We are anonymous, we are legion

Future Tech and Future Law

Admin — 2019-01-03T01:17:29Z

The Dept. of IT & BT, Government of Karnataka organised the 21st edition of Bengaluru Tech Summit from November 29, 2018 to December 1, 2018 at Palace Grounds, Bengaluru. Arindrajit Basu was a speaker at the panel on 'Future Tech and Future Law'.

The discussion was moderated by Tanvi Ratna. Aayush's co-panelists were Apar Gupta,Jaideep Reddy and Nilesh Trivedi. During his remarks, he attempted to focus on our AI research thus far and our suggestions for AI regulation.

For more details see this page.

For more details visit https://cis-india.org/internet-governance/news/future-tech-and-future-law

International Network on Feminist Approaches to Bioethics 2018

Admin — 2018-12-04T15:46:02Z

The event was co-organized by Feminist Approaches to Bioethics and Sama - A Resource Centre for Women and Health and was held at St. John's Medical College in Bangalore between December 3 and 5, 2018.

Aayush Rathi and Ambika Tandon participated in the event as speakers. Aayush presented a paper 'Sexual Surveillance and Data Regimes: Development in the Data Economy' co-authored by himself and Ambika.

Download the agenda

For more details visit https://cis-india.org/internet-governance/news/international-network-on-feminist-approaches-to-bioethics-2018

November 2018 Newsletter

praskrishna — 2018-12-19T02:41:01Z

Our newsletter for the month of November.

Highlights

CIS has published a statement on its website in response to the serious allegations against CIS members and the CIS workplace on social media. CIS has taken note of the concern raised on a social platform, and its Internal Committee (IC), constituted as per the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013, has taken some critical steps. CIS has engaged POSH at Work to review the case and make recommendations to the Executive Director of CIS.
Anubha Sinha attended the 37th meeting of WIPO SCCR held in Geneva in the month of November 2018. During the week she made two statements on behalf of CIS and participated in a panel discussion and a closed door meeting to brief government delegates from the Asia pacific region on the WIPO limitations and exceptions agenda. CIS made statements on limitations and exceptions and the proposed treaty for the protection of broadcasting organizations. Transcript of her talk can be accessed here.
A memorandum outlining India's strategy to global cyber norms formulation processes authored by Elonnai Hickok and Arindrajit Basu and edited by Aayush Rathi and Shruti Trikanad. The memorandum seeks to summarise the state of the global debate in cyberspace; outline how India can craft it’s global strategic vision and finally, provides a set of recommendations for the Ministry of External Affairs as they craft their cyber diplomacy strategy.
The institution of open standards is as a formidable regulatory regime governing the Internet while facilitating its growth as a network of networks. As a nation digitising rapidly and facing concerns in cybersecurity and Internet governance, there is a need for the Government of India to meaningfully participate at standards development organisations to represent the interests of the Indian populace and become a voice for the global South. Authors Aayush Rathi, Gurshabad Grover and Sunil Abraham examine this in a policy brief.
The Convention on Cybercrime adopted in Budapest (“Convention”) is the first and one of the most important multilateral treaties addressing the issue of internet and computer crimes. Vipul Kharbanda has analyzed this in his research paper titled Budapest Convention and the Information Technology Act.
Amber Sinha was one of the stakeholders who provided inputs to the Danish Expert Group on Data Ethics in June 2018 during their visit to New Delhi. The Expert Group has prepared and submitted its final report.
For the fourth edition of the Internet Researchers’ Conference (IRC19), CIS invited sessions that engage critically with the form, imagination, and politics of the *list*. The list of proposed sessions are finalized and posted on this page.

Articles

Lessons from US response to cyber attacks (Arindrajit Basu; edited by Elonnai Hickok; Hindu Businessline; October 30, 2018). Mirrored on CIS website on November 1.
Digital Native: One Selfie Does a Tragedy Make (Nishant Shah; Indian Express; November 11, 2018).

CIS in the Media

Open Street Maps help tackle disasters: Experts (Deccan Chronicle; November 21, 2018).
Are connected tech toys too smart for their own good? (Abhijit Ahaskar; Livemint; November 22, 2018).
Girls' schools, women's PGs: The shocking results when you Google 'bitches near me' (News Minute; November 26, 2018).
Amazon launches Machine Learning-based platform for healthcare space (Kul Bhushan; Hindustan Times; November 28, 2018).
Report: From Oppression to Liberation: Reclaiming the Right to Privacy (Privacy International; November 28, 2018).
Are Chinese video apps violating the Indian law? (Nilesh Christopher; Economic Times; November 30, 2018).

-----------------------------------
Access to Knowledge
-----------------------------------
Our Access to Knowledge programme currently consists of two projects. The Pervasive Technologies project, conducted under a grant from the International Development Research Centre (IDRC), aims to conduct research on the complex interplay between low-cost pervasive technologies and intellectual property, in order to encourage the proliferation and development of such technologies as a social good. The Wikipedia project, which is under a grant from the Wikimedia Foundation, is for the growth of Indic language communities and projects by designing community collaborations and partnerships that recruit and cultivate new editors and explore innovative approaches to building projects.

►Copyright and Patent

Blog Entries

37th SCCR: CIS Statement on the Proposed Treaty for the Protection of Broadcasting Organizations (Anubha Sinha; November 29, 2018).
37th SCCR: CIS Statement on the Agenda on Limitations and Exceptions (Anubha Sinha; November 29, 2018).
Views on on the proposed WIPO Treaty for the Protection of Broadcasting Organizations at side-event organised by Knowledge Ecology International (Anubha Sinha; November 29, 2018).

►Wikipedia

As part of the project grant from the Wikimedia Foundation we have reached out to more than 3500 people across India by organizing more than 100 outreach events and catalysed the release of encyclopaedic and other content under the Creative Commons (CC-BY-3.0) license in four Indian languages (21 books in Telugu, 13 in Odia, 4 volumes of encyclopaedia in Konkani and 6 volumes in Kannada, and 1 book on Odia language history in English).

Blog Entry

Aditya 365 (Pavan Santhosh; November 7, 2018).

►Openness

Our work in the Openness programme focuses on open data, especially open government data, open access, open education resources, open knowledge in Indic languages, open media, and open technologies and standards - hardware and software. We approach openness as a cross-cutting principle for knowledge production and distribution, and not as a thing-in-itself.
Teaching

Lecture on Open Access and Open Content Licensing at ICAR (short course) (ICAR-Indian Institute of Horticultural Research; Bangalore; November 13 - 22, 2018). Anubha Sinha delivered a lecture.

-----------------------------------
Internet Governance
-----------------------------------

As part of its research on privacy and free speech, CIS is engaged with two different projects. The first one (under a grant from Privacy International and IDRC) is on surveillance and freedom of expression (SAFEGUARDS). The second one (under a grant from MacArthur Foundation) is on restrictions that the Indian government has placed on freedom of expression online.

►Cyber Security

Research Papers

Budapest Convention and the Information Technology Act (Vipul Kharbanda; November 20, 2018).
Cyberspace and External Affairs:A Memorandum for India Summary (Arindrajit Basu and Elonnai Hickok; edited by Aayush Rathi and Shruti Trikanad; November 30, 2018).
Regulating the Internet: The Government of India & Standards Development at the IETF (Aayush Rathi, Gurshabad Grover and Sunil Abraham; November 30, 2018).

Event Co-organized

Workshop on Cybersecurity Illustrations (CIS, Bangalore; November 15, 2018).

Participation in Events

Connections 2018 (Organized by Internet Engineering Task Force; Bangalore; October 31 - November 1, 2018). Gurshabad Grover attended the event.
IETF103 (Organized by Internet Engineering Task Force; Bangkok; November 3 - 9, 2018). Gurshabad Grover attended the event.

►Free Speech and Expression

Research Paper

ICANN Workstream 2 Recommendations on Accountability (Akriti Bopanna; November 23, 2018).

Blog Entry

DIDP #32 On ICANN's Fellowship Program (Akriti Bopanna; November 12, 2018).

Participation in Event

Internet Freedom at Crossroads - Common Paths towards Strengthening Human Rights Online (Organized by Freedom Online; Berlin; November 28 - 30, 2018). Elonnai Hickok was a speaker.

►Privacy

Blog Entry

Clarification on the Information Security Practices of Aadhaar Report (Amber Sinha and Srinivas Kodali; November 5, 2018).

Participation in Events

Building a Community of Practice: Reflections from 2nd All Partners (Organized by Partnership on AI; San Francisco, California; November 14 - 15, 2018). Elonnai Hickok spoke on the panel on the PAI working groups and co-lead the AI Labor and Economy working group meeting as co-chair of the group.
Briefing on BBC News pan-India research on how 'fake news' / digital misinformation spreads (Organized by BBC; New Delhi; November 16, 2018).
DSCI Bangalore Chapter meet (Organized by Data Security Council of India; 10K NASSCOM Startup Warehouse; Bangalore; November 22, 2018). Gurshabad Grover and Karan Saini attended the DSCI Bangalore Chapter meet.
Informational Privacy in India: An Emerging Discourse (Organized by Centre for Policy Research and supported by Omidyar Network; New Delhi; November 29, 2018). Amber Sinha was a speaker on the first panel on privacy and its tradeoffs.
Facebook Privacy Design Sprint (Organized by Facebook and Quicksand; WeWork, Bangalore; November 30, 2018). Pranav Bidare and Saumyaa Naidu participated in the event.

►Miscellaneous

Event Co-organized

SOTM Asia 2018 (Co-organized by CIS and Indian Institute of Management, Bangalore; November 17-18, 2018). Saumyaa Naidu, Aayush Rathi and Ambika Tandon participated in the event.

Participation in Events

Speculative Futures Lab on Artificial Intelligence in Media, Entertainment, and Gaming (Organized by Quicksand; Bangalore; November 16 - 18, 2018). Pranav Bidare was a panelist.
Future Tech and Future Law (Organized by Dept. of IT & BT, Government of Karnataka as part of Bengaluru Tech Summit; November 29 - December 1, 2018). Aayush Rathi was a speaker.

►Gender

Statement

Statement on Serious Allegations against CIS Members and the CIS Workplace on Social Media (Sunil Abraham; November 24, 2018).

Participation in Events

Roundtable on Intermediary Liability and Gender Based Violence at the Digital Citizen Summit, 2018 (Organized by Digital Empowerment Foundation; India International Centre, New Delhi; November 1, 2018).
International Network on Feminist Approaches to Bioethics 2018 (Co-organized by Feminist Approaches to Bioethics and Sama - A Resource Centre for Women and Health; St. John's Medical College; Bangalore; December 3 - 5, 2018). Aayush Rathi and Ambika Tandon participated in the event as speakers. Aayush presented a paper 'Sexual Surveillance and Data Regimes: Development in the Data Economy' co-authored by himself and Ambika.

-----------------------------------
Telecom
-----------------------------------
CIS is involved in promoting access and accessibility to telecommunications services and resources, and has provided inputs to ongoing policy discussions and consultation papers published by TRAI. It has prepared reports on unlicensed spectrum and accessibility of mobile phones for persons with disabilities and also works with the USOF to include funding projects for persons with disabilities in its mandate:

Article

A great start on Wi-Fi reforms (Shyam Ponappa; Business Standard; November 1, 2018 and Organizing India Blogspot; November 1, 2018).

-----------------------------------
Researchers at Work
-----------------------------------
The Researchers at Work (RAW) programme is an interdisciplinary research initiative driven by an emerging need to understand the reconfigurations of social practices and structures through the Internet and digital media technologies, and vice versa. It aims to produce local and contextual accounts of interactions, negotiations, and resolutions between the Internet, and socio-material and geo-political processes:

IRC19

List of proposed sessions:

#AyushmanBhavah - Arya Lakshmi and Adrij Chakraborty
#ButItIsNotFunny - Madhavi Shivaprasad and Sonali Sahoo
#CallingOutAndIn - Usha Raman, Radhika Gajjala, Riddhima Sharma, Tarishi Varma, Pallavi Guha, Sai Amulya Komarraju, and Sugandha Sehgal
#DigitalPlatformAttributes - Nandakishore K N and Dr. V. Sridhar
#EnlistingPrivacy - Pawan Singh and Pranjal Jain
#FOMO - Pritha Chakrabarti and Dr. Baidurya Chakrabarti
#LegitLists - Form follows function: List by design - Akriti Rastogi, Ishani Dey, and Sagorika Singha
#ListInterface - Bharath Sivakumar, Rakshita Siva, and Deepak Prince
#ListsAsDatabase - Ria De and Samata Biswas
#LoSHAandWhatFollowed - Anannya Chatterjee, Arunima Singh, Bhanu Priya Gupta, Renu Singh, and Rhea Bose
#PowerListing - Dr. Shubhda Arora, Dr. Smitana Saikia, Prof. Nidhi Kalra, and Prof. Ravikant Kisana
#SocialMediationAsGenderedJustice - Esther Anne Victoria Moraes and Manasa Priya Vasudevan
#StoriesRecordsLegendsRituals - Priyanka, Aditya, Bhanu Prakash GS, Aishwarya, and Dinesh

-----------------------------------
About CIS
-----------------------------------
The Centre for Internet and Society (CIS) is a non-profit organisation that undertakes interdisciplinary research on internet and digital technologies from policy and academic perspectives. The areas of focus include digital accessibility for persons with disabilities, access to knowledge, intellectual property rights, openness (including open data, free and open source software, open standards, open access, open educational resources, and open video), internet governance, telecommunication reform, digital privacy, and cyber-security. The academic research at CIS seeks to understand the reconfigurations of social and cultural processes and structures as mediated through the internet and digital media technologies.

► Follow us elsewhere

Twitter: http://twitter.com/cis_india
Twitter - Access to Knowledge: https://twitter.com/CISA2K
Twitter - Information Policy: https://twitter.com/CIS_InfoPolicy
Facebook - Access to Knowledge: https://www.facebook.com/cisa2k
E-Mail - Access to Knowledge: a2k@cis-india.org
E-Mail - Researchers at Work: raw@cis-india.org
List - Researchers at Work: https://lists.ghserv.net/mailman/listinfo/researchers

► Support Us

Please help us defend consumer and citizen rights on the Internet! Write a cheque in favour of 'The Centre for Internet and Society' and mail it to us at No. 194, 2nd 'C' Cross, Domlur, 2nd Stage, Bengaluru - 5600 71.

► Request for Collaboration

We invite researchers, practitioners, artists, and theoreticians, both organisationally and as individuals, to engage with us on topics related internet and society, and improve our collective understanding of this field. To discuss such possibilities, please write to Sunil Abraham, Executive Director, at sunil@cis-india.org (for policy research), or Sumandro Chattapadhyay, Research Director, at sumandro@cis-india.org (for academic research), with an indication of the form and the content of the collaboration you might be interested in. To discuss collaborations on Indic language Wikipedia projects, write to Tanveer Hasan, Programme Officer, at tanveer@cis-india.org.

CIS is grateful to its primary donor the Kusuma Trust founded by Anurag Dikshit and Soma Pujari, philanthropists of Indian origin for its core funding and support for most of its projects. CIS is also grateful to its other donors, Wikimedia Foundation, Ford Foundation, Privacy International, UK, Hans Foundation, MacArthur Foundation, and IDRC for funding its various projects.

For more details visit https://cis-india.org/about/newsletters/november-2018-newsletter

Facebook Privacy Design Sprint

Admin — 2018-12-04T16:28:41Z

Pranav Bidare and Saumyaa Naidu participated in the Facebook Privacy Design Sprint on Friday, November 30, 2018.

For more details visit https://cis-india.org/internet-governance/news/facebook-privacy-design-sprint

Danish Expert Group on Data Ethics

Admin — 2018-12-01T04:42:42Z

Amber Sinha was one of the stakeholders who provided inputs to the Danish Expert Group on Data Ethics in June 2018 during their visit to New Delhi. The Expert Group has prepared and submitted its final report.

In April the Danish Expert Group on Data Ethics commenced work on developing recommendations on Data Ethics for the Danish Government. The expert group have now handed over their recommendations to the Danish Minister of Industry, Business and Financial Affairs. Read the report.

For more details visit https://cis-india.org/internet-governance/news/danish-expert-group-on-data-ethics

Cyberspace and External Affairs:A Memorandum for India Summary

Arindrajit Basu and Elonnai Hickok — 2018-12-01T04:10:51Z

This memorandum seeks to summarise the state of the global debate in cyberspace; outline how India can craft it’s global strategic vision and finally, provides a set of recommendations for the MEA as they craft their cyber diplomacy strategy.

It limits itself to advocating certain procedural steps that the Ministry of External Affairs should take towards propelling India forward as a leading voice in the global cyber norms space and explains why occupying this leadership position should be a vital foreign policy priority. It does not delve into content-based recommendations at this stage. Further, this memorandum is not meant to serve as exhaustive academic research on the subject but builds on previous research by the Centre for Internet & Society in this area to highlight key policy windows that can be driven by India.

This memorandum provides a background to global norms formation focussing on key global developments over the past month; traces the opportunities s for India to play a lead role in the global norms formulation debate and then charts out process related recommendations on next steps towards India taking this forward.

Click here to read more

For more details visit https://cis-india.org/internet-governance/blog/arindrajit-basu-and-elonnai-hickok-november-30-2018-cyberspace-and-external-affairs

Are Chinese video apps violating the Indian law?

Admin — 2018-12-04T15:11:03Z

The apps have benefited mightily from the short-video craze that’s taken hold among preteens and adolescents but this is putting them in danger from predators, experts said.

The article by Nilesh Christopher was published in Economic Times on November 30, 2018.

Chinese video apps have cracked the Bharat code, but that may not be such a good thing. TikTok, Kwai and LIKE have been downloaded by millions of smartphone users in small-town India who are using them to share personal videos, away from the glare of scrutiny that falls on more mainstream social media platforms.

The apps have benefited mightily from the short-video craze that’s taken hold among preteens and adolescents but this is putting them in danger from predators, experts said. Given the mature nature of much of the content and the age of users, the content on these apps could be in violation of the law, they said.

ET reviewed more than 20 Chinese video apps that dominate the mobile entertainment network of tier-2 and tier-3 cities mostly thanks to titillating videos, suggestive notifications, risqué humour and raunchy content.

TikTok, the popular lip-sync app, is filled with 15-second clips of meme-friendly content featuring its youthful users miming to their favorite songs. The videos range from the harmless to the explicit, depending upon the users followed. The app has gone viral, having racked up close to 100 million downloads and with 20 million monthly active users in India.

The Chinese video apps have their own regional stars such as TikTok’s Awez Darbar, who has 4.2 million fans on the platform. TikTok pays creators anywhere between Rs 5,000 and Rs 50,000 per video, depending upon the kind of content and the sphere of influence, said people with knowledge of the matter.

While all the platforms carry a disclaimer stating that they are not directed at children, their target audience encompasses preteens and adolescents in tier-2 and tier-3 cities, experts said.

“If (these apps) are operating in a manner that under-18 children use it, then one needs to check what are the other safeguards they have built for parental consent--this is definitely something that has to be looked into,” said Supratim Chakraborty, associate partner at law firm Khaitan & Co. “From a national security standpoint, children fall under the sensitive category. Today, there is a lack of law to put forward strict compliance.”

Another expert said the user profile violates the stated policy of the apps and IT law.

“Be it TikTok, LIKE, Kwai or any of these video apps, (they) have a significant number of young girls, boys and preteens using the application,” the person said.

Live-streaming applications such as Bigo Live and UpLive focus more on personal interaction but these appear to skirt dangerously close to breaking the law, exposing children to nudity and possibly those who seek to coerce or groom underage users into committing explicit acts.

Users are encouraged to explore further through the notifications. “Press here! Surprising gift waiting for you,” is one sent by Uplive when a user logs on. “Sweet is waiting for you in MeMe live <3, Watch magical girl’s LIVE, Come see me now! Sonam who you’re following posted a new video,” are a few other notifications from the app. These notifications are accompanied by a thumbnail of scantily clad women and an ‘invitation’ to open the app. Users get three to five of these every time they clear the screen.

The apps are available in Indian languages, making them easier to use than Facebook or Instagram. However, the privacy policies are in English, making them that much more difficult to understand if users in such locations want to take the trouble of checking the terms and conditions.

Despite the rapidly growing user base, apps like TikTok don’t have a grievance redressal officer in India. The government is insisting on this for all major social media platforms.

A government official said users should flag concerns over such apps so that the state can take action.

“Even if people upload obscene content with their consent, it still does not absolve (you) of the crime,” said a senior bureaucrat with the ministry of electronics and information technology. “One is ignorance, then there is a burgeoning of technology leading to all these. Somebody must start reporting these cases, be it a victim or a well-wisher of the society for the government to take note.”

As with Indian apps, apart from generic privacy policies that aren’t available in local languages, the Chinese ones don’t have layered consent—allowing users to opt out of certain obligations if they wish to do so. ShareChat is the only Indian regional social media app that has its privacy policy in 10 regional languages.

A reading of the privacy policies of the Chinese apps also suggests that they hoover up a vast quantity of data with a one-click, opt-in button. This includes sharing location, contacts, allowing audio and video recording and full network access.

Apps such as Nonolive do not mention any India-specific clauses in their privacy policy. A few like video chat app Tango comply with the General Data Protection Regulation (GDPR), the European privacy law that has stipulated 13+ as the age of use.

TikTok, which has faced temporary bans in other countries in the past, is an exception with a specific India clause offering limited rights to users. It has an exhaustive 5,000-word privacy policy outlining the data collection, processing and sharing practices it follows. TikTok previously sparked outrage in Hong Kong for not protecting the privacy of children under 10, exposing their identities and uploading inappropriate content.

The Chinese apps pose several potential risks, said Swetha Mohandas, policy officer at the Center for Internet and Society, an advocacy group.

“The draft DP (data protection) Bill in the current stage provides greater responsibility on data fiduciaries to maintain the privacy of the individual and the security of the data,” she said. “There are a lot of questions that these apps pose with respect to the Bill, some of them being the security, the data storage provision, the personal data of children, and most importantly that these apps might have recordings that might be sensitive personal data.”

Most of these apps including TikTok explicitly state that though they have appropriate technical and organisational measures in place, “they cannot guarantee the security of your information transmitted through the platform”. Dubsmash said that it complies with local laws and allows users only above 14 to use its app. The other apps ET reached out to did not respond to queries.

For more details visit https://cis-india.org/internet-governance/news/economic-times-nilesh-christopher-november-30-2018-are-chinese-video-apps-violating-the-indian-law

Internet Freedom at Crossroads - Common Paths towards Strengthening Human Rights Online

Admin — 2018-12-04T16:11:52Z

The 2018 Freedom Online Conference took place from 28 to 30 November 2018 in Berlin. Elonnai Hickok participated as a speaker.

Elonnai attended the Freedom Online Coalition Advisory Network meeting and larger Freedom Online Coalition conference. The agenda can be found here.

For more details visit https://cis-india.org/internet-governance/news/internet-freedom-at-crossroads-common-paths-towards-strengthening-human-rights-online

Informational Privacy in India: An Emerging Discourse

Admin — 2018-12-01T05:40:31Z

Centre for Policy Research supported by Omidyar Network organized this event in New Delhi on November 29, 2018. Amber Sinha was a speaker on the first panel on privacy and its tradeoffs.

Concept Note

The last few years have seen a formalisation of the right to informational privacy within India’s constitutional framework. While the context to this – the challenge to the validity of the Aadhaar project – has entailed broader issues on delivery of public goods and services, the response to whether an individual can assert control over key informational aspects of her life has become a critical part of our rights jurisprudence.

The Supreme Court verdict in Justice Puttaswamy’s case (2017) unequivocally affirmed this right despite leaving open several important aspects including the permissibility of restrictions on this right, and the level of scrutiny which the judiciary could exercise to safeguard them. What was particularly striking was the judicial reliance on considerable scholarship emerging from India and Indian scholars on important themes pertaining to this right: the differing conceptions of privacy and the role for each of them within India’s constitutional framework; the impact of privacy erosion on citizen-State relationship and private transactions in the commercial realm; surveillance tools and technologies in India; the need for an indigenous data protection law, and much more. The court has picked up on this thread in the second Puttaswamy verdict upholding the constitutional validity of Aadhaar with some important caveats and exceptions.

Recently, the Expert Committee headed by retired Justice Srikrishna also convened to come out with a draft personal data protection bill. The centrality of data to both commercial activity and governance purposes has found recognition in this bill. While the present legal regime to regulate data in India can be considered chequered at best with divergent regulations across finance, healthcare, telecom, mobility etc., the new bill aims to create a “big data-ready” framework. It impacts any private enterprise handling personal data by stipulating new internal procedures and strong penalties. The major themes in the bill are new user rights for data principals (individuals) who share their data with data fiduciaries (technology companies); data localisation and crossborder data flows; data protection authority (DPA) and its powers; data fiduciaries and new compliance requirements; and exceptions including law enforcement. Each of these carries major implications for data-driven solutions.

During the deliberations of the Committee too, substantial Indian scholarship on the themes listed above have been referenced and relied upon. This is truly a breakout moment for privacy and data protection in India. It is changing the terrain of institutional responses to personal data, technology architectures, and digital trade.

Discussion Objectives and Format

With the above background, the Centre for Policy Research conducted a closed-door, invite only discussion on November 29, 2018 on the theme Informational Privacy in India: An Emerging Discourse. This discussion sought to engage with representatives from embassies, chambers of commerce and research funding organisations located in India. It took place from 10.00 to 13.00 hours at the Taj Vivanta Ambassador, Sujan Singh Park off Subramaniam Bharti Marg, New Delhi 110003.

The core objectives driving this workshop were to:

Highlight informational privacy debates in India;
Locate informational privacy within India’s constitutional setting, closely re-examining the Supreme Court verdicts in this regard;
Explore themes such as the notice-and-consent framework, regulatory interventions and structural changes, and other key themes on privacy and data protection in India;
Demystify concepts introduced to strengthen personal data protection, including actor and data categories, and new user rights, and their potential impact on technology design;
Highlight the ramifications of data localization and cross-border data transfer restrictions, on digital trade and e-commerce;
Decode the new structural mechanisms proposed to mitigate risks in collection, storage, and processing of personal data;
Identify the impact of these mechanisms on the functioning of data-driven businesses and the future of data innovation in India.

Click to view the agenda

For more details visit https://cis-india.org/internet-governance/news/informational-privacy-in-india-an-emerging-discourse

Regulating the Internet: The Government of India & Standards Development at the IETF

Aayush Rathi, Gurshabad Grover and Sunil Abraham — 2019-01-22T07:29:39Z

The institution of open standards has been described as a formidable regulatory regime governing the Internet. Given the regulatory and domestic policy implications that technical standards can have, there is a need for Indian governmental agencies to focus adequate resources geared towards achieving favourable outcomes at standards development fora.

This brief was authored by Aayush Rathi, Gurshabad Grover and Sunil Abraham. Click here to download the policy brief.

Executive Summary

The institution of open standards has been described as a formidable regulatory regime governing the Internet. As the Internet has moved to facilitate commerce and communication, governments and corporations find greater incentives to participate and influence the decisions of independent standards development organisations.

While most such bodies have attempted to systematise fair and transparent processes, this brief highlights how they may still be susceptible to compromise. Documented instances of large private companies like Microsoft, and governmental instrumentalities like the US National Security Agency (NSA) exerting disproportionate influence over certain technical standards further the case for increased Indian participation.

The debate around Transport Layer Security (TLS) 1.3 at the Internet Engineering Task Force (IETF) forms an important case for studying how a standards body responded to political developments, and how the Government of India participated in the ensuing discussions. Lasting four years, the debate ended in favour of greater communications security. One of the security improvements in TLS 1.3 over its predecessor is that is makes less information available to networking middleboxes. Considering that Indian intelligence agencies and government departments have expressed fears of foreign-manufactured networking equipment being used by foreign intelligence to eavesdrop on Indian networks, the development is potentially favourable for the security of Indian communication in general, and the security of military and intelligence systems in particular. India has historically procured most networking equipment from foreign manufacturers. While there have been calls for indigenised production of such equipment, achieving these objectives will necessarily be a gradual process. Participating in technical standards can, then, be an effective interim method for intelligence agencies, defence wings and law enforcement for establishing trust in critical networking infrastructure sourced from foreign enterprises.

Outlining some of the existing measures the Indian government has put in place to build capacity for and participate in standard setting, this brief highlights that while these are useful starting points, they need to be harmonised and strengthened to be more fruitful. Given the regulatory and domestic policy implications that technical standards can have, there is a need for Indian governmental agencies to focus adequate resources geared towards achieving favourable outcomes at standards development fora.

Click here to download the policy brief.

Note: The recommendations in the brief were updated on 17 December 2018 to reflect the relevance of technical standard-setting in the recent discussions around Indian intelligence concerns about foreign-manufactured networking equipment.

For more details visit https://cis-india.org/internet-governance/blog/regulating-the-internet-the-government-of-india-standards-development-at-the-ietf

Open Street Maps help tackle disasters: Experts

Admin — 2018-11-28T01:58:11Z

Speakers showed how participatory maps were used to bring to light lapses in delivery of civic services.

The article was published by Deccan Chronicle on November 21, 2018.

Maps come in handy when you have lost your way, but they can also be great tools during natural disasters, like the recent, unprecedented floods in Kerala. During the disaster, 2,200 mapping volunteers from around the world added 4,00,000 data points to the Open Street Map, helping the government reach relief fast to the affected, said Manoj Karingamadathil.

On Tuesday, over 300 mappers from 12 countries got together in the city to discuss and present innovative solutions to mobilise, sustain and grow more inclusive open mapping communities. The event, hosted at the Indian Institute of Management-Bangalore, deliberated on how mapping is being used for disaster management in Asia, the role of local languages in tagging places, methods to sustain the community and others.

Speakers showed how participatory maps were used to bring to light lapses in delivery of civic services. The maps, used both in rural and urban areas, brought out issues at the neighbourhood, city, state and national levels.

For instance, Anindita Nayak explored safety in public spaces in Bengaluru by mapping lack of streetlights. Ankit Bhargava presented how Open Street Maps led to a participatory design process to create a very detailed and informative public map of Cubbon Park. Jaisen Nedumpala, a panchayat officer from Koorachundu in Kerala, used open source tools and community participation to fix land record boundaries for the village. Harry Mahardhika Machmud shared his experience on how citizen-led surveys in Indonesian cities helped the government prepare disaster response maps.

Dr Anita Patil-Deshmukh, the first keynote speaker, said that official maps did not account for the majority of under-served communities in Mumbai. These people felt empowered through community-based mapping and it helped them engage better with stakeholders for effective delivery of services.

Other speakers supported Dr Patil-Deshmukh's call to create more capacity within grassroots communities. Airin Akter stressed on the importance of maps in local languages for effective dissemination of public information in Bangladesh.

Pradip Khatiwada spoke about the need to create innovative training and internship programmes, digital activism, and demonstrated how maps have been used successfully in Nepal. Siddharth Hande, the closing keynote speaker, affirmed the need to empower communities through data-driven initiatives in his engagement with cyclical waste management economies.

Jointly organised by the Centre for Public Policy and the Centre for Software and IT Management (CSITM) of IIMB, Open Street Map (OSM) India, and Centre for Internet and Society, the inauguration of the event itself added meaning to the purpose as Prof. Abhoy K. Ojha, Dean of Academic Programmes at IIMB, contributed to the OSM project by adding the name of the building where the conference was hosted.

For more details visit https://cis-india.org/internet-governance/news/deccan-chronicle-november-21-2018-open-street-maps-help-tackle-disaster-experts

Are connected tech toys too smart for their own good?

Admin — 2018-12-06T02:47:03Z

Despite their merits, connected toys raise a few concerns about data privacy and security.

The article by Abhijit Ahaskar was published in Livemint on November 22, 2018. Sunil Abraham was quoted.

In today’s connected world comprising the Internet of Things (IoT), smart tech toys are here to stay. These toys, for instance, can make learning fun for children and help parents keep track of their whereabouts.

CogniToys’ Dino, a case in point, uses Wi-Fi to stay connected and IBM Watson’s natural language processing (NLP) technology to tailor its responses to suit a child’s age group and skill level. The little connected toy can teach children how to spell words and even admonish them if they use expletives.

However, it’s this very prowess that can raise privacy risks too. A 2017 security audit cautioned that Dino transmitted information without using encryption, leaving a child’s information vulnerable. When Mozilla reached out to the company in 2018, the company claimed, “Dino uses encryption for all audio traffic and in fact, each one uses unique keys, which are also cycled per session per device.” However, experts at Mozilla could not determine if the toy actually uses encryption of any kind.

Another smart toy called i-Que Intelligent Robot by Genesis Toys, uses Bluetooth to connect to a phone via its app, but doesn’t encrypt the pairing process, allowing anyone in the same Bluetooth range to download the app on another smartphone, connect to the toy and start chatting with the child.

Flying drones are another fad with children these days. India’s new drone policy allows users to fly anything under 250g below 50m without requiring registration or license. Even if children are using something like the DJI Spark for fun and taking selfies, the privacy risks can’t be ignored. Not only have DJI Spark drones been reportedly hacked in the past, they also lack parental controls, do not encrypt user data and have been found to share information with third parties, according to Mozilla’s Privacy Not Included report.

Nevertheless, the market for smart toys is growing. According to a study by US-based Transparency Market Research, the smart toys market is largely fragmented but is expected to reach $69.9 billion by 2026.

In India, the market for smart toys is still small compared to generic plastic toys but the demand is increasing, particularly in cities such as New Delhi, Bangalore, Mumbai and Hyderabad, according to Vivek Goyal, co-founder of PlayShifu—a tech start-up known for its augmented reality-based smart toys such as the Orboot globe.

Experts point out that since these toys use microphones, cameras, Bluetooth, Wi-Fi and data collated from users is stored on a remote server, it makes them as vulnerable as any other connected device.

“As an individual user, when you buy such toys you are giving them the right to utilise that data. However, if there are laws and frameworks which can mandate toy companies to have stringent privacy policies, misuse of the data can be curtailed,” says Rohan Vaidya, regional director of sales, India, at CyberArk, an IT security firm.

To be sure, smart toys are “currently regulated under 43A of IT Act and when the new data protection laws are enacted, the new set of rules will apply to them”, says Sunil Abraham, executive director, Centre for Internet and Society, a Bengaluru-based research organisation.

Goyal, on his part, acknowledges the concerns that security experts and parents may have about such devices. He believes toy makers need to be more upfront about what data they are collecting through the app or the toy, which would make smart toys more acceptable to parents.

For more details visit https://cis-india.org/internet-governance/news/livemint-november-22-2018-abhijit-ahaskar-are-connected-tech-toys-too-smart-for-their-own-good

DSCI Bangalore Chapter meet

Admin — 2018-11-28T01:45:23Z

Gurshabad Grover and Karan Saini attended the DSCI Bangalore Chapter meet held in Bangalore at 10K NASSCOM Startup Warehouse on November 22, 2018.

For more details visit https://cis-india.org/internet-governance/news/dsci-bangalore-chapter-meet

Girls' schools, women's PGs: The shocking results when you Google 'bitches near me'

Admin — 2018-11-28T01:34:50Z

Considering the monopoly and clout that Google enjoys, it must be held accountable for promoting such stereotypes and values, experts say.

The blog post by Geetika Mantri was published in News Minute on November 26, 2018. Pranesh Prakash was quoted.

If there’s a question you don’t know the answer to, more often than not, you’ll turn to Google. The search engine’s monopoly over the market, and data pool at hand, are almost unparalleled in public perception – which makes it all the more alarming when it tends to feed into dangerous and misogynistic values.

This is what seems to have happened, as pointed out by Twitter user @AHappyChipmunk, when someone opened Google Maps and typed “bitches near me.” The results show up addresses of girls’ schools, women’s and girls’ hostels and PGs, and women’s clothing shops. Not only is this shocking because ‘bitches’ is often used as a derogatory phrase for women, but also these Google search results of schools put minors at risk.

The tweet caused much outrage and alarm among people, who did the search themselves and posted screenshots of the real time results that they got.

Why would Google show these results?

Pranesh Prakash, a fellow at the Centre for Internet and Society, points out that this was telling of the fact that Google knows that ‘bitches’ can be a slang for women. “For many years now, Google has been trying to understand and search for what you meant, than what you may have typed,” he explains. “However, if you enclose this search phrase in quotes, you will not get the same results, because then it will look for the phrase.”

He also notes that if you were to look for “girls near me”, you would get similar search results on Google Maps, though more specific to women’s accommodations.

In contrast, it you were to Google, “bitch near me”, you would not get Google Map results. “I think that’s because Google understands that ‘bitches’ is more likely to mean women, than singular ‘bitch’,” Pranesh says.

Tech giants need to be held accountable

While Pranesh thinks that the search results are not ‘dangerous’ per se in the sense that a potential abuser was more likely to Google ‘girls schools’ than ‘bitches near me’, he agrees that these search results are telling of the misogynistic language in use online.

However, is it okay for tech giants to wash the responsibility off their hands because this is the language that their algorithm picked up? Nayantara R, who works with the Internet Democracy Project in Bengaluru, says, “This reminds me of the book Algorithms of Oppression: How Search Engines Reinforce Racism." The book challenges the idea that platforms like Google are level playing fields for different ideas and ideologies. Author Safiya Umoja Noble argues that due to data discrimination, private interests in promoting certain sites, as well as the monopoly of a few online search engines, results in biased search algorithms which discriminate against women of colour while painting favourable portraits of whiteness.

One such bias came to light in July last year where many people, including Congress MP Shashi Tharoor pointed out how a Google search for ‘south Indian masala’ led to a pictures of skimpily clad women, while ‘north Indian masala’ led to photos of spices and dishes. At the time, Google had maintained that this wasn’t its fault and that Google’s search worked by learning from the keywords people use and the results they click on to predict just what people are searching for.

However, Nayantara asserts that considering the monopoly and clout that Google enjoys, it must be held accountable for promoting such stereotypes and values. “The Google page ranking is one of the most protected patents. No one knows how or why certain pages come before the others. In this case, certain search results coming first does not mean that Google is misogynistic. But the algorithmic decision that is taken by someone at Google to rank certain pages which promote certain values before others does have a social impact. All technology is a result of how it is used. Accountability is required there,” she argues.

A conversation about what search results mean

Nayantara also points out that apart from accountability, there needs to be a conversation about what these search results mean. “Search results do embed political values. However, people need to understand that if they Google something and some pages are ranked before the others, it is not reflective of the truth or right or wrong, but reflection of an opinion,” she says.

“We need popular perception to wrap its head around what a search engine is, and that there are alternatives to Google. We also need more algorithmic diversity in search results,” she adds.

For more details visit https://cis-india.org/internet-governance/news/girls-schools-womens-pgs-the-shocking-results-when-you-google-bitches-near-me

SOTM Asia 2018

Admin — 2018-11-28T01:22:44Z

Saumyaa Naidu, Aayush Rathi and Ambika Tandon attend State of the Map 2018 conference co-organized by the Centre for Internet & Society and Indian Institute of Management in Bangalore on November 17 and 18, 2018.

State of the Map Asia 2018 featured two full days of talks, workshops, an opening and closing keynote. It was an exciting two days! The program was created by curating proposals from the community and through a scoring process by the committee.

The program was held at the Indian Institude of Management campus in Bangalore. Much of the program was between two auditoriums. We also had plenty of space set aside for breakout sessions and birds of a feather meetups. (Click here to download the program.)

Click here to see the agenda

For more details visit https://cis-india.org/internet-governance/events/sotm-asia-2018