Dear Linda,
Thanks for sharing your insights. I agree with you on the need to review our penalties in the CMCA as imposing higher and more stringent penalties for cybercrimes will act as a powerful deterrent, discouraging potential criminals from engaging in such activities due to the increased risk of severe consequences. But this begs the questions, which other listers can chip in, i.e.:
1. How high a penalty do you think will suffice?
2. How do we accurately compute the enhanced penalties which we so need?
For example:
S.31 on cyber terrorism has penalties of up to 10 years imprisonment, a fine of Kshs. 5 million or both.
S.21 on cyber espionage has penalties of up to 20 years imprisonment, a fine of Kshs. 10 million or both.
Then there is S.19 pertaining to unauthorized disclosure of passwords or access codes which has penalties of up to 3 years imprisonment or a fine of Kshs. 5 million or both.
And yet with GOK embracing e-governance, with over 14,000 services uploaded on E-Citizen with a target total of 21,000 services, with the private sector also embracing digital transformation the unauthorized disclosure of passwords and access codes can have serious socio-economic and national security repercussions to our Republic.
Remember the Colonial Pipeline cyberattack that brought gas and fuel supplies to most of the East Coast of the USA was due to one compromised password.
Stay happy,
Mutheu.
