The old Computer Crime Act was itself a problematic piece of legislation when it was passed in 2007 due to the vague wording of certain sections. Particularly there’s a high legal ambiguity in Article 12.2, which punishes anything that is “likely to damage computer data or a computer system related to the country’s security, public security and economic security or public services” with 3-15 years in prison, and Article 14, which punishes any computer-related act that causes “damage the country’s security or causes a public panic” (especially if it is “related with an offense against the Kingdom’s security under the Criminal Code”) with a maximum of five year in prison.