Macao
3 regulators · 8 laws & regulations · 8 obligations
| Obligation | Timing | Regulator | Arises from | Source | Detail |
|---|---|---|---|---|---|
| Banking | |||||
| Cybersecurity incident reporting by critical infrastructure operators | Deadline No fixed time limit stated for ordinary incidents; immediate response for serious incidents | CARIC | Lei n.º 13/2019 Lei da Cibersegurança (Law 13/2019, Cybersecurity Law) | source | |
Art. 11 of Law 13/2019 requires private operators to inform CARIC of incidents and notify their supervisory entity, and to start response actions at once for serious incidents. Art. 12(2) requires an annual cybersecurity report to the supervisor listing recorded incidents. The duty also covers insurance, healthcare, telecommunications and casino gaming operators (Arts. 4-5). |
|||||
| No obligations match these filters. | |||||