Centre for Internet and Society

India's Shame: World Reacts to FB Post Arrest

praskrishna — 2012-11-30T05:51:10Z

The arrest of 21 year old Shaheen Dhada for posting anti-Bal Thackeray comments has not only outraged Indians. The story has been picked up and reported across international media as well. Though they may not be aware of the complexities of Indian politics, the fact that young girls were arrested for an FB post has got them questioning the dwindling tolerance for the freedom of speech in India.

This was posted by Sonal Bhadoria in IndiaTimes on November 21, 2012. Pranesh Prakash is quoted.

The Wall Street Journal warns ,'You better think twice before 'Liking' your friends' comments on Facebook. It may land you in jail.' The article quotes Pranesh Prakash, policy director at the Centre for Internet and Society saying “Bal Thackeray had violated the same provisions in his lifetime,” with reference to Mr. Thackeray’s inflammatory speeches against the South Indians and Muslims.

The BBC put a question mark on India's commitment to freedom of speech by citing recent examples of the arrest of a cartoonist like Ravi Srinivasan, a 46-year-old businessman in the southern Indian city of Pondicherry, who was arrested for a tweet criticising Karti Chidambaram, son of Indian Finance Minister P Chidambaram.

UK's Daily Mail, says 'So much for freedom of speech' and questions the IT act which led to the arrest.

In a New York Times article, Pranesh Prakash questioned the arbitrariness in the application of the law saying 'There were thousands of people on Facebook, Twitter and in person who were saying the exact same kinds of things that this girl is alleged to have said'. The article also stated that Shiv Sena has a history of banning books, movies and other popular culture that are critical of the political party.

Mashable noted that several dissenters had taken to Twitter to speak out about the arrest including Milind Deora, the government minister of state, communications and information technology, who showed support for Dhadha and Renu with this tweet:

Milind Deora
@milinddeora

To learn who rules over you, simply find out who you are not allowed to criticize ~ Voltaire
It also asked 'Do you think Facebook is a good place to voice political opinions?'

The Christian Science Monitor calls the incident 'the latest in a string of crackdowns on Internet speech in the world's largest democracy'. It says, 'The other cases have included arrest of a resident of Chandigarh who complained on the Facebook page of Chandigarh police that they were not doing enough to find her stolen car; a cartoonist who posted work online protesting corruption scandals by the central government; and a professor in Kolkata who merely forwarded an email with a cartoon that was critical of West Bengal chief minister Mamata Banerjee.' The article also mentions Shaheen Dhada’s uncle, Dr. Abdullah Ghaffar Dhada stating that he had incurred losses of two million Rupees due to the ransacking of his clinic by angry Shiv Sainiks.

For more details visit https://cis-india.org/news/indiatimes-sonal-bhadoria-nov-21-2012-indias-shame-world-reacts-to-fb-post-arrest

India's section 66A scrapped: Win for free speech

praskrishna — 2015-03-26T16:19:42Z

India's Supreme Court court has struck down a law that made posting "offensive" comments on the internet a crime punishable by a jail term of up to three years. But, for the free speech campaigners, there is more work to do, writes technology writer Prasanto K Roy.

The blog post by Prasanto K. Roy was published by BBC on March 24, 2015. Pranesh Prakash was quoted.

Section 66A, inserted in 2009 into India's Information Technology [IT] Act of 2000, was sweeping and draconian, and was repeatedly abused across the country, say free speech campaigners.

It was challenged in 2012 by a law student, Shreya Singhal, then 21.

She filed a public-interest litigation in the Supreme Court, shortly after the arrest of two girls in Mumbai for a Facebook post criticising the shutdown of the city after a political leader's death.

One of the two girls had merely "liked" the post.

Earlier in the same year, a businessman in south India was arrested for tweeting that a politician had amassed much wealth.

A professor at Jadavpur University in Kolkata (formerly Calcutta) was arrested for forwarding a cartoon about West Bengal Chief Minister Mamata Banerjee. Both were charged under Section 66A, among others.

In May 2013, the Supreme Court made arrests under Section 66A tougher - it said an arrest would require the permission of senior law-enforcement officials.

'A victory'

The judgement on Tuesday was read out by Justice RF Nariman, who said Section 66A was unconstitutional and directly affected the public's right to know.

"We have no hesitation in striking it down in its entirety," he said.

The order notes that Section 66A violates an article of the Indian constitution that guarantees freedom of speech and expression.

"This judgement is a victory for anyone and everyone who uses the internet.

"I am ecstatic. It's a complete victory for us, because the Supreme Court struck it down and held it unconstitutional," Ms Singhal told BBC Hindi moments after the court scrapped the law.

Section 66A provided for up to three years in jail for anyone who sent an electronic message that was considered "grossly offensive" or caused "annoyance or inconvenience".

Justice Nariman said such terms were vague, and created a sweeping law that was open to abuse.

The apex court judgement notes that 66A was based substantially on section 66 of the UK Post Office Act of 1953, which made sending offensive or annoying messages by telephone or telegram an offence punishable by up to a month in jail.

That law, last updated in 2003, still retains the terms "annoyance" and "inconvenience".

Section 66A's creation, and much of its implementation, happened on the watch of the Congress party-led political regime that lost to Prime Minister Narendra Modi's BJP government in last year's general election.

Arun Jaitley of the BJP - the current finance minister and former opposition leader - had criticised the law in the upper house of parliament, after it was reported that the government had blocked nearly 300 websites.

Once in power, however, the BJP swung around to defending 66A in the Supreme Court, the government represented by additional solicitor general Tushar Mehta.

Arrests under Section 66A continued into 2015 - last week, a 19-year-old student in Uttar Pradesh was arrested for a Facebook post on a political leader, and spent two days in jail.

Next target

The petitioners and their many supporters, including multiple virtual support groups, are celebrating the order striking down 66A.

But there are concerns about another section - 69A - introduced in the same amendment of 2009, which has been retained.

Section 69A, which was also challenged in Ms Singhal's and others' petitions, allows the government to block online content that "threatens the security of the state" or fulfils other conditions.

Hundreds of websites and web pages have been blocked under 69A, including a government website in 2013.

The apex court's order notes that 69A is a "narrowly drawn provision with several safeguards", and has allowed the section to remain.

Pranesh Prakash of the Centre for Internet and Society says: "The Supreme Court judgement is at its best on 66A, but weaker on 69A."

The free speech campaigners say their work is not yet finished.

For more details visit https://cis-india.org/internet-governance/news/bbc-march-24-2015-indias-section-66-a-scrapped

India's Rs 400-crore Central Monitoring System to snoop on all communication

praskrishna — 2013-06-05T10:39:19Z

Latest reports confirm that the government's longstanding aim of initiating the Central Monitoring System in the country is materialising now.

This was published in Tech 2 on May 9, 2013. Pranesh Prakash is quoted.

The Times of India reports that the government began rolling out the project last month, and it lets them access all communication in the country – comprising online activities, phone calls, SMSes, social media conversations and even the geographical location of individuals. Using the Central Monitoring System, officials with the National Investigation Agency or tax officials will have access to "every byte of communication".

Pavan Duggal, an advocate with the Supreme Court, believes that the new system "is capable of tremendous abuse". He went on to say that the government hasn't revealed much on what it intends to monitor with this new system, and under what criteria.

The Centre for Development of Telematics has been given the task of putting this system in place to give government officials this crucial access to communication in the country. In his statement to the Parliament in December last year, IT minister Milind Deora had said that the Central Monitoring System will "lawfully intercept Internet and telephone services".

This system was initiated in the wake of the horrying bomb blast in Mumbai in November 2008. Post that incident, the government reportedly took on the task of making itself technologically adept to "eavesdrop on digital communications".

It would be important to quote here that the IT law – enacted in 2000, amended in 2008 and in 2011 – confers upon government officials the authority to intercept phone calls, SMSes, emails and even monitor websites. That, however, can only be done for "reasonable security practices and procedures".

For more details visit https://cis-india.org/news/tech-2-may-9-2013-indias-rs-400-crore-central-monitoring-system-to-snoop-on-all-communication

India's Proposed Map Law Prompts Outcry

praskrishna — 2016-05-29T09:30:31Z

In India, proposed legislation to ban use of maps or satellite images of the country without approval from the government has led to an outcry and triggered an online campaign called “Save The Map.”

The article by Anjana Pasricha was published in Voice of America on May 17, 2016. Pranesh Prakash was quoted.

The controversy is not just over stiff penalties of up to $15 million for a wrong depiction of India’s borders, but that in a digital era, the law would potentially disrupt a host of businesses and start-ups such as taxi-hailing services.

Reasons

The draft Geospatial Information Regulation Bill seeks to regulate the use of mapping and satellite data for two reasons: secure the country’s strategic installations from enemies and terrorists and ensure that its political boundaries are correctly depicted. The government says it will not create barriers to business.

But Internet experts say the sweeping proposed law will affect ordinary people using mobiles and laptops, all new-age companies such as food-delivery and e-commerce, apps, as well as Apple and Google map products.

Nikhil Pahwa, founder of the website MediaNama, calls location data the core fabric of all digital services.

“What the government has ended up doing is making pretty much every single app illegal because they all use geospatial data and they wont have a license. If you take a photograph, it has location data. If you use Uber to hail a cab, it uses maps and it shows taxi cabs on the map. If I WhatsApp my location to a friend to pick me from a particular location, I am generating geospatial information,” he said.

Nikhil Pahwa, founder of the website MediaNama, calls location data the core fabric of all digital services.

Complications for ordinary citizens

The draft law requires anyone wanting to use, publish or own maps or geospatial data to apply for a license, which will be considered by a security vetting committee.

The Bangalore-based Center for Internet and Society (CIS) has also slammed the new bill, saying it takes India back more than three decades when businesses were governed by a maze of bureaucratic licenses and permits.

“What it does, it puts in place a license raj for all use of mapping technologies. That just does not make sense. No other country in the world has this regressive mapping law,” said Pranesh Prakash at CIS.

Internet opposition

A volunteer-led internet campaign called “Save The Map” led by Bangalore-based tech experts, is steadily gathering momentum. It is calling on people to petition the government against the bill in its present form. It seeks to replicate an extremely successful campaign called “SavetheInternet” which built public opinion and put pressure on the government to ensure equal access to the internet.

The government has sought to calm the growing concerns, saying the bill is only in a preliminary stage and it has invited feedback and suggestions from the public until June 4.

Officials point to India’s growing security concerns, specially since an armed attack at a strategic air base in Pathankot in northern India earlier this year, allegedly mounted by Pakistan-based terrorists. Speaking to an Indian newspaper, Junior Home Minister Kiren Rijiju said the bill is necessary because “India as a responsible country must have provisions to secure its boundary and territory.

However Prakash of CIS points out that the new bill will not necessarily prevent terror groups from getting hold of geospatial data to target Indian installations because they don’t need maps generated inside India to access such information.

“They need satellite imagery and they need maps, period. Now this law does not actually prevent such maps from being created, it does not prevent satellite images of India being captured. What it does is prevent Indians from doing so. So it won't prevent foreign-based terrorists, especially state-backed terrorists, from attacking India,” he said.

Internet and public policy experts agree that the government could impose restrictions on mapping and satellite images of strategic and sensitive locations in the country.

Huge fines

The eye-popping fines of up to $15 million and jail terms of up to seven years proposed for incorrect depiction of India’s borders have also caused surprise.

India has always insisted maps should show Kashmir in the north, which is claimed by both India and Pakistan and the state of Arunachal Pradesh in the northeast, which China claims, within Indian political boundaries.

Foreign magazines and newspapers which failed to do so were only allowed to circulate in the country after the words “Boundaries of India shown in this map are not correct” were stamped over maps that did not conform to India’s interpretations of its borders.

Google already offers slightly altered versions of its maps inside India, showing the disputed regions of Kashmir and Arunachal Pradesh as part of India.

Independent political analyst Ajoy Bose said New Delhi has long been very sensitive over how these two territories are depicted. “It has always been a source of annoyance to successive governments, but this government being ultranationalist in nature is very particular about India’s geographical boundaries being correctly shown, and therefore it is taking much more drastic action,” he said.

For more details visit https://cis-india.org/internet-governance/news/voice-of-america-may-17-2016-anjana-pasricha-india-proposed-map-law-prompts-outcry

India's Proposal

praskrishna — 2013-12-30T15:16:44Z

For more details visit https://cis-india.org/a2k/blogs/indias-proposal.zip

India's plan to offer citizens digital lockers poses a privacy threat, say experts

praskrishna — 2015-04-03T06:32:20Z

The Indian government launched a test version of a service called the digital locker last month that allows citizens to store scanned versions of important documents online, something that experts say poses a serious threat to people’s privacy.

The blog post was published in Scroll.in on March 19, 2015. Sunil Abraham was quoted.

Based on a similar project being tried out in Maharashtra, the service allows people with Aadhar cards to store scanned copies of their passports, birth certificates, ration cards and other important documents on remote servers. This way, people can digitally back-up important documents and also send them over the internet to others, such as potential employers or banks, for availing themselves of other services.

The service, whose test version was launched on February 12, will be optional. But it could find takers from among the about 90% of India’s households who do not own a laptop or computer and the 95% that do not have an internet connection, according to the 2011 census. Experts are concerned that sensitive data stored in a central place could be stolen or misused.

Serious threat

“Any large linked database with personal information is a serious threat to citizen's data,” said G Nagarjuna, a researcher at the Homi Bhabha Centre for Science Education in Mumbai and a member of the Free Software Movement. “There exists no agency that could secure their data till date without any possibilities of data theft.”

Digitisation is not inherently a problem, experts say. It is the kind of information stored that is. There are two kinds of information people need to be concerned about, said Sunil Abraham, executive director of the Bangalore-based Centre for Internet and Society, in an email to Scroll.in. Public domain information such as land records, pan cards and ration cards should be available to the public anyway. However, private information such as biometrics and passports are of concern.

“Unless the cryptography and architecture is organised in such a manner that only the citizen will have access there can be very serious consequences for the individual’s right to privacy,” he said.

The scheme raises the same concerns about privacy that came up during the creation of Aadhar cards, for which the government has collected biometric and identification data for 773 million citizens.

Information is power

Experts pointed to the dangers of the state having access to crucial data about citizens. The dangers are perhaps greater when the data passes into the hands of private corporations, they said.

The Indian government has not said who will run the central servers on which all the data is to be stored, but Maharashtra said in January that it would upload the data it was collecting to a private cloud service run by Microsoft.

“This is a terrible idea because it is centralising storage of personal information across silos controlled by different data controllers and also giving the citizen no control over who has access to his or her data," said Abraham.

“A blunder of the highest order is to pass this information to a cloud, and that too to a foreign company,” said Nagarjuna. “India is a sovereign republic, and hence we should assert this in the country’s digital assets as well. How secure can India be if our security is passed on to another agency that owes its allegiance to another country?”

Surykant Jadhav, joint secretary of the Directorate of Information Technology in Maharashtra, defended the scheme, comparing it to other optional services that the state provides such as online ticketing and filing of income tax returns. “The lockers are there only if people want to use it,” he said.

Cart before the horse

But the government ought to be trying to improve the basics, such as increasing computer and internet penetration, before launching value-added digital services, said Nagarjuna.

“What is the basic social or economic problem that the government is trying to solve by creating the digital lockers?” “Just as each citizen learns how to protect their assets, the digital natives of a digital society will eventually learn how to protect their digital assets. Digital India cannot be created without providing digital literacy to all the citizens. Did we do that? Once we do that, citizens will learn what is good for them, particularly for their own assets over which the government has no ownership.”

For more details visit https://cis-india.org/internet-governance/news/scroll-mridula-chari-march-19-2015-indias-plan-to-offer-citizens-digital-lockers-poses-a-privacy-threat-say-experts

India's Online Freedom Advocates Hail Court Ruling on Free Speech

praskrishna — 2015-03-27T01:43:22Z

Online freedom advocates in India are hailing a court ruling that struck down a controversial law seen as infringing free speech on the Internet. But in a country expected to have the world’s largest number of web users by 2018, some concerns about net censorship remain.

The blog post by Anjana Pasricha was published by Voice of America on March 24, 2015. Sunil Abraham is quoted.

The 24-year old law student, Shreya Singhal, who spearheaded the legal battle for overturning the harsh law, said it was the arrest of two young women in 2012 for a seemingly innocuous Facebook post that prompted her to petition the Supreme Court. One woman had criticized a shutdown in Mumbai after the death of a Hindu nationalist leader Bal Thackeray, the other “liked” her post.

Like millions of others, Singhal was alarmed at their detention because she says she could have been the one to post the innocuous comment.

“It [the law] was punishing people for expressing their views on the Internet, whereas if they did it or they did it on TV or they did nit in newspapers, they would not get arrested for the same views,” she said.

Scrapping the law on Tuesday, India's Supreme Court said the Information Technology Act was vaguely worded, and did not explain what could be “inconvenient" or “grossly offensive.” The judgment said the law was liable to have a chilling effect on free speech as it strikes at the root of liberty and freedom of expression.

The law had raised alarm bells after several people were arrested in recent years for posting “objectionable content.” In the latest instance, a 16-year-old boy in Uttar Pradesh state was arrested and released on bail for posting an “insulting” remark about regional party leader, Azam Khan. Among others who were picked up under the law were a professor in Kolkata and a cartoonist in Mumbai.

The previous government, which passed the law, said it was necessary to combat abuse and defamation on the Internet, but critics said it was used by political parties to suppress dissent and criticism.

The Supreme Court ruling also made it tougher for the government to order Internet companies to remove online content.

Sunil Abraham of Bangalore-based Center for Internet and Society says local and foreign Internet companies have faced growing pressure for putting up content deemed offensive in India.

“According to Facebook's latest transparency report, takedown requests and information requests from the Indian government continue to grow, and that is worrying. But that part of the law has been read down. Now when the government sends the takedown notice, it has to be accompany the takedown notice with a court order,” said Abraham.

But free speech campaigners say concerns about online censorship have not completely gone away. The Supreme Court has upheld a law that allows the government to block websites, saying there are sufficient safeguards.

Campaigners like Sunil Abraham think otherwise. “Lack of transparency makes it impossible for anybody to tell whether the government is censoring the Internet in a proportionate manner, whether it is working to truly address the real harms that emerge from bad content online. When the court in India bans books or movies, the judgments of these courts are made available to the public."

"But if when it comes to website blocking, this transparency requirement is missing. In fact, the law has secrecy provisions, which prevents ISP’s that receive these block orders from making them available in the public domain,” said Abraham.

The young student, Singhal, who led the legal battle, said she was “overwhelmed” at the victory for online freedom.

“We are such a diverse society in India with so many diverse and different opinions. It is inherent in us, it is part of us, this democracy, this debate we have,” she said.

Her views were echoed on Twitter and Facebook by people in India, a country of 1.2 billion people where Internet access is growing rapidly.

For more details visit https://cis-india.org/internet-governance/news/voice-of-america-march-24-2015-anjana-pascricha-indias-online-freedom-advocates-hail-court-ruling-on-free-speech

India's landmark online speech ruling is step toward greater press freedom

praskrishna — 2015-03-29T00:55:35Z

In an historic decision, India's Supreme Court on Tuesday struck down part of a law used to silence criticism and free expression. While this marks a pivotal victory that has been welcomed in many quarters, many challenges remain for press freedom in the country.

The blog post by Sumit Galhotra was published by CPJ (Committee to Protect Journalists) on March 28, 2015. Pranesh Prakash is quoted.

Section 66A of the Information Technology Act--the vaguely worded provision struck down by the court--criminalized online speech deemed "grossly offensive" or "menacing," along with information for the purpose of causing "annoyance" or "inconvenience." Individuals convicted under the provision could face up to three years in prison. This law, along with others that remain on the books, has allowed India to become a paradise for the offended.

The law was challenged by a public interest litigation mounted by Shreya Singhal, in 2012. Singhal, who had just returned to Delhi from her studies in the U.K., was infuriated at how the law was being used to stifle debate and criticism in her home country, according to reports.

The September 2012 arrest of cartoonist Aseem Trivedi, on a range of charges including one under Section 66A, over his cartoons on politics and corruption, caught Singhal's attention. A few weeks later, she learned of the arrest of 21-year-old Shaheen Dhada, who questioned on Facebook the shutdown of Mumbai following the death of a politician, Singhal said. Dhada's friend, Renu Srinivasan, who had merely "liked" the comment, was arrested under the law. According to news reports, both were charged. These cases sparked a national debate on the space for free expression in the world's largest democracy, and led Singhal to challenge the law, she told reporters.

"It's a big victory," Singhal, who is currently studying law in Delhi, told the media following Tuesday's decision. "The Internet is so far-reaching and so many people use it now, it's very important for us to protect this right."

India is expected to overtake the U.S. as the second largest population of Internet users in the world, behind only China, according to the Internet and Mobile Association of India, a nonprofit group representing the Web and mobile industry. As Internet usage accelerates in India, thanks in large part to the widespread use of mobile devices, there has been an ongoing debate on how best to policeit in a country that has to contend with frequent episodes of violence, civil unrest, and terrorist attacks.


Karuna Nundy, an advocate at the Supreme Court of India who helped the legal challenge, says the country has several laws that are a threat to press freedom. (Geoffrey King)

Lawrence Liang, a lawyer and researcher at the Bangalore-based Alternative Law Forum, an Indian legal research organization, shared in Singhal's welcoming of the decision. "It is important to note that this is the first judgment in decades in which the Supreme Court has struck down a legal provision for violating freedom of speech, and in doing so, it simultaneously builds upon a rich body of free speech cases in India and paves the way for a jurisprudence of free speech in the 21st century, the era of the Internet and social media," he told CPJ.

Pranesh Prakash, policy director at Bangalore-based Centre for Internet and Society, an organization that focuses on issues of digital pluralism, called the judgment "a moral victory." He said the decision "furthers free speech jurisprudence in India, but also in all those other countries where an Indian precedent would be important," including many countries in Asia, and places such as South Africa.

As part of the judgment, the court narrowed its reading of Section 79 of the IT Act, under which private parties could submit notice-and-takedown orders directly to Internet intermediaries. The court held that intermediary liability can be pursued only through a court order or other government order, reports said.

Liang told CPJ the judgment falls short in some areas. The Supreme Court's 123-page judgment kept in place Section 69A of the IT Act and Information Technology Rules 2009 that allows the government to block websites if the content in question has the potential to create communal discord, social disorder, or impact India's relations with other countries, according to news reports.

"I would say that if there is missed opportunity in the judgment, it is the clarification of the process of blocking websites. If Section 66A was found to be arbitrary in that its scope covered protected and unprotected speech, then the procedure for blocking websites as laid out in Section 69A is also beset with similar problems," Liang said.

According to Chinmayi Arun, research director at the Centre for Communications Governance at the National Law University in Delhi, the 2009 rules require blocking requests and implementation to be kept confidential. "This means that speakers will have no way of finding out that the government has ordered intermediaries to block their content. Speakers will therefore not be able to question unconstitutional blocking orders before the judiciary--this is a clear interference with their constitutional rights," she told CPJ via email, referring to online users who could fall foul of the law.

Academic in me: As a matter of legal & constitutional analysis, the SC judgment is at its best on #66A, but weaker on 69A & weakest on 79.
-- Pranesh Prakash (@pranesh_prakash) March 24, 2015

For some journalists, the decision highlights how virtually no national party in India, including the ruling Bharatiya Janata Party (BJP), is a champion of these rights. In a piece for independent news website Scroll, journalist Shivam Vij criticizes the current Narendra Modi-led government for missing an opportunity by not acting decisively to address the problematic law. "It has become routine for India's politicians to avoid taking tough political decisions if they can be left to the courts," he said. "When in power, the BJP is as happy as the Congress to have at its disposal laws that can muzzle voices of dissent."

Trivedi told CPJ he agreed that the previous and current government did little to address abuses of the law. Trivedi, who up until the court decision, faced charges under Section 66A, and had joined Singhal as a petitioner in the case, added: "This decision marks a strong first step." The cartoonist's lawyer, Vijay Hiremath, told CPJ that the Section 66A charge has now been removed, but Trivedi still faces charges under the National Emblem Act.

While the striking down of Section 66A is a step in the right direction, many challenges remain for press freedom in India. Karuna Nundy, an advocate at the Supreme Court of India, who was at the forefront of the legal challenge, told CPJ numerous colonial-era laws, particularly in India's penal code, continue to pose threats to free speech and press freedom in India. CPJ has long documented cases of Indian journalists being threatened with sedition, defamation, and laws that criminalize "outraging religious sentiment."

Actually, next step(s): a review of the constitutionality of sedition, challenge criminal defamation, constitutionalise civil defamation.
-- Gautam Bhatia (@gautambhatia88) March 24, 2015

But Nundy expressed optimism for the challenges ahead for press freedom in India and elsewhere. She said the judgment shows, "If you do the work, you take the trouble, you make the challenge, you can achieve the kinds of values that you stand for. That is the work that is the duty of all us as national citizens and citizens of the world."

[Geoffrey King, CPJ Internet Advocacy Coordinator, contributed to this report from Manila]

For more details visit https://cis-india.org/internet-governance/news/cpj-march-28-2015-sumit-galhotra-indias-landmark-online-speech-ruling-is-step-toward-greater-press-freedom

India's Internet Privacy Woes

praskrishna — 2013-09-05T11:09:30Z

“For the sake of national security and to protect the privacy of its citizens, India should develop its own social media platforms,” says Dr Kamlesh Bajaj, CEO of Data Security Council of India (DSCI), a Nasscom-promoted ‘self-regulatory’ organisation on data protection and privacy in India, in a blog post dated August 13.

This article by Rohin Dharmakumar was published in Forbes India on August 26, 2013. Pranesh Prakash is quoted.

Citing a litany of woes, including American control over internet infrastructure, Bajaj makes the case for India to take a leaf out of China’s playbook (“even though its reasons were different”) and encourages the creation of “Indian” social media sites and search engines.

“Unfortunately, Dr Bajaj provides a wrong solution to a correct diagnosis,” says Pranesh Prakash, a policy director with the Centre for Internet and Society. “First, I can’t think of any governmental intervention—short of a ban on existing foreign services—that can make a new Indian service successful. Second, India’s privacy laws are worse than those in the US. Nothing will stop the US and Indian governments from coming after this company too.”

The problem arises because services like Facebook and Google store all your data unencrypted on their servers, making it easy for them, or governments and hackers, to monitor everything you do. The correct solution, says Prakash, would be to encourage the creation and use of de-centralised and end-to-end encrypted services that do not store all your data in one place.

For more details visit https://cis-india.org/news/forbesindia-august-26-2013-india-internet-privacy-woes

India's Internet Growth & Challenges

praskrishna — 2013-05-22T05:37:28Z

For more details visit https://cis-india.org/internet-governance/blog/indias-internet-growth-challenges

India's cyber cafes going porn-free

praskrishna — 2011-05-06T04:53:41Z

Pornography fans in India who like to indulge in the sexual eye candy at public cyber cafes may be in for a forced intervention as a new government ruling bans porn websites, requires cafe owners to keep a one-year log of all sites accessed by customers and forces customers to produce an ID card prior to use. This news was published on msnbc.com on April 28, 2011.

These new guidelines, which were released April 11, are getting a lot of pushback from privacy advocates in India, who cite the legality of watching porn in the country.

"Watching pornography is not illegal in India," Pawan Duggal, a lawyer who specializes in IT laws, told The Times of India."It's absurd to ask cyber cafe owners to tell their customers not to access pornographic material even as law allows individuals to access adult websites unless it's not child pornography. The new rules require a second look."

The "Information Technology (Guidelines for Cyber Cafe) Rules, 2011" imposed by the Ministry of Communications and Information Technology (aka the Department of Information Technology) have several requirements, all of which have met with more questions and concerns over the impact on everyone who accesses the Internet through the cafes, not just porn watchers. Here are the notable issues that show some Big Brother tendencies:

Cyber cafe owners must register with an unnamed agency for licenses for their establishments.

Cyber cafe users must produce a legally valid form of identification prior to using a computer, such as school ID, passport, driver's license and voter ID card. Children without ID must be accompanied by an adult with acceptable identification documents.
If the cyber cafe user isn't able to produce legit ID, then they may be photographed through a webcam.
Refusal to produce identification or to be photographed will result in the user not being allowed to use a computer at the cyber cafe.
"All the computers in the cyber café shall be equipped with the safety/filtering software so as to the avoid access to the websites relating to pornography, obscenity, terrorism and other objectionable materials."
Webcam photos will be part of the log cyber cafe owners need to maintain for a minimum of one year, either in print or online. Cyber cafe owners will also be required to submit monthly reports to the Ministry's overseeing agency that give details about computer use, including: "History of websites accessed, logs of proxy server installed at the the cafe, mail server logs, logs of network devices such as routers, switches, systems etc. installed at the cyber cafe and logs of firewall or Intrusion Prevention/Detection systems, if installed."
Finally, the guidelines bring down barriers between users by disallowing partitions of more than 4.5 feet at computer stations. Children are not to be allowed to use the computers unsupervised.

Duggal told The Times that he thought these rules may very well force cafe owners out of business.

Non-profit watchdog Privacy India has these guidelines square in its sights, protesting: the redundancy of the licensing process (cyber cafes are already subject to registration and licensing), how the guidelines may make cafe owners vulnerable to liability for the actions of their users and blocking internet access to children from "poorer classes, (since they are most likely to routinely access internet through cyber cafes) and denies them the opportunity of developing their computer skills which are crucial for the growth of the “knowledge economy” that India is trying to head towards."

Naturally, privacy is the issue that most concerns the group, which would insist on a purge of the logs after "the minimum retention period." Here's what they have to say about kids and their right to privacy:

In addition, we believe that children are more susceptible to exploitation and consequently have a heightened privacy expectation which must be honoured. We recommend that the current sub-rule be deleted and replaced with a clause which specifically exempts children from proving their identity and forbids taking photographs of them under any circumstance.

And why adults need it, too:

There are many uses of the internet for which a user may legitimately require privacy: For instance, patients, including HIV patients and those with mental illness, may wish to obtain information about their condition. Similarly sexuality minorities may wish to seek support or reach out to a larger community. Enforcing the architecture stipulated in this rule would discourage their access to such vital information. In addition, this architecturewould make it easier for cyber crimes such as identity theft to take place since it would be easier to observe the login details of other users at the cyber café.

The group is also not a fan of all the info that cyber cafes will be sitting on. "We further believe that access to the history of websites and mail server logs is a serious invasion of a person’s privacy, and should be omitted from the back up logs."

As if all those new guidelines weren't already cramping the carefree surfing experience, cyber cafes will also be subject to periodic visits by police inspectors who will have the power to demand all logs and check for compliance.

Read the original here

For more details visit https://cis-india.org/news/cyber-cafes-porn-free

India's centralised snooping system facing big delays

praskrishna — 2013-07-15T06:35:05Z

Central Monitoring System lacks algorithms, database and data.

This blog post by Phil Muncaster was published in "The Register, UK" on July 9, 2013. The Centre for Internet & Society is mentioned.

After recent revelations about governments snooping on their own citizens, it's nice to know that not every such effort is going smoothly, as India’s much criticised NSA-style Centralised Monitoring System (CMS) is facing big delays after it emerged that the project is still missing the vital software which will allow analysts to search comms data.

The nation's Department of Telecommunications has now told the Center for Development of Telematics (C-DoT), which is installing the system, to speed things up, according to official documents seen by the Wall Street Journal.

The Rs.4 billion (£47.8m) CMS was originally conceived as a way of allowing the authorities to lawfully intercept voice calls and texts, emails, social media and the geographical location of individuals.

However, the Intelligence Bureau, which will be manning the system, has delayed its introduction for several reasons.

Firstly, mobile operators in only seven of the sub-continent’s 22 service areas have been connected to the CMS, leaving holes in its reach.

There’s also a major issue in that the system currently lacks the search algorithms needed to identify specific documents, meaning that as it stands operatives would have to search every email in the CMS to find the one they’re looking for.

The datacentre where intercepted data is to be stored is also apparently not yet ready, while the country’s Central Bureau of Investigation has yet to be given access to the system, causing further delays.

At a time when mass government monitoring of communications networks is a hot topic around the world thanks to Edward Snowden’s NSA revelations, rights groups have roundly slammed India’s CMS plans.

Human Rights Watch branded the scheme “chilling” in a strongly worded response, while India’s Centre for Internet and Society warned that the country currently doesn’t have privacy laws which could protect individuals from potential abuse of the system.

A Stop ICMS campaign has also been launched online in an attempt to mobilise opposition to the plans.

For more details visit https://cis-india.org/news/theregister-uk-phil-muncaster-july-9-2013-indias-centralised-snooping-system-facing-big-delays

India's biometric database crosses billion-member mark

praskrishna — 2016-04-07T02:54:08Z

India's biometric database notched up one billion members on Monday, as the government sought to allay concerns about privacy breaches in the world's biggest such scheme.

The news by AFP was published by Daily Mail, UK on April 4, 2016. Sunil Abraham gave inputs.

The database was set up seven years ago to streamline benefit payments to millions of poor people as well as to cut fraud and wastage. Under the scheme, called Aadhaar, almost 93 percent of India's adult population have now registered their fingerprints and iris signatures and been given a biometric ID, according to the government.

IT minister Ravi Shankar Prasad hailed it as "an instrument of good governance" at a ceremony in New Delhi marking the crossing of the one-billion member mark.

Prasad said the initiative, inherited from the previous left-leaning Congress government, had enabled millions to receive cash benefits directly rather than dealing with middlemen.

He said the government had saved 150 billion rupees ($2.27 billion) on its gas subsidy scheme alone -- by paying cash directly to biometric card holders instead of providing cylinders at subsidised rates.

He also said all adequate safeguards were in place to ensure the personal details of card holders could not be stolen or misused by authorities given access to the database.

"We have taken all measures to ensure privacy. The data will not be shared with anyone except in cases of national security," Prasad said.

His comments come after parliament passed legislation last month giving government agencies access to the database in the interests of national security.

It was passed using a loophole to circumvent the opposition in parliament, where the ruling Bharatiya Janata Party (BJP) lacks a majority in the upper house.

The way it was passed, as well as the legislation itself, raised concerns about government agencies accessing private citizens' details.

Internet experts have also raised fears about the safety of such a massive database, including hacking and theft of details.

"It was as if Indian lawmakers wrote an open letter to criminals and foreign states saying, 'we are going to collect data to non-consensually identify all Indians and we are going to store it in a central repository. Come and get it!'," Sunil Abraham, executive director of the Centre for Internet and Society, wrote in India's Frontline news magazine.

For more details visit https://cis-india.org/internet-governance/news/daily-mail-april-4-2016-afp-india-biometric-database-crosses-billion-member-mark

India's billion-member biometric database raises privacy fears

praskrishna — 2016-03-17T15:25:45Z

India's parliament is set to pass legislation that gives federal agencies access to the world's biggest biometric database in the interests of national security, raising fears the privacy of a billion people could be compromised.

The article by Sanjeev Miglani and Manoj Kumar was published by Reuters on March 16, 2016. Sunil Abraham was quoted.

The move comes as the ruling Bharatiya Janata Party (BJP) cracks down on student protests and pushes a Hindu nationalist agenda in state elections, steps that some say erode India's traditions of tolerance and free speech.

It could also usher in surveillance far more intrusive than the U.S. telephone and Internet spying revealed by former National Security Agency (NSA) contractor Edward Snowden in 2013, some privacy advocates said.

The Aadhaar database scheme, started seven years ago, was set up to streamline payment of benefits and cut down on massive wastage and fraud, and already nearly a billion people have registered their finger prints and iris signatures.

Now the BJP, which inherited the scheme, wants to pass new provisions including those on national security, using a loophole to bypass the opposition in parliament.

"It has been showcased as a tool exclusively meant for disbursement of subsidies and we do not realize that it can also be used for mass surveillance," said Tathagata Satpathy, a lawmaker from the eastern state of Odisha.

"Can the government ... assure us that this Aadhaar card and the data that will be collected under it – biometric, biological, iris scan, finger print, everything put together – will not be misused as has been done by the NSA in the U.S.?"

Finance Minister Arun Jaitley has defended the legislation in parliament, saying Aadhaar saved the government an estimated 150 billion rupees ($2.2 billion) in the 2014-15 financial year alone.

A finance ministry spokesman added that the government had taken steps to ensure citizens' privacy would be respected and the authority to access data was exercised only in rare cases.

According to another government official, the new law is in fact more limited in scope than the decades-old Indian Telegraph Act, which permits national security agencies and tax authorities to intercept telephone conversations of individuals in the interest of public safety.

"POLICE STATE"

Those assurances have not satisfied political opponents and people from religious minorities, including India's sizeable Muslim community, who say the database could be used as a tool to silence them.

"We are midwifing a police state," said Asaduddin Owaisi, an opposition MP.

Raman Jit Singh Chima, global policy director at Access, an international digital rights organization, said the proposed Indian law lacked the transparency and oversight safeguards found in Europe or the United States, which last year reformed its bulk telephone surveillance program.

He pointed to the U.S. Foreign Intelligence Surveillance Court, which must approve many surveillance requests made by intelligence agencies, and European data protection authorities as oversight mechanisms not present in the Indian proposal.

The Indian government brought the Aadhaar legislation to the upper house of parliament on Wednesday in a bid to secure passage before lawmakers go into recess.

To get around its lack of a majority there, the BJP is presenting it as a financial bill, which the upper chamber cannot reject. It can return it to the lower house, where the ruling party has a majority.

In its assessment of the measure, New Delhi-based PRS Legislative Research said law enforcement agencies could use someone's Aadhaar number as a link across various datasets such as telephone and air travel records.

That would allow them to recognize patterns of behavior and detect potential illegal activities.

But it could also lead to harassment of individuals who are identified incorrectly as potential security threats, PRS said.

Sunil Abraham, executive director of the Bengaluru-based Centre for Internet and Society, said Aadhaar created a central repository of biometrics for almost every citizen of the world's most populous democracy that could be compromised.

"Maintaining a central database is akin to getting the keys of every house in Delhi and storing them at a central police station," he said.

"It is very easy to capture iris data of any individual with the use of next generation cameras. Imagine a situation where the police is secretly capturing the iris data of protesters and then identifying them through their biometric records.

For more details visit https://cis-india.org/internet-governance/news/reuters-march-16-2016-sanjeev-miglani-and-manoj-kumar-indias-billion-member-biometric-database-raises-privacy-fears

India's Aadhaar with biometric details of its billion citizens is making experts uncomfortable

praskrishna — 2017-02-14T14:57:33Z

"Indians in general have yet to understand the meaning and essence of privacy," says Member of Parliament, Tathagata Satpathy.

The blog post was published by Mashable India on February 14, 2017. Sunil Abraham was quoted.

But on Feb. 3, privacy was the hot topic of debate among many in India, thanks to a tweet that showed random people being identified on the street via Aadhaar, India's ubiquitous database that has biometric information of more than a billion Indians.

That's how India Stack, the infrastructure built by the Unique Identification Authority of India (UIDAI), welcomed OnGrid, a privately owned company that is going to tap on the world's largest biometrics system, conjuring images of Minority Report style surveillance.

But how did India get here?

Aadhaar's foundation

Not long ago, there were more people in India without a birth or school certificate than those with one (PDF). They had no means to prove their identity. This also contributed to what is more popularly known as “leakage” in the government subsidy fundings. The funds weren’t reaching the right people, in some instances, and much of it was being siphoned off by middlemen.

Nearly a decade ago, the government began scrambling for ways to tackle these issues. Could technology come to the rescue? The government dialled techies, people like Nandan Nilekani, a founder of India's mammoth IT firm Infosys, for help.

In 2008, they formulated Aadhaar, an audacious project "destined" to change the prospects of Indians. It was similar to Social Security number that US residents are assigned, but its implications were further reaching.

At the time, the government said it will primarily use this optional program to help the poor who are in need of services such as grocery and other household items at subsidized rates.

Eight years later, Aadhar, which stores identity information such as a photo, name, address, fingerprints and iris scans of its citizens and also assigns them with a unique 12-digit number, has become the world's largest biometrics based identity system.

According to the Indian government, over 1.11 billion people of the country's roughly 1.3 billion citizens have enrolled themselves in the biometrics system. About 99 percent of all adults in India have an Aadhaar card, it said last month.

Today, the significance of Aadhaar, which on paper remains an optional program, is undeniable in the country. The government says Aadhaar has already saved it as much as $5 billion.

But that's not it.

There's a bit of Aadhaar in everyone's life

Aadhaar (Hindi for foundation) has long moved beyond helping the poor. The UPI (Unified Payment Interface), another project by the Indian government that uses Aadhaar, is helping the country's much unbanked population to avail financial services for the first time. Nilekani calls it a "WhatsApp moment" in the Indian financial sector.

In December last year, Prime Minister Narendra Modi launched BHIM, a UPI-based payments app that aims to get millions of Indians to do online money transactions for the first time, irrespective of which bank they had their accounts with. With BHIM, transferring money is as simple as sending a text message. People can also scan QR codes and pay merchants for their purchases.

"This app is destined to replace all cash transactions," Modi said at the launch event. "BHIM app will revolutionize India and force people worldwide to take notice," he added.

The next phase, called Aadhaar Enabled Payments System will do away with smartphones. People will be able to make payments by swiping their finger on special terminals equipped with fingerprint sensors rather than swiping cards.

Last year, the government said people could store their driver license documents in an app called DigiLocker, should they want to be relieved from the burden of carrying paper documents. DigiLocker is a digital cloud service that any citizen in India can avail using their Aadhaar information.

The government also plans to hand out "health cards" to senior citizens, mapped to their Aadhaar number, which will store their medical records, which doctors will be able to access.

“Aadhaar is an instrument for good governance. Aadhaar is the mode to reach the poor without the middlemen,” Ravi Shankar Prasad, India’s IT minister said in a press conference last year.

But despite all the ways Aadhaar is making meaningful impact in millions of lives, some people are very skeptical about it. And for them, the scale at which Aadhaar operates now is only making things worse.

A security nightmare

There have been multiple reports suggesting bogus and fake entries in Aadhaar database. Instances of animals such as dogs and cows having their own Aadhaar identification numbers have been widely reported. In one instance, even Hindu god Hanuman was found to have an Aadhaar card.

The problem, it appears, is Aadhaar database has never been verified or audited, according to multiple security experts, privacy advocates, lawyers, and politicians who spoke to Mashable India this month.

“There are two fundamental flaws in Aadhaar: it is poorly designed, and it is being poorly verified,” Member of Parliament and privacy advocate, Rajeev Chandrasekhar told Mashable India. “Aadhaar isn’t foolproof, and this has resulted in fake data get into the system. This in turn opens new gateways for money launderers,” he added.

Another issue with Aadhaar is, Chandrasekhar explains, there is no firm legislation to safeguard the privacy and rights of the billion people who have enrolled into the system. There’s little a person whose Aadhaar data has been compromised could do. “Citizens who have voluntarily given their data to Aadhaar authority, as of result of this, are at risk,” he added.

Rahul Narayan, a lawyer who is counselling several petitioners challenging the Aadhaar project, echoed similar sentiments. “There’s no concrete regulation in place,” he told Mashable India. “The scope for abuses in Aadhaar is very vast,” he added.

But regulation — or its lack thereof — is only one of the many challenges, experts say. Sunil Abraham, the executive director of Bangalore-based research organisation the Centre for Internet and Society (CIS), says the security concerns around Aadhaar are alarming.

“Aadhaar is remote, covert, and non-consensual,” he told Mashable India, adding the existence of a central database of any kind, but especially in the context of the Aadhaar, and at the scale it is working is appalling.

Abraham said fingerprint and iris data of a person can be stolen with little effort — a “gummy bear” which sells for a few cents, can store one’s fingerprint, while a high resolution camera can capture one’s iris data.

Aadhaar doesn’t use basic principles of cryptography, and much of its security is not known.

Aadhaar is also irrevocable, which strands a person, whose data has been compromised, with no choice but to get on with life, Abraham said, adding that these vulnerabilities could have been averted had the government chosen smart cards instead of biometrics.

On top of this, he added, that Aadhaar doesn’t use basic principles of cryptography, and much of the security defences it uses are not known.

Had the government open sourced Aadhaar code to the public (a common practice in the tech community), security analysts could have evaluated the strengths of Aadhaar. But this too isn’t happening.

At CIS, Sunil and his colleagues have written over half-a-dozen open letters to the UIDAI (the authority that governs Aadhaar project) raising questions and pointing holes in the system. But much of their feedback has not returned any response, Abraham told Mashable India.

India Stack: A goldmine for everyone

As part of its push to make Aadhaar more useful, the UIDAI created what is called India Stack, an infrastructure through which government bodies as well as private entities could leverage Aadhaar's database of individual identities. This is what sparked the initial debate about privacy when India Stack tweeted the controversial photo.

Speaking to Mashable India, Piyush Peshwani, a founder of OnGrid, however dismissed the concerns, clarifying that the picture was for representation purposes only. He said OnGrid is building a trust platform, through which it aims to make it easier for recruiters to do background check on their potential employees after getting their consent.

India Stack and OnGrid have since taken down the picture from their Twitter accounts. "OnGrid, much like other 200 companies working with UIDAI, can only retrieve information of users after receiving their prior consent," he said.

The lack of information from the UIDAI and India Stack is becoming a real challenge for citizens, many feel. There also appears to be a conflict of interest between the privately held companies and those who helped design the framework of Aadhaar.

As Rohin Dharmakumar, a Bangalore-based journalist pointed out, Peshwani was part of the core team member of Aadhaar project. A lawyer, who requested to be not identified, told Mashable India that there is a chance that these people could be familiar with Aadhaar’s roadmap and use the information for business advantage, to say the least.

Most people Mashable India spoke to are questioning the way these third-party companies are handling Aadhaar data. There is no regulation in place to prevent these companies from storing people’s data or even creating a parallel database of their own — a view echoed by Abraham, Narayan, and Chandrasekhar.

Not mandatory only on paper

But for many, the biggest concern with Aadhaar remains just how aggressively it is being implemented into various systems. For instance, in the past one month alone, students in most Indians states who want to apply for NEET, a national level medical entrance test, were told by the education board CBSE that they will have to provide their Aadhaar number.

A few months ago, Aadhaar was also made mandatory for students who wanted to appear in JEE, an all India common engineering entrance examination conducted for admission to various engineering colleges in the country.

The apex Supreme Court of India recently asked the central government to register the phone number of all mobile subscribers in India (there are about one billion of those in India) to their respective Aadhaar cards. Telecom carriers are already enabling new connections to get activated by verifying users with Aadhaar database.

A prominent journalist who focuses on privacy and laws in India questioned the motive. “When they kickstarted UIDAI, people were told that this an optional biometrics system. But since then the government has been rather tight-lipped on why it is aggressively pushing Aadhaar into so many areas,” he told Mashable India, requesting not to be identified.

"It is especially difficult to explain why privacy is necessary for a society to advance when taken in the context of Aadhaar."

“It is especially difficult to explain why privacy is necessary for a society to advance when taken in the context of Aadhaar. The Aadhaar card is being offered to people in need, especially the poor, by making them believe that services and subsidies provided by the government will be held back from them unless they register,” Satpathy told Mashable India.

The central government said last week Aadhaar number would be mandatory for availing food grains through the Public Distribution System under the National Food Security Act. In October last year, the government made Aadhaar mandatory for those who wanted to avail cooking gas at subsidized prices.

“No matter how many laws are made about not making Aadhaar mandatory, ultimately it depends on the last mile person who is offering any service to inform citizens about their rights,” Satpathy added.

“These last-mile service providers are companies who would benefit from collecting and bartering big data for profit. They would be least interested to inform citizens about their rights and about the not mandatory status of Aadhaar.

“As Aadhaar percolates more and is used by more government and private services, the citizen will start assuming it's a part of their life. This card is already being misunderstood as if it is essential like a passport,” he added.

“My worry is that this data will be used by government for mass surveillance, ethnic cleansing and other insidious purposes,” Satpathy said. “Once you have information about every citizen, the powerful will not refrain from misusing it and for retention of power. The use of big data for psycho-profiling is not unknown to the world anymore.”

Mashable India reached out to UIDAI on Feb. 8 for comment on the privacy and security concerns made in this report. At the time of publication, the authority hadn't responded to our queries.

For more details visit https://cis-india.org/internet-governance/news/mashable-india-february-14-2017-india-aadhaar-uidai-privacy-security-debate