We are anonymous, we are legion

Thousands go online against 66A

praskrishna — 2012-11-30T06:40:38Z

An online petition aimed at amending section 66A of the Information Technology (IT) Act and re-examining internet laws has garnered 3,000 signatures since it began on Tuesday — two days before Kapil Sibal, telecom and IT minister, chairs a meeting with the cyber regulation advisory committee.

This article by Apoorva Dutt was published in DNA on November 29, 2012. Pranesh Prakash is quoted.

The petition, anchored on Change.org, a platform for social initiatives, was started by Bangalore-based advocate Gautam John after two girls were arrested for their Facebook post on imposing a bandh in the city on the day Shiv Sena chief Bal Thackeray was cremated. Following their arrests, Shaheen Dhada has deleted her Facebook account while her friend Rini Srinivasan who merely liked the post has opened a new account on the social networking site. However, she has vowed to refrain from making political statements.

John is blunt about the legislative effect an online petition can have. l Turn to p8.

“Honestly, I don’t believe that a petition can change laws, but it gives concerned citizens a platform for documenting their concern in such troubling scenarios. To some extent, this sort of petition can represent a civil society’s point of view. No more can a government authority say ‘only NGOs care about an issue’. Now they know – thousands of ordinary people care,” John said.

Pranesh Prakash, policy director at the Centre For Internet and Society in Bangalore, points out the flaws in section 66A that have been exploited in cases like the Palghar incident. “Section 66A is very broadly-worded and the punishment (three years imprisonment) is excessive,” he said. “The law was borrowed – that too badly – from a British law. There are many a things greatly flawed in this unconstitutional provision, from the disproportionality of the punishment to the non-existence of the crime. The 2008 amendment to the IT Act was one of eight laws passed in 15 minutes without any debate in the winter session of Parliament.”

The petition also aims to organise a meeting of the civil society stakeholders to look into these concerns. A similar meeting was scheduled to be held in August, but it did not take place.

Sudarshan Balachandran of Change.org is the lead campaigner and organiser of the petition. He hopes to hand over a copy of the petition to Sibal during the meeting on Thursday. “Sibal has gone on record to say that they will examine the law, and if they feel it doesn’t work, it will be junked. So I am hopeful,” said Balachandran.

For more details visit https://cis-india.org/news/dnaindia-nov-29-2012-apoorva-dutt-thousands-go-online-against-66a

Amnesty International calls for review of 66A of IT act

praskrishna — 2012-11-30T06:19:45Z

The review seeks to bring the Act in line with international human rights law standards on freedom of expression.

This article by Nirmalya Behera was published in the Business Standard on November 28, 2012.

Joining in the row over arrest of two girls in Maharastra for Facebook comments, the human rights group, Amnesty International, has called for review of the Section 66A of the Information Technology Act, 2000.

In a letter to Kapil Sibal, Union minister for Communications and Information Technology, the London based human right watchdog has asked for reviewing the section and bringing it in line with international human rights law standards on freedom of expression.

The human rights group and the Centre for Internet and Society believe that Section 66A, which was amended in 2008, is not in line with the constitution of India and internationally accepted standards on freedom of expression. They termed the section as imprecise and over board.

Amnesty has also called for laying down clear and comprehensive explanations of the restrictions on free speech either in the IT act or in the rules in order to prevent the abuse of the provision by various state law enforcement officials and frame the explanations after consulting it with the public.

“The Internet should be a force for political freedom, not repression. People have the right to seek and receive information and to express their peaceful beliefs without fear, or interference. But under Section 66A, even a peaceful posting could lead to a prison sentence of up to three years”, it said in its letter.

It may be noted that two girls- Shaheen Dhada and her friend Renu Srinivasan were arrested on November 19, after Dhada had lamented in a Facebook post about the shutdown in Mumbai due to Bal Thackeray's funeral and were later released on bail.

For more details visit https://cis-india.org/news/business-standard-november-28-2012-nirmalya-behera-amnesty-international-calls-for-review-of-66a-of-it-act

Indians Rank Second For Online Snooping

praskrishna — 2012-11-30T06:10:24Z

Indians rank second globally when it comes to seeking details of private individuals online, as per Google transparency report.

The blog post was published in Indolink on November 23, 2012. Pranesh Prakash is quoted.

India recorded for 2,319 requests for the entire period of 2012, where various government agencies have been looking for individual user details contained in online records, as reported by Dailybhaskar.com. U.S. topped the list with 7,969 requests, while Brazil was on the third spot with 1,566 requests.

It was seen that in the first six months this year, India made 2,319 requests involving 3,467 users, while the U.S. made 7,969 requests in the same period. Globally, it was seen that there were 20,938 requests for user data in the period of January-June. The data includes an individual’s complete Gmail account, chat logs, Orkut profile and search terms among others. Google prepares this report every six months, and was started in July-December 2009.

The report also stated that the percentage of data requests fully or partially complied with by India stood at 64 percent.

The Director for policy at Centre for Internet and Society (CIS), Pranesh Prakash said "Though India is a large country with a significant number of internet users, this data is nonetheless an indicator of growing surveillance," as reported by Daily Bhaskar.com.Apart from snooping on user details, Indian authorities are also known to send requests for taking down certain web content, which is considered to be sensitive for national security or defamatory in general. A new trend also revealed that untrue court orders are being used as a key instrument for the same.

On one hand the nation is seeking to go net savvy, while on the other hand authorities are looking to stamp authority on freedom of a larger population.

If was also noted that there were 20 court orders and 64 requests from executive/police that resulted in 596 items being taken down from the web between January and June this year. Comparatively, there were only eight court orders and 22 executive/police requests in January-June 2010, resulting in 125 items being taken down.

Google said “In response to a court order, we removed 360 search results. The search results were linked to 360 web pages that had adult videos, which allegedly violated an individual’s personal privacy,” as reported by Business Standard.

For more details visit https://cis-india.org/news/indolink-november-2012-indians-rank-second-for-online-shopping

Indian government at second position after U.S.A for demanding user data from Google

praskrishna — 2012-11-30T05:05:01Z

The Indian government has secured 2nd position in the list of the governments demanding for Web user information. It is behind only from the United States government.

This blog entry was published in WHDI Reviews on November 22, 2012. Pranesh Prakash is quoted.

This fact came to light in the ‘Transparency Report’ published by web services major. The report covers the time period from January to June in the present year. During this time period, the Govt. of India has asked Google for user information 2,319 times over 3,647 user accounts.

This has been done by the way of court orders and requests made by police. Google has allowed the disclosure of the information sometimes partially and sometimes completely. The U.S.A government on the other hand requested for more information 7,969 requests over 16,281 accounts. The compliance rate by Google to Indian and U.S requests was 64% and 90% respectively. The report gives details about two categories of interactions: firstly to divulge data and secondly to pull down content. India now ranks 7th in the list of countries which had made requests to pull down data. India could have achieved even a better rank but owing to the lack of any constitutional power which backs its action, it has to be satisfied with the seventh position. According to Pranesh, (policy director with Bangalore-based Centre for Internet and Society) these requests for pulling down data are an attempt made by the government so that its criticism is not able to reach a wide audience.

Google (which is banned in China) supports the cause of disclosure of the information related to governments. The other net service providers which put out similar transparency reports are twitter, Linkedin and Cloud storage service Dropbox. These content pull down request made by the government is not healthy for a democratic country like India.

For more details visit https://cis-india.org/news/whdi-reviews-nov-22-2012-indian-government-at-second-position-after-usa-for-demanding-user-data-from-google

25 Indians to watch

praskrishna — 2012-11-30T04:46:38Z

From a political scion and an attacking batsman to a crusading web entrepreneur and a ‘Potato Prince’, these are India’s rising stars.

The article was published in the FT Magazine on November 16, 2012. Sunil Abraham is one among the 25 rising Indian stars to watch out for.

Politics

	Priyanka Gandhi Vadra The charismatic scion of India’s pre-eminent political dynasty has shied away from the family business, preferring to raise her children and study Buddhism. But her election-time appearances for mother, Sonia, and brother, Rahul – and her resemblance to her grandmother, former prime minister Indira Gandhi – keep Indians tantalised over a potential entry into full-time political life.

Priyanka Gandhi Vadra

The charismatic scion of India’s pre-eminent political dynasty has shied away from the family business, preferring to raise her children and study Buddhism. But her election-time appearances for mother, Sonia, and brother, Rahul – and her resemblance to her grandmother, former prime minister Indira Gandhi – keep Indians tantalised over a potential entry into full-time political life.

Arvind Kejriwal

A former tax inspector turned right-to-information activist, he was the driving force behind India Against Corruption, last year’s campaign for a new anti-graft law. Aiming to tap middle-class disillusionment with existing political parties, he is now forming his own.

Nitish Kumar

Chief minister of Bihar since 2005, this veteran socialist politician has brought economic growth, law and order and hope to what was one of India’s poorest, most-backward and worst-governed states. His humble persona combined with a strong track record on development mean that many see him as a potential future prime minister in a coalition government.

Anurag Thakur

Former cricketer and BJP member of parliament since 2008, Thakur’s ascent through the party’s ranks to the presidency of BJP’s youth wing put him in the spotlight in 2012. The BJP is said to be grooming him to take on Rahul Gandhi of the Congress party, particularly since Varun Gandhi, another scion within the BJP’s fold, has proved rather ineffective.

Sports

No one can replace Sachin Tendulkar, but the arrival of this dashing young batsman has softened the blow of the great cricketer’s impending retirement. With Bollywood looks to match his bold stroke play, the 24-year-old Kohli helped his cricket-mad country win last year’s World Cup – and raised hopes of more to come.

Saina Nehwal

This small-town girl from the northern state of Haryana is a formidable youth icon. Her many international titles have changed the face of Indian badminton and a bronze medal at the London Olympics this year raised hopes for Rio 2016. Will she be able to break through the Chinese wall?

Entertainment

Anurag Kashyap

India’s answer to Quentin Tarantino, Kashyap makes gritty, personal films about the country’s underbelly: terrorist attacks in Mumbai for Black Friday; drug use and prostitution in Dev D; and eastern India’s brutal coal mafia in this year’s two-part epic Gangs of Wasseypur. He cut his teeth writing Water, Canadian director Deepa Mehta’s Oscar-nominated film, among others.

Sneha Khanwalkar

A film composer who eschews the usual Bollywood penchant for cheesy pop, Khanwalkar favours “found sound”, which she gathers by travelling the Indian countryside and picking up on obscure – and not-so-obscure – folk traditions. She hosts MTV’s Sound Trippin, in which she recreates that experience for viewers more used to Celebrity Big Brother knock-offs. Not yet 30, Khanwalkar already claims two of the best modern Bollywood scores, for 2008’s Oye Lucky! Lucky Oye! and Gangs of Wasseypur.

	India’s greatest graphic novelist, whose project “Gallery of Losers” was shown on billboards across London during the Olympics. A Goldsmiths college graduate, his books – 2004’s Corridor and 2007’s The Barn Owl’s Wondrous Capers – detail alienation in both modern and old India and have set the standard for a burgeoning art form on the subcontinent.

Irrfan Khan

In a sea of “heroes” – as Bollywood’s buffed-up supermen are called – Khan stands out as an actor. A master of subtlety and character, he has found crossover success in Hollywood in films including Slumdog Millionaire (he played the cop), A Mighty Heart (with Angelina Jolie) and The Amazing Spider-Man. Up next is a role in Ang Lee’s adaptation of the Man Booker prize-winning Life of Pi.

Rohini Devasher

A painter and printmaker trained in New Delhi and the UK, Deveshar uses printmaking and video to explore the rhythms of growth in the natural world, and their digital echoes. Her work, shown widely at home and internationally, stands at the intersection of art and science and is influenced by her passion for astronomy.

Gauri Shinde A director of more than 100 advertising films for major Indian brands, Shinde put her focus on the big screen this year with her writing and directorial debut, English Vinglish, a blockbuster hit about the massive social fault line in India between those who speak English and those who don’t.

Gauri Shinde

A director of more than 100 advertising films for major Indian brands, Shinde put her focus on the big screen this year with her writing and directorial debut, English Vinglish, a blockbuster hit about the massive social fault line in India between those who speak English and those who don’t.

Social/Academia

Gita Gopinath

One of the youngest women to win a tenured economics professorship at Harvard, Gopinath uses complex maths to probe one of the world’s most pressing problems: how to solve sovereign debt crises. Still only 40, she appears frequently as a commentator back home, calling for a radical overhaul of her own government’s increasingly precarious financial position.

Sunil Abraham

India’s government has developed a worrying taste for internet censorship, making plenty of work for one of the country’s most respected online civil advocates. Head of the Centre for Internet and Society, Abraham is trying to wean New Delhi off its taste for crackdowns in India’s fast-growing corner of cyberspace.

Manoj Kumar

The Naandi Foundation CEO has persuaded big Indian corporations to support programmes that battle hunger and the maltreatment of girls, raise educational standards and provide sustainable livelihoods. His Midday Meal programme feeds 1.2 million each day; and its experiments with social enterprises make it one of India’s most innovative charities.

Abhijit Banerjee A development economist at MIT and author of Poor Economics, Banerjee carries out randomised-control field trials to cut through propaganda and evaluate the real impact of programmes to help the poor.

Abhijit Banerjee

A development economist at MIT and author of Poor Economics, Banerjee carries out randomised-control field trials to cut through propaganda and evaluate the real impact of programmes to help the poor.

Susmita Mohanty

Literally a rocket scientist. A protégé of Arthur C. Clarke, with stints at Nasa and Boeing, Mohanty was the youngest ever member of the International Academy of Astronautics. She’s now an aerospace entrepreneur. Her company, Earth2Orbit, recently launched its first client satellite.

Swati Ramanathan

Could online confessions help to stop India’s corruption crisis? This thought inspired www.ipaidabribe.com, a site where those forced to pay up can tell their stories anonymously. Established as part of the Janaagraha initiative that Ramanathan co-founded to improve life in Indian cities, the project has spawned imitators in half a dozen countries.

Business

Binny Bansal

As co-CEO of Flipkart.com – the “Amazon of India” – along with Sachin Bansal (no relation), he has turned a Bangalore-based start-up into the country’s most exciting e-commerce business. They have won millions in venture funding and a loyal urban customer base by speedily delivering everything from books to kitchenware.

Phanindra “Phani” Sama

India’s buses are booming, as travel demand rockets but rail capacity stays stuck. Those seeking tickets online are most likely to do so through RedBus. Dreamt up when he couldn’t get tickets for a trip, Sama’s site stitches together the country’s disorganised bus system, and saw its 32-year-old founder sell his 10 millionth ticket this year.

	Bringing new insights to a stuffy 115-year-old Indian conglomerate isn’t easy, nor is being an openly gay man in India’s still-traditional business culture – but Parmesh Shahani manages both, in his role as the founder and head of an ideas and innovation laboratory within the $3.3bn Mumbai-based Godrej group.

Anurag Behar

Engineer and former CEO of Wipro Infrastructure Engineering – a sister company of software giant Wipro – he has previously run the group’s charitable initiatives in education. Now Wipro’s chief sustainability officer, he is driving diversifications into water and clean energy, part of a new company focus.

Cyrus Mistry The man with the biggest shoes to fill in corporate India takes the reins at Tata in late December, replacing Ratan Tata, a man viewed as close to a living saint. The first non-Tata family member to run the nation’s most important business, he faces plenty of questions about how – and whether – to continue his predecessor’s dash for global growth.

Cyrus Mistry

The man with the biggest shoes to fill in corporate India takes the reins at Tata in late December, replacing Ratan Tata, a man viewed as close to a living saint. The first non-Tata family member to run the nation’s most important business, he faces plenty of questions about how – and whether – to continue his predecessor’s dash for global growth.

Roshni Nadar Malhotra

The CEO and executive director of the $5bn Indian IT giant HCL Corporation successfully combines business, social enterprise and philanthropy. Malhotra is the driving force behind Shiv Nadar Foundation’s VidyaGyan Schools in Uttar Pradesh, providing free education to children from poor, rural families.

Jang Bahadur Singh Sangha

Known as the “Potato Prince”, Sangha oversees one of India’s largest and most modern farming operations – and has demonstrated the transformative impact of technology in a country of small-scale subsistence farms. Armed with a master’s degree in plant pathology, he has made modern farming profitable – and almost cool.

For more details visit https://cis-india.org/news/ft-magazine-nov-16-2012-25-indians-to-watch

Facebook Arrests Ignite Free-Speech Debate In India

praskrishna — 2013-01-07T10:16:39Z

Shaheen Dhada is an unlikely looking protagonist in the battle under way in India to protect free speech from government restrictions in the new media age.

This article by Julie McCarthy was published in npr on November 29, 2012. Pranesh Prakash is quoted.

Slight and soft-spoken, Dhada perches on the edge of her bed in a purple-walled room that has been her own for the past 20 years. Outside, police officers are posted for her protection in the town of Palghar, 2 1/2 hours outside Mumbai.

The 21-year-old management science grad's Facebook post last week triggered her arrest and the wrath of local residents. Her "crime" was questioning the shutdown of Mumbai as mourners gathered for the cremation of Bal Thackeray, who had dominated the city's political stage for decades with cagey intimidation tactics.

In a Facebook post on Nov. 18, Dhada wrote: "Every day thousands of people die, but still the world moves on. ... Today, Mumbai shuts down out of fear, not out of respect."

Within minutes, she got a call from a stranger. "And he told me, 'Do you really think whatever you posted is right?' " Dhada says. "I was actually confused about what he was asking for."

She hung up and deleted her comment. But by then a mob had gathered at her uncle's medical clinic around the corner, smashing windows and equipment, and vandalizing the operating room.

"Within 10 minutes, the police came and told me to come to the police station. I had to apologize in a written statement," says Dhada, who was held until 2 a.m. and then released on bail. A friend of hers, Renu Srinivasan, who "liked" the post, had been detained with her. A mob descended on the station. Dhada says she couldn't see it, but heard: "They were shouting, and at that time I was really very scared."

Meanwhile, Dhada's father, Farooq Dhada, says his family cowered inside their home for hours in the darkness, afraid the mob would come for them next.

The episode has shaken the Muslim father of two, who says he never expected things to escalate to such a frightening pitch. Reflecting on the incident days later, he says freedom of speech in India "exists only on paper." He says he doubts the common person feels any sense of security — no matter what religion they are.

Shiv Sena's Legacy Of Violence

Shaheen Dhada's post had angered followers of Thackeray, a political cartoonist turned Hindu hard-liner. His Hindu party, Shiv Sena, won popular appeal in the state of Maharashtra, where Mumbai is located. Exploiting enmity against migrants from other states, the party encouraged brute force to win jobs and opportunities.

Journalist Naresh Fernandes says when Hindu nationalism became a potent force, Shiv Sena turned its ire on Mumbai's Muslims — igniting riots that killed 900 people in 1992 and '93.

Thackeray fanned the violence, Fernandes says, by "making extremely provocative statements essentially calling upon his followers to attack Muslims."

Vaibhav Purandare, author of The Shiv Sena Story, says the party's legacy of violence has cost it support over the years.

"They refused to believe that the India of the 21st century was very different from the India of the 20th century ... when a section [of the population] would not mind the use of violence," Purandare says. The bust-up of the medical clinic "shows they continue with violence tactics," he adds.

Anil Desai, the secretary of Shiv Sena, says it is not a matter of disowning the violence. "It was an emotional outburst," he says, "and the incidents ... were blown out of proportion, that much I say."

Inciting Religious Enmity

At a restaurant in Palghar on Friday night, the talk among locals turned to the Facebook row. Sunil Mahendrakar said Dhada should be prohibited from posting comments critical of Thackeray because he was considered a father figure to many, if not to her.

"Talking cheap or bad about somebody's father should be denied, anywhere in the world. In India ... in America," he said. "It's wrong."

Retired Supreme Court Justice Markandey Katju says every freedom is subject to "reasonable restrictions in the public interest." But he says in the case of Dhada, her post actually underscores a Supreme Court ruling that bringing a city to a standstill is illegal.

"You can mourn a death in whichever way you want, but you can't bring a whole city to a stoppage. So what this girl wrote was in consonance with the verdict of the Supreme Court — nothing illegal," Katju says.

Nonetheless, police charged Dhada under a statute that makes it a crime to promote "religious enmity" between groups. The initial police report refers to her as a Muslim. But Dhada says she does not believe she was singled out for her faith.

Writer Fernandes says it's more likely police were scrambling for a convenient hook on which to hang a charge.

"They needed to find a cause of anger and suggested that she, as a Muslim girl, had insulted them, who were Hindus," he says. "That's ridiculous. She questioned why a city shut down after Bal Thackeray's death — and Bal Thackeray is not a religion; he's a leader of a political party."

The general consensus seems to be that the police not only misapplied the law but also succumbed to the will of the mob.

"There were thousands of guys outside their police station and inside the station house who were doing what the Shiv Sena has always done — threatening to burn the town up," Fernandes says. "They just wanted to get them off their backs and wanted to make sure that order was maintained even as they didn't quite uphold the law."

Communal Harmony

The case also throws a harsh light on India's new Information Technology Act that governs electronic speech. Police charged Dhada with violating a section of the law, which prohibits speech that, among other things, causes "annoyance, inconvenience, danger, obstruction, insult, injury, criminal intimidation, enmity, hatred or ill will."

Pranesh Prakash, the director of the Centre for Internet and Society, says it's a poorly drafted catchall. Under such a sweeping statute, Prakash says, 95 percent of India's Internet users could well be imprisoned.

"I have 3,500 followers on Twitter, and I'm pretty sure I annoy 100 of them on a daily basis," he says.

Tackling issues of communal harmony is a serious issue in India, but, Prakash says, "it should not lead to forsaking fundamental rights guaranteed by the Indian Constitution."

The government conferred Thursday over problems with the IT Act, while the Supreme Court is hearing challenges to it.

Shaheen Dhada and Renu Srinivasan are not expected to face prosecution under the country's controversial IT Act or any other law. Following a public outcry, two senior officials from the local Palghar police have been suspended and a magistrate transferred.

From her self-imposed house arrest, Dhada says she'll venture back onto Facebook, but her experience is certain to color her musings.

"I don't want this to happen again," she says, laughing, "but I'll be careful next time."

For more details visit https://cis-india.org/news/npr-julie-mccarthy-november-29-2012

Fixing India’s anarchic IT Act

pranesh — 2012-11-30T06:33:58Z

Section 66A of the Information Technology (IT) Act criminalizes “causing annoyance or inconvenience” online, among other things. A conviction for such an offence can attract a prison sentence of as many as three years.

Pranesh Prakash's article was published in LiveMint on November 28, 2012.

How could the ministry of communications and information technology draft such a loosely-worded provision that’s clearly unconstitutional? How could the ministry of law allow such shoddy drafting with such disproportionate penalties to pass through? Were any senior governmental legal officers—such as the attorney general—consulted? If so, what advice did they tender, and did they consider this restriction “reasonable”? These are some of the questions that arise, and they raise issues both of substance and of process.

When the intermediary guidelines rules were passed last year, the government did not hold consultations in anything but name. Industry and non-governmental organizations (NGOs) sent in submissions warning against the rules, as can be seen from the submissions we retrieved under the Right to Information Act and posted on our website. However, almost none of our concerns, including the legality of the rules, were paid heed to.

Earlier this year, parliamentarians employed a little-used power to challenge the law passed by the government, leading communications minister Kapil Sibal to state that he would call a meeting with “all stakeholders”, and will revise the rules based on inputs. A meeting was called in August, where only select industry bodies and members of Parliament were present, and from which a promise emerged of larger public consultations. That promise hasn’t been fulfilled.

Substantively, there is much that is rotten in the IT Act and the various rules passed under it, and a few illustrations—a longer analysis of which is available on the Centre for Internet and Society (CIS) website—should suffice to indicate the extent of the malaise.

Some of the secondary legislation (rules) cannot be passed under the section of the IT Act they claim as their authority. The intermediary guidelines violate all semblance of due process by not even requiring that a person whose content is removed is told about it and given a chance to defend herself. (Any content that is complained about under those rules is required to be removed within 36 hours, with no penalties for wilful abuse of the process. We even tested this by sending frivolous complaints, which resulted in removal.)

The definition of “cyber terrorism” in section 66F(1)(B) of the IT Act includes wrongfully accessing restricted information that one believes can be used for defamation, and this is punishable by imprisonment for life. Phone-tapping requires the existence of a “public emergency” or threat to “public safety”, but thanks to the IT Act, online surveillance doesn’t. The telecom licence prohibits “bulk encryption” over 40 bits without key escrow, but these are violated by all, including the Reserve Bank of India, which requires that 128-bit encryption be used by banks. These are but a few of the myriad examples of careless drafting present in the IT Act, which lead directly to wrongful impingement of our civil and political liberties. While we agree with the minister for communications, that the mere fact of a law being misused cannot be reason for throwing it out, we believe that many provisions of the IT Act are prone to misuse because they are badly drafted, not to mention the fact that some of them display constitutional infirmities. That should be the reason they are amended, not merely misuse.

What can be done? First, the IT Act and its rules need to be fixed. Either a court-appointed amicus curiae (who would be a respected senior lawyer) or a committee with adequate representation from senior lawyers, Internet policy organizations, government and industry must be constituted to review and suggest revisions to the IT Act. The IT Act (in section 88) has a provision for such a multi-stakeholder advisory committee, but it was filled with mainly government officials and became defunct soon after it was created, more than a decade ago. This ought to be reconstituted. Importantly, businesses cannot claim to represent ordinary users, since except when it comes to regulation of things such as e-commerce and copyright, industry has little to lose when its users’ rights to privacy and freedom of expression are curbed.

Second, there must be informal processes and platforms created for continual discussions and constructive dialogue among civil society, industry and government (states and central) about Internet regulation (even apart from the IT Act). The current antagonism does not benefit anyone, and in this regard it is very heartening to see Sibal pushing for greater openness and consultation with stakeholders. As he noted on the sidelines of the Internet Governance Forum in Baku, different stakeholders must work together to craft better policies and laws for everything from cyber security to accountability of international corporations to Indian laws. In his plenary note at the forum, he stated: “Issues of public policy related to the Internet have to be dealt with by adopting a multi-stakeholder, democratic and transparent approach” which is “collaborative, consultative, inclusive and consensual”. I could not have put it better myself. Now is the time to convert those most excellent intentions into action by engaging in an open reform of our laws.

Pranesh Prakash is policy director at the Centre for Internet and Society.

For more details visit https://cis-india.org/internet-governance/blog/livemint-opinion-november-28-2012-pranesh-prakash-fixing-indias-anarchic-it-act

Breaking Down Section 66A of the IT Act

pranesh — 2012-12-14T09:51:17Z

Section 66A of the Information Technology Act, which prescribes 'punishment for sending offensive messages through communication service, etc.' is widely held by lawyers and legal academics to be unconstitutional. In this post Pranesh Prakash explores why that section is unconstitutional, how it came to be, the state of the law elsewhere, and how we can move forward.

Back in February 2009 (after the IT Amendment Act, 2008 was hurriedly passed on December 22, 2008 by the Lok Sabha, and a day after by the Rajya Sabha[1] but before it was notified on October 27, 2009) I had written that s.66A is "patently in violation of Art. 19(1)(a) of the Constitution of India":

Section 66A which punishes persons for sending offensive messages is overly broad, and is patently in violation of Art. 19(1)(a) of our Constitution. The fact that some information is "grossly offensive" (s.66A(a)) or that it causes "annoyance" or "inconvenience" while being known to be false (s.66A(c)) cannot be a reason for curbing the freedom of speech unless it is directly related to decency or morality, public order, or defamation (or any of the four other grounds listed in Art. 19(2)). It must be stated here that many argue that John Stuart Mill's harm principle provides a better framework for freedom of expression than Joel Feinberg's offence principle. The latter part of s.66A(c), which talks of deception, is sufficient to combat spam and phishing, and hence the first half, talking of annoyance or inconvenience is not required. Additionally, it would be beneficial if an explanation could be added to s.66A(c) to make clear what "origin" means in that section. Because depending on the construction of that word s.66A(c) can, for instance, unintentionally prevent organisations from using proxy servers, and may prevent a person from using a sender envelope different from the "from" address in an e-mail (a feature that many e-mail providers like Gmail implement to allow people to send mails from their work account while being logged in to their personal account). Furthermore, it may also prevent remailers, tunnelling, and other forms of ensuring anonymity online. This doesn't seem to be what is intended by the legislature, but the section might end up having that effect. This should hence be clarified.

I stand by that analysis. But given that it is quite sparse, in this post I will examine s.66A in detail.

Here's what s. 66A of the IT (Amendment) Act, 2008 states:

66A. Punishment for sending offensive messages through communication service, etc.,
Any person who sends, by means of a computer resource or a communication device,—
(a) any information that is grossly offensive or has menacing character;
(b) any information which he knows to be false, but for the purpose of causing annoyance, inconvenience, danger, obstruction, insult, injury, criminal intimidation, enmity, hatred, or ill will, persistently by making use of such computer resource or a communication device,
(c) any electronic mail or electronic mail message for the purpose of causing annoyance or inconvenience or to deceive or to mislead the addressee or recipient about the origin of such messages

shall be punishable with imprisonment for a term which may extend to three years and with fine.

Explanation: For the purposes of this section, terms "electronic mail" and "electronic mail message" means a message or information created or transmitted or received on a computer, computer system, computer resource or communication device including attachments in text, images, audio, video and any other electronic record, which may be transmitted with the message.[2]

A large part of s.66A can be traced back to s.10(2) of the UK's Post Office (Amendment) Act, 1935:

If any person —
(a) sends any message by telephone which is grossly offensive or of an indecent, obscene, or menacing character; or
(b) sends any message by telephone, or any telegram, which he knows to be false, for the purpose of causing annoyance, inconvenience, or needless anxiety to any other person; or
(c) persistently makes telephone calls without reasonable cause and for any such purposes as aforesaid;
he shall be liable upon summary conviction to a fine not exceeding ten pounds, or to imprisonment for a term not exceeding one month, or to both such fine and imprisonment.

Section 66A bears a striking resemblance to the three parts of this law from 1935, with clauses (b) and (c) being merged in the Indian law into a single clause (b) of s.66A, with a whole bunch of new "purposes" added. Interestingly, the Indian Post Office Act, 1898, was never amended to add this provision.

The differences between the two are worth exploring.

Term of Punishment

The first major difference is that the maximum term of imprisonment in the 1935 Act is only one month, compared to three years in s.66A of the IT Act. It seems the Indian government decided to subject the prison term to hyper-inflation to cover for the time. If this had happened for the punishment for, say, criminal defamation, then that would have a jail term of up to 72 years! The current equivalent laws in the UK are the Communications Act, 2003 (s. 127) and the Malicious Communications Act 1988 (s.1) for both of which the penalty is up to 6 months' imprisonment or to a maximum fine of £5000 or both. What's surprising is that in the Information Technology (Amendment) Bill of 2006, the penalty for section 66A was up to 2 years, and it was changed on December 16, 2008 through an amendment moved by Mr. A. Raja (the erstwhile Minister of Communications and IT) to 3 years. Given that parts of s.66A(c) resemble nuisance, it is instructive to note the term of punishment in the Indian Penal Code (IPC) for criminal nuisance: a fine of Rs. 200 with no prison term.

"Sending" vs. "Publishing"

J. Sai Deepak, a lawyer, has made an interesting point that the IT Act uses "send" as part of its wording, and not "publish". Given that, only messages specifically directed at another would be included. While this is an interesting proposition, it cannot be accepted because: (1) even blog posts are "sent", albeit to the blog servers — s.66A doesn't say who it has to be sent to; (2) in the UK the Communications Act 2003 uses similar language and that, unlike the Malicious Communication Act 1988 which says "sends to another person", has been applied to public posts to Twitter, etc.; (3) The explanation to s.66A(c) explicitly uses the word "transmitted", which is far broader than "send", and it would be difficult to reconcile them unless "send" can encompass sending to the publishing intermediary like Twitter.

Part of the narrowing down of s.66A should definitely focus on making it applicable only to directed communication (as is the case with telephones, and with the UK's Malicious Communication Act), and not be applicable to publishing.

Section 66A(c)

Section 66A(c) was also inserted through an amendment moved by Mr. Raja on December 16, 2008, which was passed by the Lok Sabha on December 22, 2008, and a day after by the Rajya Sabha. (The version introduced in Parliament in 2006 had only 66A(a) and (b).) This was done in response to the observation by the Standing Committee on Information Technology that there was no provision for spam. Hence it is clear that this is meant as an anti-spam provision. However, the careless phrasing makes it anything but an anti-spam provision. If instead of "for the purpose of causing annoyance or inconvenience or to deceive or to mislead the addressee or recipient about the origin of such messages" it was "for the purpose of causing annoyance and inconvenience and to deceive and to mislead the addressee or recipient about the origin of such messages", it would have been slightly closer to an anti-spam provision, but even then doesn't have the two core characteristics of spam: that it be unsolicited and that it be sent in bulk. (Whether only commercial messages should be regarded as spam is an open question.) That it arise from a duplicitous origin is not a requirement of spam (and in the UK, for instance, that is only an aggravating factor for what is already a fine-able activity).

Curiously, the definitional problems do not stop there, but extend to the definitions of "electronic mail" and "electronic mail message" in the 'explanation' as well. Those are so vast that more or less anything communicated electronically is counted as an e-mail, including forms of communication that aren't aimed at particular recipients the way e-mail is.

Hence, the anti-spam provision does not cover spam, but covers everything else. This provision is certainly unconstitutional.

Section 66A(b)

Section 66A(b) has three main elements: (1) that the communication be known to be false; (2) that it be for the purpose of causing annoyance, inconvenience, danger, obstruction, insult, injury, criminal intimidation, enmity, hatred or ill will; (3) that it be communicated persistently. The main problem here is, of course, (2). "Annoyance" and "inconvenience", "insult", "ill will" and "hatred" are very different from "injury", "danger", and "criminal intimidation". That a lawmaker could feel that punishment for purposes this disparate belonged together in a single clause is quite astounding and without parallel (except in the rest of the IT Act). That's akin to having a single provision providing equal punishment for calling someone a moron ("insult") and threatening to kill someone ("criminal intimidation"). While persistent false communications for the purpose of annoying, insulting, inconveniencing, or causing ill will should not be criminalised (if need be, having it as a civil offence would more than suffice), doing so for the purpose of causing danger or criminal intimidation should. However, the question arises whether you need a separate provision in the IT Act for that. Criminal intimidation is already covered by ss. 503 and 506 of the IPC. Similarly, different kinds of causing danger are taken care of in ss.188, 268, 283, 285, 289, and other provisions. Similarly with the other "purposes" listed there, if, for instance, a provision is needed to penalise hoax bomb threats, then the provision clearly should not be mentioning words like "annoyance", and should not be made "persistent". (At any rate, s. 505(1) of the IPC suffices for hoax bomb threats, so you don't need a separate provision in the IT Act).

I would argue that in its current form this provision is unconstitutional, since there is no countervailing interest in criminalising false and persistent "insults", etc., that will allow those parts of this provision to survive the test of 'reasonableness' under Art.19(2). Furthermore, even bits that survive are largely redundant. While this unconstitutionality could be cured by better, narrower wording, even then one would need to ensure that there is no redundancy due to other provisions in other laws.

Section 66A(a)

In s.66A(a), the question immediately arises whether the information that is "grossly offensive" or "menacing" need to be addressed at someone specific and be seen as "grossly offensive" or "menacing" by that person, or be seen by a 'reasonable man' test.

Additionally, the term "grossly offensive" will have to be read in such a heightened manner as to not include merely causing offence. The one other place where this phrase is used in Indian law is in s.20(b) of the Indian Post Office Act (prohibiting the sending by post of materials of an indecent, obscene, seditious, scurrilous, threatening, or grossly offensive character). The big difference between s.20(b) of the IPO Act and s.66A of the IT Act is that the former is clearly restricted to one-to-one communication (the way the UK's Malicious Communication Act 1988 is). Reducing the scope of s.66A to direct communications would make it less prone to challenge.

Additionally, in order to ensure constitutionality, courts will have to ensure that "grossly offensive" does not simply end up meaning "offensive", and that the maximum punishment is not disproportionately high as it currently is. Even laws specifically aimed at online bullying, such as the UK's Protection from Harassment Act 1997, can have unintended effects. As George Monbiot notes, the "first three people to be prosecuted under [the Protection from Harassment Act] were all peaceful protesters".

Constitutional Arguments in Importing Laws from the UK

The plain fact is that the Indian Constitution is stronger on free speech grounds than the (unwritten) UK Constitution, and the judiciary has wide powers of judicial review of statutes (i.e., the ability of a court to strike down a law passed by Parliament as 'unconstitutional'). Judicial review of statutes does not exist in the UK (with review under its EU obligations being the exception) as they believe that Parliament is supreme, unlike India. Putting those two aspects together, a law that is valid in the UK might well be unconstitutional in India for failing to fall within the eight octagonal walls of the reasonable restrictions allowed under Art.19(2). That raises the question of how they deal with such broad wording in the UK.

Genealogy of UK Law on Sending 'Indecent', 'Menacing', 'Grossly Offensive' Messages

Quoting from the case of DPP v. Collins [2006] UKHL 40 [6]:

The genealogy of [s. 127(1) of the Communication Act] may be traced back to s.10(2)(a) of the Post Office (Amendment) Act, 1935, which made it an offence to send any message by telephone which is grossly offensive or of an indecent, obscene or menacing character. That subsection was reproduced with no change save of punctuation in s.66(a) of the Post Office Act 1953. It was again reproduced in s.78 of the Post Office Act 1969, save that "by means of a public telecommunication service" was substituted for "by telephone" and "any message" was changed to "a message or other matter". Section 78 was elaborated but substantially repeated in s.49(1)(a) of the British Telecommunications Act 1981 and was re-enacted (save for the substitution of "system" for "service") in s.43(1)(a) of the Telecommunications Act 1984. Section 43(1)(a) was in the same terms as s.127(1)(a) of the 2003 Act, save that it referred to "a public telecommunication system" and not (as in s.127(1)(a)) to a "public electronic communications network". Sections 11(1)(b) of the Post Office Act 1953 and 85(3) of the Postal Services Act 2000 made it an offence to send certain proscribed articles by post.

While the above quotation talks about s.127(1) it is equally true about s.127(2) as well. In addition to that, in 1988, the Malicious Communications Act (s.1) was passed to prohibit one-to-one harassment along similar lines.

The UK's Post Office Act was eclipsed by the Telecommunications Act in 1984, which in turn was replaced in 2003 by the Communications Act. (By contrast, we still stick on to the colonial Indian Post Office Act, 1898.) Provisions from the 1935 Post Office Act were carried forward into the Telecommunications Act (s.43 on the "improper use of public telecommunication system"), and subsequently into s.127 of the Communications Act ("improper use of public electronic communications network"). Section 127 of the Communications Act states:

127. Improper use of public electronic communications network
(1) A person is guilty of an offence if he —
(a) sends by means of a public electronic communications network a message or other matter that is grossly offensive or of an indecent, obscene or menacing character; or
(b) causes any such message or matter to be so sent.
(2) A person is guilty of an offence if, for the purpose of causing annoyance, inconvenience or needless anxiety to another, he —
(a) sends by means of a public electronic communications network, a message that he knows to be false,
(b) causes such a message to be sent; or
(c) persistently makes use of a public electronic communications network.
(3) A person guilty of an offence under this section shall be liable, on summary conviction, to imprisonment for a term not exceeding six months or to a fine not exceeding level 5 on the standard scale, or to both.
(4) Subsections (1) and (2) do not apply to anything done in the course of providing a programme service (within the meaning of the Broadcasting Act 1990 (c. 42)).

Currently in the UK there are calls for repeal of s.127. In a separate blog post I will look at how the UK courts have 'read down' the provisions of s.127 and other similar laws in order to be compliant with the European Convention on Human Rights.

Comparison between S. 66A and Other Statutes

Section 144, IPC, 1860

Power to issue order in urgent cases of nuisance or apprehended danger

...obstruction, annoyance or injury to any person lawfully employed, or danger to human life, health or safety, or a disturbance of the public tranquillity

Babulal Parate v. State of Maharastra and Ors. [1961 AIR SC 884] (Magistrates order under s. 144 of the Cr. PC, 1973 was in violation of Art.19(1)(a) of the Constitution).

A special thanks is due to Snehashish Ghosh for compiling the below table.

Section	Term(s)/phrase(s) used in 66A	Term(s)/ phrase(s) used in similar sections
Section 66A (heading)	Punishment for sending offensive messages through communication service, etc	Section 127, CA, 2003, "Improper use of public electronic communications network"
Section 66A(a)	Any person who sends, by means of a computer resource or a communication device	Section 1(1), MCA 1988, "Any person who sends to another person..."
Section 66A(a)	Grossly offensive	Section 1(1)(a)(i), MCA 1988; Section 127(1)(a),CA, 2003; Section 10(2)(a), Post Office (Amendment) Act, 1935; Section 43(1)(a), Telecommunications Act 1984; Section 20, India Post Act 1898
Section 66A(a)	Menacing character	Section127(1)(a),CA, 2003
Section 66A(b)	Any information which he knows to be false	Section 1(1)(a)(iii), MCA 1988 "information which is false and known or believed to be false by the sender"; Section 127(2)(a), CA, 2003, "a message that he knows to be false"
Section 66A(b) “purpose of...”	Causing annoyance	Section127(2), CA, 2003
	Inconvenience	Section 127 (2), CA, 2003
	Danger
	Insult	Section 504, IPC, 1860
	Injury	Section 44 IPC, 1860, "The word 'injury' denotes any harm whatever illegally caused to any person, in body, mind, reputation or property."
	Criminal intimidation	Sections 503 and 505 (2), IPC, 1860
	Enmity, hatred or ill-will	Section 153A(1)(a), IPC, 1860
	Persistently by making use of such computer resource or a communication device	Section 127(2)(c), CA, 2003, "persistently makes use of a public electronic communications network."
Section 66A(c)	Deceive or to mislead	-

Notes
MCA 1988: Malicious Communications Act (s.1)
CA: Communications Act 2003 (s.127)
*Replaced by Communications Act 2003

[1]. The Information Technology (Amendment) Bill, 2008, was one amongst the eight bills that were passed in fifteen minutes on December 16, 2008.
[2]. Inserted vide Information Technology Amendment Act, 2008.

This was re-posted in Outlook (November 28, 2012)

For more details visit https://cis-india.org/internet-governance/blog/breaking-down-section-66-a-of-the-it-act

Draft nonsense

pranesh — 2012-12-03T09:08:10Z

Seriously flawed and dodgily drafted provisions in the IT Act provide the state a stick to beat its citizens with.

Pranesh Prakash's op-ed was published in the Times of India on November 24, 2012.

Section 66A of the Information Technology Act once again finds itself in the middle of a brewing storm. It has been used in cases ranging from the Mamata Banerjee cartoon case, the Aseem Trivedi case, the Karti Chidambaram case, the Chinmayi case, to the current Bal Thackeray-Facebook comments case. In all except the Karti Chidambaram case (which is actually a case of defamation where 's. 66A' is inapplicable), it was used in conjunction with another penal provision, showing that existing laws are more than adequate for regulation of online speech. That everything from online threats wishing sexual assault (the Chinmayi case) to harmless cartoons are sought to be covered under this should give one cause for concern. Importantly, this provision is cognisable (though bailable), meaning an arrest warrant isn't required. This makes it a favourite for those wishing to harass others into not speaking.

Section 66A prohibits the sending "by means of a computer resource or a communication device" certain kinds of messages. These messages are divided into three sub-parts : (a) anything that is "grossly offensive or has menacing character";(b) information known to be false for the purposes of "causing annoyance, inconvenience, danger, obstruction, insult, injury, criminal intimidation, enmity, hatred or ill will" and is sent persistently;or (c) "for the purpose of causing annoyance or inconvenience or to deceive or to mislead the addressee or recipient about the origin of such messages". This carries with it a punishment of up to three years in jail and a fine without an upper limit. As even non-lawyers can see, these are very broadly worded, with use of 'or' everywhere instead of 'and', and the punishment is excessive. The lawyers amongst the readers will note that while some of the words used are familiar from other laws (such as the Indian Penal Code), they are never used this loosely. And all should hopefully be able to conclude that large parts of section 66A are plainly unconstitutional.

If that is so obvious, how did we end up getting this law? We copied (and badly at that) from the UK. The sad part is that the modifications that were introduced while copying are the bits that cause the most trouble. The most noteworthy of these changes are the increase in term of punishment to 3 years (in the UK it's 6 months); the late introduction (on December 16, 2008 by A Raja) of sub-section (c), meant as an anti-spam provision, but covering everything in the world except spam;and the mangling up of sub-section (b) to become a witches brew of all the evil intentions in this world.

Further, we must recognise that our Constitution is much stronger when it comes to issues like free speech than the UK's unwritten constitution, and our high courts and Supreme Court have the power to strike down laws for being unconstitutional, unlike in the UK where Parliament reigns supreme. The most the courts can do there is accommodate the European Convention on Human Rights by 'reading down' laws rather than striking them down.

Lastly, even if we do decide to engage in policy-laundering, we need to do so intelligently. The way the government messed up section 66A should serve as a fine lesson on how not to do so. While one should fault the ministry of communications and IT for messing up the IT Act so badly, it is apparent that the law ministry deserves equal blame as well for being the sleeping partner in this deplorable joint venture. For instance, wrongfully accessing a computer to remove material which one believes can be used for defamation can be considered 'cyber-terrorism'. Where have all our fine legal drafters gone? In a meeting, former SEBI chairman M Damodaran noted how bad drafters make our policies seem far dumber than they are. We wouldn't be in this soup if we had good drafters who clearly understand the fundamental rights guaranteed by our constitution.

There are a great many things flawed in this unconstitutional provision, from the disproportionality of the punishment to the non-existence of the crime. The 2008 amendment to the IT Act was one of eight laws passed in 15 minutes without any debate in the 2008 winter session of Parliament. For far too long the Indian government has spoken about "multi-stakeholder" governance of the internet at international fora (meaning that civil society and industry must be seen as equal to governments when it comes to policymaking for the governance of the internet). It is about time we implemented multi-stakeholder internet governance domestically. The way to go forward in changing this would be to set up a multi-stakeholder body (including civil society and industry) which can remedy this and other ridiculously unconstitutional provisions of our IT Act.

For more details visit https://cis-india.org/internet-governance/blog/times-crest-pranesh-prakash-november-24-2012-draft-nonsense

Civil society & industry oppose India’s plans to modify ITRs

praskrishna — 2012-11-30T09:42:17Z

Industry fears ITU control over Internet; excessive content control and surveillance an issue for civil society.

Shalini Singh's article was published in the Hindu on November 23, 2012.

India’s proposal on International Telecommunications Regulations (ITRs), submitted last month to the International Telecommunications Union (ITU), the U.N. agency responsible for information and communication technologies, has drawn opposition from, and fears of content control among, civil society and the industry alike.

Sunil Abraham, Executive Director, Centre for Internet Society, told The Hindu: “The Indian government’s position on the ITRs can be improved, particularly with regard to the proposed definitions, approach to cyber security, scope of regulation.” However, he said, “we are confident that the Indian position will protect consumer and citizen interest once the government implements changes based on inputs from all… stakeholders.”

The National Association of Software and Services Companies (NASSCOM), which represents the $100-billion IT and BPO industry, has strong views against the Internet governance model of the Internet Corporation for Assigned Numbers and Names (ICANN), but favours self-regulation. Its president Som Mittal says: “NASSCOM does not favour oversight by an existing U.N. organisation like ITU. Internet and infrastructure have to be in the hands of expert organisations with proven experience.” NASSCOM has also expressed discomfort with the inclusion of “ICTs along with processing” in Section 21E of India’s proposal, since this would subject IT and BPO industries to inter-governmental regulation through the ITRs.

The Cellular Operators Association of India (COAI), which represents India’s largest mobile operators with nearly 700 million subscribers, has also opposed any role for ITU in the areas of international roaming and Internet governance, fearing a direct impact on domestic network architecture, costs and technology choices. COAI director-general Rajan Mathews said: “We are already regulated by the Department of Telecom (DoT) and the Telecom Regulatory Authority of India (TRAI). Placing the ITU’s jurisdiction over us — where we neither have voice nor recourse — is unacceptable.” The COAI’s position is consistent with the GSM Association (GSMA), the world’s largest association of mobile companies representing 800 operators spanning 220 countries. The COAI further alleges that most of its inputs “have been rejected without reasons assigned or even a meeting.” It has lodged a protest with the DoT.

The Internet Service Providers Association of India (ISPAI) has similarly protested against ITU’s jurisdiction over issues of Internet governance, architecture and cost.

Subho Ray, president, Internet & Mobile Association of India (IAMAI), said: “We represent a vast majority of Internet companies but have not been consulted by the DoT. We are completely opposed to ITU’s jurisdiction in any area related to Internet policy.”

The FICCI has also given detailed inputs on the dangers of allowing ITU’s jurisdiction, especially in areas of Internet policy and governance. It supports a bottom-up consultative and consensus-led multi-stakeholder approach, similar to the one propounded by Telecom Minister Kapil Sibal at the Internet Governance Forum, the world’s largest multi-stakeholder conference, held in Baku.

Several prominent civil society groups and members of academia involved in Internet governance also have apprehensions about expanding the ITU’s reach to Internet regulation through the ITRs. In a November 15, 2012 letter to Telecom Secretary R. Chandrashekhar, Society for Knowledge Commons, Internet Democracy Project, Free Software Movement of India, Delhi Science Forum, Media for Change and Software Freedom Law Center have complained about not having been consulted, while warning that India’s proposal “could have far reaching implications for the Internet.”

On the issue of cyber security, industry associations and several civil society groups are unanimously against any role for ITU, pointing out that including ill-defined terms such as ‘spam’ and ‘network fraud’ in a binding treaty is a terrible idea. Further, cyber security commitments can force India to cooperate with countries whose military and strategic interests are against it.

Kamlesh Bajaj, CEO, Data Security Council of India, and head of NASSCOM’s security initiatives, said: “Cyber security is sought to be taken over by ITU — an area in which it has little experience. Cyber security includes areas of application security, identity and access management, web security, content filtering, cyber forensics, data security, including issues such as cyber espionage and cyber warfare. The ITU has had no involvement in these matters over the last two decades, and should therefore stay out of them.”

Similar views have been expressed in varying degrees by the COAI, the IAMAI, the ISPAI and the FICCI. Dr. Ray of the IAMAI says: “cyber security is essentially a state prerogative and should not be part of an external treaty obligation. Any attempt to channel it through the ITU may be counter productive.”

Mr. Sibal, who has already been challenged by opposition to the domestic IT rules, is aware that if left unaddressed, opposition to India’s stance on ITRs will only escalate at a national and global level, and that if corrections have to be made in India’s position, those will have to be done consensually within the governance structure. Mr. Sibal confirmed that while cyber security was an area of discussion with the ITU, “the ITU does not have any role in Internet governance.”

According to him, either he or the Department will hold meetings on these issues with the industry to further evolve India’s position.

Mr. Chandrashekhar further confirmed that similar to several global national delegations, the government would include media and industry experts as part of its delegation to Dubai, the World Conference on International Telecommunications (WCIT-12) will be held from December 3 to 14. The final decisions on the ITRs and the composition of the delegation would be announced the coming week.

A deeply divided house in Dubai is a strong possibility, with countries which favour democracy and free speech taking a stance against those who, due to political compulsions, have proposed inter-governmental control through the ITRs by the ITU, not just on Internet policy, but also its traffic and content, most of which automatically fall under the definitions of the ICTs.

The 193-countries at THE WCIT may well spend 11 days discussing national proposals to separate issues that can be addressed nationally from those which require inter-governmental cooperation, while further debating which platforms may be best to address global cooperation.

It is equally clear that the existing Internet governance system is unacceptable to most countries, and therefore a more evolved democratic and internationally equitable system, which is managed through a multi-stakeholder process and yet with a definite role for countries like India, appears the only way forward.

Mr. Sibal, at meetings with global Internet governance bodies in Baku, is learnt to have bargained hard for India’s explicit role in the existing Internet governance processes.

For more details visit https://cis-india.org/news/the-hindu-nov-23-2012-shalini-singh-civil-society-and-industry-oppose-indias-plans-to-modify-itrs

Google's 'Transparency Report' sketchy, inconclusive: Government

praskrishna — 2012-11-22T07:39:05Z

Google calls it the 'Transparency Report', but as far as Indian authorities are concerned, it is anything but. The world's largest Internet company this week published its latest half-yearly findings on government requests for access to personal information, showing that both the number of requests and the rate of denials have risen. The data, according to the world's largest democracy, are too sketchy for any clear conclusions to be drawn.

This article by Indu Nandakumar was published in the Economic Times on November 17, 2012. Pranesh Prakash is quoted.

The skirmish is happening during a year in which relations between the Indian government and Internet companies deteriorated, with demands to take down fake Twitter handles and web pages that the former said threatened the security of regional and religious minorities.

The sum and substance of the 'Transparency Report' is that government authorities have increased the number of requests they make for personal information of user accounts on Google-owned services, including YouTube and Gmail. Google, on the other hand, has been denying the requests at a higher rate since it first started publishing the half-yearly report in 2010.

"If we believe a request is overly broad, we seek to narrow it. We may refuse to remove content or produce information, or try to narrow the request in some cases if it was not specific enough," a Google spokesman told ET. In an emailed statement, Google said it respects the legal process in India, but is keen to meet both the letter and spirit of the law before complying.

According to Google, in the first half of 2012, various arms of the Indian government made 2,319 requests but Google "partially or fully" complied with only 64% of those, compared with 70% in the same period in 2011 and nearly 80% in 2010. The government requests also sought information about 3,467 user accounts.

The department of information technology deflected requests for comment to the office of Gulshan Rai, director of India's Cyber Emergency Response Team.

India Big Market for Google

Rai said Google must "transparently" share the data pertaining to requests received by them. "It's Google data, which cannot be accessed by anybody else," he said. "We have been speaking to Google for over a year now to streamline this process and bring in more transparency, but they never came around."

What this could mean is that the government does not have a central repository of all requests for personal information by Indian authorities. So, by depending solely on Google, the government may be leaving itself in a position where it cannot challenge the authenticity of information in the Internet company's report. India's a significant market for Google, which has over 100 million users here with an over 95% market share of the Internet search market, according to research firm StatCounter. Google employs nearly 1,535 engineers in India. In August, the department of electronics & information technology sought 412 web pages hosted on Google to be blocked in connection with the controversial movie "Innocence of Muslims" as well as the mass exodus to the North-East states following riots in Assam.

"Google invariably tends to be more subjective on the adequacy of the request. Earlier they were more inclined to accept government requests. Now with the increase in the number of requests, especially since the 26/11 attacks, there is an exercise to examine the adequacy," said Pawan Duggal, a Supreme Court lawyer specialising in cyber law.

For more details visit https://cis-india.org/news/articles-economic-times-nov-17-2012-indu-nandakumar-googles-transparency-report-sketchy-inconclusive

Section 66F of the Information Technology Act, 2000

snehashish — 2012-12-02T09:39:01Z

Section 66F: Punishment for cyber terrorism.

1[66-F. Punishment for cyber terrorism.—(1) Whoever,—

(A) with intent to threaten the unity, integrity, security or sovereignty of India or to strike terror in the people or any section of the people by—

(i) denying or cause the denial of access to any person authorised to access computer resource; or

(ii) attempting to penetrate or access a computer resource without authorisation or exceeding authorised access; or

(iii) introducing or causing to introduce any computer contaminant,

and by means of such conduct causes or is likely to cause death or injuries to persons or damage to or destruction of property or disrupts or knowing that it is likely to cause damage or disruption of supplies or services essential to the life of the community or adversely affect the critical information infrastructure specified under Section 70; or

(B) knowingly or intentionally penetrates or accesses a computer resource without authorisation or exceeding authorised access, and by means of such conduct obtains access to information, data or computer database that is restricted for reasons of the security of the State or foreign relations; or any restricted information, data or computer database, with reasons to believe that such information, data or computer database so obtained may be used to cause or likely to cause injury to the interests of the sovereignty and integrity of India, the security of the State, friendly relations with foreign States, public order, decency or morality, or in relation to contempt of court, defamation or incitement to an offence, or to the advantage of any foreign nation, group of individuals or otherwise,

commits the offence of cyber terrorism.

(2) Whoever commits or conspires to commit cyber terrorism shall be punishable with imprisonment which may extend to imprisonment for life.]

1. Inserted by Act 10 of 2009, Section 32 (w.e.f. 27-10-2009)

For more details visit https://cis-india.org/internet-governance/resources/section-66f-of-the-i-t-act-2000

The Last Word: Is there a need to review Information Technology Act?

praskrishna — 2012-11-21T12:10:15Z

Does the high-handed arrest of two young girls mean it's time to review and revise the IT Act?

Aryaman Sundaram, Pavan Duggal, Pranesh Prakash and Ravi Visvesvaraya Prasad took part in a discussion with Karan Thapar on section 66A of the IT Act. This was aired on CNN-IBN on November 20, 2012.

Pranesh Prakash said that it was just not a history of misuse of section 66A of the IT Act because that presumes that the law is otherwise fine and it has just been applied wrongly. This law is fundamentally flawed. It is unconstitutional. It is like a law in which there is a provision on rape, murder, theft, nuisance, everything put together in a single section with the same punishment being given for all of them. This obviously is not good law making but that is exactly what has been done in this case by taking bits from laws in the UK and from elsewhere and mashing them all up into one omnibust gargantuan monster which is unconstitutional.

Pranesh Prakash also added that the fact is that if you have bad laws they will be used to harass people. Having good law is one part of that. Apart from that there has been also other laws which have been misapplied in this case. In all these recent cases, section 66A of the IT Act wasn't the only provision used. This particular section has been used in conjunction with some other laws. So section 66A of the IT Act independently is not required. There are other laws in the Indian Penal Code and elsewhere which are usually enough to cover all the things that section 66A of the IT Act is right now covering. It is just an add on provision that really can't justify its existence unless it is really reduced in scope.

Watch the full video that was aired on CNN-IBN

For more details visit https://cis-india.org/news/ibnlive-videos-november-20-2012-the-last-word-is-there-a-need-to-review-information-technology-act

Women Arrested in Mumbai for Complaining on Facebook

praskrishna — 2012-11-21T11:32:04Z

For over 30 hours following the death of the Shiv Sena leader Bal Thackeray on Saturday, stores throughout Mumbai closed their shutters and taxis and autorickshaws stayed off the streets.

This article by Neha Thirani and Hari Kumar was published in New York Times on November 19, 2012. Pranesh Prakash is quoted.

While analysts throughout Mumbai debated whether the citywide shutdown following the death of Mr. Thackeray was inspired by fear or respect, one 21-year-old woman and her friend were arrested for raising a similar question.

On Sunday, the police in Palghar, in Thane district, on the outskirts of Mumbai, arrested Shaheen Dhadha after she posted a status update on Facebook that questioned the shutdown, also known as a bandh. A local daily, the Mumbai Mirror, reported that Ms. Dhadha, 21, had written, "People like Thackeray are born and die daily and one should not observe a bandh for that." The police also arrested her friend who "liked" the post, whom NDTV identified by her first name, Renu.

The women were arrested under Section 505 of the Indian Penal Code for “statements creating or promoting enmity, hatred or ill will between classes.” Srikant Pingle, station house in charge of the Palghar police, told India Ink that the local Shiv Sena chief, whom he identified as “Mr. Bhushan,” filed the complaint against Ms. Dhadha because her comment on Facebook hurt Shiv Sena’s sentiments. Mr. Pingle declined to comment further on the details of the arrests.

Sudhir Gupta, the defense counsel for the two women, told NDTV, “Their posts don’t incite violence. It can’t be said they have made any derogatory remarks. They don’t belong to any political ideology.”

In a phone conversation with India Ink, a police officer of the Palghar station, who identified himself only as Gavali, said that the arrest took place on Sunday night and that the pair had been taken to court on Monday.

The two women, who were sentenced to 14 days in jail by the court, received bail after a bond of 15,000 rupees ($270) was paid, reported NDTV.

The Times of India reported that a mob of 2,000 Shiv Sena workers vandalized her uncle’s orthopedic clinic in Palghar. Repeated calls made to the Dhada orthopedic hospital in Thane went unanswered, while Harshal Pradhan, a Shiv Sena spokesman, said that he was unaware of the incident.

A police officer at the Palghar Police Station, who spoke on condition of anonymity, said that no one has been arrested in the attack on the clinic.

Pranesh Prakash, program manager with the Center for Internet and Society, said the arrests of the two women were a violation of free speech and the misapplication of the law. “There were thousands of people on Facebook, Twitter and in person who were saying the exact same kinds of things that this girl is alleged to have said,” said Mr. Prakash. “And the fact that only she and one other person who liked that comment have been arrested shows a clear arbitrariness in the application of the law.”

In an open letter addressed to the chief minister of Maharashtra, the former Supreme Court Judge Markandey Katju defended the two women, saying, “To my mind it is absurd to say that protesting against a bandh hurts religious sentiments.” He further said that the arrest appears to be a criminal act as it is a crime to wrongfully arrest or wrongfully confine someone who has committed no crime.

On social networking sites, people came out in support of Ms. Dhadha and her friend. The Facebook group “Ban Shiv Sena” had about 36,400 "likes" as of Monday afternoon, while the party’s official Facebook page had just under 2,700. On Twitter, several commenters expressed solidarity with the two women, including Milind Deora, the government minister of state, communications and information technology, who said, "To learn who rules over you, simply find out who you are not allowed to criticize ~ Voltaire."

In Maharashtra, Shiv Sena has a history of banning books, movies and other popular culture that are critical of the political party. In 2010, Rohinton Mistry’s book, "Such a Long Journey," was withdrawn from the syllabus of Mumbai University after Shiv Sena officials complained that the book insulted Bal Thackeray. Ironically, in a January 2007 interview with Shekhar Gupta, the editor in chief of The Indian Express, Mr. Thackeray said that what differentiated him from the mafia is that journalists and others were free to disagree with him and criticize him.

For more details visit https://cis-india.org/news/india-blogs-nytimes-nov-19-2012-neha-thirani-hari-kumar-women-arrested-in-mumbai-for-complaining-on-facebook

DoT Blocks Domain Sites — But Reasons and Authority Unclear

smita — 2012-11-21T10:03:39Z

Earlier this year, ISPs such as Airtel and MTNL blocked a number of domain sites including BuyDomains, Fabulous Domains and Sedo.co.uk. Whereas the Indian Government and courts have previously issued orders blocking websites, these actions have generally been attributed to issues such as posting of inflammatory content or piracy of copyrighted material. However, the reasoning behind blocking domain marketplaces such as the above mentioned sites is not clear.

These websites offer users various tools to buy and sell domain names and simplify the purchasing process. Users on India Broad Band forum and websites like Medianama reported that these domain sites were not accessible and the following message was displayed instead — "This website/URL has been blocked until further notice either pursuant to Court orders or on the Directions issued by the Department of Telecommunications".

.In Registry’s Anti-Abuse Policy

If the issue at hand is one of abusive registrations, it would fall under the .IN Domain Anti-abuse Policy adopted by the National Internet Exchange of India (NIXI) and the .in registry. This policy states that NIXI will have the right to "deny, cancel, or transfer any registration or transaction, or place any domain name(s) on registry lock, hold, or similar status" if necessary. This raises a question as to why the Department of Telecommunications (DoT) would issue directions to block these domain marketplaces instead of cancelling their registration or placing it on hold under the policies adopted by NIXI.

A second, more important question would be whether the DoT has the power to block websites or take action under NIXI’s anti-abuse policy. NIXI and the .in registry both work under the aegis of the Department of Electronics and Information Technology. In addition, the Information Technology Act, 2000 ("the IT Act") is the only legislation that provides the authority to block a website and this authority is bestowed upon the Secretary, Department of Information Technology.

Information Technology Act

Section 69-A of the IT Act authorizes the central government to issue directions/orders to block public access to any information generated, transmitted, received, stored or hosted in any computer resource i.e., block websites. Such orders can be issued if the authorized officer finds that it is necessary to do so in the India’s sovereign and national interests or in the interest of public order. These interests include defence, security of the state, friendly relations with foreign neighbours and preventing incitement to the commission of an offence.

The procedures and safeguards that are to be followed before issuing an order to block a website are detailed in the Information Technology (Procedure and Safeguards for blocking for access of information by public) Rules, 2009 ("the rules"). The rules provide that upon receiving a complaint, the concerned organization for the blocking of access to information shall examine the complaint to ensure that there is a need to take action under the reasons mentioned above. If such action is found necessary, a request if forwarded and a committee established as per the rules reviews any requests made to block access to any information. During this review, there is also provision for a notice and reply procedure. This allows for the person controlling the online publication of such information to appear before the committee and respond to the request or make any clarifications regarding the information.

The recommendations of the committee are then sent to the Secretary of the Department of Information Technology who further directs an agency of the government or the intermediary to block the relevant content/website. The rules also provide procedures for blocking access in case of an emergency and in cases where court orders directing the blocking of information have been issued.

Whereas the ideas of sovereign interest and public order are admittedly very broad, there is no clear explanation as to what actions of domain sites/marketplaces such as BuyDomain and sedo.co.uk would be considered to impinge upon either. Neither is there any information available regarding why the DoT considers this to be the case.

For more details visit https://cis-india.org/internet-governance/blog/dot-blocks-domain-sites