Tuesday, February 21, 2012

Google Is Censoring NCTC And Intelligence Agencies Related Results In India

Censoring and filtering of search engine results pages (SERPs) by Google in India is neither new nor uncommon. Even blogs have been demoted and censored by Google. Posts offending Indian government sentiments and ideology are frequently censored by Google. Whether it is search results of Aadhar project, video conferencing, World Bank related issues, etc all of them have been censored by Google from time to time in India and world wide.

The latest to add to this list is search results pertaining to national counter terrorism centre (NCTC) and intelligence agencies of India. Google has crossed all the limits this time and it has done so in great disregard to the right to speech and expression in India and world wide. Opinions disclosing lacunas, limitations and inconsistencies of Indian government and its policies are simply removed to please Indian government and intelligence agencies of India.

While NCTC related SERPs results have been completely censored by Google yet intelligence agencies related news results have been deleted by Google altogether. Some of the results that first appeared in Google SERPs and Google news and then disappeared are:

(a) National Counter Terrorism Centre (NCTC) of India

(2) National Counter Terrorism Centre (NCTC) of India Is Required

(3) Parliamentary Oversight of Intelligence Agencies of India Is Needed- A news piece that disappeared within one hour of its publication.

Even if some of the posts have appeared in the SERPs and Google news, they have been dumped so deep that it is difficult to trace them. Further, SERPS and news results are showing great fluctuations.

It seems the civil and criminal cases filed against Google in India have shown their impact. Google is complying with the demands, even if illegal and unconstitutional, of Indian government and its agencies without even thinking twice. Clearly, Google has deviated from its motto of do not be evil and is doing exactly the opposite.

Monday, February 20, 2012

National Counter Terrorism Centre (NCTC) of India

National Counter Terrorism Centre (NCTC) of India is presently facing stiff oppositions. A majority of them are self created problems but some of them are also arising due to practical difficulties and internal turf war. The net result is that the obvious but unsolvable terrorism dilemma in India still continues.

NCTC, like other governmental projects, is not supported by any legal framework. This is the most inappropriate step taken by the Indian government in general and home ministry in particular. While the constitutionality of the National Investigation Agency Act 2008 (NIAA 2008) is still doubtful yet NCTC without a legal framework is definitely unconstitutional. By tagging it with the Unlawful Activities (Prevention) Act, 1967 this unconstitutionality is not cured.

Add to this the list of other projects of home ministry like National Intelligence Grid (Natgrid) and other similar projects by other ministries like Aadhar project. None of these projects are supported by a legal framework of any kind and they are just pure executive orders violating the constitutional provisions.

Fortunately, the NCTC of India got the Cabinet approval. NCTC would be supported by Natgrid project, Crime and Criminal Tracking Network and System (CCTNS), etc. There is no second opinion that intelligence work is not an excuse for non accountability. Similarly, there is also no second opinion that NCTC of India is also a much needed institution.

The NCTC Project of India is also “very significant” for the national security of India. Terrorist attacks against India are on increase and we need a “specilaised institution” like NCTC to provide and analyse valuable intelligence inputs and leads. However, the inadequacies and unconstitutionalities of NCTC project is proving costly and major hurdle for the successful implementation of the same.

Sunday, February 12, 2012

New GTLDs Applicants Must Ensure Due Diligence Before Applying

As the readers of the blog are aware Internet Corporation for Assigned Names and Numbers (ICANN) has already laid down stringent conditions for the acceptance of an application for registration of new GTLDs. The application amount for normal applicants has been quantified at US $ 1, 85,000. This would keep the non serious applicants out of the race to get a new GTLD.

However, merely giving this high fee would not guarantee that the applicant would get the applied new GTLD. If the applicant fails to make a good case for the grant of applied GTLD, this fee may be wasted. ICANN has clearly said that only “bonfide applicants” would be allotted the applied GTLD. The GTLD application would be minutely scrutinised before allowing the same.

Here lays the importance of a “GTLD due diligence service” that analysis the possibilities of allotment of the proposed GTLD. Perry4Law and Perry4Law Techno Legal Base (PTLB) strongly recommend a GTLD due diligence exercise before making an application to ICANN in this regard.

ICANN’s new generic top level domain names (new GTLDs) registration has begun. As on 12-02-2012, the applicants have 46 more days to apply for new GTLDs. A prior and thorough risks and benefits analysis of applying to new GTLDs registration to ICANN must be undertaken by the applicants. This should include techno legal analysis, new GTLDs due diligence, possible Legal Rights Objections under ICANN's New GTLD scheme, etc.

Further, with an increase in new GTLDs registrations, issues like domain names protection, brands protection, trademarks protection, cybersquatting disputes resolution, cyber law compliances, cyber security requirements, cyber due diligence, etc would also arise. Brand owners and trademark owners must prepare their “strategy” in this regard well in advance.

The legal issues of new GTLDs application, their registration and subsequent litigations would surface and a sound policy in this regard can help in minimising the legal risks associated with the same.

Thursday, February 9, 2012

Cyber Security Laws In India

With the growing incidences of cyber attacks against India, cyber security in India has got the attention of Indian government. Cyber security in India is not satisfactory. Whether it is legal framework or practical implementation, cyber security of India is still lagging far behind that other nations.

We have no dedicated cyber security laws in India and we urgently need a dedicated cyber security legal framework in India. Further, cyber security capabilities of India must be strengthened so that cyber attacks against India’s critical infrastructures can be prevented.

The cyber laws and cyber security trends of India 2011 by Perry4Law and Perry4Law Techno Legal Base (PTLB) has clearly showed the cyber security vulnerabilities of India. Cyber terrorism against India, cyber warfare against India, cyber espionage against India and cyber attacks against India have already increased a lot. Even the cyber law trends of India 2012 by PTLB have also projected an increased rate of cyber crimes in India and cyber attacks against India in the year 2012.

Cyber security laws in India have not been formulated because there is very low cyber law and cyber security awareness in India. As a result we have very few cyber law firms in India and cyber security law firms in India.

Further, cyber security research, training and education in India are also not fully developed. PTLB is managing the exclusive techno legal cyber security centre of India. In the absence of qualitative educational institutes in India, cyber security courses in India are still maturing. Further, cyber security skills development in India is greatly affected in the absence of practical techno legal trainings in this crucial field.

Indian government has now shown some positive response for strengthening cyber security in India. A national critical information infrastructure protection centre (NCIPC) of India has also been proposed by Indian government. This is appositive development and Perry4Law and PTLB welcome this effort of Indian government.

Saturday, February 4, 2012

Internet Intermediary Liability In India

Information Technology Act 2000 (IT Act 2000) is the sole cyber law of India. IT Act 2000 is also regulating the functioning of Internet intermediaries in India. Internet intermediaries’ law and liability in India has become very stringent after the passing of the Information Technology (Intermediaries Guidelines) Rules, 2011 of India.

These Internet intermediaries liability Rules of India demarcates the rights and responsibilities of internet intermediaries in India. If the Internet intermediaries follow these Rules and exercise proper cyber due diligence, they are entitled to a “safe harbour protection”. Otherwise, they are liable for various acts or omission occurring at their respective platforms once the matter has been brought to their notice.

Social media due diligence in India has also emerged out of IT Act 2000 and the corresponding Rules. Now legal actions against foreign websites can be taken in India. Further, cyber litigations against such foreign websites would increase in India in the near future.

Privacy violations and data breach investigations would also be required to be undertaken by these companies in India. Data protection requirements would also add further obligations upon these companies and websites in India. It is of utmost importance for these foreign companies and websites to follow Indian laws in true letter and spirit.

The cyber laws due diligence requirements for companies in India are strenuous in nature and Internet intermediaries in India need to take care of the same to avoid legal troubles. Companies like Google, Facebook, etc must appoint nodal officers in India that can be served with notices and communication pertaining to Internet intermediary obligations in India.

Cyber law due diligence in India is also required to escape liability for online violations of intellectual property rights in India. Liability of Internet intermediaries for copyright violation in India is well known and even foreign companies recognise this fact. The Online Copyright Infringement Liability Limitation Act (OCILLA) of United States has been enacted as part of the Digital Millennium Copyright Act (DMCA) 1998. Foreign companies like Google, Facebook, etc are complying with the DMCA requirements while taking down intellectual property violating contents.

However, these foreign companies and websites are still not aware of the requirements of India laws. Further, even if they are aware, they are not complying with the same in the appropriate manner. Time has come for these foreign companies to take Indian laws, especially intellectual property and cyber law, more seriously.

Privacy Rights, Privacy Laws and Data Protection Laws In India

Privacy rights and data protection rights are essential part of civil liberties protection in cyberspace. With the growing use of information and communication technology (ICT), privacy rights have acquired a very different meaning. It would not be wrong to assume privacy and data protection rights as integral part of human rights protection in cyberspace.

We have no dedicated privacy laws in India and data protection laws in India. The privacy rights in India in the information era are unique in nature that requires a techno legal orientation. The growing use of e-surveillance in India has also necessitated enactment of data privacy laws in India, privacy rights and laws in India and data protection law in India.

At the policy level as well privacy rights and data protection rights have been ignored in India. In fact, an Indian national privacy policy is missing till now. Even legislative efforts in this regard are not adequate in India. A national privacy policy of India is urgently required.

A right to privacy bill of India 2011 has been suggested in the year 2011 yet till now we do not have any conclusive draft in this regard that can be introduced in that parliament of India. In fact, we are still waiting for a public disclosure of final and conclusive proposed draft right to privacy bill 2011 of India that can be discussed in the parliament.

The Supreme Court of India must expand privacy rights in India as that is the need of hour. Fortunately, the issue is already pending before it and there would not be much trouble in formulating a privacy framework for India.

However, the call is for the Indian parliament to take and it must enact sound and effective privacy and data protection laws for India.

Friday, February 3, 2012

Modernisation of Postal Department Of India In Pipeline

The postal department of India is performing many crucial functions. With the passage of time, the postal department of India also needs technological upgradation and modernisation initiatives. This is not a difficult task to achieve as the department of post is attached with the union ministry of communication and information technology (MCIT).

Realising the potential of a modern postal department, the union minister of MCIT Mr. Kapil Sibal has started the modernisation and upgradation process of postal department of India. We at Perry4Law and Perry4Law Techno Legal Base (PTLB) believe that there are many aspects of e-commerce, e-governance and banking that can be combined with the postal department of India.

In fact, the postal department of India has already applied to the Reserve Bank of India (RBI) for a banking licence. Mr. Kapil Sibal had written to the Finance Minister, Mr. Pranab Mukherjee, to expedite the granting of the banking licence.

Further, a national postal policy targeting expansion and modernisation of the postal network would be announced during this year. Although the India government does not intend to issue licences to courier service companies yet it would make it mandatory for them to register.

The national postal policy of India aims at modernising postal services in India. The policy is expected to make the department of post adopt a more financially viable revenue model. It would also provide affordable services at all points in the country as part of its Universal Service Obligations of India.

There is a good scope of public private partnership (PPP) in this modernisation drive. For instance, various value added services can be provided through the PPP model. Similarly, PPP can also help the department of post in expanding its products and services range beyond the current core functions.

India currently has 1.55 lakh post offices, 95 per cent of which are situated in rural areas. With the use of information technology, urban areas can be provided better postal services. This is a good step in right direction and Perry4Law and PTLB welcomes the same.

Thursday, February 2, 2012

Are Google, Facebook, Microsoft, Heading For A Trouble?

Companies like Google, Facebook, Yahoo, Microsoft, etc facing a cyber battle in New Delhi, India. A criminal complaint against these companies is pending before a Trial Court of New Delhi. Obviously, these companies did what was best in their interest. They petitioned the Delhi High Court for quashing of criminal complaint against them.

Before the Delhi High Court, the respondent has placed it final arguments on 02-02-2012 and the petitioner would put its final arguments on 14-02-2012. Meanwhile, the Delhi High Court has dismissed a plea of a business man to hear him in this case for violation of his right to speech and expression. The Delhi High Court observed that till date neither the Trial Court nor the Delhi High Court has passed any order which curtailed the citizens' fundamental rights of freedom of speech and expression.

The Delhi High Court also observed that Google and Facebook do have the right to freedom of speech and expression but they are not above the law. There is no second opinion about this proposition as companies like Google, Facebook, Microsoft, Yahoo, etc must comply with Indian laws. Further, legal actions against foreign websites in India can be taken if they fail to comply with Indian laws. In fact, cyber litigations against foreign websites would increase a lot in India.

In fact companies like Twitter and Google have already taken steps to ensure compliance with Indian laws. Twitter has put in place a country specific mechanism to censor/remove offending tweets. Google has also started redirecting Indian bloggers to ***.blogspot.in domains instead of ***.blogspot.com domain. This method would allow Google to remove offending contents pertaining to ***.blogspot.in alone once a valid legal request is made from a particular country or residents of that country.

Yahoo has separately approached Delhi High Court and requested for a separate trial as its case falls in a different category. The Delhi High Court has accepted the request of Yahoo and issued necessary notices in this regard.

Now the companies in question have two options. Either they declare that these laws are not binding upon them or they comply with the same. It seems companies are deliberately avoiding observance of Indian laws. This is an unacceptable behaviour that Indian government cannot afford to allow. It is not a case that only Indian government is feeling offended by non observance of Indian laws. Even private individuals and companies face problems when requests for removal of offending and intellectual property violating contents are made.

Another problem that Indian government must take care of pertains to conflict of laws. When laws of India are clearly violated, there is no sense in complying with laws of foreign jurisdictions, especially when the companies involved in such process also have sound business and commercial presence in India. India must develop an alternative mechanism to DMCA complaints to such India based subsidiary companies as well as their parent companies based in foreign jurisdictions.

These companies are openly violating the requirements of Information Technology (Intermediaries Guidelines) Rules, 2011 without any legal justifications. These companies cannot use the subsidiary argument for long as Indian government would formulate more stringent norms for Indian subsidiaries dealing in information and communication technology (ICT) related matters.

This proposition is also reflected in the recent hearing of the Delhi High Court. Justice Suresh Kait observed that these companies are not above the law and their rights are to be determined under the laws of the land. He further observed that nobody is against the freedom of speech and expression. In fact, despite the summoning order against the websites, neither the Trial Court nor Delhi High Court has asked the websites to shut or restrain from functioning. They have only been summoned in accordance with the law as nobody is above it.

The next date of hearing before the Delhi High court would be on 14-02-2012 where these companies would put forward their final arguments. Let us hope that the Delhi High Court would deliver cyber justice to India.

New National Telecom Network Security Policy Of India

Recently a body named National Telecom Network Security Coordination Board (NTNSCB) of India has been proposed to be constituted by Indian government. The aim of establishment of NTNSCB is to ensure cyber security and telecom network security in India in a centralised manner.

The establishment of proposed NTNSCB would require formulation of telecom security policy in India and telecom equipments security framework in India at the first instance. There is no local or indigenous mechanism in India through which telecom hardware and software can be analysed for backdoors and malware.

However, Indian government has declared in the past that telecom equipments must be certified by TEC before use in India. A proposal to store call data records has also been given. The norms for import of telecom equipments in India would also be formulated very soon. Similarly, a telecom security policy of India may also be drafted.

Now as per recent media reports, telecom operators, equipment vendors, enterprise communication network users will all be made responsible for securing telecom networks under a new telecom network security policy of India. It has been reported that the policy would be drafted by the Department of Telecom (DoT) and it also intends to make network robust so that they can deal with disasters and crisis situations.

Under the proposed telecom network security policy, all telecom network equipments will have to get a “safe to connect certification” before they can be used in India. The certification will have to be done through a testing laboratory. Periodic test of the telecom networks will be carried out to ensure that no threat has crept into the network.

The proposed telecom network security also wants corporates using global enterprise communication networks to ensure that the network within the country complies with the security requirements. It is possible that network of these enterprises are subjected to laws of different countries, which may not be the same. Therefore, enterprises would have to adopt a little flexible approach in building their network security policies in such a way that part of the network in the geographical boundary of the country follows the security requirements mandated by this policy.

The policy also suggests setting up a centralised institution to address network and cyber security issues. Presently, the central monitoring system (CMS) project of India is one such centralised mechanism that DoT is planning to launch. A national cyber security policy of India may strengthen this initiative of DoT.

Sunday, January 29, 2012

Google And Facebook Must Comply With Indian Laws

Companies like Google, Facebook, etc are facing criminal trial in India. With the passage of time, more and more legal arsenal is now becoming available for Indian courts to hold these companies liable for violation of Indian laws. In fact, hints are now given that these companies are deliberately ignoring and violating Indian laws like copyright law, trademarks law and cyber law of India of which United States must take a serious and urgent notice.

Even laws of United States like Digital Millennium Copyright Act (DMCA) 1998 (DMCA) and Online Copyright Infringement Liability Limitation Act (OCILLA) are not complied with by many US companies and websites. A recent DMCA complaint filed with Google Incorporation and notice to Google India are still to be complied with as per US and Indian laws.

In fact, Perry4Law and Perry4Law Techno Legal Base (PTLB) have also provided their suggestion for the strengthening of remedies for small copyright claims in US that covers acts or omissions of companies like Google as well. These suggestions also cover the practical difficulties that Indian nationals, companies and Indian government face while getting the offending contents removed from companies like Google, WordPress, etc.

The new privacy policy and terms of service of Google have been recently announced and the same would become applicable from 01-03-2012. It has many far reaching legal consequences that are applicable to Indian cyberspace as well. India must develop alternatives of DMCA complaint to Google, WordPress and other companies and websites. Wherever applicable, legal blocking of foreign websites in India as per Indian laws must also be performed.

We believe that India must take urgent steps so that companies and websites like Google, Facebook, etc comply with legal demands as per Indian laws as well. We suggest the following in this regard:

(1) All subsidiary/Joint ventures companies operating in India that deal in information technology and online environment, must mandatorily establish a server in India. Otherwise, such companies and their websites should not be allowed to operate in India.

(2) A stringent liability for Indian subsidiaries dealing in information technology and online environment must be established by laws of India.

(3) More stringent online advertisement and e-commerce provisions must be formulated for Indian subsidiary companies and their websites.

We at Perry4Law and PTLB believe that any attempt by Internet intermediaries to pre screen contents uploaded by users in India is not practical and feasible. However, we believe that cyber law due diligence by Internet intermediaries operating in India cannot be taken casually and with great disregard to India laws as is presently happening in India. If companies are not willing to follow either foreign laws like DMCA or Indian laws, they clearly lack the intention to comply with various legal frameworks.

In any case, companies and websites that have Indian existence and are deriving financial gains from India must adhere to India’s laws that they are currently flouting. We hope the lower court and Delhi High Court would consider these aspects as well while deciding the fate of these companies.

Saturday, January 28, 2012

India Must Invent Alternatives Of DMCA Complaint To Google And Others

Of late foreign companies and websites like Google, Facebook, etc are increasingly finding themselves in the legal net of India. In fact, a criminal case is already pending against Google, Facebook, etc for failure to exercise cyber law due diligence.

If websites like Google, Facebook, etc fail to exercise cyber law due diligence as per the requirements of Indian information technology act, 2000 (IT Act 2000), the Internet intermediary protection is lost. All that is required to make Internet intermediaries like Google, Facebook, etc liable under Indian laws is to notify them about the objectionable contents.

The objectionable contents may take the form of defamatory contents, cyber stalking, pornography, religious riots incitement materials, intellectual property violating contents, etc. Indian cyber law allows 36 hours to such Internet intermediaries to remove the offending contents from their platforms.

While there is no problem in applying Indian laws to foreign companies and websites operating in India yet these companies and websites use the façade of parent company by declaring themselves as mere subsidiaries of such parent companies. And when these parent companies are called to comply with Indian laws, they openly deny the same by saying that they are governed by foreign laws.

Naturally, Indians also cannot be forced to follow foreign laws like Digital Millennium Copyright Act (DMCA) 1998 and Online Copyright Infringement Liability Limitation Act (OCILLA).

As many of you may be aware that we are currently pursuing a copyright violation, trademark infringement and impersonation matter with Google Incorporation and Google India. Further, Perry4Law and Perry4Law Techno Legal Base (PTLB) have also provided their suggestions to US Copyright office regarding remedies for small copyright claims in United States so that interests of small copyright holders can be protected.

We have also filed a DMCA complaint to Google Incorporation (US) and a notice under IT Act 2000 to Google India on 22-01-2012 for copyright violation, trademark infringement and impersonation.

From the responses we received so far, it seems Google Incorporation is not willing to respect and comply with Indian laws and Indian legal requests even if DMCA procedure is duly complied with. We are still waiting for the response of Google India and would proceed further once the time limit of 36 hours is expired.

However, this has forced us to think in a very different direction. We believe that India must take urgent steps so that companies and websites like Google, Facebook, etc comply with legal demands as per Indian laws as well. We suggest the following in this regard:

(1) All subsidiary/Joint ventures companies in India, especially those dealing in information technology and online environment, must mandatorily establish a server in India. Otherwise, such companies and their websites should not be allowed to operate in India.

(2) A stringent liability for Indian subsidiaries dealing in information technology and online environment must be established by laws of India.

(3) More stringent online advertisement and e-commerce provisions must be formulated for Indian subsidiary companies and their websites.

Further, US government needs to change its policies towards foreign IP infringements and enforcements. Incidences like not following laws of other jurisdictions are responsible for enacting harsh laws like SOPA and PIPA. These incidences are also responsible for filing of civil and criminal complaints against companies like Google in India.

Indian government and Indian courts need to consider these aspects while deciding various cases against foreign websites and social media platforms. If Indian intellectual property and cyber laws are not respected, there is no other option but to choose a harsh stand of foreign websites blocking in India.

The matter would come for hearing before the Delhi High Court on 02-02-2012 and we hope the Delhi High Court would take judicial note of these facts also while adjudicating upon that matter.

Thursday, January 26, 2012

Google’s New Privacy Policy And Terms Of Service As On March 2012

Google is presently managing 60 different privacy policies across multiple products and services of Google and is in the process of replacing them with a single privacy policy that’s a lot shorter and easier to read. The updated Google Privacy Policy and Terms of Service are available online to read and analyse. These changes will take effect on March 1, 2012.

Google new privacy policy would allow sharing of personal information for many reasons including for legal reasons. Google will share personal information with companies, organizations or individuals outside of Google if it has a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:

(a) Meet any applicable law, regulation, legal process or enforceable governmental request.
(b) Enforce applicable Terms of Service, including investigation of potential violations.
(c) Detect, prevent, or otherwise address fraud, security or technical issues.
(d) Protect against harm to the rights, property or safety of Google, our users or the public as required or permitted by law.

Google’s enforcement aspects have also been explained by the new privacy policy. Google regularly reviews its compliance with the Privacy Policy. Google also adheres to several self regulatory frameworks. When Google receives formal written complaints, Google will contact the person who made the complaint to follow up. Google works with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of personal data that Google cannot resolve with our users directly.

Google’s Terms of Services (TOS) also carry many interesting aspects. These TOS provide that the user must follow any policies made available to him within the Services. Google does not allow misusing its Services. For example, a user must not interfere with Google’s Services or try to access them using a method other than the interface and the instructions that Google provides. A user may use Google’s Services only as permitted by law, including applicable export and re-export control laws and regulations. Google may suspend or stop providing its Services to the user if he does not comply with Google’s terms or policies or if Google is investigating suspected misconduct.

Google’s Services display some content that is not Google’s. This content is the sole responsibility of the entity that makes it available. Google may review content to determine whether it is illegal or violates its policies, and Google may remove or refuse to display content that Google reasonably believe violates its policies or the law. But that does not necessarily mean that Google reviews content.

Google responds to notices of alleged copyright infringement and terminate accounts of repeat infringers according to the process set out in the U.S. Digital Millennium Copyright Act.

Google provides information to help copyright holders manage their intellectual property online. If you think somebody is violating your copyrights and want to notify Google, you can find information about submitting notices and Google’s policy about responding to notices in its Help Center.

The laws of California, U.S.A., excluding California’s conflict of laws rules, will apply to any disputes arising out of or relating to these terms or the Services. All claims arising out of or relating to these terms or the Services will be litigated exclusively in the federal or state courts of Santa Clara County, California, USA, and you and Google consent to personal jurisdiction in those courts.

Video Conferencing Laws In India

Video conferencing is increasingly being used for the purposes of digital evidencing in India. Video conferencing would also be an important part of e-courts of India once they would be established. Presently, video conferencing is used for many computerised courts in India.

The information technology act 2000 (IT Act 2000) is the cyber law of India that has provided a legal framework for electronic governance, electronic commerce and many other aspects of online dealing. By implications, the IT Act 2000 also allows use of video conferencing for various purposes.

Despite these provisions and active use of video conferencing in India, video conferencing in India is a troubled technology. The recent episode of Rajasthan government and Rajasthan police not allowing the video conferencing of Salman Rushdie shows Indian anxiety with use information technology.

This controversy happened because we have no dedicated video conferencing laws and regulations in India. Obviously, we have no dedicated video conferencing blocking laws in India as well. In the absence of a clear cut law, Indian government is still applying traditional methods to regulate video conferencing in India. However, if at all any law applies to video conferencing in India the same must be the IT Act 2000 and not any Police Act or local law.

Surprisingly, few of our posts pertaining to video conferencing disappeared from Google India’s SERPs and Blogs search results and appeared again only after reporting of the same. It seems controversial posts that are well within the constitutional right to speech and expressions are screened in India once they are posted. But who is doing so is still a big question that must be answered to properly analyse the role of Internet intermediaries in India in this regard.

While Internet intermediaries have declined to pre screen users generated contents yet post screening is happening in many cases. If this post screening is happening due to Internet intermediary law of India then such post screening and removal may be fine if legally and constitutionally done. This is so because if the companies and Internet intermediaries fail to observe cyber law due diligence in India they may face civil and criminal trials in India.

It would be a good idea to clarify the position of use of video conferencing in India by Indian government so that its uses, abuses and regulation can be legally managed.

Wednesday, January 25, 2012

Foreign Exchange (Compounding Proceedings) Rules, 2000 Of India

Reserve Bank of India (RBI) has been appointed as one of the Compounding Authority under the Foreign Exchange Management Act 1999 (FEMA 1999) that can compound certain contravention under the FEMA 1999. The regional offices of RBI have been given compounding powers under the FEMA Act 1999.

Further, the RBI master circular on compounding of contraventions under Indian FEMA 1999 has been recently issued. It prescribes a set procedure for compounding of contraventions under Indian FEMA 1999. The compounding authority (CA) can compound contraventions committed under the FEMA Act 1999 if an application has been duly made in the prescribed manner. Even a post compounding procedure of compounding authority under the Indian FEMA 1999 has been prescribed.

The Central Government has formulated the Foreign Exchange (Compounding Proceedings) Rules, 2000 under section 46 read with sub-section (1) of section 15 of the FEMA, 1999. The Rules are as follow:

(1) These Rules have come into force on the 1st day of June, 2000.

(2) Definitions - In these rules, unless the context otherwise requires -
(a) 'Act' means the Foreign Exchange Management Act, 1999 (42 of 1999);
(b) 'Authorised officer' means an officer authorised under sub-rule (1) of rule 3;
(c) 'Applicant' means a person who makes an application under section 15 (1) of the Act to the compounding authority;
(d) 'Compounding Order' means an order issued under sub-section (1) of Section 15 of the Act;
(e) 'Form' means a form appended to these rules;
(f) 'Section' means a section of the Act;
(g) All other words and expressions used in these rules and not defined but defined in the Act, shall have the meaning respectively assigned to them in the Act.

(3) (1) 'Compounding Authority' means the persons authorised by the Central Government under sub-section (1) of section 15 of the Act, namely;
(a) An officer of the Enforcement Directorate not below the rank of Deputy Director or Deputy Legal Adviser (DLA).
(b) An officer of the Reserve Bank of India not below the rank of the Assistant General Manager.

(4) Power of Reserve Bank to compound contravention -
[(1) If any Person contravenes any provisions of Foreign Exchange Management Act, 1999 (42 of 1999) except clause (a) of Section 3 of the Act.]
(a) In case where the sum involved in such contravention is ten lakhs rupees or below, by the Assistant General Manager of the Reserve Bank of India;
(b) In case where the sum involved in such contravention is more than rupees ten lakhs but less than rupees forty lakhs, by the Deputy General Manager of Reserve Bank of India;
(c) In case where the sum involved in the contravention is rupees forty lakhs or more but less than rupees hundred lakhs by the General Manager of Reserve Bank of India;
(d) In case the sum involved in such contravention is rupees one hundred lakhs or more, by the Chief General Manager of the Reserve Bank of India;

Provided further that no contravention shall be compounded unless the amount involved in such contravention is quantifiable.

(2) Nothing contained in sub-section (1) shall apply to a contravention committed by any person within a period of three years from the date on which a similar contravention committed by him was compounded under these rules.

Explanation: For the purposes of this rule, any second or subsequent contravention committed after the expiry of a period of three years from the date on which the contravention was previously compounded shall be deemed to be a first contravention.

(3) Every officer specified under sub-rule (1) of rule 4 of the Reserve Bank of India shall exercise the powers to compound any contravention subject to the direction, control and supervision of the Governor of the Reserve Bank of India.

(4) Every application for compounding any contravention under this rule shall be made in Form to the Reserve Bank of India, Exchange Control Department, Central Office, Mumbai along with a fee of Rs. 5000/- by Demand Draft in favour of compounding authority.

(5) The Power of Enforcement Directorate to compound contraventions -

2[(1) If any Person contravenes provisions of Section 3(a) of Foreign Exchange Management Act.]

(a) In case where the sum involved in such contravention is five lakhs rupees or below, by the Deputy Director of the Directorate of Enforcement;
(b) In case where the sum involved in such contravention is more than rupees five lakhs but less than rupees ten lakhs, by the Additional Director of the Directorate of Enforcement;
(c) In case where the sum involved in the contravention is rupees ten lakhs or more but less than fifty lakhs rupees by the Special Director of the Directorate of Enforcement;
(d) In case where the sum involved in the contravention is rupees fifty lakhs or more but less than one crore rupees by Special Director with Deputy Legal Adviser of the Directorate of Enforcement;
(e) In case the sum involved in such contravention is one crore rupees or more, by the Director of Enforcement with Special Director of the Enforcement Directorate.
Provided further that no contravention shall be compounded unless the amount involved in such contravention is quantifiable.

(2) Nothing contained in sub-section (1) shall apply to a contravention committed by any person within a period of three years from the date on which a similar contravention committed by him was compounded under these rules.

Explanation: For the purposes of this rule, any second or subsequent contravention committed after the expiry of a period of three years from the date on which the contravention was previously compounded shall be deemed to be a first contravention.

(3) Every officer of the Directorate of Enforcement specified under sub-rule (1) of this rule shall exercise the powers to compound any contravention subject to the direction, control and supervision of the Director of Enforcement.

(4) Every application for compounding any contravention under this rule shall be made in Form to the Director, Directorate of Enforcement, New Delhi, along with a fee of Rs.5000 by DD in favour of the Compounding Authority.

(6) Where any contravention is compounded before the adjudication of any contravention under section 16, no inquiry shall be held for adjudication of such contravention in relation to such contravention against the person in relation to whom the contravention is so compounded.

(7) Where the compounding of any contravention is made after making of a complaint under sub-section (3) of section 16, such compounding shall be brought by the authority specified in rule 4 or rule 5 in writing, to the notice of the Adjudicating Authority and on such notice of the compounding of the contravention being given, the person in relation to whom the contravention is so compounded shall be discharged.

(8) Procedure for Compounding -

(1) The Compounding Authority may call for any information, record or any other documents relevant to the compounding proceedings.
(2) The Compounding Authority shall pass an order of compounding after affording an opportunity of being heard to all the concerned as expeditiously as possible and not later than 180 days from the date of application.

(9) Payment of amount compounded -

The sum for which the contravention is compounded as specified in the order of compounding under sub-rule (2) of rule 8, shall be paid by demand draft in favour of the Compounding Authority within fifteen days from the date of the order of compounding of such contravention.

(10) In case a person fails to pay the sum compounded in accordance with the rule 9 within the time specified in that rule, he shall be deemed to have never made an application for compounding of any contravention under these rules and the provisions of the Act for contravention shall apply to him.

(11) No contravention shall be compounded if an appeal has been filed under section 17 or section 19 of the Act.

(12) Contents of the order of the Compounding Authority -

(1) Every order shall specify the provisions of the Act or of the rules, directions, requisitions or orders made there under in respect of which contravention has taken place along with details of the alleged contravention.
(2) Every such order shall be dated and signed by the Compounding Authority under his seal.

(13) Copy of the order - One copy of the order made under rule 8(2) shall be supplied to the applicant and the Adjudicating Authority as the case may be.

Tuesday, January 24, 2012

Post Compounding Procedure Of Compounding Authority Under Indian FEMA Act 1999

In this special column, Mr. B.S.Dalal, Senior Partner at Perry4Law and a Techno Legal Banking and Financial Expert, is discussing the post compounding procedure for Compounding Of Contraventions Under Indian FEMA, 1999, as followed by the Compounding Authority.

Reserve Bank of India (RBI) is one of the Compounding Authority under the Indian Foreign Exchange Management Act (FEMA), 1999 that compounds certain contravention under the FEMA Act 1999. The regional offices of RBI have been given compounding powers under the FEMA Act 1999.

RBI master circular on compounding of contraventions under Indian FEMA 1999 has been recently issued. It prescribes a set procedure for compounding of contraventions under Indian FEMA 1999. The compounding authority (CA) can compound contraventions committed under the FEMA Act 1999 if an application has been duly made in the prescribed manner.

Once an application has been made in prescribed manner and a compounding order has been made, the post compounding procedure starts. It is as follows:

(1) The sum for which the contravention is compounded as specified in the order of compounding under sub-rule (2) of Rule 8 of Foreign Exchange (Compounding Proceedings) Rules, 2000 is payable by way of a demand draft in favour of the “Reserve Bank of India” within fifteen days from the date of the order of compounding of such contravention. The demand draft has to be deposited in the manner as directed in the compounding order.

(2) The provisions of the Rules do not confer any right on the contravener, after a compounding order is passed, to seek to withdraw the order or to hold the compounding order as void or request a review of the order passed by the CA.

(3) In case of failure to pay the sum compounded within the time specified in the compounding order, it shall be deemed in terms of Rule 10 of the Foreign Exchange (Compounding Proceedings) Rules, 2000, that the contravener had never made an application for compounding of any contravention under these Rules.

(4) On realization of the demand draft for the sum for which contravention is compounded, a certificate in this regard shall be issued by the Reserve Bank subject to the specified conditions, if any, in the order.

(5) In respect of the contraventions of FEMA, 1999 (as defined in section 13 of the FEMA, 1999), which are not compounded by the Compounding Authority, other relevant provisions of FEMA, 1999, shall apply.

However, there are certain pre-requisites for compounding process that must be met by the contravener before a compounding order can be passed. These are as follow:

(1) In respect of a contravention committed by any person within a period of three years from the date on which a similar contravention committed by him was compounded under the Compounding Rules, such contraventions would not be compounded. Such contravention would be dealt with under relevant provisions of the FEMA, 1999 for contravention. Any second or subsequent contravention committed after the expiry of a period of three years from the date on which the contravention was previously compounded shall be deemed to be a first contravention.

(2) Contraventions relating to any transaction where proper approvals or permission from the Government or statutory authority concerned, as the case may be, have not been obtained, such contraventions would not be compounded unless the required approvals are obtained from the authorities concerned.

(3) Cases of contravention, such as, those having a money laundering angle, national security concern and / or involving serious infringements of the regulatory framework or where the contravener fails to pay the sum for which contravention was compounded within the specified period in terms of the compounding order, shall be referred to the Directorate of Enforcement for further investigation and necessary action under FEMA, 1999 or to the authority instituted for implementation of the Prevention of Money Laundering Act 2002, (PMLA) or to any other agencies, for necessary action , as deemed fit.

(4) The Reserve Bank generally advises the persons concerned of their choice and option to make an application for compounding as and when such contraventions come to its notice. The facts constituting such contraventions will be brought to the notice of the Directorate of Enforcement in case no application for compounding is made within the time indicated by the Reserve Bank.

RBI Master Circular On Compounding Of Contraventions Under Indian FEMA, 1999

In this special column, Mr. B.S.Dalal, Senior Partner at Perry4Law and a Techno Legal Banking and Financial Expert, is discussing the current position of Compounding Of Contraventions Under Indian FEMA, 1999.

In the past, Reserve Bank of India (RBI) has liberalised and decentralized many crucial issues of Indian Foreign Exchange Management Act (FEMA), 1999. This includes the procedure for compounding of contraventions under the FEMA 1999. Now the RBI has issued a master circular that further elaborates about this crucial issue.

The compounding of contraventions under FEMA, 1999 is a voluntary process by which an applicant can seek compounding of an admitted contravention of any provision of FEMA, 1999 under Section 13(1) of the FEMA, 1999.

The compounding provisions are presently available till 30th June 2012 as they are subject to a sunset clause of one year. In short, the master circular would cease to be operative on July 1, 2012 and would be replaced by a new Master Circular in this regard.

Under the FEMA 1999, if an individual/person violates the provisions of this Act or corresponding rules, notifications, direction, etc, he shall, upon adjudication, be liable to a penalty up to thrice the sum involved in such contravention where the amount is quantifiable or up to Rupees Two lakh, where the amount is not quantifiable.

For repeated infringers more stringent provisions have been prescribed. The Act provides that where the contravention is a “continuing one”, further penalty, which may extend to Rupees Five thousand for every day after the first day during which the contravention continues, may be imposed.

As per the Rule 4 of the Foreign Exchange (Compounding Proceedings) Rules, 2000, the powers to compound the contraventions have been prescribed for compounding authorities with regard to the sum involved in such contravention and no contravention shall be compounded unless the amount involved in the contravention is quantifiable.

The Foreign Exchange (Compounding Proceedings) Rules, 2000 empowers RBI to compound contraventions under FEMA, 1999. The provisions of Section 15 of FEMA, 1999 permit compounding of contraventions and empower the Compounding Authority to compound any contravention as defined under Section 13 of the Act on an application made by the person committing such contravention either before or after the institution of adjudication proceedings.

The responsibility of administering compounding of contraventions has been entrusted to RBI except contraventions that are covered under Section 3(a) of FEMA, 1999. Thus, collectively the compounding powers of RBI and the Directorate of Enforcement (DoE), respectively, are as under:

(a) RBI has been empowered to compound the contraventions of all the Sections of FEMA, 1999, except clause (a) of Section 3 of the Act,

(b) Directorate of Enforcement would exercise powers of compounding under clause (a) of Section 3 of FEMA, 1999 (dealing essentially with Hawala transactions).

For effective implementation of compounding process under FEMA, 1999, RBI has framed the procedure for compounding of contraventions. Once a contravention has been compounded by the Compounding Authority, no proceeding or further proceeding will be initiated or continued, as the case may be, against the contravener.

The Regional Offices of the RBI, as mentioned below, can compound the contraventions of FEMA involving (i) delay in reporting of inward remittance, (ii) delay in filing of form FC-GPR after allotment of shares and (iii) delay in issue of shares beyond 180 days (viz. paragraphs 9(1)(A), 9(1)(B) and 8, respectively, of the Schedule I to the Foreign Exchange Management (Transfer or Issue of Security by a Person Resident Outside India) Regulations, 2000, notified vide Notification No. FEMA 20/2000-RB dated 3rd May 2000 and as amended from time to time:

(a) Bhopal, Bhubaneshwar, Chandigarh, Guwahati, Jaipur, Jammu, Kanpur, Kochi, Patna and Panaji for amount of contravention below Rupees One hundred lakh only (Rs. 1,00,00,000 /-).

(b) Ahmedabad, Bangalore, Chennai, Hyderabad, Kolkata, Mumbai and New Delhi for amount of contravention without any limit.

Video Conferencing Blocking Laws In India

Video conferencing has revolutionized the way our say to day affairs are managed. Video conferencing facilitates many important commercial and personal communications in a cost effective and efficient manner.

Obviously, video conferencing is regulated by laws of various nations. However, we have no dedicated video conferencing law in India. Of course, some shades of video conferencing regulations are governed by the cyber law of India incorporated in the form of information technology act 2000 (IT Act 2000).

However, there is no express provision that talks about blocking of video conferencing in India except to the extent permitted by the IT Act 2000. Video conferencing, just like other electronic communications, should be allowed unless it can be blocked as per the provisions of IT Act 2000 or other applicable laws. Even for such blocking of video conferencing in India, the norms established by the IT Act 2000 or any other similar law must be followed.

It seems the norms laid down by the IT Act 2000 have not been followed by the Rajasthan government and Rajasthan police and by not allowing the video conferencing of Salman Rushdie, without complying with the requirements of IT Act 2000, they have clearly transgressed the constitutional limitations that they are constitutionally bound to observe.

The fundamental right to speech and expression cannot be defeated through arbitrary and extraneous methods. Right to speech and expression can be curtailed only as per the well established constitutional procedure.

Although the intentions of Rajasthan government may be legal and justified yet the manner of executing those intentions is clearly unconstitutional. The legality and constitutionality of the Rajasthan government’s action is still doubtful and appropriate action must be taken in this regard.

Video Conferencing Laws And Regulations In India

Use of vide conferencing in business community of India is not new and it is in use for long. Even use of vide conferencing for legal and judicial purposes is not new in India. Courts in India have been using video conferencing for litigation purposes especially for receiving evidence from witness.

Even Indian laws like Information Technology Act, 2000 (IT Act 2000), Code of Criminal Procedure, 1973, Indian Evidence Act, 1872, etc allows use of video conferencing for various legal and judicial purposes. The cyber law of India even confers recognition to electronic documents, e-governance and e-commerce.

Use of information technology for legal and judicial purposes is well known. For instance, IT can be use for establishment of e-courts in India. Similarly, IT can also be used for establishing online dispute resolution (ODR) mechanism in India. Even electronic bail granting and communication system in India may be a possibility in near future.

However, use of video conferencing in India is not free from trouble. Recently a man who filed his divorce petition through a video conference from Canada was directed to make a personal appearance in the court. Now personal appearance is a concept that strikes at the very concept of e-courts and video conferencing.

Similarly, the recent cancellation of the Salman Rushdie’s video conferencing in India is another example of troubled use of the same in India. It seems the permission to broadcast such video conferencing was not given by the police.

Crucial speech and expression and law and order maintenance issues are involved in such cases. There is an urgent need to formulate clear and constitutional norms and regulations regarding video conferencing in India.

Monday, January 23, 2012

Legal Issues Of Cloud Computing In India

Cloud computing is a process in which essential hardware and software based services are provided by a third party with no requirement to install such hardware and software by the service seeker. In other words, computational powers, hardware upgrades and latest software are provided on rent in an online environment where individuals and organisations can use the same.

Cloud computing is basically a cost saving mechanism where hardware and software costs are saved by using third party hardware and software. However, cloud computing has its own share of troubles especially in countries like India.

For instance, as per the research and studies of Perry4Law and Perry4Law Techno Legal Base (PTLB), cloud computing in India is risky and India is not ready for cloud computing. Now even other companies have endorsed this conclusion and it has been reported that chief information officers (CIOs) in India are not comfortable using cloud computing in India.

So the chief problem that is emerging in India is that cloud computing in India is still not trusted and India is still not ready for cloud computing. We have no cloud computing policy of India.

This is the reason why cloud computing in India is still at the infancy stage. The primary reasons for this situation is absence of legal framework for cloud computing in India, missing privacy laws, absence of data protection laws in India, inadequate data security in India, etc. Even the basic level cloud computing regulations in India are missing.

Even the cloud computing due diligence in India is missing and companies and individuals are using the same in great disregard of the various laws of India. Cloud computing service providers in India are required to follow cyber law due diligence in India. The cyber law due diligence for Indian companies is now well established but cloud computing and e-commerce service providers are not taking it seriously.

In fact, some companies are already facing a criminal trial in India for posting of objectionable contents by third parties on their platforms. Cloud companies are also required to follow the cyber law of India before they establish their businesses in India. This seems to be missing for the time being.

In fact, many legal experts in India have opined that India must not use software as a service (SaaS), cloud computing, m-governance, etc till proper legal frameworks and procedural safeguards are at place. This has also been accepted by the CIOs community and it is now for the Indian government to do the needful.

Huawei And ZTE In Telecom Security Tangle Of India

With the proposal to establish National Telecom Network Security Coordination Board (NTNSCB) of India, the issues of cyber security and telecom security in India have arisen once again. Even the national telecom policy of India 2011 reflects these concerns.

The issues pertaining to telecom security policy in India and telecom equipments security framework in India are not new. The home ministry of India and ministry of information and communication technology have been raising security concerns regarding telecom hardware manufactured by foreign dealers. Concerns regarding possible existence of backdoors in such hardware are frequently raised in India.

There is no mechanism in India through which telecom hardware and software can be analysed for backdoors and malware. Indian government has declared that telecom equipments must be certified by TEC before use in India. A proposal to store call data records has also been given. The norms for import of telecom equipments in India would also be formulated very soon (may be already formulated).

At present, India has two separate policy guidelines for import of telecom gear. Chinese vendors such as Huawei and ZTE follow the July 2010 guidelines while Western telecom equipment manufacturers were given the option of following the policy issued in late 2009, after they refused to operate in India under the July rules.

According to latest news, in an internal report, the security unit of the department of telecommunication (DoT) has raised fresh concerns about Chinese equipment vendors - Huawei and ZTE. The report adds that India must also be on the guard against equipment from the West, including US and Europe. It has been reported that the new security norms had brought all these vendors under a common security framework.

To counter the possible threats from foreign hardware vendors, India is encouraging to develop indigenous hardware manufacturing capabilities. In fact, India has announced to give preferences, including tax cuts, to indigenously manufactured telecoms equipment, despite concerns raised by the United States and the European Union, which had said that such concessions would violate WTO commitments.

There is an urgent need to provide reasonable and sufficient regulatory norms regarding telecom security in India. The sooner they are formulated the better it would be for all the telecom stakeholders in India.

National Telecom Network Security Coordination Board (NTNSCB) Of India

Announcement pertaining to telecom security and cyber security in India have been made from time to time. Even a new national telecom policy of India 2011/2012 has also been suggested by Department of Telecommunication (DoT), India.

DoT has also suggested the creation of the Telecoms Security Council of India (TSCI) that would look into security related aspects of hardware and network equipments. In the past proposals for the establishment of Telecom Security Regulatory Authority of India (TSRAI) were also mooted.

However, till now we have no telecom security policy in India and telecom equipments security framework in India. There is no mechanism in India through which telecom hardware and software can be analysed for backdoors and malware. Now Indian government has declared that telecom equipments must be certified by TEC before use in India. A proposal to store call data records has also been given. The norms for import of telecom equipments in India would also be formulated very soon. Similarly, a telecom security policy of India may also be drafted.

In the past news regarding establishment of various authorities to safeguard telecom security in India have also surfaced. These proposed authorities include Authority for Telecom Security in India, Telecom Security Council of India, etc. Further legal framework to streamline telecom related issues in India have also bee suggested. The National Spectrum Act of India is also in pipeline.

Now as per the latest news, Indian government is planning to form a new body to supervise telecom and cyber security in India. This may be a good step in right direction or just another declaration with no actual implementation, just like the past declarations.

The proposed body plans to oversee telecom and cyber security to avoid overlap between various ministries and intelligence agencies that are currently handling this issue. The proposed body has been given the name National Telecom Network Security Coordination Board (NTNSCB) of India.

It has been proposed to establish the same at Department of Information technology (DIT) and it may be headed by the telecom secretary. The NTNSCB will have representatives from the defence and home ministries, intelligence agencies, IT department, intelligence bureau, National Security Advisor and NTRO, among others reports Economic Times.

In addition to suggesting measures to address network security related issues, NTNSCB will also set up objectives and targets to the various departments and agencies handling telecom and cyber security related issues. The NTNSCB may also facilitate the Central Monitoring system (CMS) Project of India. This is a good step and its implementation is urgently required.