UgandaUganda Communications (Computer Emergency Response Team) Regulations, 2019, Operator Incident Notification and Reporting
In force.
A vulnerability and incident reporting rule binding private bodies.
- Private right of action
- No
- Enforcement body
- The Uganda Communications Commission, to which an operator reports.
- Instrument type
- a regulation made under an act
- Obligation class
- Reporting, Security
What it requires
- This binds an operator, meaning a person licensed to provide communication or communications services in Uganda (reached by declaring that you provide telecommunications services).
- Notify the Uganda Communications Commission of any significant information or computer security threat or incident that comes to your attention during your ordinary course of business (regulation 9(1)(e)).
- Provide the Commission with quarterly cyber security incident reports, information technology and systems risk assessment reports and any other information the Commission requests (regulation 9(1)(f)).
These lines are LexLint's reading of the law's text.
What this law does
Regulation 9(1)(e) requires an operator licensed by the Uganda Communications Commission to notify the Commission of any significant information or computer security threat or incident that comes to its attention during its ordinary course of business. Regulation 9(1)(f) requires an operator to provide the Commission with quarterly cyber security incident reports, information technology and systems risk assessment reports and any other information the Commission requests.
When LexLint raises it
When your app profile says your app provides telecom services.
Back to the example · Lint your app
Page updated .