AzerbaijanCode of Administrative Offences, New Article 371-2, Immediate Reporting of Cyber Threats, Attacks and Incidents
A vulnerability and incident reporting rule binding private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Reporting
As of .
What it requires
- This binds, from , the subjects of information infrastructure, including owners of internet information resources, internet providers and hosting providers (reached by declaring that you provide telecom services or operate an essential service), and computer incident response centers and security operations centers; it does not reach critical information infrastructure, state bodies including the Central Bank, intelligence and counterintelligence subjects, or entities supervised in the financial markets (note to article 371-2).
- Submit immediately to the authorized body the information on cyber threats, cyber attacks and cyber incidents directed at your information infrastructure, together with the information obtained from your real-time monitoring and initial technical response (article 371-2.1.2).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Criminal exposureNo
Private right of actionNo
Penalty structure
Article 371-2.1 fines a legal person 1,000 to 2,000 manat and an official 500 to 1,000 manat for each offence listed in articles 371-2.1.1 to 371-2.1.6; the figures recorded are the legal-person range.
- Rule
- Fixed only
- As of
- Minimum
- 1,000
- Currency
- AZN
- Fixed cap
- 2,000
Who enforces it
Enforcement body
The body the relevant executive authority designates for cybersecurity, which receives the reports under article 371-2.1.2.
Settledness
- As of
- Open questions
- The text states the clock as immediately; which instrument sets the channel and format for the report to the authorized body?
What this law does
New article 371-2.1.2 of the Code of Administrative Offences punishes a failure to submit immediately to the authorized body the information on cyber threats, cyber attacks and cyber incidents directed at information infrastructure, together with the information obtained from the monitoring and initial response that article 371-2.1.4 describes. The same article 371-2.1 fines an official 500 to 1,000 manat and a legal person 1,000 to 2,000 manat. Articles 1.2, 1.3 and 1.5 of the amending Law, which carry article 371-2, apply from .
When LexLint raises it
When your app profile says your app provides telecom services or runs an essential service.