The full text of the Cybercrimes Act in South Africa
Section 7 | Unlawful acquisition, possession, provision, receipt or use of password, access code or similar data or device
Any person who unlawfully and intentionally—
acquires;
possesses;
provides to another person; or
uses, a password, an access code or similar data or device for purposes of contravening the provisions of section 2(1) or (2), 3(1), 5(1), 6(1), 8 or 9(1), is guilty of an offence.
Any person who is found in possession of a password, an access code or similar data or device in regard to which there is a reasonable suspicion that such password, access code or similar data or device—
was acquired;
is possessed;
is to be provided to another person; or
was used or may be used, for purposes of contravening the provisions of section 2(1) or (2), 3(1), 5(1), 6(1), 8 or 9(1), and who is unable to give a satisfactory exculpatory account of such possession, is guilty of an offence.
For purposes of this section ‘‘password, access code or similar data or device’’ includes—
a secret code or pin;
an image;
a security token;
an access card;
any device;
biometric data; or
a word or a string of characters or numbers, used for financial transactions or user authentication in order to access or use data, a computer program, a computer data storage medium or a computer system.