International Cyber Crime Treaty And India

Cyber law is no more confined to the limits of a nation alone. Being extra territorial in nature, the cyber law of a nation often travels far beyond the territorial jurisdictions of a nation. Realising the practical difficulties of this extra territorial nature of various cyber law, an International cyber law treaty was formulated at the international level.

However, there is no relationship between this international cyber crime treaty and India as India is not a signatory to the same. India is still governed by its distinct cyber law incorporated in the information technology act, 2000 (IT Act 2000).

Recently, efforts were made at the United Nations (UN) to adopt a “more comprehensive” and “truly global” International cyber crime treaty, informs Praveen Dalal, managing partner of New Delhi based law firm Perry4Law and leading techno legal expert of India. However, the proposal was rejected by UN and till now there is no globally acceptable cyber crime treaty in existence, informs Dalal.

Even the Indian cyber law is far from perfect and it has decayed. It has been amended by the information technology amendment act 2008 (IT Act 2008) that made the sole cyber law of India a big mess. There are no stringent provisions to punish cyber criminals as almost all the cyber crimes have been made bailable by this amendment.

Presently, India is neither following a good model cyber law based upon international standards nor is legislating an effective law that can meet the challenges of contemporary digital economy.

The present cyber law of India is worst than no cyber law at all and it must be repealed as soon as possible. This is more so when India has decided not to sign any international cyber crime treaty and stick to its own domestic legislation.

Cyber Crimes Are Increasing In India

Cyber crimes in India are increasing at an alarming rate and Indian government and department of information technology (DIT), India are doing nothing in this regard. In fact, the DIT proposed very weak, ineffective and counter productive amendments to the already weak cyber law of India in the past.

The information technology amendment act 2008 (IT Act 2008) amended the information technology act 2000 (IT Act 2000) and made it a base for committing various cyber crimes openly.

According to Praveen Dalal, the leading techno legal experts of India, India has been experiencing an increase in cyber crimes like hacking, spamming, phishing, etc due to many factors. The first and foremost factor among them is the lack of an effective and stringent cyber crime law in India.

The cyber law in India is not effective instead it is counterproductive. India is the only country in the world that has the provision of bail in cyber crime cases. It means even if a person commits cyber crimes like phishing, hacking or any similar cyber crime or contravention and is somehow caught by the Police force, he would be released on bail as a matter of right. This provision of cyber crime has made India a safe place for cyber criminals, warn Dalal.

Besides, there is a lack of adequate cyber forensics and cyber security capabilities in India that helps in the growth of cyber crimes. Irrespective what the government of India and DIT say, the position is really worrisome.

Time has come for the Indian government to amend the IT Act 2000 so that cyber criminals can not only be caught by the police but also get severe punishment.

Some Facts About CRAT

There is an urgent need of spreading awareness about cyber law of India. Indian information technology act 2000 (IT Act 2000) carries the cyber law of India. Although it has many wide ramifications yet public at large is not aware about even the most basic ones.

For instance, not much of public is aware about CRAT. It is an important part of cyber disputes adjudication but by and large is still not very active. Cyber law expert Praveen Dalal believes that CRAT needs to take more initiatives to spread public awareness and to start with it must have its own website.

CRAT is presently engaged in spreading awareness among adjudicating officers of various states and this is a good sign, says Dalal.

SOURCE: CIO

Cyber Security Of India Is In Poor State

India urgently needs techno-legal cyber security. Perry4Law is managing the exclusive techno-legal cyber security research, training and educational centre in India. India must urgently come up with good crisis management policy and strategy regarding cyber security.

In recent times cyber security has taken a centre stage all over the world. This is due to the fact that networks all over the world are interconnected through Internet. The vulnerability in the networked systems can prove fatal in various circumstances. Recently, it was alleged that China broke into Indian computer systems and compromised crucial data and information of secret and confidential nature.

There is an emergent need for strengthening cyber security of India. However, till now the government of India has not taken cyber security seriously. India needs a dedicated cyber security research and training centre at the national level. Although there are few good cyber security initiatives in India, yet Indian government must take the initiative and work in this direction.

Another aspect that has to be kept in mind is the enactment of strong and efficient cyber laws in India. Although Indian has enacted information technology act 2000 (IT Act 2000) yet it is far from perfect. The recent amendments in the same have made almost all the cyber crimes bailable. According to Praveen Dalal, the leading techno-legal expert of India, by making the offences and cyber crimes “bailable” India has made its cyberspace a “free zone” and “safe heaven” for cyber criminals and cyber offenders. It seems the problems of Indian cyber security are multi facet in nature. We do not have sufficient laws, we lack proper strategies and policies, and we do not care much about cyber security, says Praveen Dalal.

India must urgently train its government officials holding crucial posts and departments, law enforcement officials, judges, lawyers, etc. In the absence of sufficient training, we may risk crucial information leaking out of governmental computers and departments. The sooner we take cyber security seriously the better it would be for the national interest of India.

SOURCE: MERINEWS

Indian Information Technology Amendment Act 2009 In Pipeline

Cyber Law of India is in real bad shape and it requires immediate attention and amendments. The Law Ministry of India has finally shown some interest in this regard by accepting the suggestions of experts like Praveen Dalal.

The Information Technology Amendment Act, 2008 (IT Act 2008) has been passed on 23rd December 2008 and received the assent of President of India on 5th February, 2009. However, it has not been “notified” yet (till 24th September 2009) and if we are honest it is not difficult to realise that it would never be notified despite ignorant contrary claims. This uncertainty has even resulted in wrong prosecutions that are not justified by any law or practice. The fact is that no rights and liabilities can be claimed under the Act 2008 till it is notified by the Central Government U/S 1(2) of the Act 2008.

Although some misinformed and ignorant cyber law observers believe that the IT Act 2008 is a good piece of law yet the Law Ministry of India must remain unaffected and unguided by their claims. The Law Ministry must avoid falling into the traps of the self claimed cyber law experts who are neither lawyers nor have knowledge of cyber law. Further, the Ministry must also not pay much attention to the “bureaucratic alliances and favours” to the industry players who are lobbying real hard to make the Information Technology Act, 2000 (IT Act, 2000) a weak piece of legislation.

It would be good idea to consult real and knowledgeable techno-legal experts this time by the Law Ministry. Praveen Dalal, the leading Techno-Legal Expert of India and Managing Partner of Perry4Law opined that the Law Ministry of India would commit a big mistake by approving the present IT Act, 2008. On the contrary he suggested that the Law Ministry must “reformulate” the amendments and should come up with the Information Technology Amendment Act, 2009 (IT Act 2009).

The Law Ministry of India has accepted the suggestions of Praveen Dalal regarding introducing IT Act, 2009, strengthening Extradition Law of India to effectively challenge the cyber crimes, including effective provisions regarding cyber war and cyber terrorism in India, International harmonisation of cyber law, providing sound cyber law and cyber security regime in India to encourage foreign direct investment and outsourcing to India, etc.

The IT Act 2009 is expected to be introduced within the next two months during the winter session of the Parliament. Let us hope that we can expect some sensible and effective legislation this time from the Law Ministry and Ministry/Department of Information Technology (DIT) that is neither based upon industry lobbying nor upon the naïve suggestions of the self claimed cyber law experts and corrupt and ignorant bureaucrats.

AUTHOR: V.K.SINGH

SOURCE: MYNEWS

Websites Blocking In India

Censorship and e-surveillance have taken a nasty shape in India. Barely four months after dropping its proposal of forcing TV channels to show only an "authorised" feed during security emergencies, the government is now seeking to censor news portals and other websites, that too even at normal times.

Concerns regarding censorship and e-surveillance have been raised times and again by many techno-legal experts of India. Mr. Praveen Dalal, Managing Partner of Perry4Law, has suggested that the Congress led Government must openly declare that the Information Technology Amendment Act 2008 would be given a “fresh look” in the forthcoming Parliament session. With issues like cyber terrorism, cyber security, cyber forensics, hacking, wireless hacking, phishing, spam, child pornography, etc troubling India, a casual and weak law would not serve the purpose. In fact, there is an emergent need of formulating Information Technology Amendment Act, 2009 by the new Government and Parliament as soon as possible.

It is good to see that media has taken up the issue. The problem is that the same seems to be guided by the concern of “self-protection” rather than raising a voice against weak, ineffective and redundant laws dealing with Information and Communication Technology (ICT) in India. It would be a good idea if the media takes firm stand against the proposed Information Technology Amendment Act, 2008 as the same is “unconstitutional”. Once brought into force, it would violate valuable “Civil Liberties” of Indian citizens and Indian media. The same would be pressed against the media as well so it is better to protest before it is too late.

Fortunately, the Information Technology Amendment Act, 2008 has “not been notified yet”. This means for all practical purposes the old Information Technology Act, 2000 still governs the position. Let us hope that the suggestions of Mr. Praveen Dalal would be accepted by the Indian Government and Indian Parliament for the larger interest of all.

AUTHOR: SHAYAM PRASAD

SOURCE: MYNEWS

China Is Strengthening Its Cyber Law

Cyber law is gaining importance all over the World. China has become the latest country to adopt regulations pertaining to cyber law. A recent news report says that although the Western media has been awash with stories of Chinese hacking for years, cybercrime was until recently governed by three articles added to China's criminal code in 1997. The laws were out-of-date and "failed to correlate proportionately with the tremendous social harm" caused by cybercrime, according to a recent paper on Chinese cyber-law published in the International Journal of Electronic Security and Digital Forensics. However, the paper concludes that the country's laws are still in the early stages of development. "Gaps and inadequacies exist in traditional offense provisions". Until the new law was passed in February, computer crimes carried a maximum of three years' jail time. That has now been extended to seven years, and the definition of computer crime has also been broadened.

In the Indian context the Information Technology Act 2000 (IT Act, 2000) is the sole cyber law of India. Although India took an “early advantage” of enacting a cyber law yet it “failed to keep pace” with the contemporary requirements. The industry lobbying has kept it soft, weak and criminal friendly. The proposed Information Technology Amendment Act 2008 (Act 2008) has further complicated the scenario as it has suggested a cyber law framework that is not conducive for India.

Fortunately, the Information Technology Amendment Act 2008 has “not been notified” yet. This gives the new Government and next Parliament in session a chance to “rectify the mistake” they have commited in the recent past. Even Dr. Gulshan Rai of Department of Information Technology (DIT) has “not confirmed” that the amendments have been notified.

The speed of cyber law reforms in India is really worrisome. With the present speed and expertise, even countries that have just enacted cyber laws would overtake India in this field. There is an emergent need for the new Government and nest Parliament to give these issues a serious thought.

Cyber Terrorism In India

Cyber Terrorism in India is in limelight but for the wrong reasons. It seems the media and law enforcement in India are too much fascinated with the term “Cyber Terrorism” that they have not even done their homework properly. Recently, the anti-terrorism squad (ATS), investigating the “terror email” has decided not to book the accused for cyber terrorism as there was no intention to carry out any act of terror. Further, the news report also claims that according to an amendment in the Information Technology Act, which came into force in February this year, anyone indulging in cyber terrorism could be sentenced to life imprisonment. Prior to this, even the sending of threat emails was considered “hacking”.

Let us first analyse the stand of ATS. It seems the ATS has become the all powerful authority of India and it has the power to make the laws, make them operational, execute them and interpret them as per their choice. This is so because they have thought to invoke a provision that does not exist at all in India. The Information Technology Act 2000 (IT Act 2000) is absolutely silent on the aspect of “Cyber Terrorism” and the proposed Information Technology Amendment Act 2008 (Amendments 2008) is still inapplicable in the absence of a “Notification” by the Central Government. Till now there has been no notification by the Central Government in this regard. So from which law the ATS could have charged the accused with Cyber Terrorism is still a great mystery.

Similarly, the reporter of this news item has no hint whatsoever that the proposed Amendments 2008 have not yet come into force. So there is no question of applying its provisions to this case. Strangely enough, I cannot find any incidence where sending offensive e-mail is considered to be a case of “hacking” in India either as per the IT Act 2000 or even by the Amendments 2008.

Of course, if the Amendments 2008 have been notified at the time of writing of the reported news then this story makes lot of sense. The fault lies with the Government of India that failed to make clear the status of the amendments.

It seems there is a lack of “cyber law awareness” in India. The law enforcement and media must be responsible in their dealings and claims regarding cyber law and other techno-legal issues. They must acquire some good knowledge about cyber law of India so that not only cyber crimes may be dealt with properly but also there is a culture of “responsible journalism” in India.

Updates of 2009, 2010 and 2011

Also see this following updates in this regard:

(1) Cyber Terrorism is a National Security Hazard

(2) Cyber Terrorism against India

(3) Cyber Terrorism in India and its Preparedness

(4) India is facing serious Cyber Threats

(5) Cyber Security Policy of India

(6) National Security Policy of India is required

(7) Indian Crisis Management Plan for Cyber attacks and Cyber Terrorism

(8) Securing Critical National Infrastructure from Cyber Attacks

(9) Critical Infrastructure protection in India

Political Agendas, Lies And Gullible Indians

Indian elections drama is once again unfolding. Political parties are covering all the aspects of economic development as well as launch pads of political mileage. What is surprising is that the issues covered by these agendas and manifestos are so broad and important that no political party of India can give effect to them at all. All of us are aware that not even 10% of these promises would see the light of the day. Still Indian population is gullible in nature and we would give our future in the hands of those who least care for us for another 5 years. The fact remains that neither BJP nor Congress can move away from their traditional political promises as they have been used time and again to fool Indians. I would not go into the details of all the promises, agendas and manifestos but would confine myself to those issues that cover Information and Communication Technology (ICT).

While BJP has come up with an IT Agenda, Congress seems to be indifferent towards ICT once again. The truth of these agendas and manifestos cannot be ascertained till we are made fool once again by a collation government. However, there are some very absurd events taking place in India in the meanwhile.

Firstly, the Parliament of India passed the Information Technology Amendment Bill, 2008 (Bill 2008) without any debate or discussion. All laws, including the Bill, 2008, are prima facie unconstitutional but neither our Judiciary nor the President of India found any problems with that. The Bill 2008 got President’s approval on 5th February, 2009 without the President even thinking once about its ill effects. Except Mr. Praveen Dalal none seems to have protested about this situation. Fortunately, as a result of this the proposed Bill 2008 seems to have been “withdrawn”.

Secondly, ICT must be used as a tool of development rather than as a means of harassment. Excessive and illegal e-surveillance eliminates the chances of effective use of ICT on the one hand and operates as an opponent of e-governance on the other. E-governance presupposes a free, fair and transparent public dealing in the cyberspace. Of late India has been treading on the wrong path of becoming an excessive surveillance State rather being a technology knowledge driven society. The recent example of mandating the e-mail companies to maintain their e-mail servers in India is a very novice decision. It only shows the ignorance about cyber security and ICT management issues in India. It is not clear whether Congress led government has come up with this idea or it is a work of government departments like Department of Information Technology (DIT) or Department of Telecommunications (DOT). Whoever has suggested this idea has no knowledge how Internet works and cyber security is ensured.

India needs good legal framework for technology, sound cyber security and effective cyber forensics expertise. The fill in gaps actions would only ridicule India in front of the entire world. It would be better if India come up with good ICT strategies and policies that are not only sensible but also possible to be implemented.

AUTHOR: V.K.SINGH

SOURCE: MYNEWS