Overview
On March 20th, Anatel released Official Document 100/2024, which addresses cybersecurity standards for Customer Premises Equipment (CPE) — a vital component of telecommunications infrastructure. Section 1.1 of the Annex to Act No. 2436/2023 outlines these standards, particularly focusing on CPE equipment designated for public use.
Importance of Standards
The term "general public" refers to individuals using or having access to the equipment without specialized technical knowledge in telecommunications. This distinction highlights the necessity for strong cybersecurity measures to protect users' data and privacy.
Clarification for Stakeholders
In response to these specified standards, ORCN aims to provide clarity to stakeholders involved in certifying such products. It is important to clarify that the standards described in Act No. 2436/2023 do not pertain to CPE equipment intended solely for corporate use. This separation ensures that regulatory compliance aligns with the intended purpose of equipment deployment, promoting clarity and compliance with industry standards.
Commitment to Compliance
By sharing this information, ORCN strives to enhance understanding and compliance within the telecommunications sector, advocating for cybersecurity best practices and safeguarding the integrity of CPE equipment used for public purposes.
Links
Regulatory Impact
| Impact Type | Status |
|---|---|
| Top Priority | |
| Type Certificate | |
| Spectrum Bands | |
| Import Changes (HS Codes) | |
| Standard Changes | |
| Product Changes | |
| Label Changes |