Service providers to be required to comply with network and IT system security measures

Chisinau, April 28 /MOLDPRES/- The promulgation decree and the Cyber Security Law were published in the Official Journal. The document sees that legal entities under public law and certain service providers will be obliged to comply with network and IT system security measures, in order to protect from cyber attacks.

According to the Cyber Security Law, a competent cyber security authority will be appointed to identify and supervise service providers to ensure an adequate level of network and IT system security. Service providers will be identified based on several criteria. Among them are those who provide a service dependent on a network or computer system, the disruption of which could have a significant impact on public order, public security or public health. These providers will also be required to report significant cyber incidents.

This law enters into force on January 1, 2025. The Government, within 6 months from the date of publication, will present proposals to the Parliament regarding bringing the normative acts in line with this law. 

The competent authority, within 3 months from the date of entry into force of the approved normative acts, will identify the service providers, notify them in the established manner and include them in the List of service providers, drawn up under the terms of this law; will approve the normative acts necessary to implement the provisions of this law.

Source: monitorul.gov.md