GabonCybersecurity Law: Electronic Communications Network Operator Security Duties
Loi N° 027/2023 du 11 juillet 2023, Titre III, Chapitre II, arts. 19-22
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived 2026. Publisher's page: https://journal-officiel.ga/20087-027-2023-/In force since .
A sector security regimes rule binding public and private bodies.
- Obligation class
- Security, Disclosure
As of .
What it requires
- This binds an operator of an electronic communications network and a provider of electronic communications services (Articles 19 and 20), and Article 22 binds a network operator installed in Gabon; you are reached by declaring that you provide a public telecommunications network or an electronic communications service.
- Take all technical and administrative measures necessary to guarantee the security of the services you offer (Article 19).
- Tell your users about the danger of using your networks, the particular risks of a security violation and the technical means that exist to secure their communications (Article 19).
- If you operate a network, set up a recording device to collect your users' complaints and reports (Article 19).
- Install mechanisms that monitor the traffic of data on your networks (Article 20).
- If you operate a network installed in Gabon, keep an operations management centre for your infrastructure and data in Gabon (Article 22).
These lines are LexLint's reading of the law's text, as of .
Who enforces it
Settledness
- As of
- Open questions
- What sanction attaches to a failure to meet the Article 19 to 22 duties, given that Article 98 threatens an unspecified sanction once the six-month compliance period has run?
What this law does
Article 19 requires operators of electronic communications networks and providers of electronic communications services to take all technical and administrative measures necessary to guarantee the security of the services offered.
Article 19 requires operators of electronic communications networks and providers of electronic communications services to inform users of the danger of using their networks, of the particular risks of a security violation and of the technical means that exist to secure their communications. Article 19 requires network operators to set up a recording device to collect users' complaints and reports.
Article 20 requires network operators and service providers to install mechanisms that monitor the traffic of data on their networks. Article 22 requires electronic communications network operators installed in the national territory to have an operations management centre for their infrastructure and data in the national territory.
When LexLint raises it
When your app profile says your app provides telecom services.