Regulator Gains Arrest Powers Over Licensees

The Cybersecurity Authority—which licenses and regulates cybersecurity businesses—gains police powers to arrest, search, and seize from the same entities it regulates. Combined with the Authority receiving 50% of criminal fines (9), this creates a conflict of interest where a regulator with financial incentives from enforcement can arrest licensees' employees and search their premises. This concentration of regulatory and law enforcement powers in a single agency undermines predictable business operations and creates risks of discriminatory enforcement.