Macao

Sets the regime for access to and exercise of insurance mediation by agents, brokers and salespersons, who must be licensed by the AMCM. It covers licensing, continuing training, suspension and cancellation, mediator and insurer duties, professional secrecy and administrative sanctions, and applies with adaptations to mediation linked to pension funds.

Excludes insurance mediation from the definition of insurance activity (Art. 2) and widens the monetary authority's supervisory powers, including special inspections, information requests, consolidated supervision of insurers' subsidiaries and cross-border cooperation (Art. 10). It sets minimum capital for insurers at MOP 30 million for general insurance and MOP 60 million for life insurance (Art. 17); existing insurers have 18 months to adjust to the capital and solvency margin rules (Art. 3). Published in Boletim Oficial No. 38 of 21 September 2020 and in force the day after publication (Art. 6).

Sets cybersecurity duties for public operators and for private operators of critical infrastructure in sectors including banking, finance and insurance, healthcare, telecommunications and casino gaming (Arts. 4-5). It creates the CARIC incident centre (Art. 6), coordinated by the Judiciary Police (Art. 8), requires operators to report incidents (Art. 11) and file annual reports (Art. 12), and sets administrative fines of up to MOP 5,000,000.

Amends Law 2/2006 (Arts. 3, 4, 6, 7, 8, 9) and Law 3/2006 on terrorism. It adds Article 5-A (banks to report account movements within 24 hours under judicial control), Article 5-B (confidentiality) and Articles 7-A to 7-E, among them Article 7-B: failing the duties in Articles 5-A, 5-B and 7 is an administrative offence with fines of MOP 10,000 to 500,000 for individuals and MOP 100,000 to 5,000,000 for legal persons. Republishes both amended laws as annexes. Published in Boletim Oficial No. 21 of 22 May 2017 and in force the day after publication (Art. 9).

Criminalises illegal access to computer systems (Art. 4), illegal interception (Art. 6), damage to data (Art. 7), system interference (Art. 8) and computer fraud (Art. 11), with higher penalties where public bodies' systems are involved (Art. 12). Legal persons can be fined or dissolved by court order (Art. 13). Published in Boletim Oficial No. 27 of 6 July 2009; it repeals Article 213 of the Penal Code (Art. 17).

Criminalises passive corruption (Art. 3, up to one year's imprisonment or a fine, with higher maxima for unfair competition or risk to health or safety) and active corruption (Art. 4) in the private sector. Prosecution generally needs a complaint (Art. 5), and the CCAC investigates and promotes preventive measures (Art. 7). The text does not address liability of legal persons.

Governs automated and manual processing of personal data. It requires a lawful basis such as unequivocal consent (Art. 6), gives data subjects information, access and objection rights (Arts. 10-12), imposes security duties (Arts. 15-16) and requires notification to, or prior authorisation from, the public authority (Arts. 21-22). The text contains no general data breach notification duty. Published in Boletim Oficial No. 34 of 22 August 2005 and in force 180 days after publication (Art. 46).

Establishes the Commission Against Corruption as an independent body and sets its functions (Art. 3): preventing corruption and fraud, investigating corruption and fraud by public officials and in elections, and acting as ombudsman. Articles 5-6 impose duties to cooperate and Article 15 requires an annual report.