Section 14 of Computer Misuse and Cybercrime Act No 5 of 2018: Unauthorised access

(1) A person who causes, whether temporarily or permanently, a computer system to perform a function, by infringing security measures, with intent to gain access, and knowing such access is unauthorised, commits an offence and is liable on conviction, to a fine not exceeding five million shillings or to imprisonment for a term not exceeding three years, or to both.
(2) Access by a person to a computer system is unauthorised if—
(a) that person is not entitled to control access of the kind in question to the program or data; or
(b) that person does not have consent from any person who is entitled to access the computer system through any function to the program or data.
(3) For the purposes of this section, it is immaterial that the unauthorised accessis not directed at—
(a) any particular program or data;
(b) a program or data of any kind; or
(c) a program or data held in any particular computer system.