# AgentStall ZA Cyber Incident Reporting Obligations

> AgentStall ZA Cyber Incident Reporting Obligations is a paid API for AI agents from agentstall.nilesh-b54.workers.dev, paid per call via x402, $0.01/call, status unknown (last checked 2026-11-02).

Returns South African regulatory reporting obligations and deadlines triggered by a cyber security incident, based on organisation type, timing, and incident classification.

## Facts

- Endpoint: GET https://agentstall.nilesh-b54.workers.dev/v1/incident-reporting?utm_source=zero.xyz
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-11-02
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agentstall-za-cyber-incident-reporting-obligations-675dde58
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_r0Fvme8W-pRCvNj9PKQt4

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agentstall-za-cyber-incident-reporting-obligations-675dde58
```

Example prompt: We're a bank and we discovered a cyber breach this morning at 09:00 SAST on 2026-10-23, we classified it as material at 10:00 SAST — what South African regulatory bodies do we need to notify and by when?

## When to prefer this

Use this endpoint when you need to quickly determine South African regulatory notification obligations and deadlines following a cyber or data security incident, particularly for financial institutions (banks, insurers, mutual banks, FSCA-regulated entities) or any organisation subject to POPIA. Prefer this over general legal databases when you need structured, machine-readable obligation data tied to specific incident parameters rather than raw legislation text.

## Known failure modes

- Missing required 'input' body returns a validation error
- Invalid sector enum value returns a 400 error
- Unpaid call (no x402 payment) returns HTTP 402 with PAYMENT-REQUIRED header
- Invalid ISO 8601 datetime in aware_at or classified_at returns a parsing error
- Omitting aware_at when deadlines are time-sensitive means absolute SAST timestamps cannot be computed

## How this service works

Data breach and cyber incident reporting obligations in South Africa, Nigeria, Kenya, Egypt, Ghana, Morocco, Rwanda, Uganda, Tanzania, Mauritius and Botswana: which regulators and people must be notified, the legal deadline (such as 72 hours) and the computed due time from discovery. Covers POPIA and FSCA/PA rules in South Africa, NDPA and ngCERT in Nigeria, and Kenya's Data Protection Act. Triage guidance, not legal advice.

## Output

A JSON object containing an obligations array, each entry specifying the applicable law, the authority to notify, the human-readable reporting deadline, and (where calculable) the absolute SAST deadline timestamp. A separate notYetInForce array lists laws that are not yet operative but will apply in future.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [],
     "properties": {
      "role": {
       "type": "string",
       "description": "responsible_party (default) or operator (you process the data for someone else)"
      },
      "sector": {
       "type": "string",
       "description": "South Africa only. Organisation type: general (any private business), bank, mutual_bank, insurer, financial_other (other FSCA-regulated institutions covered by Joint Standard 1 of 2023 or 2 of 2024, e.g. market infrastructures, certain FSPs, pension funds), public_body, ecsp (electronic communications service provider). Default general"
      },
      "country": {
       "type": "string",
       "description": "Country code: ZA (default), NG, KE, EG, GH, MA, RW, UG, TZ, MU or BW"
      },
      "aware_at": {
       "type": "string",
       "description": "When you discovered the compromise (ISO 8601; no offset = UTC+2)"
      },
      "material": {
       "type": "string",
       "description": "Financial institutions: has the incident been classified as material? Omit if not yet assessed"
      },
      "jse_listed": {
       "type": "string",
       "description": "Is the organisation listed on the JSE? Default false"
      },
      "classified_at": {
       "type": "string",
       "description": "Financial institutions: when the incident was classified as material (ISO 8601)"
      },
      "personal_info": {
       "type": "string",
       "description": "Was personal information accessed or acquired by an unauthorised person? Omit if unknown"
      },
      "critical_infrastructure": {
       "type": "string",
       "description": "Outside South Africa: are you a designated critical / vital infrastructure operator? Omit if unknown"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "obligations": [
   {
    "law": "FSCA/PA Joint Standard 2 of 2024",
    "notify": "Prudential Authority (PA)",
    "deadline": "within 24 hours of classifying the incident as material",
    "dueAtSAST": "2026-10-23 11:00 SAST"
   },
   {
    "law": "POPIA section 22",
    "notify": "Information Regulator",
    "deadline": "as soon as reasonably possible"
   }
  ],
  "notYetInForce": [
   {
    "law": "Cybercrimes Act 19 of 2020, section 54"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agentstall-za-cyber-incident-reporting-obligations-675dde58/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agentstall.nilesh-b54.workers.dev](https://www.zero.xyz/host/agentstall.nilesh-b54.workers.dev/llms.txt)