Description

Adopted cybersecurity regulation for the telecommunications sector

The National Telecommunication Agency (ANATEL) approves the Cyber Security Regulation Applied to the Telecommunications Sector. The regulation aims to promote cybersecurity in telecommunication equipment, introducing obligations for providers to implement cybersecurity policies. In particular, the regulation establishes the principles to pursue cybersecurity measures, the minimum requirements for organizations' cyber security policy and notifications of relevant incidents, and the role of ANATEL and the "Cyber Security and Critical Infrastructure Risk Management Technical Group" in promoting cyber security.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2020-12-17
adopted

The National Telecommunication Agency (ANATEL) approves the Cyber Security Regulation Applied to th…

2021-01-04
in grace period

The Cyber Security Regulation Applied to the Telecommunications Sector enters into force with an ad…

2021-07-01
in force

The Cyber Security Regulation Applied to the Telecommunications Sector is implemented after giving …

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity infrastructure provider: internet and telecom services
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
telecommunication equipment: infrastructure: operate
Regulatory tool
Risk or other impact assessment requirement
Preventive security requirement
Regulator notification requirement
User notification requirement
Sanctions
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

telecommunication equipment: infrastructure: operate