Section 190, The National Communications Authority Act, 2022

(1) Any Unauthorised collection, storage, use ortransmission by a communications entity or licensee of subscriber information or such personal records shall be an offence under this Act and shall be liable on conviction to a fine not less than 50 million Leones or to a term of imprisonment not less than 3 years or both the fine and imprisonment. (2) The Ministry shall, in consultation with the Authority in public safety and national security, develop regulations for the purpose of giving effect to this section