New cybersecurity obligations are being established for owners of internet information resources in Azerbaijan, marking a significant step toward bolstering the nation's digital resilience.
According to the Operative Information Center-OMM, these measures are proposed through amendments to the Law on Information, Informatization, and Protection of Information. The draft legislation was reviewed during a recent session of the Milli Majlis (National Assembly) Committee on Human Rights.
The initiative is designed to improve the legal framework for information and cybersecurity, protect critical infrastructure from cyber threats, establish institutional mechanisms, and define the legal foundations for digital development. The proposed law introduces key terminology, including "cyber hygiene," "digital evidence," "digital investigation," and formal definitions for Computer Emergency Response Teams (CERT) and Security Operations Centers (SOC).
Under the new provisions, the rights and responsibilities of state bodies, information infrastructure entities, and CERT/SOC units are clearly defined. The legislation establishes mechanisms for detecting, preventing, investigating, and mitigating cyberattacks and incidents. Furthermore, it mandates cybersecurity monitoring and audits, facilitates information exchange regarding cyber incidents, and introduces a regulatory test environment for piloting digital solutions.
The legislation imposes specific new obligations on internet service providers, host providers, and owners of internet information resources, while simultaneously expanding the operational scope and authority of the National CERT. Officials noted that the adoption of this bill will enhance the effectiveness of the country's cybersecurity system, strengthen the stability of information infrastructure, and streamline digital development processes across Azerbaijan.
As Azerbaijan continues its rapid digital transformation, such legislative updates are essential to safeguarding national data and critical infrastructure against an increasingly complex global cyber threat landscape.
