We are anonymous, we are legion

Governance issues for private data stores

praskrishna — 2014-04-04T10:30:23Z

Malavika Jayaram is a speaker at this event co-hosted by Harvard Faculty Club and Web Science Trust at 20 Quincy Street, Cambridge on March 28, 2014.

Agenda

8.30: Introductory remarks - Meeting in the shadow of the Presidents 90 day plan for Big Data and Privacy: are we right to have a hopeful expectation that algorithms can resolve questions that algorithms pose?

Prof. Jim Waldo, CTO, Harvard University, Sun Distinguished Engineer

Prof. Andreas Weigend, Stanford University (past Chief Scientist Amazon)

8.45 - 10.00: The network is always on: and you are always on the network.

The worker and the workplace - Anna Burger (past Secretary Treasurer, SEIU)/Carol Rose, Director Ma., ACLU
Personalised messages - targeted advertising - George Pappachen (WPP) /Mike Smith (Hearst Corpn.)
Sensor sensibility:Smart metering/Transport/Home - Yves Alexandre de Montjoye, MIT /John Taysom
Personal medicine - John Wilbanks, Chief Commons Officer, Sage Bionetworks, Senior Fellow, Ewing
Marion Kaufman Foundation
Education - Prof. Jim Waldo, CTO Harvard
National Security - Dr. Malavika Jayaram, Berkman Centre, Harvard, The Indian national id system.

10.00-10.15: Coffee

10.15 - 11.30: The dual nature of the web - publisher and data gatherer

Is the problem a web protocol problem? Is there a protocol solution?
Brendan Eich, CEO Mozilla
Steve MacBeath Product Lead, Microsoft Personal Cloud
John Taysom, Can we build a DMZ for individual id information?

11.30 - 12.30: Governance systems for private data stores - what wont work, and what might?

An example of multi-generational national asset management : Sir Henry Studholme, Chair, UK Forestry Commission.
Mozilla.com and Mozilla.org - Denelle Dixon-Thayer, GC Mozilla
DigiTrust - Jordan Mitchell

12.30: working lunch: Privacy as a competitive advantage

The Microsoft view - Steve MacBeath
The Mozilla view - Brendan Eich
The SalesForce view - JPRangaswami, Chief Scientist, Salesforce.com

1.30 - 2.15: Essential additional policy considerations

Is “privacy” anyway the wrong target - did we really mean “intimacy”? Dorothy Zinberg, Harvard/ How would we police privacy policies anyway? Adam Towvim, TrustLayers
AOB from the floor

2.15 - 2.30: Interim Conclusions - John Taysom

2.30 - 3.00: Discussion and critique of interim conclusions - Prof. Nico Mele, Harvard/ Prof. Dame Wendy Hall, WST

3.00- 3.30: Conclusions and proposed draft recommendations - J Taysom

For more details visit https://cis-india.org/news/governance-issues-for-private-data-stores

Cyber Dialogue Conference 2014

praskrishna — 2014-04-08T05:09:54Z

The Cyber Dialogue conference, presented by the Canada Centre for Global Security Studies at the Munk School of Global Affairs, University of Toronto, will convene an influential mix of global leaders from government, civil society, academia and private enterprise to participate in a series of facilitated public plenary conversations and working groups around cyberspace security and governance.

Malavika Jayaram is participating in this event being held on March 30 and 31, 2014. Full event details here.

After Snowden, Whither Internet Freedom?

A recent stream of documents leaked by former NSA contractor Edward Snowden has shed light on an otherwise highly secretive world of cyber surveillance. Among the revelations — which include details on mass domestic intercepts and covert efforts to shape and weaken global encryption standards — perhaps the most important for the future of global cyberspace are those concerning the way the U.S. government compelled the secret cooperation of American telecommunications, Internet, and social media companies with signals intelligence programs.

For American citizens, the NSA story has touched off soul-searching discussions about the legality of mass surveillance programs, whether they violate the Fourth and Fifth Amendments of the U.S. Constitution, and whether proper oversight and accountability exist to protect American citizens' rights. But for the rest of the world, they lay bare an enormous “homefield advantage” enjoyed by the United States — a function of the fact that AT&T, Verizon, Google, Facebook, Twitter, Yahoo!, and many other brand name giants are headquartered in the United States.

Prior to the Snowden revelations, global governance of cyberspace was already at a breaking point. The vast majority of Internet users — now and into the future — are coming from the world’s global South, from regions like Africa, Asia, Latin America, and the Middle East. Of the six billion mobile phones on the planet, four billion of them are already located in the developing world. Notably, many of the fastest rates of connectivity to cyberspace are among the world’s most fragile states and/or autocratic regimes, or in countries where religion plays a major role in public life. Meanwhile, countries like Russia, China, Saudi Arabia, Indonesia, India, and others have been pushing for greater sovereign controls in cyberspace. While a US-led alliance of countries, known as the Freedom Online Coalition, was able to resist these pressures at the Dubai ITU summit and other forums like it, the Snowden revelations will certainly call into question the sincerity of this coalition. Already some world leaders, such as Brazil’s President Rousseff, have argued for a reordering of governance of global cyberspace away from U.S. controls.

For the fourth annual Cyber Dialogue, we are inviting a selected group of participants to address the question, “After Snowden, Whither Internet Freedom?” What are the likely reactions to the Snowden revelations going to be among countries of the global South? How will the Freedom Online Coalition respond? What is the future of the “multi-stakeholder” model of Internet governance? Does the “Internet Freedom” agenda still carry any legitimacy? What do we know about “other NSA’s” out there? What are the likely implications for rights, security, and openness in cyberspace of post-Snowden nationalization efforts, like those of Brazil’s?

As in previous Cyber Dialogues, participants will be drawn from a cross-section of government (including law enforcement, defence, and intelligence), the private sector, and civil society. In order to canvass worldwide reaction to the Snowden revelations, this year’s Cyber Dialogue will include an emphasis on thought leaders from the global South, including Africa, Asia, Latin America, and the Middle East.

For more details visit https://cis-india.org/news/cyber-dialogue-conference-2014

CIS Statement at ICANN 49's Public Forum

pranesh — 2014-06-04T05:31:44Z

This was a statement made by Pranesh Prakash at the ICANN 49 meeting (on March 27, 2014), arguing that ICANN's bias towards the North America and Western Europe result in a lack of legitimacy, and hoping that the IANA transition process provides an opportunity to address this.

Good afternoon. My name is Pranesh Prakash, and I'm with the Yale Information Society Project and the Centre for Internet and Society.

I am extremely concerned about the accountability of ICANN to the global community. Due to various decisions made by the US government relating to ICANN's birth, ICANN has had a troubled history with legitimacy. While it has managed to gain and retain the confidence of the technical community, it still lacks political legitimacy due to its history. The NTIA's decision has presented us an opportunity to correct this.

However, ICANN can't hope to do so without going beyond the current ICANN community, which while nominally being 'multistakeholder' and open to all, grossly under-represents those parts of the world that aren't North America and Western Europe.

Of the 1010 ICANN-accredited registrars, 624 are from the United States, and 7 from the 54 countries of Africa. In a session yesterday, a large number of the policies that favour entrenched incumbents from richer countries were discussed. But without adequate representation from poorer countries, and adequate representation from the rest of the world's Internet population, there is no hope of changing these policies.

This is true not just of the business sector, but of all the 'stakeholders' that are part of global Internet policymaking, whether they follow the ICANN multistakeholder model or another. A look at the boardmembers of the Internet Architecture Board, for instance, would reveal how skewed the technical community can be, whether in terms of geographic or gender diversity.

Without greater diversity within the global Internet policymaking communities, there is no hope of equity, respect for human rights -- civil, political, cultural, social and economic --, and democratic funtioning, no matter how 'open' the processes seem to be, and no hope of ICANN accountability either.

For more details visit https://cis-india.org/internet-governance/blog/icann49-public-forum-statement

Panel Discussion – Intermediary Liability & Freedom of Expression in India

praskrishna — 2014-04-04T10:10:32Z

Bhairav Acharya will participate in a panel discussion on ‘Intermediary Liability & Freedom of Expression’ on Wednesday evening (26th March 2014) from 6:00 pm onwards at the India International Centre Annex. The event is organized by the Centre for Communication Governance at NLU Delhi in association with the Global Network Initiative, Washington D.C.

The panel comprises of three eminent personalities: Shyam Divan, Senior Advocate, Supreme Court of India; Siddharth Varadarajan, Journalist and Senior Fellow, Centre for Public Affairs and Critical Theory, New Delhi and; Jermyn Brooks, Independent Chair, Global Network Initiative, Washington D.C.

The objective of the panel was to focus on the Indian legal framework governing Internet platforms and explore questions related to Internet intermediaries and the balance that should be involved in regulations affecting user-generated content, in the context of the civil liberties that are key to democracy, in particular free expression and privacy. The discussion was aimed at drawing connections between this ostensibly Internet-related issue and the traditional media, to highlight recurring issues and useful perspectives.

For more details, click here.

For more details visit https://cis-india.org/news/panel-discussion-intermediary-liability-and-freedom-of-expression-in-india

ICANN and Global Internet Governance: The Road to São Paulo, and Beyond

praskrishna — 2014-04-03T09:54:08Z

A conference to be held on Friday 21 March 2014 at the ICANN 49 meeting venue, the Raffles City Convention Centre, Singapore, in the Olivia Room, from 10:00 to 18:00. Organized by the NonCommercial Users Constituency (NCUC) of the Generic Names Supporting Organization, with the generous support of ICANN. Geetha Hariharan participated in this event.

Click to read more on the conference here.

The NETMundial Global Multistakeholder Meeting on the Future of the Internet Governance will be held in São Paulo, Brazil on 23-24 April 2014.

Initiated by Brazilian President Dilma Rousseff and ICANN CEO Fadi Chehadé, and co-organized by the Brazilian Internet Steering Committee and /1Net, the meeting will bring together a wide range of government, business, technical community, civil society and academic participants from around the world. The organizers describe its objectives as, “crafting Internet governance principles and proposing a roadmap for the further evolution of the Internet governance ecosystem.”

The purpose of this NCUC conference is to provide a first opportunity for intensive, F2F cross-community dialogue on the main substantive topics likely to be addressed in São Paulo. Stakeholders from across the ICANN community have expressed a range of views and uncertainties about the meeting’s precise substantive focus, expected outcomes, and potential significance in the continuing evolution of the global Internet governance ecosystem. It is hoped that the NCUC conference will help the community to work through the issues at stake and to prepare for its participation in the NETMundial.

On Site Participation
The meeting is free of charge and open to all members of the ICANN community. People wishing to attend must register for the conference and indicate whether they wish to be included in the lunch and/or the reception. Attendees must also register for the ICANN meeting in order to access the conference venue.

Remote Participation
ICANN will provide live remote participation via Adobe Connect, audiocast, and telephone dial-in. They also will videotape the conference for subsequent web access. For access please visit http://singapore49.icann.org/en/schedule/fri-ncuc-ig

Written Inputs
Members of the ICANN community are invited to provide personal or organizational written inputs related to the four panel topics indicated on the conference program. These will be added to the online repository associated with each of the sessions. If interested, please send your inputs to ncuc@ncuc.org.

Programme details here

For more details visit https://cis-india.org/news/non-commercial-users-constituency-icann-and-global-internet-governance

Twenty-five distinguished experts appointed to Global Commission on Internet Governance’s Research Advisory Network

praskrishna — 2014-04-03T07:20:24Z

Twenty-five distinguished scholars and internationally recognized experts have been appointed to the Global Commission on Internet Governance’s (GCIG) new Research Advisory Network (RAN).

Sunil Abraham is one the 25 experts appointed to the Global Commission on Internet Governance’s Research Advisory Network. Read the original published by the Global Commission on Internet Governance here.

The Global Commission is a two-year initiative launched in January 2014, by the Centre for International Governance Innovation (CIGI) and Chatham House. Chaired by Sweden’s Foreign Minister Carl Bildt, the commission will produce a comprehensive stand on the future of multi-stakeholder Internet governance.

The commission’s RAN, led by CIGI Senior Fellow Laura DeNardis, will assist in identifying and prioritizing Internet governance and Internet policy related issues within the commission’s mandate. Members of the RAN will provide expert briefings to the members of the commission and conduct research and analysis for the commission’s preparatory work and final report.

“The research advisory network will be an indispensable component of the Global Commission on Internet Governance,” said Fen Osler Hampson, co-director of the commission and director of CIGI’s Global Security & Politics program. “Under the direction of Laura DeNardis, the RAN will be of great benefit to this initiative’s critical analysis and findings. I’m grateful that these experts have agreed to participate.”

The twenty-five member network consists of:

Sunil Abraham
Izumi Aizu
Peng Hwa Ang
Subimal Bhattacharjee
David Clark
Sadie Creese
Leslie Daigle
Oleg Demidov
William Dutton
Lorraine Eden
Laurent Elder
Patrik Fältström
Tobias Feakin
Urs Gasser
Clem Herman
Jeanette Hofmann
Konstantinos Komaitis
Ronaldo Lemos
Meryem Marzouki
Carolina Rossini
Michael Schmitt
Emily Taylor
Rolf H. Weber
Andrew Wyckoff
Christopher S. Yoo

Additional RAN members will be confirmed over time. For more information on the GCIG, including its twenty-nine commissioners and twenty-five research advisers, please visit: www.ourinternet.org. Follow the commission on Twitter @OurInternetGCIG.

For more details visit https://cis-india.org/news/25-experts-appointed-to-global-commission-on-ig-research-advisory-network

No to homosexuals, yes to their vote

praskrishna — 2014-04-04T09:54:39Z

The ad appears at the bottom of the page. It has BJP’s symbol and Modi’s photograph displayed prominently.

The article by Yogesh Pawar was published in DNA on March 21, 2014. Sunil Abraham is quoted.

In a hotly contested election where every vote will count, the scramble among political parties to scrounge for votes is understandable. Yet, what would you make of a party that hates a community but wants their votes? The BJP had opposed any move to nullify Supreme Court's order re-criminalizing consensual sex among consenting adults, dealing a huge setback to any move to scrap or dilute Section 377 of the Indian Penal Code (IPC). Party chief Rajnath Singh went to the extent of saying, "Gay sex is not natural and we cannot support something which is unnatural."

This is why the gay community across the country has expressed surprise to find a BJP ad asking for votes on the popular gay social media dating website grindr. The ad which will obviously lead to to a lot of red faces in the BJP, appears at the bottom of the page has both the party' lotus symbol and their prime-ministerial candidate Narendra Modi's photograph displayed prominently. It exhorts voters to vote BJP to stop price rise.

"This exposes the party's hypocrisy," guffawed India's pioneering gay rights activist Ashok Row Kavi. "So you want our votes and not us. I'm glad this has happened. The country will finally know the true face of falsehood of the party."

He's not alone. Many from the community have taken to social media sites like facebook and twitter to make their disgust known. Counselling psychologist Deepak Kashyap is one of them. "So, #BJP says it'd never support the "unnatural act" of homosexuality, but #NaMO has no qualms about asking for support on gay dating apps, like grindr! What a sham(e)!" he posted.

Linking most homophobia with an intense struggle with latent homosexuality Kashyap, the University of Bristol pass-out and equal rights activist for the LGBTQ community told dna, "Whatever makes you jump up in your chair, essentially makes you insecure about your own condition in some way or the other." According to him, similar results were shown in a research called 'Is Homophobia Associated with Homosexual Arousal?', by Georgia University published in the Journal of Abnormal Psychology.

When reached for comment, the BJP's National IT head Arvind Gupta said, "I am not aware of such an ad being placed on this website. If this is indeed true we will take it up with the advertising agency responsible." BJP spokesperson and Lok Sabha candidate from New Delhi Meenakshi Lekhi too told dna, "This is the first I am hearing of such an advertisement," and added, "In the first instance it seems like a deliberate act of mischief in the poll season to embarrass our party."

Centre for Internet and Society, Executive Director Sunil Abraham felt the ad on grindr may have to do more with the lack of knowledge than anything else. "We find many ads by top Indian corporate brands on pirate websites. This happens because people are still not completely conversant with negotiating with advertising networks when it comes to websites."

For more details visit https://cis-india.org/news/dna-march-21-2014-yogesh-pawar-no-to-homosexuals-yes-to-their-vote

C-DoT's surveillance system making enemies on internet

praskrishna — 2014-04-04T09:45:37Z

Reporters Without Boundaries says it gives unbridled power to law- enforcement agencies to snoop on citizens.

The article by Krishna Bahirwani was published in DNA on March 21, 2014. Sunil Abraham is quoted.

The Central Monitoring System (CMS) developed by the Centre for Development of Telematics (C-DoT) has come under fire from a France based non-profit organisation, which claims the system has the capacity to directly snoop on all forms of communications over phone and internet, without involving telecom operators.

The NGO's Reporters Without Boundaries report 2014, 'Enemies Of The Internet' has equated C-DoT with Government Communications Headquarters (GCHQ) in the UK, and the US's National Security Agency (NSA), which recently came under criticism for spying on citizens.

CMS, India's mass electronic surveillance system, was rolled out in 2013.

Before the CMS, tapping was done by the telecom operators, but not before taking prior permission. The CMS gives direct access to C-DoT employees and law-enforcement agencies.

CMS has created an automated front containing central and regional databases, which central and state government agencies can use to intercept and monitor any landline, mobile or internet connection in India.

Minister of state for information technology Milind Deora said, "The new data collection system will actually improve citizens' privacy because telecommunications companies would no longer be directly involved in the surveillance."

Asked what would prevent C-DoT employees, who would have access to data, from misusing it, Deora said, "There is a switching mechanism (that) diverts the call to law-enforcement agencies and eliminates layers. The existing surveillance and interception system is actually insecure as the operator, people from the home ministry and other government officials have access to the data. The CMS will erase such people from play."

"I want the people to know the design aspects and how the system is being used for lawful interceptions, so that they can shed their inhibitions We do not want to put power in the hands of the bureaucrats" he said.

Harold Dcosta, a cyber security expert who trains Maharashtra and Goa police, said, "It's possible that employees of CDoT/law enforcement agencies could use the information gathered by CMS for personal or political use although 43 and 43 A of the IT Act would protect people when something like that happens and will give the person compensation.

He said, "There should be more transparency with regard to CMS".

Sunil Abraham, executive director of Bangalore-based non-profit Centre for Internet and Society said the mistaken assumption in their thinking is technology will serve as a check and balance.

"Technology can always be compromised," he said. There is no way to find out about what is actually going on. If the CMS is abused it is very difficult to prove."

Deora said a privacy law is being drafted to address these issues. Last month, a parliamentary standing committee rejected the government claim that IT Act protects citizens' privacy. The committee, chaired by former Congress MP Rao Inderjit Singh, said, "The committee is extremely unhappy to note that the government is yet to institute a legal framework on privacy."

For more details visit https://cis-india.org/news/dna-march-21-2014-krishna-bahirwani-c-dots-surveillance-system-making-enemies-on-internet

European Union Draft Report Admonishes Mass Surveillance, Calls for Stricter Data Protection and Privacy Laws

divij — 2014-09-30T08:52:45Z

Ever since the release of the “Snowden files”, the secret documents evidencing the massive scale of surveillance undertaken by America’s National Security Agency and publically released by whistle-blower Edward Snowden, surveillance in the digital age has come to the fore of the global debate on internet governance and privacy.

The Committee on Civil Liberties, Justice and Home Affairs of the European Parliament in its draft report on global surveillance has issued a scathing indictment of the activities of the NSA and its counterparts in other member nations and is a welcome stance taken by an international body that is crucial to the fight against surveillance.

The "European Parliament Draft Report on the US NSA surveillance programme, surveillance bodies in various Member States and their impact on EU citizens’ fundamental rights and on transatlantic cooperation in Justice and Home Affairs" released on the 8^th of January, 2014, comprehensively details and critiques the mass surveillance being undertaken by government agencies in the USA as well as within the EU, from a human rights and privacy perspective. The report examines the extent to which surveillance systems are employed by the USA and EU member-states, and declares these systems in their current avatars to be unlawful and in breach of international obligations and fundamental constitutional rights including "the freedom of expression, of the press, of thought, of conscience, of religion and of association, private life, data protection, as well as the right to an effective remedy, the presumption of innocence and the right to a fair trial and non-discrimination".

Furthermore, the report points to the erosion of trust between the EU and the US as well as amongst member states as an outcome of such secret surveillance, and criticises and calls for a suspension of the data-sharing and transfer agreements like the Terrorist Finance Tracking Program (TFTP), which share personal information about EU citizens with the United States, after examining the inadequacy of the US Safe Harbour Privacy principles in ensuring the security of such information.

After considering the secret and unregulated nature of these programmes, the report points to the need of restricting surveillance systems and criticizes the lack of adequate data protection laws and privacy laws which adhere to basic principles such as necessity, proportionality and legality.. It also questions the underlying motives of these programmes as mere security-tools and points to the possible existence of political and economic motives behind their deployment. Recognizing the pitfalls of surveillance and the terrible potential for misuse, the report "condemns in the strongest possible terms the vast, systemic, blanket collection of the personal data of innocent people, often comprising intimate personal information; emphasises that the systems of mass, indiscriminate surveillance by intelligence services constitute a serious interference with the fundamental rights of citizens; stresses that privacy is not a luxury right, but that it is the foundation stone of a free and democratic society; points out, furthermore, that mass surveillance has potentially severe effects on the freedom of the press, thought and speech, as well as a significant potential for abuse of the information gathered against political adversaries."

Amongst the recommendations in the 51-page report are calls for a prohibition of mass surveillance and bulk data collection, and an overhaul of the existing systems of data-protection across the European Union and in the US to recognize and strengthen the right to privacy of their citizens, as well as the implementation of democratic oversight mechanisms to check security and intelligence agencies. It also calls for a review of data-transfer programmes and ensuring that standards of privacy and other fundamental rights under the European constitution are met. The committee sets out a 7-point plan of action, termed the European Digital Habeus Corpus for Protecting Privacy, including adopting the Data Protection Package, suspending data transfers to the US until a more comprehensive data protection regime is through an Umbrella Agreement, enhancing fundamental freedoms of expression and speech, particularly for whistleblowers, developing a European Strategy for IT independence and developing the EU as a reference player for democratic and neutral governance of the internet.

Though this draft report has no binding legal value as yet, the scathing criticism has assisted in calling to the attention of the global community the complex issues of internet governance and privacy and surveillance, and generated debate and discourse around the need for an overhaul of the current system. The recent decision of the US government to ‘democratize’ the internet by handing control of the DNS root zone to an international body, and thereby relinquishing a large part of its means of controlling the internet, is just one example of the systemic change that this debate is generating.

For more details visit https://cis-india.org/internet-governance/blog/european-union-draft-report-admonishes-mass-surveillance

Privacy worries cloud Facebook's WhatsApp Deal

sunil — 2014-03-20T05:59:28Z

Privacy activists in the United States have asked the competition regulator or the Federal Trade Commission to put on hold Facebook's acquisition of WhatsApp. Why have they done this when Facebook has promised to leave WhatsApp untouched as a standalone app?

Read the original published in the Economic Times on March 14, 2014

Activists have five main concerns.

Facebook has a track record of not keeping its promises to users.
The ethos of both companies when it comes to privacy is diametrically opposite.
The probability that WhatsApp messages and content will be intercepted because of Facebook's participation in NSA's PRISM spying programme.
Facebook slurping WhatsApp's large repository of phone numbers.
Two hundred trackers already monitor your internet use when you are not using Facebook and now they tracking mobile use much more granularly. This week the Indian competition regulator (CCI) also told the media that the acquisition would be subject to scrutiny. However, unlike the US regulator the Indian regulator does not have the mandate to examine the acquisition from a privacy perspective.

LIRNEAsia research in Indonesia paints a very similar picture to one we have in India. When Indonesian mobile phone users were asked if they used Facebook they answered in affirmative. Then the very same users were asked if they used the internet and they replied in negative. A large number of Facebook users in these other similar economies are trapped within what are called "walled gardens."

Walled gardens allow mobile phone subscribers without data connections to get access to a single over-the-top service provider like Facebook because their telcom provider has an arrangement. Software such as Facebook on every phone makes it possible for feature phone users to also enter the walled garden.

According to Facebook it "is a fast and easyto-use native app that works on more than 3,000 different types of feature phones from almost every handset manufacturer that exists today."

Unlike North American and European users of Facebook - who freely roam the "world wild web" and then choose to visit Facebook when they want to many Indian users will first experience data services in a domesticated fashion within a walled garden.

Whether or not they will wander in the wild when they are have full access to the internet remains to be seen. But given our poor rates of penetration, dogmatic insistence on network neutrality at this early stage of internet adoption may not be the right way to maximise welfare and consumer interest.

Fortunately for Facebook and unfortunately for us, India still does not have a comprehensive data protection or horizontal privacy law. The Justice AP Shah Committee that was constituted by the Planning Commission in October 2012 recommended that the Privacy Act articulate national privacy principles and establish the office of the Privacy Commissioner. It further recommended that data protection and surveillance be regulated for both the private sector and the state.

Since then the Department of Personnel and Training has updated the draft bill to implement these recommendations and has been working towards consensus within government.

Since we still don't have our own privacy regulator we will have to depend on foreign data protection authorities and privacy commissioners to protect us from the voracious appetite for personal data of over-the-top service providers like Facebook This is woefully insufficient because they will not act on harm caused to Indian consumers or be aware of how Facebook acts differently in the Indian market.

As we approach the first general election in India when social media will play a small but influential role it would have been excellent if we had someone to look out for our right to privacy.

For more details visit https://cis-india.org/internet-governance/blog/economic-times-march-14-2014-sunil-abraham-privacy-worries-cloud-facebook-whatsapp-deal

Net Neutrality and Privacy

divij — 2014-03-20T05:01:58Z

The highly contentious and polarising debate on net-neutrality will have a large impact on shaping the future of the internet and ultimately on the users of the internet. One important issue which needs to be prioritized while debating the necessity or desirability of a legal regime which advocates net-neutrality is its implication on privacy.

The principle behind net-neutrality, simply put, is that the data being transmitted to and from the user should be treated equally, i.e. that data carriage, at the level of ISP’s, should be ‘dumb’. This would mean that internet service providers cannot discriminate between different data based on the content of the data. Without the principle of net-neutrality being followed, ISP’s would become the ‘internet gatekeepers’, choosing what data gets to reach the end-user and how. There are many arguments for favouring or disfavouring net-neutrality, however, advocates of privacy on the internet should be wary of the possible implications of endorsing a non-neutral internet and allowing greater network management by ISP’s. So, how does the net-neutrality debate affect privacy?

It all depends upon what kind of network management ISP’s employ. Deep Packet Inspection (DPI) is a method of data inspection which allows the network manager to scrutinize data at the application level, and in real time. As compared to shallow packet inspection, which identifies based on headers like IP addresses or protocols like TCP and UDP, which are analogous to envelopes on a letter, DPI would be akin to having access to the contents. DPI-based network management can identify the programs, software and applications being used, and what they are being used for in real time. Unlike any ordinary online service provider ISP’s are in the unique position of having comprehensive access to all of their customers’ data. Allowing DPI-based network management for prioritizing certain data or applications, an almost certain outcome if net-neutrality is weakened, would mean that ISP’s would be able to intercept and scrutinize any and all user data, which would reveal substantial information about the user, and would be a serious blow to privacy. While DPI can have several benefits in its application (such as finding and fighting malware or viruses), but where it is used, must be for a targeted and legitimate aim. Even where DPI is not used, if network discrimination is allowed, based on a user-to-user basis it would require inspecting the IP addresses of the user, which can also be a problematic intrusion of privacy, especially since the ISP also has other data like addresses and names of users which it can use to identify them.

Privacy may not necessarily be affected through non-neutral internet systems, but in all probability, with the growth of systems like the DPI and commercial incentives for “gatekeeper ISP’s” who are in a position to profit greatly from an ability to scrutinize and discriminate between data, it is likely that it will. In India, though government ISP’s like MTNL and BSNL deny using DPI,[1] it’s likely that it is still applied by others, and that the government is aware of this (http://www.theinquirer.net/inquirer/news/2161541/indian-isps-block-104-websites). Even as the TRAI advocates and supports net-neutrality, Indian ISP’s seem to be heading the other way.[2] Before the trend becomes the norm, it’s high time for a comprehensive discussion about how policies should be framed for keeping the internet a more neutral, and more private, space.

References

Apar Gupta, TRAI(ing) to keep it neutral, http://www.iltb.net/2010/09/traiing-keep-it-neutral/
For a lay discussion on Deep Packet Inspection and net-neutrality, visit http://arstechnica.com/gadgets/2007/07/deep-packet-inspection-meets-net-neutrality/

For more details visit https://cis-india.org/internet-governance/blog/net-neutrality-and-privacy

NTIA to give up control of the Internet's root

pranesh — 2014-03-18T18:21:40Z

On Friday evening the U.S. government's National Telecommunications and Information Administration (NTIA) announced that it was setting into motion a transition to give up a few powers that it holds over some core Internet functions, and that this would happen by September 2015. Pranesh Prakash provides a brief response to that announcement.

As it noted in the NTIA's press release:

NTIA’s responsibility includes the procedural role of administering changes to the authoritative root zone file – the database containing the lists of names and addresses of all top-level domains – as well as serving as the historic steward of the [Domain Name System (DNS)]. NTIA currently contracts with [the Internet Corporation for Assigned Names and Numbers, ICANN] to carry out the Internet Assigned Numbers Authority (IANA) functions and has a Cooperative Agreement with Verisign under which it performs related root zone management functions. Transitioning NTIA out of its role marks the final phase of the privatization of the DNS as outlined by the U.S. Government in 1997.

This move was welcomed by "Internet technical leaders".

While this announcement cannot be said to be unexpected, it is nonetheless an important one and is also a welcome one. The NTIA seems to have foreclosed any option of the US government's role being performed by any government-led organization by noting in their press release, "NTIA will not accept a proposal that replaces the NTIA role with a government-led or an inter-governmental organization solution," once again reaffirming their belief in American exceptionalism: the NTIA could fulfil its role despite being a government, but now even a body involving multiple stakeholders can't replace the NTIA's role if it is going to be government-led.

Unfortunately, this announcement to relax American "stewardship" or "oversight" over some aspects of the Internet's technical functioning cannot restore the trust that has been lost due to actions taken by the US government and US companies. This new announcement won't change the US government's ability to 'tap' the Internet, nor will it affect their ability to unilaterally seize .com/.net/.name/.org/.edu/.tv/.cc/.us and other US-based domain names. Nor will a shift away from NTIA oversight lead to any of the chilling visions that some believe might lie in our future: the fears of the Association of National Advertisers and of some politicians and members of the US Congress is based on ignorance of what NTIA's role is.

The European Commission in a communiqué last month noted: "recent revelations of large-scale surveillance have called into question the stewardship of the U.S. when it comes to Internet governance". Unfortunately, the U.S. giving up that stewardship role will not prevent the continuation of their large-scale surveillance, just as the lack of such a stewardship role has not prevented other governments — U.K., India, Canada, Sweden, France, etc. — from engaging in large-scale surveillance.

There are three main benefits from the U.S. giving up this role.

First, it will put an end to the political illegitimacy of the U.S. government having a core authority in a global system, somehow making it first among equals;
Second, will focus light on ICANN, which under US oversight performs the IANA functions, and might, one hopes, lead to needed reform in ICANN's other functions;
Third, it will allow us to collectively move on from this dreaded political issue at the heart of Internet governance, which nevertheless is of little practical consequence if ICANN's accountability mechanisms are strengthened. As difficult as it may be, ICANN has to be accountable not just to one government or another but to the world, and ensuring that accountability to all doesn't become accountability to none, as NetChoice's Steve DelBianco put it, is the formidable task ahead of us.

Yet, all the ICANN reform in the world will still not lead to a less spied-upon, more open, and more equitable Internet.

For more details visit https://cis-india.org/internet-governance/blog/ntia-to-give-up-control-of-internets-root

New Standard Operating Procedures for Lawful Interception and Monitoring

divij — 2014-03-20T05:13:13Z

Government issues new guidelines to TSP’s to assist Lawful Interception and Monitoring.

Even as the Central Government prepares the Central Monitoring System for the unrestricted monitoring of all personal communication, the Department of Telecom has issued new guidelines for Telecom Service Providers to assist in responding to requests for interception and monitoring of communications from security agencies.

These guidelines do not appear to be publicly accessible, but according to news items, under the “Standard Operating Procedures for Lawful Interception and Monitoring of Telecom Service Providers”, the TSP’s must now provide for lawful interception and monitoring requests for voice calls, Short message Service (SMS), General Packet Radio Service (GPRS) and Value Added Service (VAS) including Multi Message Service (MMS), data and voice in 3G/4G/Long Term Evolution (LTE) including video call or Voice Over Internet protocol (VoIP). This move comes just days after the Home Ministry suggested that the Department of Telecom either change the rules under their Telecom Policies such as the Unified Access Service Licence (UASL) to include VoIP monitoring, or, drastically, block all VoIP services on the internet, which would include several communication applications including Skype and GTalk. (See the article published by Economic Times).

The guidelines will supposedly also provide for some basic safeguards to ensure that non-authorized interception does not take place, such as ensuring that the interception is only to be provided by the Chief Nodal Officer of a TSP and only upon the issue of an order by the Home Secretary at the Central or State Government. Furthermore, these requests must only be in written, in untampered and sealed envelopes with no overwriting, etc. and bearing the order number issued by the concerned Secretary, with the date of the order. However, in exigent circumstances the order may be provided by email, provided that the physical copy is sent within two days of the order, else the interception order must be terminated. Inquiry processes are detailed under the new SOP’s which can verify whether the request was in original and addressed to the Nodal Officer and from which designated security agency it was issued, and can also verify the issue of an acknowledgment of compliance of the order by the TSP within two days of its receipt. The new guidelines also clarify the issue of interception of roaming subscribers by the State Government where the subscriber is registered. According to the guidelines, an order by the government of the state where such a caller has registered is sufficient and does not need vetting by the Home Secretary at the centre.

Notwithstanding the additional “safeguards” against unlawful or unauthorized interception, the message to take away from these guidelines is the Government’s continued efforts to expand its surveillance regime to comprehensively monitor every action and every communication at its whim. These requests for monitoring, undertaken by “security agencies” which include taxation agencies and the SEBI, are flawed not merely because of the possibility of “unauthorized” interception, rather because the legal basis of the interception is vague, broad and widely susceptible to misuse, as the recent “snoopgate” allegations against the Gujarat government have shown. (See the article published by the Hindu).

The current regime, based on a wide interpretation of Section 5(2) of the Indian Telegraph Act and the telecom policies of the Department of Telecom, do not have adequate safeguards for preventing misuse by those in power – such as the requirement of reasonable suspicion or a warrant. Without a sound legal basis for interception, which protects the privacy rights of individuals, any additional safeguards are more or less moot, since the real threat of intrusive surveillance and infringing of basic privacy exists regardless of whether it is done under the seal of the Home Secretary or not.

Resources

For more details visit https://cis-india.org/internet-governance/blog/new-standard-operating-procedures-for-lawful-interception-and-monitoring

When politics gets social

praskrishna — 2014-04-04T07:52:46Z

In the run-up to the general election, social media companies explain how the political campaigns this time are very different from what they were five years ago.

The article by Chanpreet Khurana was published in Livemint on March 11, 2014. Sunil Abraham is quoted.

“Okay, I didn’t gain anything. I lost,” Aam Aadmi Party (AAP)’s Arvind Kejriwal conceded disarmingly during a town hall meeting on Facebook last week. He was responding to a question from Candidates 2014 host Madhu Trehan on his much critiqued dharna (sit-in protest) during his 49-day chief ministership of Delhi.

Even as elections to 543 constituencies approach, political parties and politicians are putting their online campaigns in top gear. Sample some of the activity in just the last week. On Sunday, the Indian National Congress party asked voters to share their thoughts on what to include in the party’s Lok Sabha election manifesto—on Twitter. On 8 March, Narendra Modi, the Bharatiya Janata Party’s prime ministerial candidate, held the second session in his Chai Pe Charcha with NaMo series—this time on women’s empowerment. And All India Trinamool Congress chief Mamata Banerjee’s “Girls are our assets” post on Facebook was liked more than 22,000 times.

	Recognizing the high level of engagement around politics on social media, companies like Facebook and Google are driving initiatives on this theme in peak election season—polling starts on 7 April. The Facebook Talks Live’s Candidates 2014 series (also broadcast on NDTV), which in its first week featured Kejriwal, Banerjee, Rashtriya Janata Dal chief Lalu Prasad and the Samajwadi Party’s Akhilesh Yadav, is one example. There are many new services being launched online in the run-up to the Lok Sabha election.

Recognizing the high level of engagement around politics on social media, companies like Facebook and Google are driving initiatives on this theme in peak election season—polling starts on 7 April. The Facebook Talks Live’s Candidates 2014 series (also broadcast on NDTV), which in its first week featured Kejriwal, Banerjee, Rashtriya Janata Dal chief Lalu Prasad and the Samajwadi Party’s Akhilesh Yadav, is one example.

There are many new services being launched online in the run-up to the Lok Sabha election.

Know your candidate

On 20 April 2011, US President Barack Obama appeared on Facebook Talks Live, opening the floodgates for a new kind of engagement between political leaders and the electorate. Cut to almost three years later, and the Facebook-led “town hall” meeting has come to India. On 4 March, Candidates 2014 launched with Kejriwal taking questions on issues like women’s safety, reservation for the backward classes and the plight of contractual workers, and detailing his vision for the country. A video of the town hall is available on Facebook and YouTube and has been viewed at least 30,000 times. As part of the format of the town hall, the questions came in equal parts from the live audience, Trehan and from a pool of questions submitted on the Facebook India page.

To the agile leader then, social media can be more than just another pulpit to broadcast views and give a speech from. It’s something Sunil Abraham, executive director of The Centre for Internet And Society, a non-profit research organization, can’t stress enough. “Social media provides unmediated access; in that sense it is a tremendously effective tool,” says Bangalore-based Abraham in a phone interview. “The question is, are political parties agile enough to take advantage of it?”

For more details visit https://cis-india.org/news/livemint-march-11-2014-chanpreet-khurana-when-politics-gets-social

The Internet Will Be Everywhere In 2025, For Better Or Worse

praskrishna — 2014-04-04T09:08:38Z

In 2025, the Internet will enhance our awareness of the world and ourselves while diminishing privacy and allowing abusers to "make life miserable for others," according to a new report by the Pew Research Center and Elon University.

The blog post was originally published on the website of WCAI Cape and Islands NPR on March 12, 2014. Dr. Nishant Shah is quoted.

But more than anything, experts say, it will become ubiquitous and embedded in our lives — the same way electricity is today.

"The Internet will shift from the place we find cat videos to a background capability that will be a seamless part of how we live our everyday lives," says Joe Touch, director of the University of Southern California's Information Sciences Institute. "We won't think about 'going online' or 'looking on the Internet' for something. We'll just be online, and just look."

The report follows a survey last month on how the Internet has affected our lives in the 25 years since Sir Tim Berners-Lee released a paper proposing the World Wide Web. By 1989, the Internet had already been around for nearly two decades, but it wasn't widely accessible. Berners-Lee's ideas became the foundation of the way we access the Internet today.

So the Pew report asked: What do you expect to be the most significant overall impacts of our uses of the Internet on humanity between now and 2025? Here are some of the 1,800 respondents' predictions:

Survey Highlights

The Internet will allow us to collect information on every aspect of our lives and become more aware of our behavior — at the peril of privacy.

"We'll have a picture of how someone has spent their time, the depth of their commitment to their hobbies, causes, friends, and family. This will change how we think about people, how we establish trust, how we negotiate change, failure, and success," says Judith Donath, a fellow at Harvard University. Other experts predict that this can also effectively personalize health care and disease prevention.

But the conveniences come with tradeoffs. Llewellyn Kriel, head of a media services company in South Africa, has a far less rosy view. "Everything will be available online with price tags attached. Cyberterrorism will become commonplace. Privacy and confidentiality of any and all personal will become a thing of the past," he says.

Some predict that privacy in 2025 will be a luxury reserved for the upper class.

The Internet's pervasiveness will spread both education and ignorance

"The smartest person in the world currently could well be stuck behind a plow in India or China," says Hal Varian, chief economist for Google. "Enabling that person — and the millions like him or her — will have a profound impact on the development of the human race."

The downside? Group-think, mob mentality and manipulation. "The Internet will be used as the most effective force of mind control the planet has ever seen, leaving the Madison Avenue revolution as a piddling, small thing by comparison," says Mikey O'Connor, an elected representative to ICANN's GNSO Council, representing the ISP and Connectivity Provider Constituency.

We can't fully understand its effects yet

"The greatest impact of the Internet is what we are already witnessing, but it is going to accelerate," says Nishant Shah, director of research at the Centre for Internet and Society in India.

It might not even do as much as we think, as Dell engineer Anoop Ghanwani predicts: "Regulation will always stand in the way of anything significant happening."

Jeff Jarvis, entrepreneurial journalism professor at the City University of New York, compares the Internet to the printing press: Its significance could not have been predicted. "The impact of the book on society was not fully realized until 100 years after the invention of the press. ... In the development of the Net and its impact on society, we are at 1472 in Gutenberg years," Jarvis says. "Consider the change brought by the Web its first 20 years, and now you ask us to predict the next dozen? Sorry."

For more details visit https://cis-india.org/news/cape-and-islands-march-12-2014-the-internet-will-be-everywhere-in-2025-for-better-or-worse