2023 Laws not yet authenticated through a Commencement Order

Revised Laws of Saint Lucia (2023)

1.   Citation

These Regulations may be cited as the Telecommunications (Confidentiality in Network and Services) Regulations.

2.   Interpretation

In these Regulations:

Act” means the Telecommunications Act;

authorised request” means a request received from the recipient of a transmission;

Minister” means the Minister responsible for Telecommunications;

subscriber personal information” means information of a personal nature relating to a telecommunications subscriber that discloses the address, marital status, financial status, occupation or other identifying information that is unrelated or incidental to the provision of telecommunications services;

subscriber proprietary network information” means information that relates to the quantity, technical configuration, type, destination, and amount of use of a telecommunications service subscribed to by any subscriber of a telecommunications provider, and that is made available to the telecommunications provider by the subscriber solely, by virtue of the customer-provider relationship.

PART 2
INTERCEPTION MONITORING STOPPAGE

3.   Activation of intercepted communication

A telecommunications provider shall ensure that any interception of communications within its network is capable of being activated only when authorised by the receiver of a transmission, or in accordance with a court order.

4.   Strict measures of control

A telecommunications provider shall—

  1.  

    (a)     appoint a senior employee or officer with the responsibility for ensuring that the interception of communications can be activated only when authorised by the receiver or in accordance with a court order; and

  1.  

    (b)     authorise designated employees or officers to engage where necessary in lawful interception activities.

5.   Court order

A telecommunications provider shall not implement any interception of transmissions over a public telecommunications network or telecommunications apparatus unless the telecommunications provider receives a court order authorising law enforcement officials to intercept transmissions over the public telecommunications network or apparatus.

6.   Officials to act within strict guidelines

A telecommunications provider shall ensure that any employee or officer that it appoints under regulation 5 only effects interceptions that are authorised and except to a person who has made an authorised request or when authorised by a court order to a law enforcement official.

7.   Employee to execute agreement

  1.  

    (1)   An employee of a telecommunications provider who is designated and authorised to receive and implement interception orders, or certifications, shall execute a non-disclosure agreement which shall be kept as part of that employee's permanent records.

  1.  

    (2)   The terms of the agreement referred to in subregulation (1) shall survive any reassignment of the employee to other duties, or the termination or departure of the employee from the employment of the telecommunications provider.

8.   Report of improper activities

  1.  

    (1)   A telecommunications provider shall report to law enforcement officials without delay any act—

    1.  

      (a)     of unlawful electronic surveillance that has occurred on its premises; and

    1.  

      (b)     which compromises the duty to report once the provider becomes aware.

  1.  

    (2)   A telecommunications provider shall report to law enforcement officials without delay any transmission which is accepted and appears likely to threaten the national security or is contrary to public order.

9.   Employee's suspension of duties Pending investigation

  1.  

    (1)   Where there are reasonable grounds to suspect that an employee of a telecommunications provider is about to engage or may have engaged in illegal surveillance activity, that employee shall be reassigned to other duties or suspended pending the outcome of an investigation.

  1.  

    (2)   An employee who has been reassigned or suspended shall not be allowed to have access to any equipment whereby proper investigations may be compromised.

10.   Accurate records of interception

  1.  

    (1)   A telecommunications provider shall maintain accurate, complete and secure records of any interception of communications.

  1.  

    (2)   Records of any interception of communication shall include the—

    1.  

      (a)     court order;

    1.  

      (b)     identity of the law enforcement officer who presented the court order;

    1.  

      (c)     name and signature of the telecommunications provider's employee responsible for overseeing the interception of the communications;

    1.  

      (d)     start date and time of the interception;

    1.  

      (e)     telephone and circuit identification number or numbers involved; and

    1.  

      (f)     telegraphic, facsimile, telephonic or any other such type of communication.

  1.  

    (3)   The records of interception shall be compiled either contemporaneously, or within a reasonable period of time following the initiation of the interception of the communications and such period shall not exceed 90 days.

  1.  

    (4)   A telecommunications provider shall maintain a record of all intercepted communications for a period of 6 years.

11.   Reporting obligations to commission

  1.  

    (1)   A telecommunications provider shall report to the Commission on a quarterly basis any—

    1.  

      (a)     compromises or suspected compromises of interceptions; and

    1.  

      (b)     violation of its security policies and procedures.

  1.  

    (2)   A telecommunications provider shall be obligated to report to the Commission without delay any violation or compromise relating to subscriber's—

    1.  

      (a)     personal information; or

    1.  

      (b)     proprietary network information.

12.   No acceptance of dangerous transmission

A telecommunications provider shall not accept any form of transmission which appears likely to threaten the national security or is contrary to public order in Saint Lucia.

PART 3
NON-INTERCEPTION OF TRANSMISSION BY MEMBERS OF THE PUBLIC

13.   No interception by members of public

Any member of the public, including a radio amateur using radio equipment or modified commercial equipment, shall not intercept or interrupt any message transmitted over a public telecommunications network or telecommunications apparatus.

14.   Reporting obligation on illegal activity

Where there are reasonable grounds to suspect that a member of the public is about to or is in the process of engaging in illegal surveillance activity, the telecommunications provider or any concerned party shall report the activity to law enforcement officials without delay.

15.   Reporting obligation on actual illegal activity

A telecommunications provider shall be obliged to report to the Commission and law enforcement officials without delay any act of unlawful electronic surveillance that has occurred on its premises by an unauthorised member of the public.

PART 4
CONFIDENTIALITY IN RESPECT OF SUBSCRIBER

16.   Strict control measures

A telecommunications provider shall establish policies and procedures to facilitate the strictest supervision and control of its employees or officers who have or might have access to subscriber personal information or subscriber proprietary network information.

17.   Employee to execute agreement

  1.  

    (1)   An employee of a telecommunications provider who has access to subscriber personal information or subscriber proprietary network information shall execute a non-disclosure agreement which shall be kept as part of that employee's permanent records.

  1.  

    (2)   The terms of the agreement referred to in subregulation (1) shall survive any reassignment of the employee to other duties or the termination or departure of the employee from the employment of the telecommunications provider.

18.   Confidentiality of subscriber

The subscriber's personal information or subscriber's proprietary network information is confidential information, and shall not be disclosed by an employee or officer of a telecommunications provider without the consent of the subscriber or under a court order.

19.   Permission to be first obtained

A telecommunications provider or publisher of subscriber and lists directories must first obtain the consent of a subscriber before listing the subscriber's personal information in a telephone directory.

20.   Grounds for disclosure of proprietary network information

A telecommunications provider may use or disclose subscriber proprietary network information only if it is necessary to—

  1.  

    (a)     protect users of those services and other telecommunications providers from fraudulent, abusive, unlawful use of, or subscription to such services; or

  1.  

    (b)     provide the telecommunications services to which the proprietary customer has subscribed.