PECA 2016 and the 2025 Amendments: Cybercrime Law and Corporate Obligations

Corporate-relevant themes

• Unlawful access and data damage offences
• Preservation and cooperation expectations
• Content/platform responsibilities where applicable
• Internal escalation to counsel on LE requests

Security operations implications

Strong identity, logging, and chain-of-custody habits protect both the organisation and due process when investigations arise.

Training

Teach staff that PECA is not only "hacking law" — misuse of company systems can create organisational exposure.

How CyberSilo Helps

• Evidence mapping in CyberSilo CSA
• Detection and logging proof with ThreatHawk SIEM
• Advisory scoping — contact CyberSilo

Frequently Asked Questions

Is PECA only for individuals?

It addresses offences that can implicate organisational systems and intermediaries — get counsel review.

Do amendments replace PISF?

No — criminal law and security baselines are different layers.

What should CISOs do now?

Update playbooks, logging retention, and LE request handling with legal.

Related Resources

• PISF hub
• Sectoral CERTs