Page 73 - 41st Summit Brochure

Model Law. Member States are at different invited to submit an Expression of Interest
levels of transposing the SADC Harmonized (EoI) to host the SR-CIRT by 30 September
Cybersecurity Legal and Regulatory 2021, and the SADC Guidelines for the EoI
Framework. were shared.
All Member States have either The remaining Member States (Angola,
transposed the SADC e-Commerce/ e- Comoros, DRC, Eswatini, Lesotho,
Transaction and Cybercrime Model Laws or Madagascar, Mozambique, Namibia,
have an existing legal framework in place. Seychelles and Zimbabwe) resolved to have
A total of eight Member States have put into operational CIRTs by December 2021 as per
place laws on data protection. These are the SADC Regional CIRT Roadmap.
Angola, Botswana, Lesotho, Madagascar,
Malawi, Mauritius, Seychelles and South SADC ICT Observatory
Africa. The SADC ICT Observatory is one of the
Five Member States (Lesotho, RIDMP flagship projects whose objective is
Madagascar, Malawi, Mauritius and South to become a central point of reference for
Africa) have appointed an independent reliable, accurate and up-to-date collection
Data Protection Authority (DPA), while six and dissemination of ICT indicators,
Member States (Comoros, Eswatini, measurement, benchmarking and reports.
Namibia, Tanzania, Zambia, and The ICT Indicators Collection Set for 2020
Zimbabwe) have official data privacy bills to was validated by Member States during the
be enacted soon. SADC ICT Observatory Workshop held in
The DRC and Mozambique are without June 2020.
explicit Data Protection legislation or An assessment Report on the
constitutional protection. Plans are to Domestication of SADC Model Policy and
review the SADC Data Protection Model Regulatory Instruments as a Risk Treatment
Law and align it with current international Action Plan 2020/21 has been prepared. The 71
best practices and principles such as the EU assessment measured the level of
General Data Protection Regulation domestication with regards to Infrastructure
(GDPR) of 2018. An Action Plan has been Sharing, Universal Access, Competition in
developed for this review process. Local Loop Telecoms, and Competition in
The SADC Regional Cyber Incidence ISP Market, Policy on Broadband and Cyber
Response Team (SR-CIRT) will be a regional Security Laws and National CIRT.
collaboration platform to strengthen the Based on the 14 Member States
regional cybersecurity awareness, (excluding the DRC and Madagascar) that
confidence, ability and speed of response to participated in the survey, the overall
computer security incidents. The SADC average performance level of domestication
Regional CIRT workshop was convened in of SADC ICT Model Policy and Regulatory
February 2021 to operationalize the instrument and structures is 76 percent.
Framework for the establishment of the The SADC Secretariat will continue to
SADC Regional CIRT. assist Member States to address challenges in
The Governance Structures (Steering the domestication process. A SADC Model
Committee, Technical Working Groups and Memorandum of Understanding (MoU)
Host of SR-CIRT) were established and the for National Statistics Office (NSO),
composition and leadership of these National Regulatory Authority (NRA)
structures was constituted. Six Member or the Ministry as a collaborative
States (Botswana, Malawi, Mauritius, South framework for Member States has been
Africa Tanzania and Zambia) have fully developed and its domestication has
operational CIRTs and have been formally commenced.