Presidential Decree 195/26, of September 30, 2026, has approved the Regulation of the Cinema and Audiovisual Law, which implements the framework originally established by Law n.º 7/12, of January 18, 2012. Below is an outline of the new Regulation.

1. General Scope and Objectives

• Core Purpose: Regulates the principles, mechanisms, and rules governing the development, promotion, and protection of cinematographic and audiovisual activities in Angola.
• Applicability: Governs all production, distribution, exhibition, and broadcasting activities within national territory.
• Target Entities: Applies broadly to both individuals and corporate entities, across public and private sectors.
• Key Sectors Covered: Expands definitions to explicitly regulate digital games, animation works, independent producers, and video-on-demand (VOD) catalogs.

2. State Funding, Incentives, and International Co-Productions

• Financial Assistance: Establishes non-reimbursable financial support channeled through the Fundo Nacional do Cinema e do Audiovisual.
• State Counterparts: Supported productions grant the State the right to non-commercial exhibition for cultural and educational purposes.
• Targeted Incentives: Outlines distinct state programs focusing on new talent/first works, script writing, distribution, and internationalization.
• Tax and Filming Incentives: Offers fiscal incentives to attract foreign productions, positioning Angola as an international filming destination.

3. Licensing, Permits, and Operational Lifecycles

The Regulation segments compliance requirements into three distinct market phases:

• Production (Visto de Rodagem): All filming or recording on national territory requires a mandatory “Shooting Visa” issued by the regulatory agency. It requires detailed project data (scripts, budgets, insurance). Local authorities may facilitate site access, but security and emergency service coordination remain the producer’s responsibility.
• Distribution (Licença de Distribuição): Commercializing or renting content requires a distribution license. Distributors must maintain physical infrastructure for content storage and ensure commercial works are subtitled or dubbed in Portuguese.
• Exhibition (Registo de Exibidor): Movie theaters and exhibition spaces must secure formal registration before opening to the public. It mandates age rating displays on all promotional materials and strict adherence to content access timetables.

4. Special Sectorial Fees and Levies

• Commercial Advertising Fee: Commercial advertising displayed in cinemas, television broadcasts, or VOD platforms is subject to an exhibition tax borne exclusively by the advertiser.
• Pay-TV Operator Levy: Pay-TV operators must pay a fixed annual fee calculated per active user subscription.
• Distribution Fee: Commercial distributors must pay an annual distribution fee. Exemptions apply to certified educational, cultural, and animation content.

5. Mandatory Statistical Registration

• Statistical Enrollment: A mandatory census registry (Registo Estatístico) is established for production companies, post-production studios, technical equipment providers, and independent professionals.

6. Compliance, Enforcement, and Grace Periods

• Mandatory Insurance: Civil liability insurance is strictly mandatory for any production involving high-risk or hazardous filming conditions.
• Fines and Sanctions: General infractions face administrative fines ranging from 10 to 50 national minimum wages. The regulatory agency may also apply ancillary sanctions, such as a 2-year suspension of licenses or loss of state subsidies.
• Transition Timeline: Existing entities currently operating within the market are granted a strict 90-day grace period from the date of publication to fully conform their operations to the new rules.

Angola has officially published Law 9/26, of September 28, 2026 (Cybersecurity Law) which establishes a comprehensive legal framework for cybersecurity. It introduces strict compliance mandates, incident reporting duties, and significant financial penalties for public and private organizations operating within the country’s digital ecosystem.

Scope and Applicability

The law applies broadly to all natural and legal persons, public and private, who utilize Angolan cyberspace. Extraterritoriality applies if actions carried out outside of Angola are targeted at or affect the national cyberspace.

Key Covered Sectors and Entities

Specific security and registration duties are imposed on various digital and critical operators, including:

• Critical Infrastructure and Essential Services Operators (e.g., energy, transport, water, health, banking)
• Digital Service Providers (e.g., online marketplaces, search engines)
• Data Center and Cloud Computing Providers
• Electronic Communications and Cybersecurity Service Providers

Core Obligations for Businesses

• Mandatory Registration: All covered service providers must register with the National Cybersecurity Center (Centro Nacional de Cibersegurança).
• Technical and Organizational Security: Entities must adopt proactive risk management policies, robust access controls, encryption, business continuity/disaster recovery plans, and permanent systems monitoring.
• Internal Governance: High-risk operators are required to appoint a Cybersecurity Focal Point and establish an institutional Computer Security Incident Response Team (CSIRT).
• Mandatory Civil Liability Insurance: Data center providers are required to secure and maintain adequate insurance coverage against cyber risks and inform subscribers of the policy details.

Incident Notification Requirements

Organizations must immediately notify CERT.ao (the operational arm of the National Cybersecurity Center) and their respective sectorial CSIRTs of any cybersecurity incident carrying a significant impact. An incident is categorized as significant if it causes severe operational disruption, substantial financial loss, prolonged service unavailability, or triggers a personal data breach. Notifications must include the incident’s nature, estimated impact, and mitigation measures taken, followed by a detailed final resolution report.

Enforcement and Financial Sanctions

The National Cybersecurity Center holds the authority to supervise, audit, and penalize non-compliant entities. Violations are categorized under a three-tiered administrative offense system:

• Light Offenses: Such as the late submission of periodic reports. Corporate fines range between 70 and 150 national minimum wages.
• Grave Offenses: Such as failing to register the activity, neglecting to notify incidents, or failing to maintain an incident response plan. Corporate fines range between 300 and 500 national minimum wages.
• Very Grave Offenses: Such as failure to implement mandatory security requirements, falsifying audit reports, or obstructing inspections. Corporate fines range between 2,000 and 4,000 national minimum wages.
• Ancillary Penalties: Severe or repeated offenses can lead to a temporary suspension of activities or a ban on participating in public procurement contracts for up to 3 years.

Effective Date and Grace Period

The law entered into force immediately upon its publication on September 28, 2026. However, the statute grants a 180-day transitional grace period for all applicable entities to successfully finalize their mandatory operational registration with the National Cybersecurity Center.