In the digital era, maintaining the authenticity and integrity of electronic data is critical. The Cybercrime Code Act 2016 (No 35 of 2016) of Papua New Guinea addresses various cyber offences, including electronic forgery, under Part III, Division 2, which focuses on computer related offences. Section 13 of this Act provides detailed provisions on electronic forgery.
What is Electronic Forgery?
Electronic forgery, as defined by Section 13 of the Cybercrime Code Act 2016, involves intentionally manipulating electronic data or interfering with electronic systems without lawful excuse or justification. This manipulation aims to create or generate inauthentic data, which may be considered or acted upon for lawful purposes as if it were authentic. The key actions constituting electronic forgery include:
- Inputting, altering, deleting, or suppressing electronic data.
- Interfering with the functioning of an electronic system or device.
What Does “Electronic Data” Mean?
“Electronic data” refers to information that is stored, processed, or transmitted in a digital format using electronic devices or systems. This term encompasses a wide range of digital content, including text files, images, videos, databases, emails, and any other information that can be encoded digitally.
In the context of cybersecurity and laws like the Cybercrime Code Act 2016, “electronic data” is crucial as it represents the primary target of many cyber offences, such as hacking, data theft, and unauthorized access. Protecting electronic data is essential for maintaining privacy, security, and the integrity of digital operations.
Understanding the term “electronic data” is vital for grasping the full scope of cybersecurity measures and legal protections in place to safeguard our digital information.
What is an Electronic System?
According to the Cybercrime Code Act 2016, an “electronic system” refers to a setup of hardware or software that can work automatically without human intervention. This system includes interconnected devices or systems that can process, generate, send, receive, or store data. Examples of electronic systems include computers, smartphones, the internet, and data storage facilities. Essentially, any technology that handles data automatically, from input to storage, falls under this definition. Understanding this term is crucial for navigating cybersecurity laws and protecting digital information.
Understanding Electronic Forgery: Two Real-World Examples
Electronic forgery involves creating or altering electronic documents or data to deceive others. Here are two examples:
Fake Digital Signatures: An individual forges digital signatures on electronic contracts to gain unauthorized access to confidential information or financial benefits. By using sophisticated software, the fraudster replicates the signatures of company executives, making the documents appear authentic. This deception can lead to significant financial losses and legal complications. Such actions are a violation of the Cybercrime Code Act 2016, which penalizes electronic forgery.
Manipulated Financial Statements: A company employee alters electronic financial statements to hide losses and inflate profits, making the business appear more profitable than it actually is. These forged documents are then submitted to investors and regulatory authorities, leading to misguided investments and regulatory breaches. This form of electronic forgery undermines trust and integrity in financial reporting and is strictly prohibited under the Cybercrime Code Act 2016.
Penalties for Electronic Forgery
The Act imposes severe penalties for those found guilty of electronic forgery, with different penalties for general forgery and conspiracy or attempts to commit forgery.
- General Electronic Forgery: For natural persons: A fine not exceeding K100,000.00 or imprisonment for a term not exceeding 25 years, or both. For bodies corporate: A fine not exceeding K1,000,000.00.
- Conspiracy or Attempt to Commit Electronic Forgery: For natural persons: A fine not exceeding K15,000.00 or imprisonment for a term not exceeding 15 years, or both. For bodies corporate: A fine not exceeding K500,000.00.
Implications of Electronic Forgery
The stringent penalties outlined in Section 13 highlight the seriousness with which Papua New Guinea treats electronic forgery. Such activities can lead to significant breaches of trust, legal issues, and financial losses. The legislation aims to deter such fraudulent activities by imposing heavy fines and long prison terms.
Protecting Against Electronic Forgery
Given the severe penalties and the potential impacts of electronic forgery, it is crucial to adopt comprehensive measures to protect against such activities. Here are some strategies:
- Implement strong access controls: Restrict access to sensitive data and systems to authorized users only.
- Use robust authentication methods: Implement multifactor authentication to enhance security.
- Regular audits and monitoring: Conduct regular security audits and continuously monitor systems for suspicious activities.
- Employee training: Educate employees on recognizing and reporting potential forgery attempts.
- Data encryption: Protect sensitive data with advanced encryption techniques to prevent unauthorized manipulation.
Conclusion
Section 13 of the Cybercrime Code Act 2016 underscores the importance of preventing electronic forgery in Papua New Guinea. By understanding the legal implications and implementing robust security measures, individuals and organizations can better safeguard their data and systems against fraudulent activities.
About the author