The Cybercrime Code Act 2016 (No 35 of 2016) defines and establishes acts or omissions that constitute offences committed through the use of information and communication technology or cybercrime. In the digital age, unauthorized access to electronic systems poses significant risks to data security and privacy. The Cybercrime Code Act 2016 (No 35 of 2016) of Papua New Guinea addresses various cyber offences, including the unauthorized use of electronic systems. Section 11 of this Act, under Part III, Division 1, deals with the offence of illegally remaining on electronic systems.
What is an Electronic System?
According to the Cybercrime Code Act 2016, an “electronic system” refers to a setup of hardware or software that can work automatically without human intervention. This system includes interconnected devices or systems that can process, generate, send, receive, or store data. Examples of electronic systems include computers, smartphones, the internet, and data storage facilities. Essentially, any technology that handles data automatically, from input to storage, falls under this definition. Understanding this term is crucial for navigating cybersecurity laws and protecting digital information.
What is Illegally Remaining?
Illegally remaining, as defined by Section 11 of the Cybercrime Code Act 2016, involves a person who, without lawful excuse or justification, or recklessly, remains logged into or continues to use an electronic system or device without authorization or after their authorized use has expired. This offence applies whether the act is intentional or in excess of lawful justification.
Examples of Illegally Remaining in an Electronic System
Illegal remaining in an electronic system occurs when someone stays logged into a system or continues to use it without authorization. For example, consider an IT contractor who was hired to perform a temporary upgrade on a company’s network. After the contract ends, the contractor still has access to the network.
Instead of logging out, the contractor continues to access sensitive data and company resources without permission. This unauthorized presence can lead to data breaches, financial loss, and compromised security.
For instance, consider an employee who has been terminated from a tech company. Despite being fired, the ex-employee still has access to the company’s internal network. Instead of logging out, the ex-employee continues to use the company’s systems, accessing sensitive files and emails without permission.
This unauthorized access can lead to serious security breaches, including the theft of confidential information or sabotage of the company’s operations. Illegal remaining is a serious offence under the Cybercrime Code Act 2016, with significant legal consequences.
Penalties for Illegally Remaining
The Act imposes penalties for those found guilty of illegally remaining on electronic systems:
- For Natural Persons: A fine not exceeding K10,000.00 or imprisonment for a term not exceeding seven years, or both.
- For Bodies Corporate: A fine not exceeding K50,000.00.
Implications of Illegally Remaining
The penalties outlined in Section 11 highlight the seriousness with which Papua New Guinea treats unauthorized use of electronic systems. Unauthorized access can lead to data breaches, privacy violations, and potential disruptions in service. The legislation aims to deter such activities by imposing fines and imprisonment for offenders.
Protecting Against Unauthorized Use
Given the potential penalties and impacts of unauthorized use, it is crucial to adopt comprehensive security measures to protect electronic systems. Here are some strategies:
- Implement strict access controls: Ensure that only authorized users can access electronic systems and devices.
- Use session timeouts: Implement automatic session timeouts to prevent users from remaining logged in indefinitely.
- Monitor and log activity: Continuously monitor and log user activity to detect and respond to unauthorized access promptly.
- Regular security audits: Conduct regular security audits to identify and address potential vulnerabilities.
- Employee training: Educate employees on the importance of logging out after use and the risks of unauthorized access.
Conclusion
Section 11 of the Cybercrime Code Act 2016underscores the importance of preventing unauthorized access to electronic systems in Papua New Guinea. By understanding the legal implications and implementing robust security measures, individuals and organizations can better protect their systems against unauthorized use.
About the author