AngolaLei de Protecção das Redes e Sistemas Informáticos, Security Duties of Electronic-Communications Network Operators and Critical Infrastructure Operators
Lei n.º 7/17, Artigos 6.º a 11.º
In force since .
A sector security regimes rule binding public and private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Security
As of .
What it requires
- This binds operators and providers of electronic communications networks and services, and operators and providers of critical cyberspace infrastructure such as water, electricity and electronic communications services (articles 6 to 11); you are reached by declaring that you provide telecommunications services or that you operate an essential service.
- Ensure the integrity, confidentiality and privacy of the communications your network carries, through logical and physical security services (article 6).
- If you operate critical cyberspace infrastructure, apply the measures and techniques that secure and protect the assets essential to critical social functions (article 7).
- If you operate an electronic communications network, guarantee the technical and security conditions under which traffic and location data are transmitted (article 8).
- Run technical and operational measures, and incident-response management mechanisms, that respond to errors, attacks, thefts, accidents and cyber-attacks against your network (article 9).
- Implement preventive services of warnings, alerts, recommendations and security information, so that your network stays reliable (article 10).
- Carry out the measures and instruments needed to anticipate, detect, react to and recover from security risk situations on your network (article 11).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Settledness
- As of
- Open questions
- Article 42 lists the articles whose breach draws a fine and does not list Articles 6 to 11: does any other provision of the Law or of the electronic communications regime sanction a breach of Articles 6 to 11?
What this law does
Article 6 of Lei n.º 7/17 requires the networks of cyberspace to ensure the integrity, confidentiality and privacy of communications by implementing the logical and physical security services set out in the electronic communications regime.
Article 7 makes it the task of operators and service providers of critical cyberspace infrastructure to apply measures and techniques that secure and protect the assets essential to critical social functions, such as water, electricity and electronic communications services. Article 8 makes the operator of an electronic communications network responsible for guaranteeing the technical and security conditions under which the traffic and location data of natural and legal persons are transmitted.
Article 9 subjects electronic communications networks to technical and operational measures that respond to errors, attacks, thefts, accidents, cyber-attacks and other incidents, through adequate and efficient incident-response management mechanisms. Article 10 makes it the task of operators and service providers of electronic communications networks to implement preventive services of warnings, alerts, recommendations and security information.
Article 11 makes it the task of the same operators and providers to carry out the measures and instruments needed to anticipate, detect, react to and recover from security risk situations on the networks. Article 42 of the Law sets a fine of Kz 7,000,000 to Kz 150,000,000 for non-compliance with Articles 12, 13, 14, 15 and 18. The Law was published in the Diário da República Iª Série n.º 27 of . Article 47 of the Law has it enter into force on the date of its publication.
When LexLint raises it
When your app profile says your app provides telecom services or runs an essential service.