Act 2020
Cybersecurity Act, 2020 (Act 1038)
Issued by Cyber Security Authority
Plain-English summary
Establishes the Cyber Security Authority, requires owners of critical information infrastructure to report incidents within 24 hours (s. 39), and creates a licensing regime for cybersecurity service providers (ss. 49-56). Assented to on 29 December 2020.
Who it applies to
All industries
Topics
Cybersecurity & IT Risk
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Report cybersecurity incidents (critical information infrastructure owners) | Deadline Within 24 hours of detection | CSA | official | |
Section 39 requires owners of critical information infrastructure to report a cybersecurity incident within 24 hours of detection to the relevant sectoral CERT or, if none applies, the National CERT, and to arrange an audit of the infrastructure and send the report to the Authority. Section 47(5) separately requires any person in charge of an institution to report incidents within 24 hours. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.