HomeCybercrimeIn practice

How Does the Cybercrime Act Affect Social Media Use?

More than most users realise. Nine provisions bear directly on ordinary posting, sharing and commenting — and the person who administers a page is an ICT service provider under Schedule 1, with a separate set of duties and a 25-year exposure.

The cybercrime series, no. 100 · Practical guidance · 5 min read

The Cybercrime Code Act 2016 nowhere mentions social media. It does not need to: its offences are framed around the use of an electronic system or device, which covers every phone in the country.

Nine provisions that reach ordinary use

Provisions bearing on everyday social media use
ProvisionEveryday conduct it reachesMaximum (adult)
s 21Posting something defamatory about a person25 years
s 22Posts with or regarding a child for a bullying purpose7 years; 25 if harm; life if death
s 23(1)Repeated posts about a person causing distress7 years; 10 if harm; life if death
s 23(4)Swearing, or vulgar or obscene commentary — no target needed10 years; K15,000
s 17Sharing pornographic material15 years
s 28Knowingly and repeatedly sharing infringing content15 years
s 29Selling counterfeit goods through a page or marketplace15 years
s 31Advertising or promoting anything that would be an offence10 years
s 15Running an account in another person’s identity10 years

Sharing, joining in, and reacting

The verbs are what catch ordinary users

Sections 22 and 23(1) both reach a person who initiates, facilitates or participates in the communication, and a person acting for the purpose of supporting such repeated acts.

Section 23(4) goes further still, reaching those who authorise, facilitate or enable; write, post or effect; or entertain, encourage or participate in the posting.

So adding a comment to a pile-on, sharing a post, or engaging with abusive content is capable of being the offence — not merely evidence of someone else’s.

And note: neither section requires the subject to see the material. A group chat regarding a person is within both.

Page administrators are ICT service providers

Schedule 1

“Website Master or Administrator” means a person responsible for maintaining one or many websites, also referred to as web architect, web developer, site author, website co-ordinator or website publisher.

What follows from that

A person in that position is within Part V, and so subject to:

  • Section 44(1)(a) — may not monitor users’ information or actively seek evidence of their illegal activity;
  • Section 44(1)(c) — may not conceal, prevent or frustrate an investigation, including by deleting material once aware of one;
  • Section 44(1)(d) — must comply with a court order to assist, or to terminate or prevent an action;
  • Section 45 — may not disclose a confidential court order, or anything done under it.

Each carries up to 25 years and K100,000 for a natural person. See which businesses and people are ICT service providers.

Whether the drafters intended the Part V duties to fall on the administrator of a community Facebook page is doubtful; the words as enacted do not distinguish.

What the platforms themselves face

An overseas platform is an ICT service provider if it falls within a Schedule 1 category, and section 39(a) reaches a provider “whose service is available in the country” — which does not require a local presence.

Enforcement against an entity with no assets or staff in Papua New Guinea is another question, and one that Part VI addresses only in general terms, by applying the Mutual Assistance in Criminal Matters Act 2005 and the Extradition Act 2005.

Practical guidance

  1. Post about conduct, not about people. The purposes in sections 22 and 23 are all directed at a person.
  2. Do not join pile-ons. Participation is the offence.
  3. Watch the language. Section 23(4) needs no target and provides no defence.
  4. Be careful with anything involving a child. Section 22 escalates to 25 years where harm results and life where death results. See protecting children online.
  5. If you administer a page: have a moderation policy, remove unlawful material when told of it, keep a record of notices received and what you did, do not read members’ private messages, and never delete material once you know of an investigation.
  6. Preserve before you delete. If you are the target, keep the originals — see what to do if you are a victim.

For the fuller treatment, see what you can post about someone online in PNG.

Sources

Check the section yourself

Before relying on anything here, read the current text of the Cybercrime Code Act 2016 and check for later amendments. If a decision matters to you, get advice — start with the Office of the Public Solicitor, or find a firm in the law firms directory.

Disclaimer: This article provides general information about Papua New Guinea law and does not constitute legal advice. Laws may change, and their application depends on individual circumstances. You should obtain professional legal advice for your specific situation. Read the full disclaimer.