INFORMATION TECHNOLOGY PRODUCTS SECURITY CLEARANCE AND CONTROL PROCLAMATION NO. 1310/2023: WHAT STAKEHOLDERS SHOULD KNOW

Ethiopia's digital transformation has accelerated the adoption of information technology across government institutions, businesses, financial services, and everyday commercial activities. As technology increasingly underpins critical infrastructure and economic development, the need for a legal framework capable of safeguarding national information security has become equally important.

Against this background, Ethiopia enacted the Information Technology Products Security Clearance and Control Proclamation No. 1310/2023, which entered into force on 6 March 2024. While the Proclamation has been in effect for some time, it continues to carry significant practical implications for importers, technology companies, manufacturers, software developers, businesses, and users of information technology products. Nevertheless, many organizations remain unfamiliar with the breadth of its application and the compliance obligations it imposes.

This article revisits the key features of the Proclamation and highlights the principal issues that stakeholders should understand when engaging in activities involving information technology products in Ethiopia.

The Proclamation establishes a legal framework for regulating information technology products that may pose risks to Ethiopia's information security. It seeks to protect national information infrastructure from technological threats by introducing a system for identifying products that present security concerns and regulating their manufacture, importation, exportation, distribution, possession, and use.

To achieve these objectives, the law empowers the Information Network Security Administration (INSA) to identify prohibited and restricted products, issue security clearance permits, supervise regulated activities, and enforce compliance through inspections and other regulatory measures. Please read the full details from the attachement.