Act 1038
Cybersecurity Act, 2020
(i) Mutual Legal Assistance Act, 2010 (Act 807);
(j) Data Protection Act, 2012 (Act 843); and
(k) Payment Systems and Services Act, 2019 (Act 987).
Cyber Security Authority
Establishment of the Cyber Security Authority
2. (1) There is established by this Act the Cyber Security Authority as
a body corporate.
(2) For the performance of functions, the Authority may acquire
and hold property, dispose of property and enter into a contract or any
other related transaction.
(3) Where there is a hindrance to the acquisition of land, the land
may be acquired for the Authority under the State Lands Act, 1962 (Act
125) and the cost shall be borne by the Authority.
Objects of the Authority
3. The objects of the Authority are to
(a) regulate cybersecurity activities in the country;
(b) prevent, manage and respond to cybersecurity threats and
cybersecurity incidents;
(c) regulate owners of critical information infrastructure in
respect of cybersecurity activities, cybersecurity service
providers and practitioners in the country;
(d) promote the development of cybersecurity in the country
to ensure a secured and resilient digital ecosystem;
(e) establish a platform for cross-sector engagement on matters
of cybersecurity for effective co-ordination and co-operation
between key public institutions and the private sector;
(f) create awareness of cybersecurity matters; and
(g) collaborate with international agencies to promote the
cybersecurity of the country.
Functions of the Authority
4. To achieve the objects under section 3, the Authority shall
(a) advise the Government and public institutions on all matters
related to cybersecurity in the country;
(b) promote the security of computers and computer systems
in the country;
6