The Ministry of Communication and Information Technology (MoCIT) has issued a new directive for the operation and management of data centers and cloud services in Nepal. Approved by Communication Minister Prithvi Subba Gurung on Magh 15, 2081, the directive outlines critical regulations for service providers, covering areas such as safety, privacy, and infrastructure.
Service providers must be registered with the Department of Information and Technology (DoIT) before offering services. They are required to submit various documents, including company registration and building construction certificates, and ensure fire safety measures. A privacy policy and business continuity plan must also be in place. Additionally, companies must submit a location map of their data center, details about their tiers, and technical personnel responsible for operations.
Firms need the necessary infrastructure to run data centers, such as network equipment (firewalls, routers, switches), server and storage devices, and HVAC systems. If they do not own their building, a lease agreement with the property owner must be submitted. Furthermore, data security certifications are mandatory.
Existing operators must apply for listing within six months, with separate listings required for those offering both data center and cloud services.
For government-related services, operators are mandated to use services from the Integrated Data Management Center (IDMC), although security agencies are exempt. Government service providers not using government data centers must migrate, with exceptions granted for valid reasons. Operators must ensure full security, reporting any unauthorized access to regulatory bodies, and comply with international standards. They must also conduct annual security audits.
The directive ensures that only registered service providers offer data center and cloud services to customers, protecting customer rights and ensuring service providers adhere to required standards.
This directive establishes essential guidelines and safety protocols to regulate the growing commercial data center and cloud service market in Nepal, marking a significant step toward ensuring secure and reliable service management.
