MozambiqueData Centre Regulation, incident notice for data centres serving essential services
Decreto n.º 71/2025, art. 24 (Regulamento de Centros de Dados)
In force since .
A vulnerability and incident reporting rule binding public and private bodies.
- Obligation class
- Reporting
What it requires
- It reaches you if you operate a data centre in Mozambique that provides services to a customer operating an essential service (Article 24), meaning a service in a sector Article 21(1) lists or one given to the organs of sovereignty (Article 21(2)).
- Tell the customers you serve that operate essential services, and the regulatory authority, through the Portal and within 24 hours, of an incident that affects or may affect the regular provision of the contracted services, and of its actual or likely impact (Article 24(1)).
- Follow the regulatory authority's technical instructions on the minimum content of the notice (Article 24(2)).
These lines are LexLint's reading of the law's text.
Who enforces it
Enforcement body
The Entidade Reguladora de Tecnologias de Informação e Comunicação, the regulatory authority that registers and licenses data centres and, under Article 50(1), supervises their operators.
What this law does
Article 24(1) requires a data-centre operator that serves customers operating essential services to tell them and the regulatory authority, through the Portal and within 24 hours, of an incident that affects or may affect the regular provision of the contracted services, and of its actual or likely impact. Article 24(2) leaves the minimum content of that notice to technical instructions of the regulatory authority.
Article 21(1) lists the essential-service sectors as public administration, internal security, national defence, public water supply, health, education, postal, energy, electronic communications, transport and finance. Article 51(1) of the Regulation makes a contravention punishable by a fine of 40 to 60 minimum wages for an individual and 90 to 150 minimum wages for a legal person.
Among the contraventions Article 51(1) lists, item (k) is a failure or delay in notifying incidents in the operation of a data centre that serves customers operating essential services. The Decree approving the Regulation enters into force 90 days after its publication.
When LexLint raises it
When your app profile says your app provides cloud services.
Back to the example · Lint your app
Page updated .