We are anonymous, we are legion

India slowly gets to grips with ecommerce

praskrishna — 2011-04-04T06:46:27Z

Growth in computer use and Internet penetration will help e-commerce.

Vipul Modi is a busy high court lawyer in India's financial capital Mumbai. Like many people, he uses the Internet to buy rail and airline tickets as well as pay his utility bills. Yet when it comes to buying other products online, the 44-year-old has misgivings, particularly about the security of his bank account details and other personal data.

"Online shopping is not something that we feel comfortable with... because the responsibility of something being misused is on the consumer compared with the United States, where it's on the credit card companies," he told AFP.

"And I'd still not buy some things online because I still like to go and see what it is."

From books to groceries, Internet shopping has become popular in many Western countries for people with disposable income, busy lifestyles and unpredictable working hours.

As Indian society, particularly in big cities such as Mumbai and the capital New Delhi, changes along similar lines on the back of the country's economic expansion, retailers are now looking to follow suit.

Gift shop chain The Bombay Store last month became the latest outlet to launch an online facility, following in the footsteps of major retailers such as Big Bazaar, Pantaloons and shopping portals on websites like www.rediff.com.

"Online shopping in India is on the cusp of taking off," said Deepa Thomas, a senior manager at the online auction site www.ebay.in, which has 2.5 million registered users in nearly 2,500 locations across the country.

"But when it comes to things like product shopping there's still a fairly long way to go."

For a country with 1.1 billion people, India's use of computers and the Internet is still low, despite being a major player in global information technology and outsourcing.

At present only eight percent of Indian households have access to a personal computer, the country's IT and communications minister, Sachin Pilot, said on a visit to Washington in March.

Of India's estimated 60 million Internet users, about six million shop online, with the ecommerce market thought to be worth about 100 billion rupees (2.2 billion dollars) and expanding at about 30 percent a year, Thomas said.

At present, social networking, email and accessing news and sports sites remain the mainstay of computer use for most Indians.

Pilot has predicted an "exponential growth" in computer use and Internet penetration in the coming years, as the government works to extend broadband access into 250,000 out of India's more than 600,000 villages.

Industry analysts such as Nishant Shah, director of research at the Centre for Internet and Society in the southern city of Bangalore, India's IT hub, said that can only help develop ecommerce.

"The countries where Internet shopping has been on the upswing are countries with highly developed broadband infrastructure which allows for quick, easy and secure connections," Shah said in an email interview.

"The lack of strong digital infrastructure means that the Internet is still used by a large majority of people for 'functional' things - jobs, retrieving information, communication, social networking."

Unlike other countries, India's half-a-billion mobile phone subscribers could drive the sector's expansion, he added.

The government is currently auctioning 3G licences, which would enable more users to access data at high-speed, instead of having to rely on slow, dial-up connections at places such as public cyber cafes, making transactions easier.

Thomas said eBay was launching a mobile phone application for buying and selling by the end of June, predicting that "mobile web is going to become a big part of developing the market".

For Asim Dalal, managing director of The Bombay Store, going online makes business sense in the global economy as it expands the company's reach beyond India's borders.

"International visitors comprise approximately 25 percent of our sales," he said in a statement. "Since they mostly are on visit or tour to India, their repeat purchases for gifting or home were restricted."

But if and how quickly Indian consumers will change habits is hard to tell, with a preference for cash transactions and personal contact with suppliers, particularly for food and clothing at bustling markets.

Read the original article in the Independent

For more details visit https://cis-india.org/news/India-gets-to-grips-with-ecommerce

India Shut Down Kashmir’s Internet Access. Now, ‘We Cannot Do Anything.’

Vindu Goel, Karan Deep Singh and Sameer Yasir — 2019-08-22T01:20:47Z

Masroor Nazir, a pharmacist in Kashmir’s biggest city, Srinagar, has some advice for people in the region: Do not get sick, because he may not have any medicine left to help.

The article by Vindu Goel, Karan Deep Singh and Sameer was published in New York Times on August 14, 2019. Gurshabad Grover was quoted.

“Shutting down the internet has become the first go-to the moment the police think there will be any kind of disturbance,” said Mishi Choudhary, founder of SFLC.in, a legal advocacy group in New Delhi that has tracked the sharp rise in web shutdowns in India since 2012.

In Jammu and Kashmir, a Muslim-majority territory where security forces constantly worry about attacks by separatist militants, the internet has been blocked in at least part of the region 54 times this year, according to SFLC.in’s data. The authorities simply order internet service providers and phone companies to stop providing access to the web or to mobile networks.

But this latest shutdown has been far more sweeping than others, Kashmiris said.

“We used the internet for everything,” said Mr. Nazir, 28, whose pharmacy is near the city’s famed clock tower. He said he normally went online to order new drugs and to fulfill requests from other pharmacies in more rural parts of Kashmir Valley. But now, “we cannot do anything.”

As the Indian government’s shutdown of internet and phone service in the contested region enters its 11th day, Kashmir has become paralyzed.

Shopkeepers said that vital supplies like insulin and baby food, which they typically ordered online, were running out. Cash was scarce, as metal shutters covered the doors and windows of banks and A.T.M.s, which relied on the internet for every transaction. Doctors said they could not communicate with their patients.

Only a few government locations with landlines have been available for the public to make phone calls, with long waits to get a few minutes of access.

The information blockade was an integral part of India’s unilateral decision last week to wipe out the autonomy of Jammu and Kashmir, an area of 12.5 million people that is claimed by both India and Pakistan and has long been a source of tension. That has brought everyday transactions, family communications, online entertainment and the flow of money and information to a halt.

While Prime Minister Narendra Modi has promoted the rapid adoption of the internet, particularly on smartphones, to modernize India and bring it out of poverty, the country is also the world leader in shutting down the internet.

The country has increasingly deployed communications and internet stoppages to suppress potential protests, prevent rumors from spreading on WhatsApp, conduct elections and even stop students from cheating on exams. Last year, India blocked the internet 134 times, compared with 12 shutdowns in Pakistan, the No. 2 country, according to Access Now, a global digital rights group, which said its data understates the number of occurrences.

Umar Qayoom, who used to spend his days running around Srinagar signing up merchants for Paytm, a digital payments service, is now stuck in his house. He said he had not been able to contact his girlfriend since the shutdown began, and his smartphone — his primary source of entertainment, with its endless supply of videos and social media — is an inert hunk of metal.

“I don’t know when to sleep, when to wake up, what to do with my life,” he said during a rare foray outside on Monday evening for Eid al-Adha, the holiest festival in Islam. “There is no life without internet, even in Kashmir.”

Muheet Mehraj, founder and chief executive of Kashmir Box, a start-up that buys traditional handicrafts like pashmina shawls and pottery from local artisans and sells them online, said he could not check incoming orders or communicate with his suppliers. His 25 employees are idle. If the shutdown lingers, they will soon be out of work.

“We’ve seen more than 400 shutdowns,” he said. “This has been the worst of them all.”

No one knows how long the blackout will last. In 2016, the internet was blocked in Kashmir for more than four months. The unpredictable access wreaked havoc with students, businesses and even musicians, who had relied on YouTube, Instagram and other digital services to reach potential audiences.

At a hearing on Tuesday, India’s Supreme Court declined to lift any of the current restrictions, accepting the government’s argument that the shutdown was needed to maintain order and would be “settled soon.” The next day, the police indicated that most of the valley would remain on lockdown, including on Thursday, India’s Independence Day.

“Kashmir has become invisible even to itself,” said Gurshabad Grover, a senior policy officer at the Center for Internet and Society in Bangalore, quoting a recent line in The Indian Express. The center published a report last year on the social and economic toll of internet shutdowns across India.

The United Nations has repeatedly condemned government-ordered internet shutdowns as a violation of human rights.

But that has not deterred India from routinely using the tool. Under India’s laws, authorities at even the local level can easily shut down internet access in the name of ensuring “peace and tranquillity.”

“It helps in any kind of situation which can flare up the sentiments of people and flare up the bulk mobilization of people,” said Rahul Pandey, deputy superintendent of police in Darjeeling in northeastern India, where the internet was blocked for about 100 days in 2017.

Raman Jit Singh Chima, Asia Pacific policy director at Access Now, said that Indian officials have seen few negative consequences from shutdowns, so they keep using them. “It has become standard operating procedure among police,” he said.

But the true costs of such blockades are high. Internet shutdowns from 2012 to 2017 cost India’s economy more than $3 billion, the Indian Council for Research on International Economic Relations estimated last year. And the number of stoppages has spiked since then. The Darjeeling shutdown, one of the longest in the country, occurred after the state government decided it needed to quash a separatist movement that had clashed violently with security forces.

Darjeeling’s fabled tea industry, the lifeblood of the local economy, lost most of a year’s harvest as workers went on strike. Production was hurt the next year, too.

Many corporate tea buyers and traders sought tea elsewhere during the disruption and never came back, said Girish Sarda, director of Nathmulls, a tea exporter in the region.

“We lost many customers,” he said, estimating that the company’s revenue dropped more than 30 percent at the time. “Even when the internet is on, people think that this business is probably shut down.”

The government has argued that one reason for suppressing the internet in Kashmir was to stop the spread of false information.

But in the digital blackout, rumors have continued spreading the old-fashioned way: by word of mouth.

When thousands of protesters marched through Srinagar on Friday and security forces fired gunshots in response, word spread that there had been a massacre. Reporters who investigated found that at least seven people had been injured, but no one had died. Other unverified reports of people being killed by the police have also circulated.

The enforced idleness creates another risk, said Mr. Qayoom, the Paytm employee stuck at home. When young people have nothing else to do, leaving the house to protest — or throw stones at the police — looks a lot more appealing. “There is going to be bloodshed,” he said.

For more details visit https://cis-india.org/internet-governance/news/new-york-times-august-14-2019-vindu-goel-karan-deep-singh-and-sameer-yasir-india-shut-down-kashmir-internet-access-now-we-cannot-do-anything

India Should Watch Its Internet Watchmen

praskrishna — 2011-05-06T05:08:05Z

The month after terrorists attacked Mumbai in 2008, India's government initiated legislation enabling it to eavesdrop on electronic communication and block websites on grounds of national security. There was no public debate before the bill in question was introduced, and hardly any debate inside parliament itself before it passed in 2009. In the law, there were no guidelines about the extent to which an individual's right to privacy would be breached. And there was certainly no mention, and therefore, reassurance, that due process would be followed when it came to restricting access to websites. This article by Rahul Bhatia was published in the Wall Street Journal on March 28, 2011.

It's taken about two years for the first signs of misuse to show up. And there may be many more, as the government uses vague discretion instead of firm rules to police India's Internet. Various groups can exploit these discretionary powers to their own ends.

Earlier this month, the Indian Computer Emergency Response Team (CERT-In), the body appointed by the government to protect India's information infrastructure, blocked a text-message provider that sends out advertisements in bulk over mobile phone. It also blocked Typepad.com, a publishing platform used frequently by bloggers. Both restrictions have now been lifted.

Most contentiously, a Delhi court ordered CERT-In to block access to Zone-H.org, an Italian security giant that acts as a repository of hacked websites—that is, it collects screen grabs of sites that are infiltrated, which later proves valuable for studying the cyber crime in question. A representative of this website accused an Indian cyber security firm, E2 Labs, of using Zone-H's logo and images to promote its own cyber security school courses. E2 Labs dragged Zone-H to court in 2009 and, on grounds of defamation, had Zone-H's website blocked. What muddies the waters is that E2 Labs claims to work for the government.

Nobody knows what threat, if any, these websites posed to national security. Users who tried accessing them simply received a one-line message from their service providers that the sites had been blocked due to "instructions from the Department of Telecom." That message later disappeared, replaced by the standard error message: "Page Not Found."

Many bloggers immediately started comparing this case to the situation they found themselves in 2006, when the government banned Blogspot.com right after Mumbai's suburban train system was hit by bomb blasts. The Department of Telecom then did not offer an official reason, leaving people guessing that this was some kind of response to that terrorist attack.

That's happening again. The guidelines under which CERT-In operates say that all information related to website blocking is classified. Moreover, its mandate does not include communicating with the public. Which is why everyone is in the dark. Nobody even knows how widespread the blockade is. There's no hint of the process involved. There's no course for redress for those who own the affected sites.

Inquiries from journalists about the Department of Telecom's method of functioning have gone unanswered. When cornered by the press this month, India's Information Technology minister Kapil Sibal, who oversees this department, passed responsibility to the ministry of home affairs, which manages the nation's internal security.

Perhaps there are legitimate reasons for blocking these websites. India has faced its share of terrorist attacks that have, in the last decade, begun to affect the country's urban centers. Terrorists have gotten more sophisticated. The 2008 Mumbai assault especially put pressure on security personnel to be electronically vigilant, because the terrorists used satellite phones and internet technology to communicate. Since then, the government has ramped up its scrutiny of the Internet, including getting into a high-profile dispute last year with Blackberry-maker Research in Motion. Blogs are fair game, too, seeing as how terrorist groups have been known to use them for recruiting and communication. But if there are good reasons this time for blocking the sites in question, they're unknown and unexplained.

That lack of explanation is cause for alarm. First, there's the impact on businesses. Intermediary guidelines proposed by the Department of Information Technology put the onus on service providers to remove any material that, in addition to endangering national security, "causes inconvenience or annoyance," is "grossly offensive or menacing in nature," or "belongs to another person." These open-ended guidelines mean service providers have to spend a good chunk of their time dealing with government officials to determine, say, what is offensive.

The larger impact is on the rule of law. The clumsiness with which New Delhi has blocked these sites undermines any legitimacy the laws have. Lawyers I've spoken with already say that the guidelines, which are open to wide interpretation, violate the country's constitution.

This legal debacle has implications beyond any immediate security concerns. Despite being a democracy with a vigorous free press, India can't afford to take freedom of speech for granted. The concern here is that a statute intended to protect the country from terrorism may also give new legal cover to people trying to restrict speech for other reasons.

Already, thanks in part to the lack of political support for free speech, varied groups hijack cracks or loopholes in the legal framework to their populist ends. For instance, a colonial-era law against religious insults was used in 2007 to appease Hindu nationalists who wanted the government to punish Muslim painter M.F. Hussain for depicting "Mother India" in the nude. That case suggests that the new ill-considered and badly implemented rules for online policing could be exploited by political or business interests.

India undoubtedly faces a serious terrorism problem. But New Delhi needs to defend itself through laws that don't end up impinging on free speech in damaging, undemocratic ways.

Mr. Bhatia is a writer with Open Magazine in Mumbai.

Read the original story here

For more details visit https://cis-india.org/news/internet-watchmen

India should reconsider its proposed regulation of online content

gurshabad — 2019-01-24T16:59:07Z

The lack of technical considerations in the proposal is also apparent since implementing the proposal is infeasible for certain intermediaries. End-to-end encrypted messaging services cannot “identify” unlawful content since they cannot decrypt it. Presumably, the government’s intention is not to disallow end-to-end encryption so that intermediaries can monitor content.

The article was published in the Hindustan Times on January 24, 2019. The author would like to thank Akriti Bopanna and Aayush Rathi for their feedback.

Flowing from the Information Technology (IT) Act, India’s current intermediary liability regime roughly adheres to the “safe harbour” principle, i.e. intermediaries (online platforms and service providers) are not liable for the content they host or transmit if they act as mere conduits in the network, don’t abet illegal activity, and comply with requests from authorised government bodies and the judiciary. This paradigm allows intermediaries that primarily transmit user-generated content to provide their services without constant paranoia, and can be partly credited for the proliferation of online content. The law and IT minister shared the intent to change the rules this July when discussing concerns of online platforms being used “to spread incorrect facts projected as news and designed to instigate people to commit crime”.

On December 24, the government published and invited comments to the draft intermediary liability rules. The draft rules significantly expand “due diligence” intermediaries must observe to qualify as safe harbours: they mandate enabling “tracing” of the originator of information, taking down content in response to government and court orders within 24 hours, and responding to information requests and assisting investigations within 72 hours. Most problematically, the draft rules go much further than the stated intentions: draft Rule 3(9) mandates intermediaries to deploy automated tools for “proactively identifying and removing [...] unlawful information or content”.

The first glaring problem is that “unlawful information or content” is not defined. A conservative reading of the draft rules will presume that the phrase means restrictions on free speech permissible under Article 19(2) of the Constitution, including that relate to national integrity, “defamation” and “incitement to an offence”.

Ambiguity aside, is mandating intermediaries to monitor for “unlawful content” a valid requirement under “due diligence”? To qualify as a safe harbour, if an intermediary must monitor for all unlawful content, then is it substantively different from an intermediary that has active control over its content and not a safe harbour? Clearly, the requirement of monitoring for all “unlawful content” is so onerous that it is contrary to the philosophy of safe harbours envisioned by the law.

By mandating automated detection and removal of unlawful content, the proposed rules shift the burden of appraising legality of content from the state to private entities. The rule may run afoul of the Supreme Court’s reasoning in Shreya Singhal v Union of India wherein it read down a similar provision because, among other reasons, it required an intermediary to “apply [...] its own mind to whether information should or should not be blocked”. “Actual knowledge” of illegal content, since then, has held to accrue to the intermediary only when it receives a court or government order.

Given the inconsistencies with legal precedence, the rules may not stand judicial scrutiny if notified in their current form.

The lack of technical considerations in the proposal is also apparent since implementing the proposal is infeasible for certain intermediaries. End-to-end encrypted messaging services cannot “identify” unlawful content since they cannot decrypt it. Internet service providers also qualify as safe harbours: how will they identify unlawful content when it passes encrypted through their network? Presumably, the government’s intention is not to disallow end-to-end encryption so that intermediaries can monitor content.

Intermediaries that can implement the rules, like social media platforms, will leave the task to algorithms that perform even specific tasks poorly. Just recently, Tumblr flagged its own examples of permitted nudity as pornography, and Youtube slapped a video of randomly-generated white noise with five copyright-infringement notices. Identifying more contextual expression, such as defamation or incitement to offences, is a much more complex problem. In the lack of accurate judgement, platforms will be happy to avoid liability by taking content down without verifying whether it violated law. Rule 3(9) also makes no distinction between large and small intermediaries, and has no requirement for an appeal system available to users whose content is taken down. Thus, the proposed rules set up an incentive structure entirely deleterious to the exercise of the right to freedom of expression. Given the wide amplitude and ambiguity of India’s restrictions on free speech, online platforms will end up removing swathes of content to avoid liability if the draft rules are notified.

The use of draconian laws to quell dissent plays a recurring role in the history of the Indian state. The draft rules follow India’s proclivity to join the ignominious company of authoritarian nations when it comes to disrespecting protections for freedom of expression. To add insult to injury, the draft rules are abstruse, ignore legal precedence, and betray a poor technological understanding. The government should reconsider the proposed regulation and the stance which inspired it, both of which are unsuited for a democratic republic.

For more details visit https://cis-india.org/internet-governance/blog/hindustan-times-gurshabad-grover-january-24-2019-india-should-reconsider-its-proposed-regulation-of-online-content

India Sets Strict New Net Neutrality Rules

praskrishna — 2016-02-11T01:53:19Z

In India, advocates of net neutrality have welcomed new rules by the telecom regulator that have blocked efforts by Facebook to offer free but limited access to the web in the country’s fast growing Internet market.

The article by Anjana Pasricha was published in Voice of America on February 9, 2016. Sunil Abraham was quoted.

In a widely awaited ruling, the Telecom Regulator Authority of India (TRAI) said on Monday that “no service provider shall charge differential pricing on the basis of application, platforms or websites or sources." It will impose penalties of $735 a day if the regulations are broken.

Kiran Jonnalagadda, who was among a group of 10 that launched an impassioned campaign called Save the Internet, says they have won a “fabulous” victory against large corporations to ensure equal web access for millions.

“We were up against the most powerful companies in the world, we had no chance of fighting Airtel last year, we had no chance of fighting Facebook. I think the only reason it worked is that we were on the side of facts, the opposition was not,” says Jonnalagadda.

Debate on Airtel

The campaign on net neutrality snowballed into a nationwide public debate after an Indian telecom company, Airtel, launched a marketing platform last April on which it planned to offer customers access with no data charges to certain Internet services and sites.

In recent weeks, the focus turned to “Free Basics”, a service being offered by Facebook on mobile phones to a handful of sites in areas such as communication, healthcare, and education.

Saying it wanted to vastly expand Internet access in poor, rural areas, Facebook had launched a massive advertising campaign in support of the platform. Only about 300 million in the country of 1.2 billion people have access to the net, many just through mobile devices.

But campaigners slammed Free Basics as “poor Internet for poor people” and said it would create a “walled garden” in which Facebook would control the content it offered users. Leading Indian technology entrepreneurs and university professors also called on the government to guard against attempts by Internet giants to turn the country into a “digital colony.”

Many of them have applauded the regulator’s move to strengthen net neutrality.

Ban on differential pricing

However, some are raising questions about the the complete ban on differential pricing announced by the regulator. That includes the Bangalore-based Center for Internet and Society research group, which says India has put in place the most stringent net neutrality regulations across the world. Its executive director, Sunil Abraham, says TRAI cited the examples of the Netherlands and Chile, but the ban on differential pricing in those countries is not as absolute as the one notified in India.

“We think that if proper technological safeguards and other market safeguards are put in place, it would be possible to have both — to have rapid growth in Internet access and reduced harm that emerge[s] from network neutrality violations,” says Abraham.

Indeed, the last word may not have been said on net neutrality in India as big telecom operators are expected to mount legal challenges to the regulator’s ruling in the coming months.

Expressing disappointment with India’s ruling, the Cellular Operators Association of India has called the ban on differential pricing a “welfare reducing measure” that could block an avenue for “less advantaged citizens to move to increased economic growth and prosperity by harnessing the power of the Internet.”

In a statement, Facebook has said “we will continue our efforts to eliminate barriers and give the unconnected an easier path to the Internet.”

But after having tasted victory, the volunteers at Save the Internet, who have grown from about 10 to 100 in the last year, have already set their sights on another aspect of net neutrality besides differential pricing.

“The campaign is not going to retire because this is not the end of it. There is also discrimination on the basis of speed, which the regulator has not taken up yet,” says Jonnalagadda.

For more details visit https://cis-india.org/internet-governance/news/voice-of-america-anjana-pasricha-february-9-2016-india-sets-strict-new-net-neutrality-rules

India sees biggest improvement in Internet freedom, says report

praskrishna — 2014-12-07T11:08:34Z

Big stride ascribed to removal of restrictions imposed in 2013; globally, Internet freedom sees decline.

The article by Moulishree Srivastava was published in Livemint on December 5, 2014. Sunil Abraham gave his inputs.

India fared better this year when it came to freedom of the Net, while globally Internet freedom declined for the fourth consecutive year in 2014 with a growing number of countries introducing more aggressive online censorship and monitoring practices, said a report by Freedom House, an independent watchdog.

The global Freedom on the Net report 2014, which covered the period between 1 May 2013 and 31 May 2014 and was released on Thursday, said India scored 42 points this year, an improvement of five points over the previous reporting period.

It’s the largest increase in Internet freedom over the past year and was ascribed to the removal of temporary restrictions on access and content that had been imposed in 2013 to stem an exodus of people from north-eastern states from wherever else they were in India.

Of the 65 countries assessed, 36 saw a decline in Internet freedom. The most significant declines were in Russia, Turkey and Ukraine. Iran, Syria and China are the world’s worst abusers of Internet freedom, said Freedom House.

A low score indicates higher Internet freedom.

The US remained relatively free compared with the rest of the world with a total score of 19, the report said.

“Any report on Internet freedom that ranks US as free cannot be taken seriously,” said Sunil Abraham, executive director of the Bengaluru-based research organization Centre for Internet and Society.

There is massive intellectual property rights (IPR)-related censorship in the US, which Freedom House does not consider censorship, and the total surveillance regime of the National Security Agency that resulted in self-censorship was also ignored by Freedom House, he said.

In India, curbs on content and arrests related to online publishing under Section 66A of the information technology (IT) Act declined in the past year.

There have been nine criminal complaints filed against social media posts in the period, but the Supreme Court did its bit by curtailing arrests for online expression under the IT Act.

Independently, the Supreme Court is assessing the constitutionality of provisions in the IT Act and secondary legislation that restrict content and criminalize speech online. Section 66A of the IT Act criminalizes a wide range of speech and led to several arrests for social media posts in 2012 and early 2013. On 2 December, the Supreme Court asked the government to clarify its stand on the constitutionality of these provisions by 9 December.

Several petitioners have also challenged parts of the IT Act, including rules introducing potential criminal liability for intermediary companies for content posted by third parties, as unconstitutional in the Supreme Court.

“Legislation and procedures to effectively protect privacy, meanwhile, remain lacking, and the scope of a privacy law currently being drafted is unclear,” said the Freedom House report.

India was expected to get a privacy law before the launch of the Unique ID, or Aadhar, programme, but this has not happened.

“Allegations of procedural abuses by state officials in surveillance cases have emerged in the states of Himachal Pradesh and Gujarat, in the latter while the present Prime Minister was chief minister,” the report said. “Partly in response to these scandals, the government tightened procedures in January 2014, saying officials must issue interception orders to telecommunications providers in written form, though they still require no warrant or judicial oversight.”

Currently, the government can retrieve data from intermediaries such as Internet service providers, which are required to install infrastructure for surveillance and keyword scanning of all traffic passing through each gateway.

What can curb Net freedom substantially in India, according to the report, is the Indian government’s ambitious nationwide surveillance programme, the Central Monitoring System, which allows authorities to monitor individuals’ digital communications directly without issuing orders to service providers, written or otherwise—that is, “without judicial oversight”.

The move allows government agencies to intercept any online activities, phone calls, text messages and even social media conversations in real time by directly accessing interception equipment on intermediary premises.

The Indian government also requested user information from international Web-based platforms including Google Inc., which received 2,794 data requests from Indian government agencies from January to June 2014. Facebook Inc. got 3,598 such requests and Twitter Inc. 19.

Apoorva contributed to this story.

For more details visit https://cis-india.org/internet-governance/news/livemint-december-5-2014-moulishree-srivastava-india-sees-biggest-improvement-in-internet-freedom

India Seeks to Limit Use of Maps and Satellite Images

praskrishna — 2016-05-28T12:38:45Z

Indians are discussing a plan to ban use of maps or satellite images of the country without approval from the government.

The plan’s critics have launched an online campaign called “Save The Map.” They say the proposed ban could affect many new businesses and services that use technology. The Geospatial Information Regulation Bill would require anyone who wants to use, publish or own maps or geospatial data to seek official permission. A special security committee would consider such requests. Indian officials say the proposed law would help protect military bases from enemies and terrorists. They deny it would cause problems for businesses.

But Internet experts say the law would affect anyone who uses mobile phones, laptop computers and online companies, such as ride services. They also fear that the ban would affect computer software programs and Apple or Google Map products. The Center for Internet and Society (CIS) in Bangalore also has criticized the bill. It says the measure would return India to where it was more than 30 years ago -- when businesses were forced to get licenses from government officials before they could begin to operate. Pranesh Prakash works at the center.

“What it does (is) it puts in place a license raj for all use of mapping technologies. That just does not make sense. No other country in the world has this regressive mapping law.” Technology experts from Bangalore launched the “Save The Map” campaign. It is calling on Indians to demand that the government change the planned law. The campaign is hoping to copy a successful campaign called “Save The Internet,” which pressured the government to ensure equal access to the Internet.

Indian officials have sought to calm critics, saying the bill is not final. The government has asked people to give ideas on how it should be changed by June 4. Officials note the country is dealing with an increasing number of security issues, including an attack at an air base in northern India earlier this year. Terrorists based in Pakistan were said to have carried out the attack. Junior Home Minister Kiren Rijiju told a newspaper that the law is needed because India must have ways to “secure its boundary and territory.”

But Prakash notes that the measure would not stop terrorists from using geospatial data from sources outside India. “They need satellite imagery and they need maps, period. Now this law doesn’t actually prevent such maps from being created, it doesn’t actually prevent satellite images of India being captured. What it does is prevent Indians from doing so. So it actually won’t prevent foreign-based terrorists -- especially state-backed terrorists -- from attacking India.” Internet and policy experts say the government would not be able to stop others from creating maps or satellite images of sensitive locations in the country.

I’m Anne Ball.

Anjana Pasricha reported this story from New Delhi for VOANews.com. Christopher Jones-Cruise adapted it for Learning English. George Grow was the editor. Read the original published by Voice of America on May 27, 2016

For more details visit https://cis-india.org/internet-governance/news/voice-of-america-may-27-2016-india-seeks-to-limit-use-of-maps-and-satellite-images

India seeks a tighter grip on social media

praskrishna — 2012-08-25T03:02:35Z

India, with the world's third largest number of Facebook users, is clamping down on social media after recent posting of inflammatory videos on Web sites.

Published in United Press International on August 24, 2012. Pranesh Prakash is quoted.

But the United States urged New Delhi to find the right balance between freedom of speech and the need to maintain law and order, a report by The Times of India said.

The government's move to block sites it deems unacceptable comes after doctored videos showing apparent violence against Muslims in Assam created violent panic.

While officials say they believe the videos originated on Pakistani blogs, the issue highlighted the uneasy relationship between freedom of speech on the Internet and the government's need to damp down inter-ethnic tensions.

Union Home Secretary R.K. Singh said New Delhi will be raising the issue with Pakistani officials.

"I am sure they (Pakistan) will deny it but we have fairly accurate technical evidence to show that the images originated and were circulated from their territory," he said.

Last week Indian federal and state ministers as well as police authorities watched closely as Assamese Muslims living and working in Bangalore engulfed the train station seeking train ticket home after rumors of the Web site information swept through their community.

Rail authorities and train companies in Bangalore, in the southwest state of Karnataka, put on extra trains to Assam in the northeast to cope with the influx of people who said they feared an outbreak of ethnic violence.

Twitter promised to cooperate with the government after the Prime Minister's Office complained to it about objectionable content on six accounts resembling the PMO's official account, a Press Trust of India report said.

Twitter said it was "actively reviewing" the request and will seek information from the Ministry of Communication and IT "to locate the unlawful content and the specific unlawful tweet," the PTI report said.

Facebook said it will comply with requests from Indian authorities but only where posts broke its existing rules that apply in all countries, a report by the BBC said.

"We have received requests from Indian authorities and agencies and are working through those requests and responding to the agencies," Facebook said. "Content or individuals can be removed from Facebook for a variety of reasons including issuing direct calls for violence or perpetuating hate speech."

At stake for many Internet service providers, site developers and proxy servers is a slice of one of the world's potentially most lucrative advertising markets.

A report by Businessweek in May said India will have more users of Facebook -- which opened an office in India in 2010 -- than any other country by 2015.

India has around 46,300,000 Facebook users,Socialbakers, a social media analytics firm in London, says. This makes India the third-biggest Facebook market behind second-place Brazil with just more than 48 million users and first-place United States with nearly 157 million.

The growth of users in India is around 22 percent a month and will match the United States by the end of 2014, each having around 175 million users, Socialbakers said.

However, the United States has voiced concern that India may overstep a censorship mark in its attempt to stamp out offensive Web sites.

State Department spokeswoman Victoria Nuland said Washington has been monitoring the situation of Assamese Indians flooding back to Assam from southern India because of concerns about their personal safety.

The U.S. government is "going to obviously watch and see how that process goes forward."

"We are always on the side of full freedom of the Internet," Nuland said in a report by The Times of India.

"But as the Indian government continues to investigate these instances and preserve security, we also always urge the government to maintain its own commitment to human rights, fundamental freedoms, rule of law."

Nuland also said the U.S. government maintained "open lines to our own companies in India, as we do around the world, and we are obviously open to consultation with them if they need it from us."

The weight of the law may be against most of Internet intermediaries, Pranesh Prakash, a lawyer at the Bangalore-based Center for Internet and Society, said.

"The rules are very onerous on intermediaries, since they require them to act within 36 hours to disable access to any information that they receive a complaint about," Prakash wrote in an article The Indian Express newspaper in May 2011.

Any "affected person" according to technology laws can complain about issues including defamation, blasphemy, trademark infringement, threatening the integrity of India, disparaging speech or the blanket "in violation of any law."

It isn't mandatory to give the violator an opportunity to be heard before taking down their content.

"Since intermediaries would lose protection from the law if they didn't take down content, they have no incentives to uphold freedom of speech," Prakash said.

"They instead have been provided incentives to take down all content about which they receive complaints without a considered evaluation of the content."

For more details visit https://cis-india.org/news/www-upi-com-aug-24-2012-india-seeks-a-tighter-grip-on-social-media

India second in requesting user info: Google

praskrishna — 2012-11-15T09:40:10Z

India is at second place after the US in terms of the government requests for user data from Google

Karthik Subramanian's article was published in the Hindu on November 14, 2012. Pranesh Prakash is quoted.

The Indian government made the second largest demand for Web user information — next only to the United States government — to Google in the six-month period from January to June this year, according to the ‘Transparency Report’ published by the Web services major on Tuesday.

During the six-month period, the Indian government — both by way of court orders and by way of requests from police— requested Google to disclose user information 2,319 times over 3,467 users/accounts. Google fully or partially complied with the request to the tune of 64 per cent. Only the U.S. government requested more data during the period — 7,969 requests over 16,281 accounts, compliance rate: 90 per cent.

It is the sixth time Google has brought out the bi-annual report detailing its interactions with the world government agencies. It details two categories of interactions : requests to divulge user data; and requests to pull down content. India ranked seventh in the list of requests to pull down data; experts say that the possible reason could be the government not having such powers under the Constitution.

Pranesh Prakash, policy director with Bangalore-based Centre for Internet and Society, said that the Google report was a damning indictment of the country’s government exceeding its constitutional bounds by demanding removal of material for defamation, government criticism, etc., without a valid court order. "There are no laws in our country that allows the executive or the police to remove such material without a court order."

Substantial spike

In all, 33 countries figure in the report. There was a substantial spike when compared to previous reports with respect to the number of requests from various governments to pull down content.

"In the first half of 2012, there were 20,938 inquiries from government entities around the world. Those requests were for information about 36,614 accounts,” wrote Dorothy Chou, Google’s senior policy analyst, on the Official Google Blog while presenting the report. “The number of government requests to remove content from our services was largely flat from 2009 to 2011. But it’s spiked in this reporting period. In the first half of 2012, there were 1,791 requests from government officials around the world to remove 17,746 pieces of content."

Google is leading the cause for voluntary disclosure of the interactions it has with the governments. Other web services that put out similar transparency reports include micro-blogging site Twitter; cloud storage service Dropbox; and social networking site Linkedin.

Mr. Prakash said it was not enough if just the web services put out such reports. "The telecom service providers must voluntarily come out with such information," he added.

"There is a dearth of public information about the amount of legal interception and surveillance. This does not bode well in a democratic polity."

For more details visit https://cis-india.org/news/the-hindu-sci-tech-internet-karthik-subramanian-nov-14-2012-india-second-in-requesting-user-info-google

India second in keeping tabs on netizens

praskrishna — 2012-11-15T09:04:01Z

India ranks second globally in accessing private details of its citizens, next only to the US, if the latest data from Google is to be believed.

The article by Ishan Srivastava was published in the Times of India on November 15, 2012, Pranesh Prakash is quoted.

The transparency report by the internet search giant lists out requests it received from governments across the world to access information on the users of its various services.

In the first six months of 2012, India made 2,319 requests involving 3,467 users. In comparison, the US made 7,969 requests in the same period and Brazil, which comes third, sent 1,566 requests. Globally, there were 20,938 requests for user data during the January-June period. The data can include your complete Gmail account, chat logs, Orkut profile and search terms among others. These reports are prepared by Google every six months, and were started in July-December 2009.

The requests for user data from India doubled from 1,061 in July-December 2009 to 2,207 in July-December 2011.

"Though India is a large country with a significant number of internet users, this data is nonetheless an indicator of growing surveillance," said Pranesh Prakash, policy director at Centre for Internet and Society (CIS), a Bangalore-based organization looking at issues of public accountability, internet freedom and openness.

"India lacks a general privacy law that helps set guidelines for such user requests, despite privacy being a constitutional right as part of the right to life," said Prakash.

India also actively sends requests to take down content which it deems defamatory and against national security. While the number of court orders for taking down web content has remained almost stagnant over the years, there has been a rise in the number of requests by the executive and police. Between January and June this year, there were 20 court orders and 64 requests from executive/police that resulted in 596 items being taken down from the web. In comparison, there were only eight court orders and 22 executive/police requests in January-June 2010, resulting in 125 items being taken down.

"The government does not always specify the reason for which they want access. They just want access, what they do with the information is not known to us," said a legal adviser to an MNC. "These requests come with a threat to our continued operation in India."

Falsified court orders are also being employed to seek removal of content. Three such court orders were sent to Google "that demanded the removal of blog posts and entire blogs for alleged defamation." One order was said have been issued by a local court in Andheri, Mumbai while the other two by the Delhi high court. But all the three were found to be fake.

Google says a single court order was responsible for removal of 360 items this year as they "contained adult videos that allegedly violated an individual's personal privacy." While such orders have a positive impact like curbing pornography and violent content, governments at every level have also tried to use these requests to take down unfavourable content or criticism.

In January-June 2011 period, Google received "requests from state and local law enforcement agencies to remove YouTube videos that displayed protests against social leaders or used offensive language in reference to religious leaders". Google rejected a majority of these requests. It also received a request from a law enforcement agency to remove 236 communities and profiles from Orkut that were critical of a local politician. Google did not remove them either.

"Prior to 2009, government had limited powers of interception. However, after 26/11 they gave themselves huge powers to block and monitor content," said Supreme Court lawyer Pavan Duggal. "Data privacy is non-existent in India." He said that the A P Shah Committee, which was formed to recommend principles for a privacy law, has submitted its report to the Planning Commission and now it is up to the government to take it to the next stage.

Both Prakash and Duggal said that technology companies in India, including telecom players, should come out with similar transparency reports as Google. A report by international watchdog Privacy International says that Bharti Airtel, in its 2010-2011 annual report, said it had received 422 appreciation letters from law enforcement agencies for assistance in lawful interceptions. "The Indian IT Act requires electronic audit by firms but the law is silent on how this audit is filed," said Duggal.

Globally, Dropbox, LinkedIn, Sonic.net and Twitter release transparency reports apart from Google.

For more details visit https://cis-india.org/news/times-of-india-india-times-tech-tech-news-internet-ishan-srivastava-nov-15-2012-india-second-in-keeping-tabs-on-netizens

India ranks second globally in accessing private details of users

praskrishna — 2012-11-19T04:49:23Z

According to the latest transparency report released by Google, India ranks second in the world for accessing private details of its citizens, only after the U.S. The Google report lists out requests it received from governments across the world to access details of users of its various services.

Kul Bhushan's blog post was published in thinkdigit on November 15, 2012. Pranesh Prakash is quoted.

Google's data reveals India had made 2,319 requests involving 3,467 users in the first six months. The U.S. made 7,969 requests, while Brazil, which ranks third, made 1,566 requests during the same period. Worldwide 20,938 requests were made during the January-June period. The report says the information shared included complete Gmail account, chat logs, Orkut profile and search terms among others.

The requests for accessing user data from India had grown two-fold from 1,061 in July-December 2009 to 2,207 in July-December 2011, the report points out.

According to the report, India has been consistently sending requests to remove content which it brands as defamatory and against national security. The court orders, however, to take down content has remained almost stagnant over the years; though requests from the executive and police have grown.

In the first six months this year, there were 20 court orders and 64 requests from executive/police that resulted in 596 items being taken down from the web. During the January-June 2010 period, there were only eight court orders and 22 executive/police requests, resulting in 125 items being taken down. Read about Google's previous transparency report here.

"Though India is a large country with a significant number of internet users, this data is nonetheless an indicator of growing surveillance," Times of India quotes Pranesh Prakash, policy director at Centre for Internet and Society ( CIS), a Bangalore-based organization looking at issues of public accountability, internet freedom and openness, as saying.

"India lacks a general privacy law that helps set guidelines for such user requests, despite privacy being a constitutional right as part of the right to life," added Prakash.

For more details visit https://cis-india.org/news/thinkdigit-internet-kul-bhushan-nov-15-2012-india-ranks-second-globally-in-accessing-private-details-of-users

India Puts Tight Leash on Internet Free Speech

praskrishna — 2011-05-01T02:20:24Z

Free speech advocates and Internet users are protesting new Indian regulations restricting Web content that, among other things, can be considered “disparaging,” “harassing,” “blasphemous” or “hateful.” This article by Vikas Bajaj was published in the New York Times on April 27, 2011.

An Internet cafe in New Delhi. New rules require Web sites and service providers to remove some content that officials and even private citizens find objectionable.

The new rules, quietly issued by the country’s Department of Information Technology earlier this month and only now attracting attention, allow officials and private citizens to demand that Internet sites and service providers remove content they consider objectionable on the basis of a long list of criteria.

Critics of the new rules say the restrictions could severely curtail debate and discussion on the Internet, whose use has been growing fast in India.

The list of objectionable content is sweeping and includes anything that "threatens the unity, integrity, defense, security or sovereignty of India, friendly relations with foreign states or public order."

The rules highlight the ambivalence with which Indian officials have long treated freedom of expression. The country’s constitution allows “reasonable restrictions” on free speech but lawmakers have periodically stretched that definition to ban books, movies and other material about sensitive subjects like sex, politics and religion.

An Indian state, for example, recently banned an American author’s new biography of the Indian freedom fighter Mohandas Gandhi that critics have argued disparages Mr. Gandhi by talking about his relationship with another man.

Although fewer than 10 percent of Indians have access to the Internet, that number has been growing fast — especially on mobile devices. There are more than 700 million cellphone accounts in India.

The country has also established a thriving technology industry that writes software and creates Web services primarily for Western clients.

Even before the new rules — known as the Information Technology (Intermediaries guidelines) Rules, 2011 — India has periodically tried to restrict speech on the Internet. In 2009, the government banned a popular and graphic online comic strip, Savita Bhabhi, about a housewife with an active sex life. Indian officials have also required social networking sites like Orkut to take down posts deemed offensive to ethnic and religious groups.

Using a freedom of information law, the Center for Internet and Society, a Bangalore-based research and advocacy group, recently obtained and published a list of 11 Web sites banned by the Department of Information Technology. Other government agencies have probably blocked more sites, the group said.

The new Internet rules go further than existing Indian laws and restrictions, said Sunil Abraham, the executive director for the Center for Internet and Society. The rules require Internet “intermediaries” — an all-encompassing group that includes sites like YouTube and Facebook and companies that host Web sites or provide Internet connections — to respond to any demand to take down offensive content within 36 hours. The rules do not provide a way for content producers to defend their work or appeal a decision to take content down.

"These rules overly favor those who want to clamp down on freedom of expression," Mr. Abraham said. "Whenever there are limits of freedom of expression, in order for those limits to be considered constitutionally valid, those limits have to be clear and not be very vague. Many of these rules that seek to place limits are very, very vague."

An official for the People’s Union for Civil Liberties, an advocacy group based in New Delhi, said on Wednesday that it was considering a legal challenge to the constitutionality of the new rules.

"What are we, Saudi Arabia?" said Pushkar Raj, the group’s general secretary. "We don’t expect this from India. This is something very serious."

An official at the Department of Information Technology, Gulshan Rai, did not return calls and messages.

The rules are based on a 2008 information technology law that India’s Parliament passed shortly after a three-day siege on Mumbai by Pakistan-based terrorists that killed more than 163 people. That law, among other things, granted authorities more expansive powers to monitor electronic communications for reasons of national security. It also granted privacy protections to consumers.

While advocates for free speech and civil liberties have complained that the 2008 law goes too far in violating the rights of Indians, Internet firms have expressed support for it. The law removed liability from Internet intermediaries as long as they were not active participants in creating content that was later deemed to be offensive.

Subho Ray, the president of the Internet and Mobile Association of India, which represents companies like Google and eBay, said the liability waiver was a big improvement over a previous law that had been used to hold intermediaries liable for hosting content created by others. In 2004, for instance, the police arrested eBay’s top India executive because a user of the company’s Indian auction site had offered to sell a video clip of a teenage couple having sex.

"The new I.T. Act (2008) is, in fact, a large improvement on the old one," Mr. Ray said in an e-mail response to questions.

Mr. Ray said his association had not taken a stand on the new regulations. An India-based spokeswoman for Google declined to comment on the new rules, saying the company needed more time to respond.

Along with the new content regulations, the government also issued rules governing data security, Internet cafes and the electronic provision of government services.

Read the original article published by the New York Times here

For more details visit https://cis-india.org/news/internet-free-speech

India Proposes Restrictions on Tapping Telephone Calls

praskrishna — 2011-05-06T05:53:43Z

An Indian government report has recommended that interception of telephone calls by government agencies should be limited to situations when there is a "public emergency" or "public safety" is at stake. John Riberio's article appeared in the PC World, TechWorld and CIO. Pranesh Prakash, program manager from the Centre for Internet and Society has been quoted in these articles.

John Riberio's article was published in the following publications:

PC World [April 26, 2011]
TechWorld [April 26, 2011]
CIO [April 26, 2011]

For more details visit https://cis-india.org/news/tapping-telephone-calls

India Proposes Law to Give Indians Complete Control of their Digital Health Data

Admin — 2018-06-01T13:57:42Z

India’s health ministry has proposed a law to govern data security in the healthcare sector that would give individuals complete ownership of their health data.

The article by Madhur Singh was published as a cover story in IndiaSpend on May 31, 2018. Shweta Mohandas and Amber Sinha were quoted.

Individuals would have the absolute right to refuse or allow data to be generated, collected, accessed, transmitted or used. And data collectors such as hospitals would be prohibited from refusing treatment to those who do not want their data collected or used.

This would make India one of the world’s foremost jurisdictions in the regulation of healthcare data, at a time when governments around the world are scrambling to keep a check on who gets to generate and use data and how, especially as citizens do not completely understand the data privacy and security implications of the innumerable applications they wittingly or unwittingly use.

The draft Digital Information Security in Healthcare Act was proposed by the health ministry on March 11, 2018. The period for stakeholder comment ended April 21, and a bill is currently being finalised. Experts say the health ministry is possibly waiting for a final verdict from the Supreme Court on petitions challenging the constitutional validity of Aadhaar–on which it has just completed the second-longest oral hearing in the history of the court. The ruling is expected in July or August.

The verdict will guide India’s data privacy framework, which is already being prepared by the Committee of Experts on a Data Protection Framework for India being chaired by Justice B. N. Srikrishna. It will also have implications for the health ministry’s proposed law.

Use of data

Digital health data (DHD), or electronic health records of individuals or the public (when aggregated), typically comprise information such as a patient’s age, contact information, vital signs, lab reports, medical history including immunisations, allergies, and current and past medications.

The use of DHD promises to revolutionise healthcare services by providing more comprehensive care using the most accurate records possible, possibly reducing costs and timelines for all involved.

The law would allow anonymised health data, which cannot be traced to individuals, to be used for specified public health purposes, such as early detection and rapid response to public health emergencies such as bioterror events and infectious disease outbreaks.

However, for data in identifiable form, the draft stipulates that explicit prior permission would be needed from the digital data owner before each transmission or use. For instance, often companies offer free medical checkups to all employees. By revealing a pregnancy or a serious chronic condition, these tests could imperil an employee’s situation with their employer. With the proposed law, an employee could refuse to allow the pathology laboratory to share their data with the employer.

In recognition of the serious privacy and security concerns over uses and misuses of digital health data, the proposed law would completely prohibit use of digital health data for ‘commercial purposes’, whether in an identifiable or anonymised form.

This would mean that insurance companies, employers, human resource consultants and pharmaceutical companies would not be allowed to access or use health data, the law firm Trilegal said in an analysis posted on its website on April 11, 2018.

“Currently, employers can process health data for employee benefits, office records and insurance purposes under labour legislations like Maternity Benefits Act, Employee Compensation Act and Employee State Insurance Corporation Act and as part of their internal policies,” Trilegal said, adding that the proposed law would allow the use of digital data only to the extent required by these laws. “However, access, use or disclosure of [digital health data] to employers or human resource consultants for any other purpose is prohibited,” Trilegal noted.

Similarly, insurance companies and drug makers would not be allowed to access or use digital health data, although use for academic, clinical and public health research would be allowed.

The central government would be tasked with establishing ‘health information exchanges’ that would regulate the exchange of DHD between various clinical establishments–hospitals, clinics, diagnostic centres, pathology laboratories, etc.–for purposes and in manners allowed under the law.

Data breach

The responsibility for ensuring data security and privacy would lie with the entity that has custody of the data, which could be penalised for data breach.

Currently, under Indian law, companies in India are not obligated to inform individuals of data breach, with the exception of banks, which are obligated to inform the Reserve Bank of India within six hours. The result is that individuals are often not aware that their details may have been compromised.

The draft law proposes to make breach notification mandatory. Data breaches would be ranked by severity, and the more serious kind would be punishable with a fine of at least Rs 1 lakh and a jail term of up to five years.

Clinical establishments and health information exchanges would have to notify the owner in case of a breach within three days. Data owners could claim compensation from the person who breached the data, and no limit has been prescribed for the compensation amount.

The draft also specifies punishment for various other offences such as unauthorised access and data theft of up to five years’ imprisonment.

Some concerns

The stringent provisions of the proposed law, particularly the blanket ban on use of DHD by insurance and pharmaceutical companies, has raised concerns among these industries.

“Most data protection laws allow healthcare institutes to process data so long as there exists a legitimate interest in doing so,” Rahul Kumar, country manager and director with security solutions company WinMagic India said, adding that provisions debarring insurance and pharmaceutical companies, “while being protective in nature might be excessively harsh under certain circumstances”.

The stringent privacy provisions also put the future of wearable devices in doubt, Shweta Mohandas of The Centre for Internet and Society (CIS) told IndiaSpend, “Perhaps a revised draft of the law, or rules framed under the final law, would specify these details.”

The draft does not clearly define the security measures that must be followed to prevent data breach, Mohandas and Amber Sinha, also of the CIS, told IndiaSpend. However, a National Electronic Health Authority proposed to be set up under the law could possibly define a clear set standards for maintaining security, they said.

Also, the draft proposes to allow for the withdrawal of consent but does not say how data would be removed from the system, Sinha and Mohandas said, adding that the roles of the various bodies to be established must be clearly defined.

Most commentators expect the finalised bill, which will be drafted after taking into account stakeholder comment, will iron out these issues.

“This law in its current form and further in its revised version will go a long way to help the industry be more secure,” Kumar said, adding, “Compliance is known to bring in a level playing field for industries and also give the end user the confidence that the critical data is secure.”

Many commentators also have questioned the timing of the health ministry’s draft law, given that India is currently in the process of creating a framework and an overarching legislation on data privacy and security. “It is curious that the Ministry has chosen to not wait for the draft law, before framing and releasing their draft,” Sinha and Mohandas said, “This suggests a lack of coordination between the different ministries, and if due care is not taken, could lead to inconsistencies across sectoral regulations of data.”

However, they said, it is possible that the health ministry will wait for the Supreme Court verdict in the Aadhaar litigation before finalising the bill.

(Singh is a contributing editor with IndiaSpend.)

For more details visit https://cis-india.org/internet-governance/news/india-spend-madhur-singh-may-31-2018-india-proposes-law-to-give-indians-complete-control-of-their-digital-data

India Privacy Meet

praskrishna — 2012-07-02T10:48:54Z

Microsoft, DSCI and Greyhead came together to organise India Privacy Meet at Hotel LeMeridien on June 29, 2012 in New Delhi. Sunil Abraham was a panelist in the event.

Agenda

10:00a.m.- 10:10a.m.	Welcome and Introduction: Rahul Neel Mani, Editor & Co-founder Grey Head Media
10:10a.m.- 10:30a.m.	Conference Opening Remarks: Dr. Kamlesh Bajaj, CEO Data Security Council of India
10:30a.m.- 10:45a.m.	Theme Address: Deepak Rout, CSO & Director Privacy, Microsoft India
10:45a.m.- 11:00a.m.	Tea/Coffee Break
11:00a.m.- 12:00p.m.	Panel 1: Consumer Privacy – Creating the Right Balance

Brief: Data Privacy is perhaps the most concerning issue in the digital age. Consumer privacy or customer privacy, involves the handling and protection of sensitive personal information that individuals provide in the course of everyday commercial or professional transactions. This involves exchange or use of data electronically or by other means, including telephone, fax, writing, and word of mouth. With the advent and evolution of Internet and other electronic methods of mass communications, consumer privacy has become a major concern to deal with. Personal information, when misused or inadequately protected, can result in identity theft, financial fraud, and other problems that collectively cost individuals, businesses, and governments. In addition, Internet crimes and civil disputes consume law enforcement and judicial resources, confound legislators and bureaucracy, and produce untold personal aggravation.

Key Discussion Areas:

Handling of Personal Information including Sensitive Personal Information
Customer education on understanding business models and motives behind collection and use of Personal Information?
Privacy legislation and striking the right balance between various objectives
Privacy by design, online tracking, and transparency issues
Role of Government, Academia and Citizen groups

Panelists:

Chair - Dr. Kamlesh Bajaj, CEO, Data Security Council of India (DSCI)
Sivarama Krishnan, Executive Director, PwC India
Pankaj Agarwal, Head of IT Governance & CISO Aircel
Prashant Mali, Advocate & Cyber Law Expert
Deepak Rout, CSO & Director Privacy, Microsoft India
Vishal Jain, Director, Ernst & Young

12:00p.m.- 01:00p.m.	Panel 2: Citizen Privacy Transparency, Accountability and Social Progress

Brief: While citizens are adopting new technologies which are increasingly making it easier to share information more freely and thereby track individuals more easily, they are also demanding more accountability and openness. Experience indicates that having a more informed citizenry improves services, and accelerates innovation; thus the era of copious content has the potential to generate a host of new services and businesses. However, there is a need for greater transparency in the handling of citizen data and its legitimate use in governance and law enforcement. While new age technologies, if inappropriately used, have a potential impact on citizens’ privacy, they also arm us with the capability to protect citizen data and provide opportunities for privacy conscious and transparent usage of such data, provided there is an enabling environment created by informed and responsible privacy legislation.

Key Discussion Areas:

Core objectives for privacy legislation
Role of government in protecting citizen privacy
Citizen awareness of privacy concerns in today’s legal, business and technology landscape
Expectations of government and citizens on policies around usage and collection of personal data and ability to build profiles for being used for different purposes
Model privacy legislation

Panelists:

Chair - Nirmaljeet Singh Kalsi, Jt. Secretary, Ministry of Home Affairs
Na Vijaya Shankar, E-business Consultant & Cyber Law Specialist (Coordinator)
Sunil Abraham, Executive Director, Centre for Internet & Society
Akhilesh Tuteja, Executive Director, KPMG India
A P Singh, DDG, Unique Identification Authority of India (UIDAI)
Kailas Karthikeyan, Regulatory & Pub Policy Manager, Legal and Corp Affairs Microsoft

01:00p.m.- 01:10p.m.	Conference Closing Remarks by Deepak Rout, CSO & Director, Privacy Microsoft India Vote of Thanks
01:15p.m. onwards	Lunch

For more details visit https://cis-india.org/news/india-privacy-meet