Provides telecom services, in Liberia

LTA Cybersecurity Regulations 2026 (LTA REG 0013 - 2026), regs. 7.1 to 7.5, 7.7, 7.8 and 10 · Read the law's page

• This reaches you where you are a telecommunications service provider, meaning a person or entity under permit or license from the Liberia Telecommunications Authority that provides a telecommunications service to the public or owns or operates a telecommunications network used to do so (regs. 3.1 and 6.0) (reached by declaring that you provide telecom services).
• Establish and maintain a Cybersecurity Unit within your entity, managed by a senior staff member with overall supervision and accountability for cybersecurity, within one year of the effective date of the Regulations, and submit the unit to mandatory cybersecurity examinations by industry-certified auditors validated by the LTA (reg. 7.1).
• Keep an updated baseline configuration and inventory of all digital assets, conduct comprehensive risk assessments annually and after significant ICT changes, document vulnerabilities, threats and current controls, and evaluate the risks of third parties connecting to your networks (reg. 7.2).
• Implement identity and access management policies and controls including multi-factor authentication, segment ICT systems by business criticality, encrypt sensitive data in transit and at rest, and deploy network and web application firewalls, intrusion detection and prevention systems and antivirus software (reg. 7.3).
• Operate continuous monitoring systems that detect anomalies, conduct penetration testing at least once a year, and maintain logs of security events for at least 12 months (reg. 7.5).
• Develop, annually test, maintain and update disaster recovery and business continuity plans and file them with the LTA (reg. 7.7).
• Implement automated tools for continuous monitoring of your networks with real-time threat detection, and conduct regular audits of your compliance with the baseline framework objectives, including risk management practices, data protection and incident response capabilities (reg. 7.8).

LTA Cybersecurity Regulations 2026 (LTA REG 0013 - 2026), regs. 7.6, 7.9 and 10.6 · Read the law's page

• This reaches you where you are a telecommunications service provider, meaning a person or entity under permit or license from the Liberia Telecommunications Authority that provides a telecommunications service to the public or owns or operates a telecommunications network used to do so (regs. 3.1 and 6.0) (reached by declaring that you provide telecom services).
• Notify the LTA within 24 hours, and your customers or subscribers within 72 hours, of security breaches and major cybersecurity incidents involving critical information infrastructure (reg. 7.6(A)(ii)).
• Develop, annually test, maintain and update incident response plans and file the plan with the LTA (reg. 7.6(A)(i)).
• Submit semiannual reports to the LTA detailing the security updates and patches you applied, the vulnerabilities you detected and the corrective actions taken, and incident logs including near misses, with anonymized data for analysis (reg. 7.9).

Telecommunications Act of 2007, §§ 51-52 (Protection of Personal Information) · Read the law's page

• Be responsible for customer information and customer communications in your custody or control, or in the custody or control of your agents.
• Collect, use, maintain, or disclose a telecommunications customer's information or communications only as permitted or required by law, or with that customer's consent.
• Identify the purposes for which customer information is collected, at or before collection, and do not use it for an undisclosed purpose.
• Keep customers' information accurate, complete, and up to date for the purposes it is used for.
• Protect customer information and customer communications with security safeguards appropriate to their sensitivity.

§ 51(5), Telecommunications Act 2007 (Republic of Liberia) · Read the law's page

• This reaches you where you are a telecommunications service provider, including a state-linked national operator, licensed to provide a telecommunications network or telecommunications service in Liberia; it does not reach a business with no such licence.
• Ensure that customer information and customer communications in your custody or control are protected by security safeguards appropriate to their sensitivity.
• Expect the Liberia Telecommunications Authority to enforce this duty through its general powers to demand documents and technical information, inspect your premises, and issue fines or licence sanctions under its regulations.
• Expect a customer who sustains loss or damage from your failure to safeguard their information to be able to bring a civil action against you directly under the Act.