On 16 August 2023, Resolutions 3_BR/INCM/2023 and 4_BR/INCM/2023 were published which create the Technical Standards for the Registration of Telecommunications Service Subscribers and the Technical Standards for the Operation of the Risk Centre, respectively.

These approvals arise due to the necessity of regulating the procedures and steps to be observed by operators and service providers based on telecommunications networks, in order to provide a quality service and, at the same time, guarantee the security and privacy of subscriber's data.

1.    Technical Standards for the Registration of Telecommunications Service Subscribers

The Resolution no. 3_BR/INCM/2023 aims to describe a set of procedures and steps required to be observed by operators and providers of services based on telecommunications networks within the scope of the regulation on the registration of subscribers to telecommunications services.

1.2.    Registration process

The process of registering subscribers to telecommunications services comprises the following stages:

1.2.1.    Subscriber Registration and Activation:

 

• Assignment of NUTEL Management;

• Subscriber data sharing;

1.2.2.    Service activation;

1.2.3.    Registration of a subscriber in Roaming;

1.2.4.    Replacement of Subscriber Identification Modules: SIM-SWAP;

1.2.5.    Device Registration and Activation:

 

• Automatic Registration on Mobile and IP Networks;

• Manual Device Registration and Activation;

1.2.6.    Agent Registration and Activation;

1.2.7.    Form and means of registration:

​

• Forms;

• Means of recording;

• Data formatting.

1.3.    Data Validation Process;

1.4.    Data Storage;

2.    Television Services Subscriber Register

The subscribers of television services, due to their lower risk of fraud given their uni-directional nature (signal receiver only), have so far been allowed temporary registration without the use of biometrics in cases where the subscriber has not yet registered with B-PIN, while safeguarding the principles and requirements established in the Decree.
However, in cases where the subscriber is already registered with B-PIN (NUTEL), registration must be performed in accordance with the procedures outlined in this document, in particular, the subscriber must be validated.

3.    Technical standards for the operation of the Risk Centre

The Resolution no. 4_BR/INCM/2023 describes the set of necessary steps that must be observed by operators and providers of services based on telecommunications networks in the context of risk assessment.

3.1.    Operation of the Risk Centre

In their activities, operators and providers of services based on telecommunications networks must consider the following:

3.1.1.    Blocking procedure:

i.    Blocking of a Detected or Reported Number that is on the Operator's Network generating on-net traffic, data or international traffic terminating on the same Operator;
ii.    Blocking of a Detected or Reported Number that is on Another Operator's Network generating off-net, data or international traffic terminating on the same operator;
iii.        Blocking a Fraudulent Number or Subscriber by Instruction of the Regulator or Competent Authorities;
iv.    Blocking a Fraudulent Terminal;
v.    Blocking Fraudulent Agents.

3.1.2.    Block Instruction:

All operators must establish a mechanism for receiving alerts to block the objects provided for in the Regulation when they come from the Regulator or another operator in accordance with the provisions of this document.

3.1.3.    Procedure for Unlocking:

The instructions for unblocking are provided by the Regulatory Authority (INCM) to all operators.

3.2.    Portal for enquiries

The Regulatory Authority must establish a public portal for consultations of:

i.    Approved terminals/devices;
ii.    Terminal/device status (active or blocked);
iii.    Subscriber status (active or deactivated/blocked); and
iv.    Agent status (active or deactivated).

3.3.    Data validation

 

The data validation process involves the verification of objects, whether or not they are listed in the Risk Centre. For this purpose, the following procedures must be followed:

i.    Submitting the validation request; and
ii.    Once the response to the validation request has been received, the Operator or Service Provider must take the decisions it deems appropriate and provided for in the respective legislation.

3.4.    Fees at the Risk Centre

The fees for the Risk Centre are as follows:

i.    Fees for consultation with the Risk Centre, levied on each consultation, in accordance with the Decree;
ii.    There are no fees for registering blocking situations in the Risk Centre;
iii.    There are no fees for receiving blocking alerts sent by the Regulator to Operators;
iv.    Fees are paid on a pay-as-you-go basis or by provisioning, according to the consultation needs of each Operator or Service Provider.

 

4.    Entry into force of legislation

The Resolutions no. 3_BR/INCM/2023 and no. 4_BR/INCM/2023 entered into force on the date of their publication, i.e. on 16 August 2023

 

*    *    *

For more information, please contact us at maputo@jlaadvogados.com.