First, the CCA contains vague and broad language without clear definitions that is open for arbitrary interpretation.
Second, it gives sweeping powers to officials, who are appointed by the Minister, without transparent procedures and judicial scrutiny for the use of powers under the Act.
Third, the CCA penalises internet service providers (ISPs) and technology companies even if they are not the content producers.
Fourth, the Act does not provide a mechanism for protecting privacy. There is no guarantee that how traffic data kept by ISPs or accessed by the officials will be used or scoped.
Fifth, some offences under the Act overlap with offences under the Penal Code. Therefore, the CCA has been used to increase punishment or impose harsher penalties against offenders.
Sixth, there is a lack of public awareness on the implications of the CCA. The public do not know how seriously the CCA violates their fundamental rights.