APD Guidelines For Reporting Cybersecurity Accidents And Incidents

On 14 November, the Angolan Data Protection Agency (Agência de Protecção de Dados - "APD") published guidelines on the obligation of public and private organisations to report Cybersecurity accidents and incidents to the APD. The guidelines were published in Circular 2 of 25 October 2024.

In this Circular, the APD instructs public and private entities that process personal data to "scrupulously" comply with the rules contained in (i) the Law on the Protection of Personal Data (Lei da Protecção de Dados Pessoais - "LPDP"), (ii) the Law on Electronic Communications and Services of the Information Society (Lei das Comunicações Electrónicas e dos Serviços da Sociedade da Informação - "LCE") and (iii) the Law on the Protection of Networks and Computer Systems (Lei de Protecção de Redes e Sistemas Informáticos - "LRSI"), regarding the notification of computer accidents and incidents.