ADVOKS GLOBAL · KENYA
Computer Misuse and Cybercrime (The Critical Information Infrastructure and Cybercrime Management) Regulations
70. Anonymous reporting of cyber threats.
Edition: 2024-02-16 · In force
70. Anonymous reporting of cyber threats.
(1)The Committee or any law enforcement agencies, or an organization, shall provide platforms for anonymous reporting to allow any person to disclose useful information relating to cyber incidents or crimes anonymously.(2)For the avoidance doubt, the anonymous reporting channels may include—(a)social media platforms;(c)other electronic reporting channels; or(d)any other mode convenient to the person reporting, considering the circumstances of the cyber threat.(3)Anonymous reporting under this regulation may include information on—(a)the interruption of a life sustaining service including the supply of water, health services and energy;(b)an adverse effect on the economy of the Republic;(c)an event that would result in massive casualties or fatalities;(d)failure or substantial disruption of the money market;(e)an adverse and severe effect of the security of the Republic including intelligence and military services;(f)dangers of public health, safety and the environment; or(g)any other information which may disrupt the confidentiality, integrity and availability of a computer system or a critical information infrastructure.(4)A person shall not be penalized in relation to any employment, profession, voluntary work, contract, membership of an organization, the holding of an office or in any other way, as a result of reporting a cyber-threat which the person obtained in confidence in the course of that activity, if the reporting is in public interest.(5)For purposes of paragraph (4), a report which is made to the Committee, a law enforcement agency or to an appropriate entity shall be deemed to be made in the public interest.(6)A person shall report a cyber-threat under this regulation where such person has reasonable belief in the veracity of the information.(7)Any person who provides false information maliciously intended to injure another person commits the offence chargeable under section 22 of the Act.