Board Decision Establishing Regulatory Framework programs, and unlawful invasion into a computer information system and destruction of a computer information system's functionality, data, and application program. 12.2An Internet Café Service Provider and its customers cannot use the Internet Café to produce, download, duplicate, review, disseminate or otherwise use prohibited information, the scope of which in general conforms to the scope of the information that is prohibited from being produced, duplicated, publicized or disseminated through the telecommunications network. 12.3Internet Cafes must post a sign board stating that "Cyber Crimes (Hacking, Virus Distribution, Port scanning and etc.) and acts against Rwanda culture are prohibited" 12.4An Internet Café Service Provider must obtain an Internet connection from licensed Internet connection service providers (ISPs). The computers provided for customer use must be connected to the Internet via a local network only, not directly linked to the Internet. 12.5Internet Café Service Provider should procure licensed Anti-Virus package for all the machines installed in the Café. All the computers should be installed with the licensed Anti-Virus package that should be updated every day. All the computers should be fully scanned everyday through the Anti-Virus package installed in it. 12.6Internet Café Service Provider should use UPS for power backups to all computers connected to his Local Area Network in order to protect data for customers when electricity goes off. ARTICLE 13: INTELLECTUAL PROPERTY All the software installed in the computers in the Internet Cafe are expected to have proper license. Otherwise only open source software should be installed for the use by customers. ARTICLE 14: BILLING Internet Cafés are required to set the price for their customers based on their connection speed, facilities in the café etc. The billing should be appropriate for the services provided by Cyber Café and should be displayed at the entrance. The price set should be transparent for different time periods starting from minimum (eg: 10 Minutes). CHAPTER IV: PROVISIONS ON REPORTING AND ENFORCEMENT ARTICLE 15: REPORTING Any Internet Café authorized under this Decision shall provide statistics information on quarterly basis pursuant to the format to be provided by RURA. For Operation of Internet Café in Rwanda Page 5 of 6

Select target paragraph3