{"uid":"cap_r0Fvme8W-pRCvNj9PKQt4","slug":"agentstall-za-cyber-incident-reporting-obligations-675dde58","name":"AgentStall ZA Cyber Incident Reporting Obligations","description":"Data breach and cyber incident reporting obligations in South Africa, Nigeria, Kenya, Egypt, Ghana, Morocco, Rwanda, Uganda, Tanzania, Mauritius and Botswana: which regulators and people must be notified, the legal deadline (such as 72 hours) and the computed due time from discovery. Covers POPIA and FSCA/PA rules in South Africa, NDPA and ngCERT in Nigeria, and Kenya's Data Protection Act. Triage guidance, not legal advice.","url":"https://agentstall.nilesh-b54.workers.dev/v1/incident-reporting?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":[],"properties":{"role":{"type":"string","description":"responsible_party (default) or operator (you process the data for someone else)"},"sector":{"type":"string","description":"South Africa only. Organisation type: general (any private business), bank, mutual_bank, insurer, financial_other (other FSCA-regulated institutions covered by Joint Standard 1 of 2023 or 2 of 2024, e.g. market infrastructures, certain FSPs, pension funds), public_body, ecsp (electronic communications service provider). Default general"},"country":{"type":"string","description":"Country code: ZA (default), NG, KE, EG, GH, MA, RW, UG, TZ, MU or BW"},"aware_at":{"type":"string","description":"When you discovered the compromise (ISO 8601; no offset = UTC+2)"},"material":{"type":"string","description":"Financial institutions: has the incident been classified as material? Omit if not yet assessed"},"jse_listed":{"type":"string","description":"Is the organisation listed on the JSE? Default false"},"classified_at":{"type":"string","description":"Financial institutions: when the incident was classified as material (ISO 8601)"},"personal_info":{"type":"string","description":"Was personal information accessed or acquired by an unauthorised person? Omit if unknown"},"critical_infrastructure":{"type":"string","description":"Outside South Africa: are you a designated critical / vital infrastructure operator? Omit if unknown"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"obligations":[{"law":"FSCA/PA Joint Standard 2 of 2024","notify":"Prudential Authority (PA)","deadline":"within 24 hours of classifying the incident as material","dueAtSAST":"2026-10-23 11:00 SAST"},{"law":"POPIA section 22","notify":"Information Regulator","deadline":"as soon as reasonably possible"}],"notYetInForce":[{"law":"Cybercrimes Act 19 of 2020, section 54"}]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.01","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.01/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.01","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_LQfufTShjdNN1882gH3qI","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.01","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns South African regulatory reporting obligations and deadlines triggered by a cyber security incident, based on organisation type, timing, and incident classification.","exampleAgentPrompt":"We're a bank and we discovered a cyber breach this morning at 09:00 SAST on 2026-10-23, we classified it as material at 10:00 SAST — what South African regulatory bodies do we need to notify and by when?","exampleUseCases":[{"title":"Bank material incident reporting deadlines","prompt":"We're a bank and discovered a cyber incident at 09:00 SAST today, 2026-10-23, and classified it as material at 10:00 SAST — what South African authorities do we need to notify, under which laws, and what are the exact deadlines?"},{"title":"POPIA breach notification for general business","prompt":"Our company (general private business) found out this morning at 08:30 SAST on 2026-10-23 that personal information was accessed by an unauthorised person — what are our obligations under POPIA and who do we need to report to?"},{"title":"JSE-listed insurer incident obligations","prompt":"I work for a JSE-listed insurer. We discovered a cyber breach at 2026-10-22T14:00 SAST and haven't classified materiality yet — what cyber incident reporting obligations apply to us under South African law?"}],"resultDescription":"A JSON object containing an obligations array, each entry specifying the applicable law, the authority to notify, the human-readable reporting deadline, and (where calculable) the absolute SAST deadline timestamp. A separate notYetInForce array lists laws that are not yet operative but will apply in future.","failureModes":["Missing required 'input' body returns a validation error","Invalid sector enum value returns a 400 error","Unpaid call (no x402 payment) returns HTTP 402 with PAYMENT-REQUIRED header","Invalid ISO 8601 datetime in aware_at or classified_at returns a parsing error","Omitting aware_at when deadlines are time-sensitive means absolute SAST timestamps cannot be computed"],"whenToPreferThis":"Use this endpoint when you need to quickly determine South African regulatory notification obligations and deadlines following a cyber or data security incident, particularly for financial institutions (banks, insurers, mutual banks, FSCA-regulated entities) or any organisation subject to POPIA. Prefer this over general legal databases when you need structured, machine-readable obligation data tied to specific incident parameters rather than raw legislation text.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-11-02T00:36:30.433Z","isFirstParty":false,"canonicalSlug":"agentstall-za-cyber-incident-reporting-obligations-675dde58"}