Preliminary feedback on PECB 2015 Chapter 1: Offences and Punishment: Section 3 & 4: Illegal access to information system: This includes description that would make access to a system or part of the system a punishable offence, thereby making hacking a punishable offence of 6 months. However, this includes nothing about whistleblower protection, an individual can gain access to a system to report widespread corruption or gather evidence to report such incidents. There should be exceptions to this clause. Example: An employee of United States’ National Security Agency’s contractor Allen Booze, used his access to the system to gather and make public information about the widespread economic espionage and surveillance or ordinary citizen’s around the world. Snowden’s revelations exposed the insecurity of national systems around the world and pushed for better protections. Another example is that of Kamran Faisal, a NAB employee, found dead in his room. Faisal was investigating a high level case, had he been able to securely gather and release documents to the judiciary he would have been able to assist the inquiry. But instead he died in suspicious circumstances and all information that he may have had vanished with him. Section 6: This makes no mention of white hat hacking. How can we expect to secure government systems or keep improving them if not for white hat hacking or crowdsourcing security issues. Governments around the world recruit white hat hackers who expose security lapses. Definition: White hat describes a hacker (or, if you prefer, cracker) who identifies a security weakness in a computer system or network but, instead of taking malicious advantage of it, exposes the weakness in a way that will allow the system's owners to fix the breach before it can be taken advantage by others (such as black hat hackers). Section 8: This prescribes a punishment for up to 7 years but there is no whistleblower protection. Chapter 2: Establishment investigation agencies and prosecution and procedural powers for investigation This should not be left to the discretion of the federal government nor should an executive body be arbitrarily set up and endowed with powers. Any body the government wishes to establish, it should do so through an Act of parliament so that it has statutory backing and in its constituting Act its scope and functions are narrowly defined to ensure accountability and prevent against misuse and abuse of power. Furthermore, if any existing agency is being endowed with additional functions, this too should be done through an amendment to their existing Acts and should pass through a parliamentary process. No powers should be arbitrarily conferred and a mechanism for recourse needs to exist. Example: If the language and process is not defined, we will end up with an IMCEW-like scenario except with an authority endowed with investigation and prosecution powers. 1
Bolo Bhi