Thursday, March 1, 2012

Mobile Phone Laws In India Needed

In this column, Mr. B.S.Dalal, Partner of India’s exclusive techno legal ICT law firm Perry4Law, has shared his views about the requirements of enacting mobile phone laws in India.

We have no dedicated cell phone laws in India. Further, we do not have a robust mobile cyber security in India. In this background, absence of a dedicated mobile phone law in India is not a good sign.

Mobile phones are increasingly being used for multi purpose in India. However, legal framework for mobile phones in India is still missing. Some provisions can be made applicable to mobiles in India through the information technology act 2000 (IT Act 2000) but we still do not have a dedicated mobile phone laws in India.

The Department of Telecommunication (DoT) has proposed a new national telecom policy of India 2011 that would be operational very soon. The new telecom policies as well as other projects of Indian government and DoT are excessively favouring e-surveillance in India and surveillance of Internet traffic in India. We need a legally valid e-surveillance policy of India to address these issues. Otherwise, it would violate human rights protection in cyberspace.

The proposal to allow DoT to monitor cell phone locations in India is also a controversial issue. Big brother must not overstep its limits in India. The proposed cell site based e-surveillance in India has crossed this limit well beyond those permitted by Indian Constitution.

We must have well defined procedure and cell site data location laws in India. As we have no dedicated privacy laws, data protection laws, data security laws, anti telemarketing laws, anti spam laws, etc, mobile phones monitoring in India is not legally sustainable.

Even the proposed central monitoring system (CMS) project of India is not legitimate and legally sustainable as there is no legal framework that justifies its operation in India. Currently there is no phone tapping law in India that is constitutionally sound and we urgently need a lawful interception law in India. Similarly, the colonial phone tapping laws of India must be repealed and new and constitutionally sound phone tapping laws in India must be formulated.

The mobile phone laws of India must cover all these issues that are presently left unaddressed. In the absence of such laws, mobile phone data analysis, mobile phone location tracking, mobile phone tapping in India, etc are illegal and unconstitutional.

RBI Warned Indian Banks For Inadequate Cyber Security

The Reserve Bank of India (RBI) has been issuing various directions and recommendations from time to time to strengthen cyber security of banks operating in India. Further, RBI has also prescribed a cyber due diligence for Indian banks. However, Indian banks are not following the directions of RBI in this regard and a majority of banks in India still do not have a well defined cyber security policy.

RBI has also directed that all banks must create a position of chief information officer (CIO) as well as steering committee on information security at the board level at the earliest. Till now there are no publically available records that show that banks operating in India have appointed CIO and a steering committed as directed by RBI. In any case, these directions of RBI must be complied with latest by October 2012.

Realising that banks in India are not complying with the directions of RBI, it has issued a stern warning that RBI will act against banks that do not implement its guidelines on electronic security of their transactions and operations by October 2012. RBI observed that at present some banks do not have proper security policy and methods to monitor the service level agreements with third parties and have inadequate audit trail.

RBI has directed that the banks with a high technology usage will have to implement all the guidelines and those not having any major online transactions have to implement only some of its recommendations.

Perry4Law and Perry4Law Techno Legal Base (PTLB) believe that the future of banking segment in India is highly dependent upon technology and it would be beneficial if the directions of RBI are implemented by all banks as soon as possible. This would not only safeguard the interests of bank’s customers but would also save banks from many legal problems and cases. Further, inadequate cyber security would give rise to increased cyber crimes and financial frauds that would undermine the reputation of such banks.

ATM frauds, credit cards frauds and Internet banking frauds are on rise in India. Part of this is attributable to lack of public awareness but lack of cyber security adoption by banks in India is the main reason for such crimes and frauds.

Perry4Law and PTLB recommends that banks in India must start implementing the techno legal aspects of cyber security as soon as possible as deadline of October 2012 is fast approaching.

Monday, February 27, 2012

E-Courts And ODR In India

Electronic courts (e-courts) and online dispute resolution (ODR) are two most important uses of technology for dispute resolution and adjudicating of cases. However, India has been slow on both these fronts. For instance, till the end of February 2012, we are still waiting for the establishment of first e-court in India. This is so because India lacks techno legal expertise for establishment of e-courts.

Perry4Law Techno Legal Base (PTLB) is the exclusive techno legal segment of ICT law firm Perry4Law and it is managing the exclusive techno legal e-courts training and consultancy centre of India. It is clear that establishment of e-courts in India must be expedited.

Similarly, on the front of online dispute resolution (ODR) in India as well, we have performed not well. Although traditional alternative dispute resolution (ADR) services in India have witnessed some growth in India yet ODR is still waiting for a beginning in India. ADR and ODR in India need to be streamlined to give impetus to alternative dispute resolution mechanisms in India. Further, PTLB is the exclusive techno legal ODR services provider in India.
.
Online dispute resolution (ODR) and international response is still lukewarm but at least a beginning has been made there. While international online dispute resolution regime has started exploring use of ICT for disputes resolution, online dispute resolution in Asia is still growing. Online dispute resolution in Asian countries is largely confined to a single or two countries that also to a limited extent. Clearly online dispute resolution standards of practice for India and Asia need to be developed urgently.

Online commercial arbitration in India also needs to be developed. Similarly, legal issues of media and entertainment industry of India have assumed tremendous importance. Entertainment and media industry dispute resolution in India can be resolved using online dispute resolution. Dispute prevention and resolution in the film and media industry in India is presently not exploring use of online dispute resolution.

Similarly, ODR and cross border e-commerce transactions and dispute resolution of cross border technology transactions are also interrelated. Dispute resolution in technology transactions is the upcoming trend in the field of ODR. Dispute resolution of cross border technology transactions is a complicated process if we adopt traditional litigation methods to resolve them. Dispute resolution in technology transactions and dealings requires an effective, timely and cost effective mechanism. Traditional litigation is definitely not the place to achieve these objectives.

There is an urgent need to adequately use information technology for streamlining the judicial system of India. Presently, the efforts in this regard are not satisfactory at all. Let us hope that by the end of this year; at least the Indian government would start thinking in this direction.

Saturday, February 25, 2012

Phone Tapping Law In India

Phone tapping laws in India is in real bad shape. Rather, it cannot be properly termed as a valid and constitutional phone tapping law. The Indian telegraph act 1885 carries few provisions under which the Indian government and its agencies can tap phones in India.

However, these provisions and outdated law are clearly in violation of constitutional provisions and constitutional safeguards. As on date, we have no constitutionally sound lawful interception and phone tapping law in India. Even the proposed the central monitoring system project of India (CMS Project of India) is also not supported by any legal framework.

As on date, phone tapping in India is not performed constitutionally and this unconstitutional phone tapping in India is a “constitutional failure of India”. Constitutional phone tapping law in India is urgently needed to be formulated so that this illegality and unconstitutionality can be cured.

Instead of bringing suitable laws to curtail illegal and unconstitutional phone tapping and e-surveillance in India, Indian government is doing the exact opposite. Big brother in India is overstepping the constitutional limits. Not only the phone tapping has been increased in India by both governmental and private players but even surveillance of Internet traffic in India and Internet censorship in India has been increased.

Now it has been reported that very soon the Centre would have direct access to the telephone conversations of Indian citizens and organisations as the Department of Telecommunications (DoT) has developed capabilities to intercept phones without phone operator’s assistance. At present the central monitoring system (CMS) is at trial stage where Delhi and Haryana regions would be covered by establishing the main server in New Delhi. It would take another 12 months before the system is officially operational.

With this we may have two separate telephone tapping systems in India. The first is managed by the Home Ministry of India and now the DoT would have its own telephone tapping system at place. The DoT would be required to set up separate servers in each State, depending upon the requirements and the number of subscribers. While the facility in Delhi and adjoining States are likely to be ready by year-end, it might take at least another couple of years before servers are established across India.

An interesting functionality of the CMS is that irrespective of operators, lines would be tapped at one centralised location, which will be manned round-the-clock by officials of the government agencies.

While this may help in proper law and order enforcement yet the misuse of this facility is very much possible. This is more so when there is neither a legal framework nor constitutional safeguards to prevent abuse of CMS in India. It would be appropriate if a constitutional lawful interception law is formulated in India immediately.

Wednesday, February 22, 2012

Constitutionality Of NCTC Challenged Before Madras High Court

The constitutional validity of National Counter Terrorism Centre (Organisation, Functions, Powers and Duties) Order 2012 has been challenged before the Madras High Court. A public interest litigation petition (PIL) has been filed in the Madras High Court challenging the constitutional validity of the NCTC Order 2012.

This action is not only natural but was also very obvious. The constitutionality of the National Investigation Agency Act 2008 (NIAA 2008) has not been accepted by States and now NCTC has been launched through an NCTC Order 2012. This was too much for the States and they protested against this order before the Prime Minister of India.

Indian government is bypassing parliamentary oversight for almost all its projects and initiatives. For instance, the National Counter Terrorism Centre (NCTC) Project of India, National Intelligence Grid (Natgrid) Project of India, Aadhar Project of India, Crime and Criminal Tracking Network and System (CCTNS), etc are not governed by any legal framework and parliamentary oversight. Indian government must understand and accept that intelligence work is not an excuse for non accountability and violating constitutional safeguards and scheme.

The intelligence infrastructure of India has become synonymous for non accountability and mess. There is neither any parliamentary oversight nor and transparency and accountability of the working of intelligence agencies of India. The proposed law titled Intelligence Services (Powers and Regulation) Bill, 2011 for intelligence agencies was not made a law at all. Similarly, the Draft Central Bureau of Investigation Act, 2010 has also not seen the light of the say.

It is obvious that Indian government is not interested in bringing intelligence agencies and law enforcement agencies under the parliamentary scrutiny. Till date parliamentary oversight of parliamentary agencies of India is missing. Indian government cannot for long tag these projects and agencies with existing laws and agencies as that is a very bad policy decision.

If this is not enough, Google censored NCTC news and blog posts in India that pointed towards these constitutional infirmities and lacunas. This is not the first time Google has done so. Even in the past Google has censored critical posts against Indian government and its projects. Clearly there is a nexus between critical posts pertaining to NCTC, intelligence agencies and censorship by Google in India.

The ruling government cannot for long silence Indian citizens and political parties for long. This is now evident with the filing of PIL before the Madras High Court. The petitioner prayed the Court to call for the records and quash the impugned NCTC Order 2012 as ultra vires the Constitution. With the present attitude of ruling government, more such petitions can be expected in the near future, including the one that can challenge the constitutional validity of NIAA 2008.