Sharing Thoughts 3

Investigating Public Awareness and understanding of cybercrimes and legal implications in Sri Lanka.

In today’s digital era, cyber-crimes in Sri Lanka have become a rising concern. Due to the escalating reliance on technology and internet access, individuals and businesses are increasingly susceptible to cyber-attacks. Like many other countries, Sri Lanka is confronted with the task of combating cyber threats and safeguarding its digital realm. This article will delve into public awareness of cyber-crimes, understanding cyber threats, and the legal ramifications in Sri Lanka.

A cyber-crime is any criminal activity that involves a computer, network, or networked device. While most cyber-crimes are committed to generate profit, some are executed to cause damage or disable computers and other devices. These crimes can vary from hacking into personal accounts to stealing sensitive information for financial gain. It is important to note that cybercrimes are constantly evolving in tandem with the advancement of the internet and computer technology. The origins of cyber-crime in Sri Lanka can be dated back to the 1990s, a time when the digital age was just beginning. However, these crimes were limited and rare due to the constraints related to low digital literacy and internet connectivity.

In the early days, common cybercrimes included unauthorized access to computer systems, hacking, and spreading viruses that could disrupt the functioning of any device. However, as the internet evolved into a platform for financial transactions, e-commerce, and social media, cybercriminals saw opportunities for financial gain. The increase in online banking and electronic payment systems has led to a rise in financial fraud, phishing scams, identity theft, and ATM card theft. Furthermore, the widespread use of social media has resulted in an increase in cyber-bullying, harassment, and the spread of false information as prevalent cyber-crimes.

One of the main reasons for the increase in cybercrimes in Sri Lanka is the absence of stringent laws and regulations governing online activities. The government must enforce stronger cybersecurity measures to safeguard its citizens and businesses from becoming targets of these crimes. In response, the government has introduced several cyber laws and regulations in recent years. This legal framework is designed to prosecute cybercriminals while also safeguarding the privacy and security of individuals and businesses.

The article will now delve into the cyber laws in Sri Lanka.

1)       The Computer Crimes Act, passed in 2007, seeks to criminalize actions like unauthorized access to computer systems, unauthorized interception of computer data, and unauthorized disclosure of passwords. This legislation was the main law used to prosecute cyber-criminals.

2)       The Electronic Transactions Act 2006 established a legal framework to guide and safeguard electronic contracts and electronic forms of communication. Therefore, it is evident that significant importance was placed on electronic transactions.

3)      The Intellectual Property Act 2003 safeguards property rights such as trademarks, copyrights, and patents. It offers solutions for any infringement of property rights and violations of intellectual property in cyberspace.

4)      The Payment Devices Frauds Act 2006 addresses the use of devices in online payments to perpetrate fraud and enforces penalties on individuals found guilty of payment device fraud.

5)      The Personal Data Protection Act 2022 is a law that emphasizes the significance of safeguarding personal data and also provides individuals with certain rights over their personal information.

6)       Sri Lanka's cyber security bill aims to safeguard critical information systems from threats and establish regulations for cyber protection.

In 2024, Parliament passed the Online Safety Act 2024, aimed at combating cybercrimes such as data theft, child abuse, and online fraud.

Therefore, it is evident that the government has taken significant steps to combat cybercrimes. It must be noted that Sri Lanka is a member of the Budapest Convention, which aims to address the global nature of cyber-crimes. As a result of being part of this international convention and the increasing prevalence of cybercrimes, Sri Lanka has also taken additional initiatives to establish specialized bodies such as the Computer Crimes Investigating Division, Financial Crimes Investigation Division, National Child Protection Authority, and the School of Computing at the University of Colombo.

Furthermore, education and awareness about cybersecurity need to be increased among the general population. Many individuals are unaware of the potential risks they face online and how to protect themselves from cyber attacks. The government of Sri Lanka has not yet taken significant initiatives to educate the public on safeguarding themselves from such crimes. Individuals and businesses should work together to implement cybersecurity measures and promote awareness of safe online practices. The general public should also be educated about cyber security laws, as the low number of reported incidents suggests a lack of understanding and access to information regarding these crimes.

In conclusion, it is imperative that action is taken to combat cyber crimes in Sri Lanka. Stronger laws, increased cybersecurity measures, and better education are all necessary steps towards creating a safer online environment for everyone.

Nisal Dulmith S.Hennadige,

Attorney at Law.