E-Kenya strictly follows the cyber act and will report and act accordingly to any infringement including:

• Hacking- this is unauthorized access committed by an individual whether temporary or permanently, and causes a computer system to perform a function by infringing security measures with intent to gain access.
• Infection of computer systems with malware- including ransomware, spyware, worms, trojans and viruses.
• Identity theft or identity fraud- identity theft is when one knowingly or unknowingly makes use of the electronic signature, password or any other unique identification feature of another person. This is an offense punishable by a fine not exceeding Ksh.200,000 or imprisonment for a term not exceeding three years, or both.
• Any other activity that threatens the security, confidentiality, integrity or availability of any of E-Kenya’s systems, infrastructure, communications network and data- this offence is punishable by a fine not exceeding Ksh.5,000,000 or to imprisonment for a term not exceeding three years or both.