Law No. 5651

Law No. 5651 and the Regulation on Internet Mass Use Providers

S3M supports the Law No. 5651 duties of mass use providers through SpotGate. It identifies each guest by SMS, OAuth, voucher or sponsor, ties every session to that identity, keeps guest traffic apart and stores session records for audits. The regulation asks for two-year access records; content filtering is outside S3M.

How S3M supports Law No. 5651

Applies to: Mass use providers: anyone who offers internet access at a set place, such as hotels, cafés, campuses and public Wi-Fi. Read the official text

Law No. 5651: articles and the S3M products that support them
Article / control What it asks How S3M supports it Products
Law Art. 7(2) Mass use providers take the measures set by regulation to keep access records and to block criminal content. SpotGate supports the access-record part by identifying each user and storing sessions. Content filtering is outside S3M.
Reg. Art. 3(1)(e) Access records cover internal IP assignments with start and end times, MAC address, target IP, and the real IP and port given to the user. SpotGate ties each guest session to a verified identity and device, so the access records name a known user.
Reg. Art. 4(1)(b) Store access records electronically for two years. SpotGate stores session records with their identity for audits; plan its storage for the two-year period.
Reg. Art. 4(1)(c) Providers in public areas set up systems that identify users, for example by SMS. SpotGate identifies each guest by SMS, OAuth, voucher or sponsor before granting access.

S3M supports these requirements with technical controls. This is not legal advice or a certification; confirm legal questions with your counsel.

Checked against the official text on .

Frequently asked questions

Who counts as a mass use provider under Law No. 5651?

Anyone who offers people internet access at a set place for a set time, such as hotels, cafés, campuses and public Wi-Fi operators. The duties are set out in the Regulation on Internet Mass Use Providers.

How long must access records be kept?

Two years, under Article 4(1)(b) of the 2017 regulation, which replaced the earlier one-year rule. Plan SpotGate storage for that period.

Does S3M filter content as the regulation asks?

No. The regulation also asks mass use providers to use a content filtering system. S3M does not provide filtering, so use your filtering tool alongside SpotGate.

Bring S3M to your market.

Distributors, resellers and MSSPs get margins, deal registration, sales and technical training, and marketing funds around a platform that replaces up to four access-control vendors.

Last updated