Incident Details
Cybersecurity Regulations Require NGO Data Localization
Summary
New cybersecurity regulations require all NGOs to store data on local servers and provide government access upon request. The regulations cite national security concerns and protection against foreign interference as justifications.
Details
The Ministry of Information and Communications Technology issued new cybersecurity regulations that impact how NGOs manage and store data. Key provisions include:
1. Requirement for all NGOs to store beneficiary data, financial records, and program information on servers physically located within the country
2. Mandatory registration of all database systems with the National Cybersecurity Authority
3. Obligation to provide government authorities with access to data upon request for "national security purposes"
4. Prohibition on using encryption technologies not approved by the government
The regulations have raised significant concerns among civil society organizations, particularly those working on sensitive human rights issues or with vulnerable populations. Organizations have highlighted that the requirements could compromise the confidentiality of their data and put their beneficiaries at risk.
International digital rights organizations have criticized the regulations as disproportionate and potentially violating privacy rights. The government has defended the measures as necessary to protect national security and prevent foreign interference in domestic affairs.