Communications Act (Kommunikationsgesetz, KomG), Notification of Security Breaches
In force.
A vulnerability and incident reporting rule binding private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Reporting, Security
As of .
What it requires
- This binds a provider of a public communications network or a publicly available electronic communications service under the Kommunikationsgesetz (reached by declaring that you provide telecom services).
- Notify the regulatory authority without delay of any breach of security or loss of network integrity with significant impact on the operation of the networks (Article 17(4)).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Private right of actionNo
Penalty structure
The regulatory authority imposes the fine for an infringement of the Article 17 duties on integrity and availability.
- Rule
- Fixed only
- As of
- Currency
- CHF
- Fixed cap
- 50,000
Who enforces it
Enforcement body
The regulatory authority (Regulierungsbehörde) named in the Kommunikationsgesetz, which fines a provider that infringes the Article 17 duties up to CHF 50,000.
What this law does
Article 17 of the Kommunikationsgesetz requires providers to notify the regulatory authority without delay of any breach of security or loss of network integrity with significant impact on network operation. Article 70 of the Kommunikationsgesetz fines a provider that infringes its duties on the integrity and availability of public communications networks and services under Article 17.
When LexLint raises it
When your app profile says your app provides telecom services.