Andorra Social Democrats Submit 15 Amendments to Bolster Cybersecurity Law

Andorra's social democratic parliamentary group (GPS/PS) has submitted 15 amendments to the proposed revisions of the cybersecurity law, seeking to strengthen digital protections with a focus on proportionality and legal certainty.

General Council member Laia Moliné presented the proposals on Tuesday, stressing the need for precise rules that uphold technological neutrality and avoid undue burdens on individuals and businesses. According to a GPS/PS press release reported by Diari d'Andorra, the changes aim to enhance cybersecurity for networks and information systems while ensuring tailored obligations.

Among the key measures, critical entities would need to maintain a Security Operations Centre (SOC), either in-house or through an external specialist. The amendments eliminate the requirement for data to be hosted solely in Andorra, permitting overseas storage if comparable safeguards and oversight are in place.

Provisions would limit monitoring and data sharing to cybersecurity necessities, shielding personal information, private communications, and commercial secrets. Incident reporting requirements would target only those entities typically exempt, avoiding overly sweeping mandates and associated fines.

The group calls for stricter controls on extraordinary cybersecurity actions, requiring them to be essential, balanced, temporary, and substantiated. For penalties, the proposals insist on principles of legality, fault, proportionality, and upheld judicial oversight, including credits for voluntary disclosures.

Major duties and sanctions, the GPS/PS argues, should stem from statutes or regulations rather than technical standards or instructions. The amendments align with European cybersecurity frameworks and institutions, prioritising confidentiality, data protection, independence, and Andorran interests. Implementation would proceed in stages, with options for extensions, technical assistance, and consultations across sectors.