Implementing Regulations of the Telecommunications and Information Technology Law

1. To fulfill the purposes of the Law, CST shall issue regulations related to the governance and management of user data and information and other data and information related to the telecommunications and information technology service. These shall include regulations related to protecting, processing, sharing, developing, classifying or preserving such data and information, and monitoring compliance with their provisions. 2. The service provider shall be responsible for the information, data and confidentiality of the user,s communications, as well as his communications that are in the possession or under the control of the service provider or any of the service provider agents. 3. The service provider shall operate its telecommunications systems and network and shall observe user privacy and confidentiality of communications. The service provider shall not collect, process, or disclose the user’s information or communications for any purpose whatsoever, without the user,s consent, except as permitted by the relevant laws and instructions. 4. The service provider shall determine the purposes for which user information is collected prior to or during collection thereof; he shall not collect or use user information for purposes other than the disclosed ones. 5. The service provider shall ensure that user,s information is correct, accurate and updated to achieve the purposes for which it will be used, and that the user’s information and communications are protected by means and methods commensurate with their sensitivity. Implementing Regulations of the Telecommunications & Information Technology Law Chapter VII : Protection of User Information, Confidential Communications & Classified Documents