Internet Intermediary Liability In India

Information Technology Act 2000 (IT Act 2000) is the sole cyber law of India. IT Act 2000 is also regulating the functioning of Internet intermediaries in India. Internet intermediaries’ law and liability in India has become very stringent after the passing of the Information Technology (Intermediaries Guidelines) Rules, 2011 of India.

These Internet intermediaries liability Rules of India demarcates the rights and responsibilities of internet intermediaries in India. If the Internet intermediaries follow these Rules and exercise proper cyber due diligence, they are entitled to a “safe harbour protection”. Otherwise, they are liable for various acts or omission occurring at their respective platforms once the matter has been brought to their notice.

Social media due diligence in India has also emerged out of IT Act 2000 and the corresponding Rules. Now legal actions against foreign websites can be taken in India. Further, cyber litigations against such foreign websites would increase in India in the near future.

Privacy violations and data breach investigations would also be required to be undertaken by these companies in India. Data protection requirements would also add further obligations upon these companies and websites in India. It is of utmost importance for these foreign companies and websites to follow Indian laws in true letter and spirit.

The cyber laws due diligence requirements for companies in India are strenuous in nature and Internet intermediaries in India need to take care of the same to avoid legal troubles. Companies like Google, Facebook, etc must appoint nodal officers in India that can be served with notices and communication pertaining to Internet intermediary obligations in India.

Cyber law due diligence in India is also required to escape liability for online violations of intellectual property rights in India. Liability of Internet intermediaries for copyright violation in India is well known and even foreign companies recognise this fact. The Online Copyright Infringement Liability Limitation Act (OCILLA) of United States has been enacted as part of the Digital Millennium Copyright Act (DMCA) 1998. Foreign companies like Google, Facebook, etc are complying with the DMCA requirements while taking down intellectual property violating contents.

However, these foreign companies and websites are still not aware of the requirements of India laws. Further, even if they are aware, they are not complying with the same in the appropriate manner. Time has come for these foreign companies to take Indian laws, especially intellectual property and cyber law, more seriously.

Privacy Rights, Privacy Laws and Data Protection Laws In India

Privacy rights and data protection rights are essential part of civil liberties protection in cyberspace. With the growing use of information and communication technology (ICT), privacy rights have acquired a very different meaning. It would not be wrong to assume privacy and data protection rights as integral part of human rights protection in cyberspace.

We have no dedicated privacy laws in India and data protection laws in India. The privacy rights in India in the information era are unique in nature that requires a techno legal orientation. The growing use of e-surveillance in India has also necessitated enactment of data privacy laws in India, privacy rights and laws in India and data protection law in India.

At the policy level as well privacy rights and data protection rights have been ignored in India. In fact, an Indian national privacy policy is missing till now. Even legislative efforts in this regard are not adequate in India. A national privacy policy of India is urgently required.

A right to privacy bill of India 2011 has been suggested in the year 2011 yet till now we do not have any conclusive draft in this regard that can be introduced in that parliament of India. In fact, we are still waiting for a public disclosure of final and conclusive proposed draft right to privacy bill 2011 of India that can be discussed in the parliament.

The Supreme Court of India must expand privacy rights in India as that is the need of hour. Fortunately, the issue is already pending before it and there would not be much trouble in formulating a privacy framework for India.

However, the call is for the Indian parliament to take and it must enact sound and effective privacy and data protection laws for India.

Modernisation of Postal Department Of India In Pipeline

The postal department of India is performing many crucial functions. With the passage of time, the postal department of India also needs technological upgradation and modernisation initiatives. This is not a difficult task to achieve as the department of post is attached with the union ministry of communication and information technology (MCIT).

Realising the potential of a modern postal department, the union minister of MCIT Mr. Kapil Sibal has started the modernisation and upgradation process of postal department of India. We at Perry4Law and Perry4Law Techno Legal Base (PTLB) believe that there are many aspects of e-commerce, e-governance and banking that can be combined with the postal department of India.

In fact, the postal department of India has already applied to the Reserve Bank of India (RBI) for a banking licence. Mr. Kapil Sibal had written to the Finance Minister, Mr. Pranab Mukherjee, to expedite the granting of the banking licence.

Further, a national postal policy targeting expansion and modernisation of the postal network would be announced during this year. Although the India government does not intend to issue licences to courier service companies yet it would make it mandatory for them to register.

The national postal policy of India aims at modernising postal services in India. The policy is expected to make the department of post adopt a more financially viable revenue model. It would also provide affordable services at all points in the country as part of its Universal Service Obligations of India.

There is a good scope of public private partnership (PPP) in this modernisation drive. For instance, various value added services can be provided through the PPP model. Similarly, PPP can also help the department of post in expanding its products and services range beyond the current core functions.

India currently has 1.55 lakh post offices, 95 per cent of which are situated in rural areas. With the use of information technology, urban areas can be provided better postal services. This is a good step in right direction and Perry4Law and PTLB welcomes the same.

Are Google, Facebook, Microsoft, Heading For A Trouble?

Companies like Google, Facebook, Yahoo, Microsoft, etc facing a cyber battle in New Delhi, India. A criminal complaint against these companies is pending before a Trial Court of New Delhi. Obviously, these companies did what was best in their interest. They petitioned the Delhi High Court for quashing of criminal complaint against them.

Before the Delhi High Court, the respondent has placed it final arguments on 02-02-2012 and the petitioner would put its final arguments on 14-02-2012. Meanwhile, the Delhi High Court has dismissed a plea of a business man to hear him in this case for violation of his right to speech and expression. The Delhi High Court observed that till date neither the Trial Court nor the Delhi High Court has passed any order which curtailed the citizens' fundamental rights of freedom of speech and expression.

The Delhi High Court also observed that Google and Facebook do have the right to freedom of speech and expression but they are not above the law. There is no second opinion about this proposition as companies like Google, Facebook, Microsoft, Yahoo, etc must comply with Indian laws. Further, legal actions against foreign websites in India can be taken if they fail to comply with Indian laws. In fact, cyber litigations against foreign websites would increase a lot in India.

In fact companies like Twitter and Google have already taken steps to ensure compliance with Indian laws. Twitter has put in place a country specific mechanism to censor/remove offending tweets. Google has also started redirecting Indian bloggers to ***.blogspot.in domains instead of ***.blogspot.com domain. This method would allow Google to remove offending contents pertaining to ***.blogspot.in alone once a valid legal request is made from a particular country or residents of that country.

Yahoo has separately approached Delhi High Court and requested for a separate trial as its case falls in a different category. The Delhi High Court has accepted the request of Yahoo and issued necessary notices in this regard.

Now the companies in question have two options. Either they declare that these laws are not binding upon them or they comply with the same. It seems companies are deliberately avoiding observance of Indian laws. This is an unacceptable behaviour that Indian government cannot afford to allow. It is not a case that only Indian government is feeling offended by non observance of Indian laws. Even private individuals and companies face problems when requests for removal of offending and intellectual property violating contents are made.

Another problem that Indian government must take care of pertains to conflict of laws. When laws of India are clearly violated, there is no sense in complying with laws of foreign jurisdictions, especially when the companies involved in such process also have sound business and commercial presence in India. India must develop an alternative mechanism to DMCA complaints to such India based subsidiary companies as well as their parent companies based in foreign jurisdictions.

These companies are openly violating the requirements of Information Technology (Intermediaries Guidelines) Rules, 2011 without any legal justifications. These companies cannot use the subsidiary argument for long as Indian government would formulate more stringent norms for Indian subsidiaries dealing in information and communication technology (ICT) related matters.

This proposition is also reflected in the recent hearing of the Delhi High Court. Justice Suresh Kait observed that these companies are not above the law and their rights are to be determined under the laws of the land. He further observed that nobody is against the freedom of speech and expression. In fact, despite the summoning order against the websites, neither the Trial Court nor Delhi High Court has asked the websites to shut or restrain from functioning. They have only been summoned in accordance with the law as nobody is above it.

The next date of hearing before the Delhi High court would be on 14-02-2012 where these companies would put forward their final arguments. Let us hope that the Delhi High Court would deliver cyber justice to India.

New National Telecom Network Security Policy Of India

Recently a body named National Telecom Network Security Coordination Board (NTNSCB) of India has been proposed to be constituted by Indian government. The aim of establishment of NTNSCB is to ensure cyber security and telecom network security in India in a centralised manner.

The establishment of proposed NTNSCB would require formulation of telecom security policy in India and telecom equipments security framework in India at the first instance. There is no local or indigenous mechanism in India through which telecom hardware and software can be analysed for backdoors and malware.

However, Indian government has declared in the past that telecom equipments must be certified by TEC before use in India. A proposal to store call data records has also been given. The norms for import of telecom equipments in India would also be formulated very soon. Similarly, a telecom security policy of India may also be drafted.

Now as per recent media reports, telecom operators, equipment vendors, enterprise communication network users will all be made responsible for securing telecom networks under a new telecom network security policy of India. It has been reported that the policy would be drafted by the Department of Telecom (DoT) and it also intends to make network robust so that they can deal with disasters and crisis situations.

Under the proposed telecom network security policy, all telecom network equipments will have to get a “safe to connect certification” before they can be used in India. The certification will have to be done through a testing laboratory. Periodic test of the telecom networks will be carried out to ensure that no threat has crept into the network.

The proposed telecom network security also wants corporates using global enterprise communication networks to ensure that the network within the country complies with the security requirements. It is possible that network of these enterprises are subjected to laws of different countries, which may not be the same. Therefore, enterprises would have to adopt a little flexible approach in building their network security policies in such a way that part of the network in the geographical boundary of the country follows the security requirements mandated by this policy.

The policy also suggests setting up a centralised institution to address network and cyber security issues. Presently, the central monitoring system (CMS) project of India is one such centralised mechanism that DoT is planning to launch. A national cyber security policy of India may strengthen this initiative of DoT.