TurkmenistanLaw on Communications, network and subscriber-information protection duties
Law of Turkmenistan No. 93-IV "On Communications" (Vedomosti Mejlisa Turkmenistana 2010, No. 1, art. 17; as last amended by Law No. 184-VII of ), arts. 18, 43
In force since .
A sector security regimes rule binding public and private bodies.
- Criminal exposure
- No
- Obligation class
- Security
What it requires
- This binds a communications operator (declare provides_telecom_services if you are one); it does not reach an app with no communications-operator licence.
- Implement technical and organizational methods to protect communication networks, telecommunications facilities, restricted-access information about the organization of communication networks, and information transmitted over those networks, and cooperate with law-enforcement bodies to protect communication facilities and structures from unauthorized access.NIST CSF 2.0PR.IR-01
- Ensure the safekeeping of subscriber information obtained on contracting and about services rendered, including their duration, content, and routing, and protect that information during automated processing.NIST CSF 2.0PR.DS-01
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- NIST CSF 2.0
- CIS Controls
- FINOS AIGF
- AIR-PREV-007Legal and Contractual Frameworks for AI Systems
- AIR-PREV-008Quality of Service (QoS) and DDoS Prevention for AI Systems
- AIR-PREV-012Role-Based Access Control for AI Data
- AIR-PREV-014Encryption of AI Data at Rest
- AIR-PREV-017AI Firewall Implementation and Management
- AIR-PREV-020MCP Server Security Governance
1 more
- AIR-DET-001AI Data Leakage Prevention and Detection
- ENISA NIS2 guidance
Our reading of where this law's duties sit in each framework, and in the NIST CSF 2.0, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
CIS Critical Security Controls® (CIS Controls®) v8.1 © Center for Internet Security, Inc. Safeguard numbers are used under a CIS Controls Supporter License; the one-line descriptions beside them are our own, not CIS text.
Who enforces it
Enforcement body
The Ministry of Communications of Turkmenistan, which under Art. 8 exercises state regulation and control over activity in the field of communications and licenses that activity, including cybersecurity licensing by its own terms; the Act names no penalty amount for a breach of arts. 18 or 43 specifically and points instead to liability under other Turkmenistan legislation.
Settledness
- As of
- Open questions
- Does a Cabinet of Ministers resolution or other act implementing Article 8(1)(11)'s reference to licensing activity in the field of communications and cybersecurity set out technical requirements that give further content to Article 18(4)'s technical and organizational methods of protection?
What this law does
A communications operator (a category that under this Act may be a state entity or a legal or natural person) must implement technical and organizational methods to protect communication networks, telecommunications facilities, restricted-access information about the organization of communication networks, and information transmitted by those networks.
The operator must, together with law-enforcement bodies, protect communication facilities and structures from unauthorized access, and a developer building or reconstructing communication facilities must likewise provide for protection against unauthorized access. Separately, a communications operator must ensure and bear responsibility for the safekeeping of subscriber information obtained on contracting and about services rendered, including duration, content, and routing.
The operator must also protect that information during automated processing. The Ministry of Communications of Turkmenistan exercises general regulatory and licensing authority over the sector, including, by its own Art. 8(1)(11), licensing of activity in the field of communications and cybersecurity, though no separate implementing act setting cybersecurity licensing requirements was located.
Neither Art. 18 nor Art. 43 states a fixed penalty; a violation carries liability under other Turkmenistan legislation the Act does not itself quantify.
When LexLint raises it
When your app profile says your app provides telecom services.
Back to the example · Lint your app
Page updated .