Cybercrime and its existing laws

Chamindu Pushpika
4 min readDec 17, 2022

Cybercrime is defined as any criminal activity involving the use of computers, networks, or the internet. It can include any number of activities, such as identity theft, fraud, copyright infringement, hacking, and cyber bullying. Cyber criminals use the anonymity of the internet and the lack of regulation to perpetrate their crimes, making it difficult for law enforcement to track them down.

Cybercrime can take many forms, from stealing financial information or personal data to launching ransomware attacks and spreading malicious software. It is one of the fastest-growing and most pervasive forms of crime in the world, with the potential to cause significant economic and social harm.

Existing Laws for Cyber Crime in Sri Lanka

Cybercrime is a relatively new phenomenon in Sri Lanka, but it is growing in scope and sophistication. As the number of internet users in the country continues to rise, so do the opportunities for criminals to commit cybercrime. The Sri Lankan government has recognized the threat posed by cybercrime and is taking steps to protect its citizens.

The Computer Crime Act, No 24 of 2007, is the primary legislation on cybercrime in Sri Lanka. It defines the scope and nature of cybercrimes, and also provides for sanctions, which include imprisonment of up to five years and fines of up to one million rupees. The Act also established the Cyber Crimes Investigation Division (CCID) of the police force, which is responsible for investigating and prosecuting cybercrime cases.

The Act covers a broad range of cybercrimes, including hacking, identity theft, phishing, spamming, and cyberbullying. It also covers cyberterrorism, fraud, and cyber harassment. The Act also criminalizes the unauthorized interception of computer data, the unauthorized modification of computer data, and the unauthorized use of computer programs. In addition to the Computer Crime Act, the Sri Lankan government also has a range of other laws and regulations that are aimed at protecting citizens from cybercrime. The Telecommunications Act №25 of 2007 is the primary law regulating the use of telecommunications networks. The Act requires telecommunications providers to take steps to protect users from cybercrime, and it allows for the interception of communications for the purpose of gathering evidence for criminal investigations.

The Electronic Transactions Act No 19 of 2006 is another important law in the fight against cybercrime. The Act provides for the legal recognition of electronic documents, transactions, and signatures. It also sets out rules and regulations for the use of digital signatures, as well as rules on the secure storage and transmission of electronic data.

The Sri Lankan government has established the Computer Emergency Response Team (CERT) to monitor and respond to cyber threats. The team is responsible for issuing timely warnings and advisories to the public, as well as providing technical assistance to organizations and individuals who are the victims of cybercrime.

Existing Laws for Cyber Crime Abroad

Governments around the world have enacted various laws and regulations to protect their citizens. In the United States, the Computer Fraud and Abuse Act (CFAA) is the primary law that governs cybercrime. The CFAA covers a wide range of activities, including fraud, computer intrusion, and malicious code. It also makes it a federal crime to access a computer without authorization or to exceed authorized access.

In the European Union, the General Data Protection Regulation (GDPR) is the primary law that governs the processing of personal data. The GDPR sets out the rights of individuals in relation to the processing of their personal data and establishes the legal framework for the free movement of personal data within the European Union. The GDPR also provides strict rules for the protection of personal data, such as the requirement for businesses to implement appropriate technical and organizational measures to protect personal data.

In Asia, many countries have enacted specific laws to protect against cybercrime. For example, China has the Cybersecurity Law of the People’s Republic of China, which sets out the legal framework for the security of critical information infrastructure and the protection of personal data. India has the Information Technology Act of 2000, which sets out the legal framework for the regulation of digital information and the prevention of cybercrime.

In addition, many countries have signed international treaties and agreements that address cybercrime. The Council of Europe Cybercrime Convention is the first international treaty on cybercrime and sets out the legal framework for the prevention and prosecution of cybercrime. The Convention is open to all countries and has been ratified by over 50 countries.

Conclusion

Cybercrime is a growing problem in the modern world, and it is essential that countries have laws in place to protect against it. Sri Lanka has the Computer Crimes Act, which outlines a variety of cybercrimes and their penalties. The US and EU have their own laws targeting cybercrime, and many countries have enacted their own specialized laws. In order to effectively combat cybercrime, it is important for countries to have comprehensive laws in place, as well as the resources to enforce them.

--

--

Chamindu Pushpika

Network/WebApp Pentester | CTF Player | Security Analyst