Indian Cyber Law Commonwealth World Bank Conference Delhi

8/9/2019 Indian Cyber Law Commonwealth World Bank Conference Delhi

1/30

INDIAN CYBERLAWINDIAN CYBERLAW--SOME PERSPECTIVESSOME PERSPECTIVES


2/30

AA

PRESENTATIONPRESENTATIONBYBY

PAVAN DUGGAL,PAVAN DUGGAL,ADVOCATE,ADVOCATE,SUPREME COURT OF INDIASUPREME COURT OF INDIA

PRESIDENT,CYBERLAWS.NETPRESIDENT,CYBERLAWS.NET

HEADHEAD--PAVAN DUGGALPAVAN DUGGALASSOCIATESASSOCIATES

NEWNEW DELHIDELHI--1919--55--20062006


3/30

PUBLIC DOMAIN BUZZPUBLIC DOMAIN BUZZ

GOAPGOAP EE--TENDERINGTENDERING PROJECTPROJECT

NOTNOT BASEDBASED UPONUPO N DIGITALDIGITAL SIGNATURES,SIGNATURES,

DESPITEDESPITE BEINGBEING LAUNCHEDLAUNCHED ININ 20022002

ALLEGATIONSALLEGATIONS AGAINSTAGAINST THETHE BACKENDBACKEND

SERVICESERVICE PROVIDER,PROVIDER, WHOWHO HADHAD ACCESSACCESS TOTO

ALLALL BIDDINGBIDDING CONFIDENTIALCONFIDENTIAL INFORMATIONINFORMATION


4/30

NEW CASESNEW CASES

GOVERNMENTGOVERNMENT OFOF RAJASTHANRAJASTHAN-- TENDERTENDER FORFOR

CUSTOMIZEDCUSTOMIZED SOFTWARESOFTWARE

CAUGHTCAUGHT ININ AA LEGALLEGAL BATTLEBATTLE BETWEENBETWEEN

VENDO

RS

VENDO

RS

ININ THETHE DELHIDELHI HIG

HHIG

H CO

URTCO

URT


5/30

NEW CASES( contd)NEW CASES( contd)

ASHOKINTEGRIXASHOKINTEGRIX IPIP ADDRESSADDRESS CASECASE-- INDIASINDIAS

FIRSTFIRST JOHNJOHN DOEDOE CASECASE ININ INFORMATIONINFORMATION

TECHNOLOGYTECHNOLOGY LITIGATIONLITIGATION

BIRTHBIRTHO

FO

FAA

NEW NEW KINDKINDO

FO

F LIA

BILITY

LIA

BILITY

NO

TNO

T

YETYET PERCEIVEDPERCEIVED


6/30

NEW CASESNEW CASES

ARIFARIF AZIMAZIM CASECASE-- INDIASINDIAS FIRSTFIRST

CYBERCRIMECYBERCRIME CONVICTIONCONVICTION

BREACHBREACH OFOF DATADATA SECURITYSECURITY

INTERNALINTERNAL SOURCESSOURCES-- THETHE BIGGESTBIGGEST RISKRISK FORFOR

ANYANY LEGALLEGAL ENTITYENTITY USINGUSING COMPUTERSCOMPUTERS


7/30

BEGINNING OF LIABLITYBEGINNING OF LIABLITY

SS..CHANDERCHA NDER CASECASE-- INDIASINDIAS FIRSTFIRST LEGALLEGAL

PRECEDENTPRECEDENT FORFOR EXPOSUREEXPOSURE TOTO LIABILITYLIABILITY

FOREMOSTFOREMOST BANKBANK MADEMADE LIABLELIABLE FORFOR MISUSEMISUSE

ON

O N THETHE NETW

ORKNETW

ORK B

YB

Y AN

A N ERR

ANTERR

ANT

EMPLOYEEEMPLOYEE


8/30

CELEBRATED CASESCELEBRATED CASES

BAAZEEBAAZEE..COMCOM CASECASE

KARANKARAN BAHREEBAHREE CASECASE

MPHASISMPHASIS CASECASE


9/30

CYBER LAW IN INDIACYBER LAW IN INDIA

InIn IndiaIndia thethe InformationInformation TechnologyTechnology Act,Act,

20002000 isis thethe legislationlegislation thatthat dealsdeals withwith issuesissues

relatedrelated toto thethe InternetInternet..


10/30

THETHE

INFORMATIONINFORMATION

TECHNOLOGY ACT , 2000TECHNOLOGY ACT , 2000


11/30

I.T. ACT, 2000:I.T. ACT, 2000:

OBJECTIVESOBJECTIVES DifferentDifferent approachesapproaches forfor controlling,controlling,

regulatingregulating andand facilitatingfacilitating electronicelectronic

communicationcommunication andand commercecommerce..

AimAim toto provide provide legallegal infrastructureinfrastructure forfor

ee--commercecommerce inin IndiaIndia..


12/30

GOVERNMENTGOVERNMENT NSP??NSP??

GOVERNMENTSGOVERNMENTS PROVIDINGPROVIDING SERVICESSERVICES ONON

THETHE NETWORKNETWORK

GOVERNMENTSGOVERNMENTS AREARE INTERMEDIARIESINTERMEDIARIES

UNDERUNDER THETHE ITIT ACT,ACT, 20002000,, ALLALL

GOVERNMENTS,GOVERNMENTS, CENTRALCENTRAL ANDAND STATE,STATE, ASAS

ASLOASLO ALLALL GOVERNMENTALGOVERNMENTAL BODIESBODIES AREARE

NETWORKNETWORKSERVICESERVICE PROVIDERSPROVIDERS


13/30

Section 79Section 79

ForFor thethe removalremoval ofof doubts,doubts, itit isis herebyherebydeclareddeclared thatthat nono personperson providingproviding anyany serviceserviceasas aa networknetwork serviceservice provider provider shallshall bebe liableliable

underunder thisthis Act,Act, rulesrules oror regulationsregulations mademadethereunderthereunder forfor anyany thirdthird partyparty informationinformation orordatadata mademade availableavailable byby himhim ifif hehe provesproves thatthatthethe offenceoffence oror contraventioncontravention waswas committedcommittedwithoutwithout hishis knowledgeknowledge oror thatthat hehe hadhad exercisedexercisedallall duedue diligencediligence toto preventprevent thethe commissioncommission ofofsuchsuch offenceoffence oror contraventioncontravention..


14/30

Network Service Providers:Network Service Providers:

When Not LiableWhen Not Liable ExplanationExplanation..ForFor thethe purposespurposes ofof thisthis section,section,

(a)(a) "network"network serviceservice provider"provider" meansmeans ananintermediaryintermediary;;

(b)(b) "third"third party party information"information" meansmeans anyany

informationinformation dealtdealt withwith byby aa networknetwork serviceserviceproviderprovider inin hishis capacitycapacity asas anan intermediaryintermediary..


15/30

TRANSPARENCYTRANSPARENCY

NEED NEED FORFOR TRANSPARENTTRANSPARENT EE--

GOVERNMENTALGOVERNMENTAL PROVIDERSPROVIDERS

RIGHTRIGHT TOTO INFORMATIONINFORMATION ACTACT

GOVERNMENTALGOVERNMENTAL WOULDWOULD NOWNOW NOTNOT BEBE ABLEABLE

TOTO HIDEHIDE RECORDSRECORDS CONCERNINGCONCERNING EE--

GOVERNMENTALGOVERNMENTAL PROCUREMENTSPROCUREMENTS


16/30

IT ACT, 2000IT ACT, 2000--OBJECTIVESOBJECTIVES

ToTo provideprovide legallegal recognitionrecognition forfor transactionstransactions::--

CarriedCarried outout by by meansmeans ofof electronicelectronic datadata

interchange,interchange, andand OtherOther meansmeans ofof electronicelectronic communication,communication,

commonlycommonly referredreferred toto asas "electronic"electronic

commerce",commerce", involvinginvolving thethe useuse ofof alternativesalternatives toto

paperpaper--based based methodsmethods ofof communicationcommunication andand

storagestorage ofof informationinformation..


17/30

OBJECTIVES (contd.)OBJECTIVES (contd.)

ToTo facilitatefacilitate electronicelectronic filingfiling ofof documentsdocuments

withwith thethe GovernmentGovernment agenciesagencies

ToTo amendamend thethe IndianIndian PenalPenal Code,Code, thethe IndianIndian

EvidenceEvidence Act,Act, 18721872,, thethe Banker'sBanker's BookBook

EvidenceEvidence Act,Act, 18911891 andand thethe ReserveReserve BankBank ofofIndiaIndia Act,Act, 19341934


18/30

AUTHENTICATION OFAUTHENTICATION OF

ELECTRONIC RECORDSELECTRONIC RECORDS AnyAny subscribersubscriber maymay authenticateauthenticate anan electronicelectronic

recordrecord

AuthenticationAuthentication by by affixingaffixing hishis digitaldigitalsignaturesignature..

AnyAny personperson byby thethe useuse ofof aa publicpublic keykey ofof thethe

subscribersubscriber cancan verifyverify thethe electronicelectronic recordrecord


19/30

LEGALITY OF DIGITALLEGALITY OF DIGITAL

SIGNATURESSIGNATURES LegalLegal recognitionrecognition ofof digitaldigital signaturessignatures..

ElectronicElectronic SignaturesSignatures notnot yetyet legallegal inin IndiaIndia..

CertifyingCertifying AuthoritiesAuthorities forfor DigitalDigital SignaturesSignatures..

SchemeScheme forfor RegulationRegulation ofof CertifyingCertifying

AuthoritiesAuthorities forfor DigitalDigital SignaturesSignatures


20/30

CONTROLLER OFCONTROLLER OFCERTIFYINGCERTIFYING

AUTHORITIESAUTHORITIES

ShallShall exerciseexercise supervisionsupervision overover thethe activitiesactivities

ofof CertifyingCertifying AuthoritiesAuthorities

LayLay downdown standardsstandards andand conditionsconditions

governinggoverning CertifyingCertifying AuthoritiesAuthorities

SpecifyS pecify variousvarious formsforms andand contentcontent ofof

DigitalDigital SignatureSignature CertificatesCertificates


21/30

DIGITAL SIGNATURES &DIGITAL SIGNATURES &

ELECTRONIC RECORDSELECTRONIC RECORDS UseUse ofof ElectronicElectronic RecordsRecords andand DigitalDigital SignaturesSignatures inin

GovernmentGovernment AgenciesAgencies..

PublicationsPublications ofof rulesrules andand regulationsregulations inin thethe

ElectronicElectronic GazetteGazette..

MCAMCA 2121 ProjectProject-- UsageUsage ofof DigitalDigital SignaturesSignatures


22/30

COMPENSATIONCOMPENSATION

IfIf aa personperson withoutwithout thethe permissionpermission ofof ownerowner oror anyany

otherother person person inin chargecharge ofof aa computer,computer, computercomputer

systemsystem oror computercomputer network,network, accessesaccesses oror securessecuresaccessaccess toto suchsuch computer,computer, computercomputer systemsystem oror

computercomputer network,network, hehe isis liableliable toto pay pay statutorystatutory

damagesdamages by by wayway ofof compensation,compensation, notnot exceedingexceeding

oneone CroreCrore rupeesrupees (( RsRs 1010,,000000,,000000//-- )) toto thethe personperson

soso affectedaffected..


23/30

CYBER OFFENCESCYBER OFFENCES

VariousVarious cybercyber offencesoffences defineddefined

CyberCyber offencesoffences toto be be investigatedinvestigated onlyonly byby aa

PolicePolice OfficerOfficer notnot below below thethe rankrank ofof thethe

DeputyDeputy SuperintendentSuperintendent ofofPolicePolice..


24/30

CYBER OFFENCES (contd.)CYBER OFFENCES (contd.)

TamperingTampering withwith computercomputer sourcesource documentsdocuments..

PublishingPublishing ofof informationinformation whichwhich isis obsceneobscene inin

electronicelectronic formform..

BreachBreach ofof confidentialityconfidentiality andand privacyprivacy..


25/30

CYBER OFFENCES (contd.)CYBER OFFENCES (contd.)

HackingHacking

MisrepresentationMisrepresentation

PublishingPublishing DigitalDigital SignatureSignature CertificateCertificate falsefalse

inin certaincertain particulars particulars andand publication publication forfor

fraudulentfraudulent purposespurposes..


26/30

LITIGATION ALREADYLITIGATION ALREADY

BEGUNBEGUN Litigation already begun in India relation to eLitigation already begun in India relation to e--

procurement.procurement.

Numerous legal issues relating to electronicNumerous legal issues relating to electronicgovernment procurement will continue togovernment procurement will continue to

emerge in the near future.emerge in the near future.

Need to adopt a proactive approach in dealingNeed to adopt a proactive approach in dealing

with these various legal challengeswith these various legal challenges


27/30

AMENDMENTS INAMENDMENTS IN

IT ACT, 2000IT ACT, 2000 MAKES THE LAW TECHNOLOGYMAKES THE LAW TECHNOLOGY

NEUTRALNEUTRAL

ELECTRONIC SIGNATURES INSTEAD OFELECTRONIC SIGNATURES INSTEAD OFDIGITAL SIGNATURESDIGITAL SIGNATURES

NEW PROVISION ON PRIVACYNEW PROVISION ON PRIVACY

WATERS DOWN THE LIABILITYOF THEWATERS DOWN THE LIABILITYOF THENETWORKSERVICE PROVIDERSNETWORKSERVICE PROVIDERS


28/30

HUGE DRAWBACKS OF THEHUGE DRAWBACKS OF THE

PROPSOED AMENDMENTSPROPSOED AMENDMENTS DATAPROTECTIONDATAPROTECTION

NO NEW CYBERCRIMESADDEDNO NEW CYBERCRIMESADDED

PRIVACYAPPROACH PRIMITIVEPRIVACYAPPROACH PRIMITIVE

INTELLECTUAL PROPERTY RIGHTSINTELLECTUAL PROPERTY RIGHTS

TAXATIONTAXATION

EE--PAYMENTSPAYMENTS


29/30

NEED TO COMPLYNEED TO COMPLY

ThereThere isis aa needneed toto proactivelyproactively complycomply withwith thethe

requirementsrequirements ofof thethe IndianIndian CyberlawCyberlaw ..

NecessaryNecessary toto limitlimit liabilityliability andand emergenceemergence ofofundesirableundesirable consequencesconsequences..

TheThe InformationInformation TechnologyTechnology Act,Act, 20002000

currentlycurrently underunder reviewreview byby thethe GovernmentGovernment..

Need Need toto adoptadopt aa flexibleflexible approachapproach ofof duedue

diligencediligence..


30/30

THAT WAS A PRESENTATIONTHAT WAS A PRESENTATION

BYBY

PAVAN DUGGAL,PAVAN DUGGAL,

ADVOCATE, SUPREME COURT OF INDIAADVOCATE, SUPREME COURT OF INDIA

PRESIDENT, CYBERLAWS.NETPRESIDENT, CYBERLAWS.NET

HEADHEAD--PAVAN DUGGAL ASSOCIATESPAVAN DUGGAL ASSOCIATES

EMAIL : [email protected] : [email protected]

[email protected]@gmail.com

Documents

Indian Cyber Law Commonwealth World Bank Conference Delhi