receiving it (Decision Art. 7(1) and 7(3)).
• State in the summary contract the extent to which your products and services are designed for end-users with disabilities, including, where available, at least real-time text, total conversation, relay services, accessible emergency communications, special equipment, special tariffs and accessibility information (Decision Art. 7(2)(ε); Directive (EU) 2018/1972 Art. 102(3)(e)).
• If you provide internet access services or publicly available interpersonal communications services, publish comprehensible, comparable, reliable, user-friendly and up-to-date information on the quality of your services, to the extent that you control at least some elements of the network directly or through a service level agreement, and on the measures taken to ensure equivalent access for end-users with disabilities (Decision Art. 8; Directive (EU) 2018/1972 Art. 104(1)).
• If you provide publicly available electronic communications services, publish comprehensible, comparable, reliable, user-friendly and up-to-date information on the measures taken to ensure equivalent access for end-users with disabilities (Decision Art. 9; Directive (EU) 2018/1972 Art. 111(1)).
• Publish that information on a dedicated web page or on your existing web page, in a clear, comprehensible, machine-readable form that is accessible to end-users with disabilities in accordance with the Union law harmonising accessibility requirements for products and services (Decision Art. 9; Directive (EU) 2018/1972 Art. 103(1)).
• If the Commissioner requires it under Article 12(1), which it may do of providers of internet access services and publicly available interpersonal communications services, publish the information listed there, including the details of products and services, functions, practices, policies and procedures and changes to how the service operates that are specially designed for end-users with disabilities, in a clear, easily accessible and comprehensible form for end-users with disabilities and in any additional form the Commissioner specifies (Decision Art. 12(1) and 12(1)(β)(vi)).

Ο περί της Προσβασιμότητας Προϊόντων και Υπηρεσιών Νόμος του 2024 (57(I)/2024), άρθρα 4(2), 5(3) έως (6), 14 έως 16 και 45 · Read the law's page

• If you provide to consumers an electronic communications service (other than machine-to-machine transmission), a service giving access to audiovisual media services, the websites, mobile services and applications, electronic tickets and travel information of air, bus, rail or waterborne passenger transport (and, for urban, suburban and regional transport, the interactive self-service terminals), a consumer banking service, an e-book or its dedicated software, or an e-commerce service, make the service meet the accessibility requirements in Annex I of the Law (Arts. 4(2), 5(1) and 5(3); Directive Arts. 2(2) and 4(3)).
• Meet Section III of Annex I, except for urban, suburban and regional transport services: make the products you use to provide the service accessible, give information on how the service works, its accessibility features and its interoperability with assistive devices through more than one sensory channel in an understandable and perceivable form, make your websites, related online applications, mobile device services and mobile applications consistently and adequately accessible so that users can perceive, use and understand them and rely on them, and have your support services (help desks, call centres, technical support, relay and training services), where you have them, give information on the service's accessibility and its compatibility with assistive technologies in accessible formats (Annex I, Section III(α) to (δ)).
• Meet Section IV of Annex I for the kind of service you provide. Electronic communications: offer real-time text in addition to voice, offer total conversation where video is provided, and keep emergency communications synchronised and routed to the most appropriate PSAP. Audiovisual media access services: provide electronic programme guides that are perceivable, usable, understandable and reliable and that show the availability of accessibility, and transmit subtitles for the deaf and hard of hearing, audio description, spoken subtitles and sign language interpretation with adequate quality and synchronisation (Annex I, Section IV(α) and (β)).
• Passenger transport (air, bus, rail, waterborne): give information on the accessibility of vehicles, surrounding infrastructure and the built environment and on assistance for persons with disabilities, and give information on smart ticketing, real-time travel information and supplementary service information; for urban, suburban and regional transport, make the self-service terminals you use accessible under Section I (Annex I, Section IV(γ) and (δ)).
• Consumer banking: offer identification methods, electronic signatures, security and payment services that users can perceive, use and understand and rely on, and give information that does not exceed level B2 of the Common European Framework of Reference for Languages (Annex I, Section IV(ε)).
• E-books: provide synchronised text and audio where an e-book has both, do not let digital files obstruct assistive technology, allow access to and navigation of content and file layout and alternative renderings, make e-books findable through accessibility metadata, and do not let digital rights management obstruct accessibility features (Annex I, Section IV(στ)).
• E-commerce: give the accessibility information on the products and services sold where the responsible operator provides it, make the identification, security and payment function accessible where it is part of the service, and offer identification methods, electronic signatures and payment services that users can perceive, use and understand and rely on (Annex I, Section IV(ζ)).
• Draw up the information required by Annex III, explain how the services meet the applicable accessibility requirements, make the information available to the public in written and oral form, including in a manner accessible to persons with disabilities, and keep it for as long as the service is in operation; include it in your general terms and conditions or an equivalent document, in addition to the consumer information that Directive 2011/83/EU requires, with a general description of the service in an accessible format, the descriptions needed to understand how it works, and a description of how it meets the requirements of Annex I (Art. 14(β); Annex III, point 1; Directive Art. 13(2)).
• Have procedures so that the provision of services stays in conformity with the applicable accessibility requirements, taking due account of changes in the characteristics of the service, in the applicable requirements and in the harmonised standards or technical specifications on which conformity is declared (Art. 14(γ)).
• If a service does not conform, take the corrective measures needed to bring it into conformity and inform the competent authority at once, with details of the non-conformity and the measures taken; on a reasoned request give the competent authority and the accessibility surveillance authorities the information needed to show conformity and cooperate with them on the measures taken (Art. 14(δ) and (ε)).
• Assess whether compliance would require a significant change that fundamentally alters the basic nature of the service or would impose a disproportionate burden by the criteria in Annex IV; document the assessment, keep the results for five years from the last time the service was provided, and give the authorities a copy on request (Art. 15(2) and (3)).
• Renew the disproportionate-burden assessment for each category or type of service when the service is altered, when the authorities ask, and at least every five years (Art. 15(5)).
• Inform the competent authority when you rely on the fundamental alteration or disproportionate burden defence for a particular service, unless you are a microenterprise (Art. 15(7)); if you receive funding from sources other than your own resources, public or private, provided for the purpose of improving accessibility, you cannot rely on the disproportionate burden defence (Art. 15(6)).
• You may continue to provide services using products you lawfully used for similar services before 28 June 2025 until 28 June 2030; service contracts agreed before 28 June 2025 may continue unchanged until they expire and for no more than five years from that date; self-service terminals lawfully used before 28 June 2025 may stay in use until the end of their economically useful life and for no more than 20 years from first use (Art. 45).

Η περί Καθορισμού των Δικαιούχων των Ειδικών Τιμολογιακών Πακέτων Ρυθμιστική Απόφαση του 2026 (Κ.Δ.Π. 271/2026), άρθρα 3 έως 6, 8 και 9 · Read the law's page

• If the Commissioner has designated you as universal service provider, give beneficiaries with special social needs, being persons with a permanent severe or total physical, sight or hearing disability, a permanent moderate, severe or total intellectual disability, or a permanent severe or total psychiatric disability, the pricing set out in the table in Article 6(1) for fixed-location voice connections and for broadband internet access services (Decision Arts. 4(2) and 6(1)).
• Where a beneficiary is a minor in one of those categories, treat the parent or guardian who lives in the same premises and presents the required certificates as the beneficiary, and accept the parent's or guardian's signed declaration that the minor lives in the same premises (Decision Arts. 4(4) and 6(4)).
• Fixed-location voice connections, special social needs (Decision Art. 6(1), table): connect persons with special social needs free of charge.
• Fixed-location voice connections, low income (Decision Art. 6(1), table): charge persons with low income at most 50% of the connection fee, excluding VAT, as published in the universal service provider's price list.
• Monthly rental of fixed-location voice connections, special social needs (Decision Art. 6(1), table): give persons with special social needs the monthly rental free of charge.
• Monthly rental of fixed-location voice connections, low income (Decision Art. 6(1), table): charge persons with low income at most 50% of the monthly rental, excluding VAT, as published in the universal service provider's price list.
• Calls, special social needs (Decision Art. 6(1), table): price calls by persons with special social needs at the same fee as the provider's call tariff as it applies or is amended from time to time, and give them the first 100 minutes of national calls each month free of charge.
• Calls, low income (Decision Art. 6(1), table): price calls by persons with low income at the same fee as the provider's call tariff as it applies or is amended from time to time.
• Broadband internet access connection fee, special social needs (Decision Art. 6(1), table): connect persons with special social needs to broadband internet access free of charge.
• Broadband internet access connection fee, low income (Decision Art. 6(1), table): charge persons with low income at most 50% of the connection fee, excluding VAT, as published in the universal service provider's price list.
• Broadband internet access monthly rental, special social needs (Decision Art. 6(1), table): give persons with special social needs the lowest service offered free of charge, provided the minimum speed of 10 Mbps download and 2 Mbps upload is kept.
• Broadband internet access monthly rental, low income (Decision Art. 6(1), table): charge persons with low income at most 50% of the monthly rental of the lowest service offered, excluding VAT, as published in the universal service provider's price list, provided the minimum speed of 10 Mbps download and 2 Mbps upload is kept.
• Offer the special tariff package only to beneficiaries who are natural persons with their permanent residence in Cyprus, and for one premises with a distinct address (Decision Art. 6(2), (3), (5) and (6)).
• Treat persons with low income as beneficiaries too, being natural persons who receive public assistance from the Social Welfare Services or the Guaranteed Minimum Income from the Welfare Benefits Administration Service (Decision Arts. 4(1)(β) and 4(3)).
• Decide who is a beneficiary on the certificates Article 5 lists, which the applicant must produce: for special social needs, an Integrated Disability Assessment Finding (ΟΠΑΑ) showing a severe or total disability with a permanent period of validity, or a certificate from the Department for Social Inclusion of Persons with Disabilities that the person receives the Severe Mobility Disability Allowance, the Care Allowance for Quadriplegics, the Care Allowance for Paraplegics or the Blind Persons Grant and has a permanent severe or total disability, or a certificate from any State Department that the person is certified with a permanent severe disability or a permanent moderate intellectual disability, or a European Disability Card, or, for intellectual disability, a certificate that the person is registered with the Committee for the Protection of Persons with Intellectual Disability and is not institutionalised; for low income, a certificate from the Social Welfare Services of public assistance, or from the Welfare Benefits Administration Service of the Guaranteed Minimum Income (Decision Art. 5(1) and (2)).
• For a minor in one of the special social needs categories, also require the minor's birth certificate, the parent's or guardian's identity card and, where the minor is under guardianship, proof of guardianship such as a court order, in addition to the certificates required under Article 5(α) and 5(δ), and make the parent's or guardian's declaration that the minor lives in the same premises draw attention to the law on false declarations (Decision Arts. 4(4)(α) to (γ) and 6(4)).