Duty LXD-7332
Provides telecom services, in Norway
Security and Preparedness Duty of Electronic Communications Providersin force3 lines
Lov om elektronisk kommunikasjon (ekomloven), § 3-1 · Read the law's page
- Applies to providers of electronic communications networks and services in Norway. Reached by declaring that you provide telecom services.
- Offer networks and services with adequate security for users in peace, crisis and war, maintain adequate preparedness and secure adequate protection of communication and data (section 3-1).
- Prevent and minimise the effects of security incidents, secure rapid recovery, follow up security and preparedness systematically and document an adequate level of security (section 3-1).
Notification of Security Incidents by Electronic Communications Providersin force4 lines
Lov om elektronisk kommunikasjon (ekomloven), §§ 3-2 and 3-3 · Read the law's page
- Applies to providers of electronic communications networks and services in Norway. Reached by declaring that you provide telecom services.
- Notify the authority immediately of security incidents that have caused a significant breach of availability, and, as the Norwegian Communications Authority states it, no later than half an hour after you become aware of the incident (section 3-3(1)).
- Notify the authority without undue delay of security incidents that have caused a significant breach of authenticity, integrity or confidentiality (section 3-3(1)).
- Notify subscribers and users without undue delay where there is a particular risk of a security incident in public networks or services, and tell them of protective or remedial measures they can take (section 3-2).