Macau. Cybersecurity. Law
Macau Cybersecurity LawCybersecurity Law (Law No. 13/2019)
In force
Partly verified
Low confidence.Law number and commencement date from general knowledge; source only confirms a 2019 Cybersecurity Law with CI incident reporting. [Link: official Portuguese/Chinese (Boletim Oficial 2019/25); no official English found; authority = Judiciary Police (runs CARIC)]
§1Summary
- Synopsis
Sets security and incident-reporting duties for operators of critical infrastructure in Macau. Incidents must be notified to CARIC and the sector regulator.
- Key themes
- Unique features
Breach-reporting duty exists only for CI operators, filling a gap in the PDPA.
- SaaS relevance
Relevant to SaaS vendors whose customers are Macau CI operators.
§2Obligations
- Breach notification
- CI operators notify CARIC and regulator
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text images.io.gov.mo
- Authority
- Cybersecurity Incident Alert and Response Center (CARIC) / Cybersecurity Committee
§5Where it applies
- Domestic law of
- Macau
§6Sources and verification
- Sources consulted
- Verification
Low confidence.
Partly verified
Low confidence.Law number and commencement date from general knowledge; source only confirms a 2019 Cybersecurity Law with CI incident reporting. [Link: official Portuguese/Chinese (Boletim Oficial 2019/25); no official English found; authority = Judiciary Police (runs CARIC)]