(a) stating the reasons for the conclusion that the data is not stored in a sufficiently
secure or confidential manner or that the information system in question is not
sufficiently stable;

(b) setting out the steps that are required; and

(c) specifying the time within which the steps set out in terms of paragraph (b)
must be performed.

(11) If the steps referred to in subsection (10)(b) have not been taken within the time
referred to in subsection (10)(c), the Computer Security Inspector may impose a fine on the
institution storing the data in question, or the person responsible for the storage of the data
personally, or on both the institution and the person not exceeding N$100 000.

(12) A fine imposed in terms of subsection (11) may be recovered as a debt due to
the state.
CHAPTER 8
CYBERCRIME AND POWERS OF INVESTIGATION IN CRIMINAL MATTERS

Definitions

62. (1) In this Chapter, unless the context indicates otherwise, –

“access” in relation to a computer system or an information system, means to –

(a) transfer data to;

(b) obtain data from;

(c) run a program on that system (whether that program is stored on that system or is
transferred to that system) or causes any program to perform any action or function
or to render any data, function or action accessible to any program or person; or
55

Select target paragraph3