On 1 October 2025, the Cyber Security Authority opened a public consultation on the Draft Cybersecurity (Amendment) Bill, until 14 November 2025. The Bill expands the powers of the Cybersecurity Authority to investigate, prosecute, and manage cybercrime. The Authority is empowered to conduct criminal investigations and prosecute offences under the Act and the Electronic Transactions Act, and to seek confiscation of assets obtained through cybercrime, with civil recovery possible even if criminal proceedings fail. It may direct the freezing of property to facilitate investigations, and request information from individuals or entities, applying to the High Court when confidentiality obligations exist. Investigative officers may apply for production orders, warrants to access, search, or seize computer data, and preservation orders to secure data, with the High Court required to ensure measures maintain privacy and are proportionate to the investigation. The Authority can also designate inspectors to enter premises, inspect and audit computer systems, and require information or documents, excluding domestic premises. Provisions are included to protect witnesses and informants, keeping their identities and disclosures confidential while ensuring their safety and welfare, with protections extending to related persons or those affected by testimony.
Original source