[kictanet] My take: IG Discussion 2009, Day 10 of 10 - ePayment Systems and Regulation

[Victor Gathara]

Imoh, Ministry of Info and Comms should take the lead in legislation
affecting the ICT sector and have an overall management role in it. I
think some sort of IT security czar is required (or already exists) and
may rightly sit in the CCK. The ministry should up its communication
strategy even now to alert all on where we are regarding ICT security.
All seems unclear because we (or maybe I) am unaware of what
laws/structures are in place in government to address this issue.

Over to you Dr Ndemo!

Victor

-----Original Message-----
From: kictanet-bounces+v-gathara=dfid.gov.uk at lists.kictanet.or.ke
[mailto:kictanet-bounces+v-gathara=dfid.gov.uk at lists.kictanet.or.ke] On
Behalf Of John Walubengo
Sent: 08 May 2009 08:27
To: Victor Gathara
Cc: KICTAnet ICT Policy Discussions
Subject: Re: [kictanet] IG Discussion 2009,Day 10 of 10 - ePayment
Systems and Regulation


Thanx Mwende for your 4day moderation on Security issues. Ofcourse more
credit to the contributors whose insights am sure are being digested by
stakeholders...feel free to make belated contributions.

Today I want to introduce the second last theme before Mwende takes us
through the Closure and Way forward on Monday 11th May 2009.  Basically,
we want to review the various "hybrid" electronic payments systems and
their corresponding legal and regulatory frameworks.

Hybrid electronic payment system exclude the traditional banking systmes
which do have time-tested and proven legal/ regulatory frameworks.
Typically they refer to emerging e-Payment systems that have been best
exemplified by the MPESA/Zap phenomena. Such systems cut accross
multiple industries (Banking, Telecommunication and IT) and present a
huge challenge in terms of regulation/legislation.

In developed economies, such systems have multiple
legislation/regulation that demands that the entities involved in such
ePayment services abide by strict Data Protection Acts which protect the
customer data/privacy as well as other eLegislation (eCrime,
eTransaction) that provides deterrence and assurance mechanism.

In layman terms, consider an MPESA/ZAP User who sends value of 30,000Ksh
from their mobile phone account to the parents upcountry when the
following happens:
1. Disaster strikes and the electronic records are lost (whose
liable?-it happened in 9/11, Tsunami, etc) 2. The Parents claim that
they didnt recieve the money or worse still the sender claim they never
send the money (non-repudiation issues) 3. An eCrime suspect is charged
with altering ePayments records at the source (inside job/judicial
issues)

In general, do we have frameworks to protect consumers and businesses
against such risks above and do we have investigative and judicial
capacity to administer e-Crime related justice? What role should the
Regulator (CCK), Banking (CBK), Police and Judiciary (NOT) have in these
frameworks?  

Lets try and give views within today (1day)...

walu.








      

_______________________________________________
kictanet mailing list
kictanet at lists.kictanet.or.ke
http://lists.kictanet.or.ke/mailman/listinfo/kictanet

This message was sent to: v-gathara at dfid.gov.uk Unsubscribe or change
your options at
http://lists.kictanet.or.ke/mailman/options/kictanet/v-gathara%40dfid.go
v.uk

________________________________________________________________________
This e-mail has been scanned for all viruses by Star. The service is
powered by MessageLabs. For more information on a proactive anti-virus
service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________

DFID, the Department for International Development: leading the British Government's fight against world poverty. Find out more about the major global poverty challenges and get the facts on what DFID is doing to fight them: http://www.dfid.gov.uk 
______________________________________________________________________

This e-mail has been scanned for all viruses by Peapod. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.peapod.co.uk/cleanmail