UNIVERSITY OF SOUTH AFRICA
College of Law
The Cybercrimes Act 19 of 2020:
Evolution, Enforcement, Classi
cation,
and Stakeholder Evaluation
Module: Law of Cybercrimes / Digital Law
Assessment: Essay Assignment
Institution: University of South Africa (UNISA)
Department: Department of Criminal and Procedural Law
Date: 2025
Submitted in partial ful
lment of the requirements
for the relevant law module at UNISA.
Justice must keep pace with the digital age.
,Contents
1 1. Introduction 2
2 2. The Evolution of Cybercrime Regulation 3
2.1 2.1 Global Development of Cybercrime Law . . . . . . . . . . . . . . . . . . . . 3
2.1.1 2.1.1 The Council of Europe Convention on Cybercrime (Budapest Con-
vention) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2.1.2 2.1.2 The United States and the United Kingdom . . . . . . . . . . . . . 3
2.1.3 2.1.3 The African Context and the Malabo Convention . . . . . . . . . . 4
2.2 2.2 Cybercrime Regulation in South Africa: Pre-2020 . . . . . . . . . . . . . . . 4
2.2.1 2.2.1 The Electronic Communications and Transactions Act 25 of 2002 (ECT
Act) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.2.2 2.2.2 Other Relevant Legislation . . . . . . . . . . . . . . . . . . . . . . . 4
3 3. Classi
cation of Cybercrimes Under the Cybercrimes Act 19 of 2020 7
3.1 3.1 Structural Overview of the Act . . . . . . . . . . . . . . . . . . . . . . . . . 7
3.2 3.2 Category 1: Oences Against Data and Computer Systems . . . . . . . . . . 7
3.3 3.3 Category 2: Cyber Fraud, Forgery, and Extortion . . . . . . . . . . . . . . . 7
3.4 3.4 Category 3: Cyberterrorism . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3.5 3.5 Category 4: Content-Related Oences (Including Harmful Data Messages) . 8
3.6 3.6 Comparative Classi
cation Table . . . . . . . . . . . . . . . . . . . . . . . . 9
4 4. Mechanisms for Enforcement 10
4.1 4.1 Investigative Powers: Search, Seizure, and Preservation of Evidence . . . . . 10
4.2 4.2 Obligations on Electronic Communications Service Providers (ECSPs) . . . 10
4.3 4.3 Capacity-Building and the Cybercrime Advisory Council . . . . . . . . . . . 10
4.4 4.4 International Cooperation Mechanisms . . . . . . . . . . . . . . . . . . . . . 11
5 5. Evaluation of the Cybercrimes Act: Stakeholder Perspectives 12
5.1 5.1 The Government's Position . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
5.2 5.2 Civil Society Critique . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
5.3 5.3 Technology Industry Response . . . . . . . . . . . . . . . . . . . . . . . . . . 13
5.4 5.4 Law Enforcement Perspective . . . . . . . . . . . . . . . . . . . . . . . . . . 13
5.5 5.5 Balanced Assessment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
6 6. Conclusion 15
1
,UNISA | Department of Law Cybercrimes Act 19 of 2020
Reference List 16
Page 2 of 17
, UNISA | Department of Law Cybercrimes Act 19 of 2020
1. Introduction
The Cybercrimes Act 19 of 2020 has become one of the most contested pieces of legisla-
tion in post-apartheid South Africa. Its enactment signalled the country's formal entry into
the global conversation on cybercrime governance, yet it simultaneously ignited
erce debate
among civil society organisations, technology companies, legal scholars, and government of-
cials (Roos, 2021). Critics argue that certain provisions particularly those relating to
harmful online speech and the criminalisation of data messages threaten constitution-
ally protected rights to freedom of expression and privacy. The Department of Justice, on the
other hand, maintains that the Act is an indispensable tool for combating cyberbullying, child
pornography, digital fraud, and the spread of harmful misinformation that endangers vulnera-
ble groups such as minors (Department of Justice and Constitutional Development, 2021).
This essay undertakes three related tasks. First, it traces the evolution of cybercrime regula-
tion globally and within South Africa, demonstrating how technological change has consis-
tently outpaced legislative responses. Second, it examines the mechanisms for enforcement
and classi
cation of cybercrimes within South Africa's current legal framework under the Act.
Third, it oers a balanced evaluation of the Cybercrimes Act by considering the perspectives
of multiple stakeholders, including civil society, technology companies, law enforcement, and
the government.
Implementation Insight
The Act came into force in stages: sections relating to cybercrime oences and
capacity-building were proclaimed operative from 1 December 2021, while other
provisions notably those imposing obligations on electronic communications service
providers remain subject to further proclamation.
Page 3 of 17
College of Law
The Cybercrimes Act 19 of 2020:
Evolution, Enforcement, Classi
cation,
and Stakeholder Evaluation
Module: Law of Cybercrimes / Digital Law
Assessment: Essay Assignment
Institution: University of South Africa (UNISA)
Department: Department of Criminal and Procedural Law
Date: 2025
Submitted in partial ful
lment of the requirements
for the relevant law module at UNISA.
Justice must keep pace with the digital age.
,Contents
1 1. Introduction 2
2 2. The Evolution of Cybercrime Regulation 3
2.1 2.1 Global Development of Cybercrime Law . . . . . . . . . . . . . . . . . . . . 3
2.1.1 2.1.1 The Council of Europe Convention on Cybercrime (Budapest Con-
vention) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2.1.2 2.1.2 The United States and the United Kingdom . . . . . . . . . . . . . 3
2.1.3 2.1.3 The African Context and the Malabo Convention . . . . . . . . . . 4
2.2 2.2 Cybercrime Regulation in South Africa: Pre-2020 . . . . . . . . . . . . . . . 4
2.2.1 2.2.1 The Electronic Communications and Transactions Act 25 of 2002 (ECT
Act) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2.2.2 2.2.2 Other Relevant Legislation . . . . . . . . . . . . . . . . . . . . . . . 4
3 3. Classi
cation of Cybercrimes Under the Cybercrimes Act 19 of 2020 7
3.1 3.1 Structural Overview of the Act . . . . . . . . . . . . . . . . . . . . . . . . . 7
3.2 3.2 Category 1: Oences Against Data and Computer Systems . . . . . . . . . . 7
3.3 3.3 Category 2: Cyber Fraud, Forgery, and Extortion . . . . . . . . . . . . . . . 7
3.4 3.4 Category 3: Cyberterrorism . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3.5 3.5 Category 4: Content-Related Oences (Including Harmful Data Messages) . 8
3.6 3.6 Comparative Classi
cation Table . . . . . . . . . . . . . . . . . . . . . . . . 9
4 4. Mechanisms for Enforcement 10
4.1 4.1 Investigative Powers: Search, Seizure, and Preservation of Evidence . . . . . 10
4.2 4.2 Obligations on Electronic Communications Service Providers (ECSPs) . . . 10
4.3 4.3 Capacity-Building and the Cybercrime Advisory Council . . . . . . . . . . . 10
4.4 4.4 International Cooperation Mechanisms . . . . . . . . . . . . . . . . . . . . . 11
5 5. Evaluation of the Cybercrimes Act: Stakeholder Perspectives 12
5.1 5.1 The Government's Position . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
5.2 5.2 Civil Society Critique . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
5.3 5.3 Technology Industry Response . . . . . . . . . . . . . . . . . . . . . . . . . . 13
5.4 5.4 Law Enforcement Perspective . . . . . . . . . . . . . . . . . . . . . . . . . . 13
5.5 5.5 Balanced Assessment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
6 6. Conclusion 15
1
,UNISA | Department of Law Cybercrimes Act 19 of 2020
Reference List 16
Page 2 of 17
, UNISA | Department of Law Cybercrimes Act 19 of 2020
1. Introduction
The Cybercrimes Act 19 of 2020 has become one of the most contested pieces of legisla-
tion in post-apartheid South Africa. Its enactment signalled the country's formal entry into
the global conversation on cybercrime governance, yet it simultaneously ignited
erce debate
among civil society organisations, technology companies, legal scholars, and government of-
cials (Roos, 2021). Critics argue that certain provisions particularly those relating to
harmful online speech and the criminalisation of data messages threaten constitution-
ally protected rights to freedom of expression and privacy. The Department of Justice, on the
other hand, maintains that the Act is an indispensable tool for combating cyberbullying, child
pornography, digital fraud, and the spread of harmful misinformation that endangers vulnera-
ble groups such as minors (Department of Justice and Constitutional Development, 2021).
This essay undertakes three related tasks. First, it traces the evolution of cybercrime regula-
tion globally and within South Africa, demonstrating how technological change has consis-
tently outpaced legislative responses. Second, it examines the mechanisms for enforcement
and classi
cation of cybercrimes within South Africa's current legal framework under the Act.
Third, it oers a balanced evaluation of the Cybercrimes Act by considering the perspectives
of multiple stakeholders, including civil society, technology companies, law enforcement, and
the government.
Implementation Insight
The Act came into force in stages: sections relating to cybercrime oences and
capacity-building were proclaimed operative from 1 December 2021, while other
provisions notably those imposing obligations on electronic communications service
providers remain subject to further proclamation.
Page 3 of 17
