Centre for Internet and Society

An Open Digital Global South: Risks and Rewards

praskrishna — 2017-04-12T14:25:39Z

Pranesh Prakash will be speaking at a conference to be organized by UC Davis Law School on May 25 and 26, 2017, in California, USA.

The event is open to the public. Please register here.

This conference explores the promises and risks of openness in scholarship in relationship to the Global South. Scholars increasingly are under pressure to make their work “open” through sharing their research as reusable open data and open source software, and making their publications open access. Scholarly “openness”—for example, open data, open access, open source—is intended to facilitate the free flow of information, to address barriers to access, and to foster global intellectual conversations. Do attempts at promoting openness in scholarship create new forms of exclusion or hierarchy? How are Southern scholars and publishers’ experiences with open access and open data taken into account within conversations on developing standards and models for open access and open data in the Global North? What are the unanticipated risks created through the implementation of models for open data or open access?

For more info click here

For more details visit https://cis-india.org/internet-governance/news/an-open-digital-global-south-risks-and-rewards

Mobile Accessibility Practices

praskrishna — 2017-04-11T14:50:48Z

For more details visit https://cis-india.org/accessibility/files/mobile-accessibility-practices.pdf

March 2017 Newsletter

praskrishna — 2017-05-20T12:47:11Z

Welcome to March 2017 newsletter of the Centre for Internet & Society (CIS).

Dear readers,

Previous issues of the newsletters can be accessed here.

Highlights
CIS submitted comments on the draft Rights of Persons with Disabilities Rules for the consideration of the Department of Empowerment of Persons with Disabilities, Government of India. Anubha Sinha in a blog post has identified the various kinds of IP in an app and explained the protections available under Indian IPR law. CIS-A2K is conducting a Wiki internship project for students of New Law College, Pune under the guidance of Prof.Dr.Mukund Sarda, Dean and Principal of New Law College. In an Op-ed published in the Hindu, Sunil Abraham has stated that though biometrics may be appropriate for targeted surveillance by the state, it is wholly inappropriate for everyday transactions between state and law abiding citizens. CIS has published a survey that draws upon a range of literature including news articles, academic articles, and presentations and seeks to disaggregate the potential benefits and harms of big data, organising them into several broad categories that reflect the existing scholarly literature. CIS submitted comments on the Information Technology (Security of Prepaid Payment Instruments) Rules, 2017. The comments were in response to the Information Technology (Security of Prepaid Payment Instruments) Rules 2017. The Ministry of Electronics and Information Technology issued a consultation paper which called for developing a framework for security of digital wallets operating in the country. Ritam Sengupta, Dr. Richard Heeks, Sumandro Chattapadhyay, and Dr. Christopher Foster have co-authored a paper that presents exploratory research into “data-intensive development” that seeks to inductively identify issues and conceptual frameworks of relevance to big data in developing countries.

CIS in the news:

The 12-digit conundrum (Richa Mishra; Hindu Businessline; March 13, 2017)
EVMs: How transparent is the Indian election process? (Smriti Sharma Vasudeva; The Statesman; March 14, 2017).
Nasscom chief saying full data protection isn’t possible should wake us from our digital slumber (First Post; March 16, 2017).
Privacy concerns multiply for Aadhaar, India’s national biometric identity registry (One World Identity; March 17, 2017).
No ID, no benefits: thousands could lose lifeline under India’s biometric scheme (Guardian; March 21, 2017).
Why We Should All Worry About The Mandatory Imposition Of Aadhaar (Rimin Dutt and Ivan Mehta; Huffington Post; March 24, 2017).
India’s biometric ID scans make sci-fi a reality (Amy Kazmin; Financial Times; March 27, 2017).
क्‍या आधार पर जल्दबाज़ी में है सरकार? (NDTV; March 27, 2017).
Get an Aadhaar card if you don't have one (Priya Nair and Sanjay Kumar Singh; Business Standard; March 27, 2017).
The Aadhaar of all things (Shriya Mohan; Hindu Businessline; March 31, 2017).

CIS members wrote the following articles

Digital native: Lie Me a River (Nishant Shah; Indian Express; March 19, 2017).
It’s the technology, stupid (Sunil Abraham; Hindu Businessline; March 31, 2017).
How Aadhaar compromises privacy? And how to fix it? (Sunil Abraham; Hindu; March 31, 2017).

-------------------------------------
Accessibility & Inclusion
-------------------------------------
India has an estimated 70 million persons with disabilities who don't have access to read printed materials due to some form of physical, sensory, cognitive or other disability. As part of our endeavour to make available accessible content for persons with disabilities, we are developing a text-to-speech software in 15 languages with support from the Hans Foundation. The progress made so far in the project can be accessed here.

Submission

Comments on the draft Rights of Persons with Disabilities Rules (Nirmita Narasimhan; March 29, 2017).

-----------------------------------

Access to Knowledge
-----------------------------------
Our Access to Knowledge programme currently consists of two projects. The Pervasive Technologies project, conducted under a grant from the International Development Research Centre (IDRC), aims to conduct research on the complex interplay between low-cost pervasive technologies and intellectual property, in order to encourage the proliferation and development of such technologies as a social good. The Wikipedia project, which is under a grant from the Wikimedia Foundation, is for the growth of Indic language communities and projects by designing community collaborations and partnerships that recruit and cultivate new editors and explore innovative approaches to building projects.

►Pervasive Technologies

Blog Entry

Intellectual Property Rights and Mobile Apps (Anubha Sinha; March 6, 2017).

►Wikipedia

As part of the project grant from the Wikimedia Foundation we have reached out to more than 3500 people across India by organizing more than 100 outreach events and catalysed the release of encyclopaedic and other content under the Creative Commons (CC-BY-3.0) license in four Indian languages (21 books in Telugu, 13 in Odia, 4 volumes of encyclopaedia in Konkani and 6 volumes in Kannada, and 1 book on Odia language history in English).

Blog Entries

"Marathi Bhasha Gaurav Din" celebrations in Maharashtra (Manasa Rao; March 7, 2017).
Women’s History Month: Sambad collaborates with Odia Wikipedia for a Two Day Edit-a-thon (Sailesh Patnaik; March 16, 2017).
Wikisource:Internship Project at New Law College, Pune (Subodh Kulkarni; March 28, 2017).

Events Organized

Women's Day Edit-a-thon (Co-organized by Sterlite Tech Foundation, Jnana Prabhodhini, and CIS-A2K; Pune; March 10, 2017). Subodh Kulkarni was one of the trainers.
Marathi Wikipedia Edit-a-thon on Environment Management (Organized by CSIBER College and CIS-A2K; Kolhapur; March 30, 2017). Subodh Kulkarni was a trainer.

►Openness

Our work in the Openness programme focuses on open data, especially open government data, open access, open education resources, open knowledge in Indic languages, open media, and open technologies and standards - hardware and software. We approach openness as a cross-cutting principle for knowledge production and distribution, and not as a thing-in-itself.

Participation in Events

National Consultation on OER for Higher Education (Organized by Commonwealth Educational Media Centre for Asia; New Delhi; March 3, 2017). Anubha Sinha attended the event.
Open Development Book - Authors' Workshop (Organized by International Development Research Centre and Centre for Innovation in Learning and Teaching; University of Cape Town, South Africa; March 11 - 12, 2017). The workshop gathered the contributers to an upcoming book by IDRC on open development. Elonnai Hickok, Gus Hosein from Privacy International and Sumandro Chattapadhyay are writing a chapter for this book.
Indo - French Perspectives on Digital Studies (Organized by Digital Studies Group; Jawaharlal Nehru University, New Delhi; March 15, 2017). Anubha Sinha was a speaker.

Blog Entries

-----------------------------------

Internet Governance
-----------------------------------

As part of its research on privacy and free speech, CIS is engaged with two different projects. The first one (under a grant from Privacy International and IDRC) is on surveillance and freedom of expression (SAFEGUARDS). The second one (under a grant from MacArthur Foundation) is on restrictions that the Indian government has placed on freedom of expression online.

►Privacy

Submission

Comments on Information Technology (Security of Prepaid Payment Instruments) Rules, 2017 (Udbhav Tiwari, Pranesh Prakash, Abhay Rana, Amber Sinha and Sunil Abraham; March 23, 2017).

Participation in Events

WISER Lecture : Sumandro Chattapadhyay on Deregulation by Code (Organized by the University of the Witwatersrand; Johannesburg; March 8, 2017). Sumandro Chattapadhyay gave a talk.
Conference on Safety Against Online Child Sexual Abuse (Organized by CID, Telangana and the Department for Women Development and Child Welfare, Telangana; March 16 - 17, 2017). Japreet Grewal was a speaker.
State of Digital Rights in India (Organized by Centre for Communication Governance at National Law University, Delhi and the Internet Freedom Foundation, in association with Access Now; India International Centre, New Delhi; March 24, 2017). Japreet Grewal and Sumandro Chattapadhyay took part in panel discussions.
Hangout on Technology and Jobs (Organized by Google; March 24, 2017). Vanya Rakesh was a speaker.

Blog Entry

Analysis of Key Provisions of the Aadhaar Act Regulations (Amber Sinha and edited by Elonnai Hickok; March 31, 2017).

►Cyber Security

Upcoming Event

Digital Forensics and Cyber Investigations (CIS; New Delhi; April 7, 2017). IPS officer Dr. Madan M. Oberoi will give a talk.

►Big Data

Blog Entry

Benefits, Harms, Rights and Regulation: A Survey of Literature on Big Data (Amber Sinha, Vanya Rakesh, Vidushi Marda and Geethanjali Jujjavarapu; edited by Sunil Abraham, Elonnai Hickok and Leilah Elmokadem; March 23, 2017).

Participation in Event

The Fintech Disruption - Innovation, Regulation, and Transformation (Organized by Carnegie India; March 28, 2017). Sumandro Chattapadhyay attended the event.

►Freedom of Expression

Event Organized

Essentials of building internet tools for inclusion (Valencia, Spain; March 6, 2017). A talk jointly proposed by Chinmayi SK and Rohini Lakshané was selected for the Internet Freedom Festival.

Participation in Events

From Virtual to Reliable: Exploring Freedom and Facts in the World of WWW (World Wide Web) (Organized by Embassy of the Kingdom of Netherlands and Adaan Foundation; March 21, 2017). Saikat Datta and Amber Sinha were panelists.
Internet Freedom Festival 2017 (Organized by IFF; Valencia, Spain; March 6 - 10, 2017). Vidushi Marda participated in the event. Vidushi also attended these sessions: Data Protection Law and its Different Manifestations; Using the Ranking Digital Rights Corporate Accountability Index for Advocacy & Research; The identity we can't change: a new wave of biometric policies around the world and Enabling free speech online by legal defence: the need for skilled lawyers to secure the free flow of information online: Vidushi channeled a discussion about Shreya Singhal v. Union of India as an important case study in understanding how legal defence has been used to secure rights online.

-----------------------------------
Telecom
-----------------------------------
CIS is involved in promoting access and accessibility to telecommunications services and resources, and has provided inputs to ongoing policy discussions and consultation papers published by TRAI. It has prepared reports on unlicensed spectrum and accessibility of mobile phones for persons with disabilities and also works with the USOF to include funding projects for persons with disabilities in its mandate:

Newspaper Column

Organisational Hurdles in Telecom (Shyam Ponappa; Business Standard; March 1, 2017 and Organizing India Blogspot; March 2, 2017)

-----------------------------------
Researchers at Work
-----------------------------------
The Researchers at Work (RAW) programme is an interdisciplinary research initiative driven by an emerging need to understand the reconfigurations of social practices and structures through the Internet and digital media technologies, and vice versa. It aims to produce local and contextual accounts of interactions, negotiations, and resolutions between the Internet, and socio-material and geo-political processes:

Research Paper

Exploring Big Data for Development: An Electricity Sector Case Study from India (Ritam Sengupta, Dr. Richard Heeks, Sumandro Chattapadhyay, and Dr. Christopher Foster; Global Development Institute, University of Manchester; March 29, 2017).

Blog Entry

Evaluating Safety Buttons on Mobile Devices: Preview (Rohini Lakshané and Chinmayi S.K.; March 27, 2017).

-----------------------------------

About CIS
-----------------------------------
The Centre for Internet and Society (CIS) is a non-profit organisation that undertakes interdisciplinary research on internet and digital technologies from policy and academic perspectives. The areas of focus include digital accessibility for persons with disabilities, access to knowledge, intellectual property rights, openness (including open data, free and open source software, open standards, open access, open educational resources, and open video), internet governance, telecommunication reform, digital privacy, and cyber-security. The academic research at CIS seeks to understand the reconfigurations of social and cultural processes and structures as mediated through the internet and digital media technologies.

► Follow us elsewhere

Twitter: http://twitter.com/cis_india
Twitter - Access to Knowledge: https://twitter.com/CISA2K
Twitter - Information Policy: https://twitter.com/CIS_InfoPolicy
Facebook - Access to Knowledge: https://www.facebook.com/cisa2k
E-Mail - Access to Knowledge: a2k@cis-india.org
E-Mail - Researchers at Work: raw@cis-india.org
List - Researchers at Work: https://lists.ghserv.net/mailman/listinfo/researchers

► Support Us

Please help us defend consumer and citizen rights on the Internet! Write a cheque in favour of 'The Centre for Internet and Society' and mail it to us at No. 194, 2nd 'C' Cross, Domlur, 2nd Stage, Bengaluru - 5600 71.

► Request for Collaboration

We invite researchers, practitioners, artists, and theoreticians, both organisationally and as individuals, to engage with us on topics related internet and society, and improve our collective understanding of this field. To discuss such possibilities, please write to Sunil Abraham, Executive Director, at sunil@cis-india.org (for policy research), or Sumandro Chattapadhyay, Research Director, at sumandro@cis-india.org (for academic research), with an indication of the form and the content of the collaboration you might be interested in. To discuss collaborations on Indic language Wikipedia projects, write to Tanveer Hasan, Programme Officer, at tanveer@cis-india.org.

CIS is grateful to its primary donor the Kusuma Trust founded by Anurag Dikshit and Soma Pujari, philanthropists of Indian origin for its core funding and support for most of its projects. CIS is also grateful to its other donors, Wikimedia Foundation, Ford Foundation, Privacy International, UK, Hans Foundation, MacArthur Foundation, and IDRC for funding its various projects.

For more details visit https://cis-india.org/about/newsletters/march-2017-newsletter

Indo - French Perspectives on Digital Studies

praskrishna — 2017-03-29T05:17:33Z

Anubha Sinha was a speaker at the Indo-French workshop on Open Access at the Jawaharlal Nehru University in New Delhi on March 15, 2017. The event was organized by the Digital Studies Group.

Anubha Sinha broadly spoke on the state of open access in India, the features of the DBT-DST policy, ICAR policy, how to shape the future of open access movement in India and what are the obstacles in the same.

See the workshop schedule here

For more details visit https://cis-india.org/openness/news/indo-french-perspectives-on-digital-studies

Talk by Anubha Sinha on Open Access in JNU

praskrishna — 2017-03-29T05:12:05Z

For more details visit https://cis-india.org/openness/files/talk-by-anubha-sinha-on-open-access-in-jnu

TRAI Consultation on Differential Pricing for Data Services - Post-Open House Discussion Submission

praskrishna — 2017-03-29T04:35:57Z

For more details visit https://cis-india.org/internet-governance/resources/net-neutrality/trai-consultation-on-differential-pricing-for-data-services-post-open-house-discussion-submission

State of Digital Rights in India (Delhi, March 24)

Japreet Grewal and Sumandro Chattapadhyay — 2017-03-27T13:21:20Z

The Centre for Communication Governance at National Law University, Delhi and the Internet Freedom Foundation, in association with Access Now, are hosting a discussion on The State of Digital Rights in India on March 24, 2017 (Friday) from 6.00 pm onwards at Lecture Room-I, India International Centre- Annexe, New Delhi. Japreet Grewal and Sumandro Chattapadhyay will participate in the panel discussions.

Registration: Eventbrite

March 24, 2017 marks the two year anniversary of the landmark Shreya Singhal judgment. This was a very significant ruling on freedom of speech and expression and occupies an important place in the Supreme Court’s discourse on civil liberties. The judgment traces out the contours of free speech on the Internet in India and unequivocally holds that the right to freedom of expression provided under Article 19(1)(a) applies to speech over the Internet, making it clear that this is a medium-neutral right.

The event aims to shed some light on this key judgment and discuss ongoing discussions regarding our civil liberties and freedoms online before courts and the Parliament. We would also like to take this opportunity to discuss some of the other pressing issues like Network Neutrality, Internet shutdowns, Privacy and User Security which need immediate attention and engagement of our democratic institutions. We hope to formulate effective strategies which will further shape the legal and policy framework in India, and facilitate better collaborative efforts between stakeholders.

We hope to bring together everyone who contributed to the judgment, and those who do work connected with it, so that we may build on it to seek a better legal framework to protect online speech and to discuss the threats surrounding digital rights and how best build on the foundations of the judgment.

We would be grateful if you could take out some time on Friday evening (6PM) and be a part of this important discussion. The discussion will be followed by dinner and an Open Bar for an Open Internet, which will start from 9.00 pm at the Annexe Court in the India International Centre - Annexe. In case you are unable to attend the seminar, please do join us for dinner!

Featuring:

A keynote address on our online freedoms and policymaking, by Shri Tathagata Satpathy (Member of Parliament, Lok Sabha)
A legal panel analysing the legacy of the Shreya Singhal v. Union of India judgment
Beyond Shreya Singhal: A conversation with women on the future of our digital rights
Briefings on the state of digital rights in our courts and in Parliament
A conversation on the path ahead for our civil liberties and digital rights community

For more details visit https://cis-india.org/internet-governance/news/state-of-digital-rights-in-india-delhi-march-24

Benefits, Harms, Rights and Regulation: A Survey of Literature on Big Data

praskrishna — 2017-03-23T02:03:07Z

For more details visit https://cis-india.org/internet-governance/files/benefits-harms-rights-and-regulation-a-survey-of-literature-on-big-data

Comments on Information Technology (Security of Prepaid Payment Instruments) Rules, 2017

amber — 2017-03-23T01:54:28Z

The Centre for Internet and Society submitted comments on the Information Technology (Security of Prepaid Payment Instruments) Rules, 2017. The comments were prepared by Udbhav Tiwari, Pranesh Prakash, Abhay Rana, Amber Sinha and Sunil Abraham.

1. Preliminary

1.1. This submission presents comments by the Centre for Internet and Society^[1] in response to the Information Technology (Security of Prepaid Payment Instruments) Rules 2017 (“the Rules”).^[2] The Ministry of Electronics and Information Technology (MEIT) issued a consultation paper (pdf) which calls for developing a framework for security of digital wallets operating in the country on March 08, 2017. This proposed rules have been drafted under provisions of Information Technology Act, 2000, and comments have been invited from the general public and stakeholders before the enactment of these rules.

2. The Centre for Internet and Society

2.1. The Centre for Internet and Society, (“CIS”), is a non-profit organisation that undertakes interdisciplinary research on internet and digital technologies from policy and academic perspectives. The areas of focus include digital accessibility for persons with diverse abilities, access to knowledge, intellectual property rights, openness (including open data, free and open source software, open standards, and open access), internet governance, telecommunication reform, digital privacy, and cyber-security.

2.2. This submission is consistent with CIS’ commitment to safeguarding general public interest, and the interests and rights of various stakeholders involved, especially the privacy and data security of citizens. CIS is thankful to the MEIT for this opportunity to provide feedback to the draft rules.

3. Comments

3.1 General Comments

Penalty

There is no penalty for not complying with these rules. Even the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 doesn’t have penalties. Under section 43A of the Information Technology Act (under which the 2011 Rules have been promulgated), a wrongful gain or a wrongful loss needs to be demonstrated. This should not be a requirement for financial sector.

Expansion to Contractual Parties.

A majority of these rules, in order to be effective and realistically protect consumer interest, should also be expanded to third parties, agents, contractual relationships and any other relevant relationship an e-PPI issuer may delegate as a part of their functioning.

3.2 Rule 2: Definitions

Certain key words relevant to the field of e-PPI based digital payments such as authorisation, metadata, etc. are not defined in the rules and should both be defined and accounted for in the rules to ensure modern developments such as big data and machine learning, digital surveillance, etc. do not violate human rights and consumer interest.

3.2 Rule 7: Definition of personal information

Rule 7 provides an exhaustive list of data that will be deemed to be personal information for the purposes of the Rules. While information collected at the time of issuance of the pre-paid payment instrument and during its use is included within the scope of Rule 7, it makes no reference to metadata generated and collected by the e-PPI issuer.

3.3 Rule 4: Inadequate privacy protections

Rule 4(2) specifies the details that the privacy policies of each e-PPI issuer must contain. However, these specifications are highly inadequate and fall well below the recommendations under the National Privacy Principles in Report of the Group of Experts on Privacy chaired by Justice A P Shah.

Suggestions: The Rules should include include clearly specified rights to access, correction and opt in/opt out, continuing obligations to seek consent in case of change in policy or purpose and deletion of data after purpose is achieved. Additionally, it must be required that a log of each version of past privacy policies be maintained along with the relevant period of applicability.

3.4 Rule 10: Reasonable security practices

Problem: Financial information (“such as bank account or credit card or debit card or other payment instrument details”) is already invoked in an inclusive manner in the definition of ‘personal information’ in Rule 7. Given this there is no need to make the Reasonable Security Practices Rules applicable to financial data through this provisions: it already is, and it is best to avoid unnecessary redundancy.

Solution: This entire rule should be removed.

3.5 Rule 12: Traceability

Problem: There is a requirement created under this rule that payment-related interactions with customers or other service providers be “appropriately trace[able]”. But it is unclear what that would practically mean: would IP logging suffice? would IMEI need to be captured for mobile transactions? what is “appropriately” traceable? — none of those questions are answered.

Suggestion: The NPCI’s practices and RBI regulations, for instance, seek to limit the amount of information that entities like e-PPI providers have. These rules need to be brought in line with those practices and regulations.

3.6 Rule 5: Risk Assessment

Rule 5 requires e-PPI issuers to carry out risk assessments associated with the security of the payments systems at least once a year and after any major security incident. However, there are no transparency requirements such as publications of details of such review, a summary of the analysis, any security vulnerabilities discovered etc.

Suggestion:

Broaden the scope of this provision to include not just risk assessments but also security audits.
Mandate publication of risk assessment and security audit reports.

3.7 Rule 11: End-to-End Encryption

The rule concerning end-to-end encryption (E2E) needs significantly greater detailing to be effective in ensuring the the protection of information at both storage and transit.

Suggestions: Elements such as Secure Element or a Secured Server and Trusted User Interface, both concepts to enable secure payments, can be detailed in the rule and a timeline can be established to require hardware, e-PPI practices and security standards to realistically account for such best practices to ensure modern, secure and industry accepted implementation of the rule.

3.8 Rule 13: Retention of Information

Problem: Rule 13 leaves the question of retention entirely unanswered by deferring the future rulemaking to the Central Government.

Suggestions: Rule 13 should be expanded to include the various categories of information that can be stored, guidelines for the short-term (fast access) and long-term storage of the information retained under the rule and other relevant details. The rule should also include the security standards that should be followed in the storage of such information, require access logs be maintained for whenever this information is accessed by individuals, detail secure destruction practices at the end of the retention period and finally mandate that end users be notified by the e-PPI issuer of when such retained information is accessed in all situations bar exceptional circumstances such as national security, compromising an ongoing criminal investigations, etc.

3.9 Rule 14: Reporting of Cyber Incidents

Rule 14 is an excellent opportunity to uphold transparency, accountability and consumer rights by mandating time- and information-bound notification of cyber incidents to customers, including intrusions, database breaches and any other compromise of the integrity of the financial system. While the requirement of reporting such incidents to CERT-In is already present in the Rule 12 of the CERT Rules, the rule retains the optional nature of notifying customers. The rule should include an exhaustive list of categories or kinds of cyber incidents that should be reported to affected end users without compromising the investigation of such breaches by private organisations and public authorities. Further, the rule should also include penalties for non-compliance of this requirement (both to CERT-In and the consumer) to serve as an incentive for e-PPI issuers to uphold consumer public interest. The rule should be expanded to include a detailed mechanism for such reporting, including when e-PPI issuers and the CERT-In can withhold information from consumers as well as requiring the withheld information be disclosed when the investigation has been completed. Finally, the rule should also require that such disclosures be public in nature and consumers not be required to not disseminate such information to enable informed choice by the end user community.

Suggestion:

(1) In Rule 14(3) “may” should be substituted by “shall”.

(2) Penalties of up to 5 lakh rupees may be imposed for each day that the e-PPI issuer fails to report any severe vulnerability that could likely result in harm to customers.

3.10 Rule 15: Customer Awareness and Education

Problem: Rule 15 on Customer Awareness and Education by e-PPI issuers does not take into account the vast lingual diversity and varied socio-economic demographic that makes up the end users of e-PPI providers in India, by mandating the actions under the rule must account for these factors prior to be propagated.

Solutions: The rule must ensure that e-PPI issuers track record in carrying out awareness is regularly held accountable by both the government and public disclosures on their websites. Further, the rule can be made more concrete and effective by including mobile operating systems in their scope (along with equipments), mandating awareness for best practices for inclusive technologies like USSD banking, specifying notifications to include SMS reports of financial transactions, etc.

3.11 Rule 16: Grievance Redressal

Problem: Rule 16 lays down the requirement of grievance redressal, without specifying appellate mechanisms (both within the organisation and at the regulatory level), accountability (via penalties) for non-compliance of the rule nor requiring a clear hierarchy of responsibility within the e-PPI organisation. These factors seriously compromise the efficacy of a grievance redressal framework.

Solutions: Similar rules for grievance redressal that have been enacted by the Insurance Regulatory and Development Authority for the insurance sector and the Telecom Regulatory Authority of India for the telecom sector can and should serve as a reference point for this rule. Their effectiveness and real world operation should also be monitored by the relevant authorities while ensuring sufficient flexibility exists in the rule to uphold consumer rights and the public interest. Proper appellate mechanisms at the regulatory level are essential along with penalties for non-compliance.

3.12 Rule 17: Security Standards

Problem: Rule 17 empowers the Central Government to mandate security standards to be followed by e-PPI issuers operating in India. While appreciable in its overall outlook on ensuring a minimum standard of security, the Rule needs be improved upon to make it more effective. This can be in done by specifying certain minimum security standards to ensure all e-PPI issuers have a minimal level of security, instead of leaving them open to being intimated at a later date.

Solutions: Standards that can either be made mandatory or be used as a reference point to create a new standard under Rule 17(2) are ISO/IEC 14443, IS 14202, ISO/IEC 7816, PCI DSS, etc. Further, the Rule should include penalties for non-compliance of these standards, to make them effectively enforceable by both the government and end users alike. Additional details like the maximum time period in which such security standards should be implemented post their notification, requiring regular third party audits to ensure continuing compliance and effectiveness and requiring updated standards be used upon their release will go a long way in ensuring e-PPI issuers fulfil their mandate under these Rules.

^[1] http://cis-india.org/

^[2] http://meity.gov.in/sites/upload_files/dit/files/draft-rules-security%20of%20PPI-for%20public%20comments.pdf

For more details visit https://cis-india.org/internet-governance/blog/comments-on-information-technology-security-of-prepaid-payment-instruments-rules-2017

Privacy concerns multiply for Aadhaar, India’s national biometric identity registry

praskrishna — 2017-03-22T14:38:52Z

The largest and most sophisticated biometric identity system of any country in the world, India’s Aadhaar, is sparking new fears that the personal data it stores on more than 1.1 billion people could be vulnerable to exploitation.

The article by Kaelyn Lowmaster was published by One World Identity on March 17, 2017, Sunil Abraham was quoted.

Aadhaar, which translates to “foundation” in Hindi, is a unique 12-digit code tied to citizens’ biometric data and personal information. The system was launched in 2009 in an effort to extend social services to India’s millions of unregistered citizens, and to cut down on welfare benefit “leakage” resulting from an opaque and often corrupt bureaucracy.

Constructing a centralized repository of biometric data on nearly a fifth of the world’s population has raised serious concerns among privacy advocates.

The government has also looked to Aadhaar data to underpin mobile payment transfer platforms, which have become crucial for cashless transactions during the country’s demonetization push over past year.

But constructing a centralized repository of biometric data on nearly a fifth of the world’s population has raised serious concerns among privacy advocates, who cite several vulnerabilities both with the Aadhaar system and the Modi administration’s planned expansion.

Despite this, recent metrics indicate that Aadhaar has been enormously successful in achieving those goals. Though the program is theoretically voluntary, more than 99% of Indian adults are now enrolled. Over three billion individual identity verifications have been conducted, and some reports indicate that the Indian government is saving a billion dollars per year now that welfare subsidies can be paid to citizens directly through Aadhaar-verified fund transfers.

Prime Minister Narendra Modi has ambitions to broaden the system even further, seeking to use Aadhaar as the gateway for accessing government programs ranging from public education to subsidized cooking gas, as well as partnering with private companies to offer services facilitated by the Aadhaar database.

Concerns, however, remain. One primary worry is that India’s legal framework for information security is still weak and fragmented, despite government assurances that Aadhaar biometrics have never been misused or stolen.

“There are no regulations in India on safeguards over and procedures for the collection, processing, storage, retention, access, disclosure, destruction, and anonymization of sensitive personal information by any service provider,” according to a 2016 World Bank report.

A patchwork of rules outlining “reasonable security practices and procedures” for personal data has accumulated since Aadhaar was launched, but there is no codified law outlining how data in the system must be secured, or what penalties exist for potential leaks, fraud or misuse.

“Imagine a situation where the police (are) secretly capturing the iris data of protesters and then identifying them through their biometric records” – Sunil Abraham, executive director of the Centre for Internet and Society in Bangalore

This regulatory gap poses a particularly acute risk now that the government has begun offering companies and app developers support for starting new businesses that use Aadhaar data. Through a new initiative called IndiaStack, the administration is providing open program interfaces for companies in fintech, healthcare, and other areas to integrate Aadhaar-based transactions into their business platforms. While IndiaStack’s terms of use explicitly state that user consent is required for any information sharing between service providers and the Aadhaar database, doubts remain about the integrity of the network infrastructure and the lack of clarity surrounding acceptable information sharing and storing protocols.

Another source of concern is the risk that Aadhaar information could be leveraged by the government itself for political purposes.

“Maintaining a central database is akin to getting the keys of every house in Delhi and storing them at a central police station,” Sunil Abraham, executive director of the Centre for Internet and Society in Bangalore, told Reuters. “It is very easy to capture iris data of any individual with the use of next generation cameras. Imagine a situation where the police (are) secretly capturing the iris data of protesters and then identifying them through their biometric records.”

Further stoking fears of federal overreach, the Modi administration has attempted to make Aadhaar registration mandatory in certain sectors, violating a Supreme Court ruling from October 2015 that enrollment must remain voluntary.

Still, the benefits of building on the Aadhaar identity system appear to be outweighing the risks for now, and the system is gathering momentum worldwide. The World Bank is helping market the Aadhaar model abroad, and Russia, Morocco, Tunisia, and Algeria have all expressed interest in instituting national biometric identity programs of their own. Microsoft is already on board, and Google is negotiating ways to get involved.

Aadhaar may indeed live up to is potential and become the global standard for universal legal identity, but until India can manage to create more robust mechanisms to protect citizens’ personal data, their security could remain uncertain.

For more details visit https://cis-india.org/internet-governance/news/one-world-indentity-kaelyn-lowmaster-march-17-2017-privacy-concerns-multiply-for-aadhaar-indias-national-biometric-identity-registry

Executive Summary: AI in Asia Event

praskrishna — 2017-03-15T01:19:09Z

For more details visit https://cis-india.org/internet-governance/files/executive-summary-ai-in-asia-event

First Asia Pacific Workshop on Empirical Methods in Innovation, Intellectual Property and Competition

praskrishna — 2017-03-14T14:14:12Z

Rohini Lakshané took part in a workshop organized by Centre for Innovation Intellectual Property & Competition in New Delhi from March 9 to 11, 2017.

The workshop was open for legal academicians (who are working in the areas of intellectual property law and/or competition law) and regulators working with intellectual property law and competition law issues in the Asia-Pacific region. Click here for the Agenda. More details on Spicy IP Blog here

For more details visit https://cis-india.org/a2k/news/first-asia-pacific-workshop-on-empirical-methods-in-innovation-intellectual-property-and-competition

Marathi Wikipedia Edit-a-thon on Environment Management

subodh — 2017-04-10T16:58:31Z

A Wikipedia edit-a-thon was organized by CSIBER College and the Centre for Internet & Society (CIS) in Kolhapur on March 30, 2017. Subodh Kulkarni was a trainer. The edit-a-thon was attended by 32 students.

Project Scope

The goal of Wikipedia Workshop is to build resources in the field of Environmental Science & Management on Marathi Wikipedia and equip its participants with the process of contributing to Wikipedia, and to introduce it as a concept to them. Another focus of the workshop will be on ‘Women & Environment’ and village articles.

To introduce Wikipedia as an encyclopedia for research and a concept to new editors.
To Promote Marathi Wikipedia Community & promote the use of regional languages in Wikipedia.
To have an open interaction within the editors, existing as well as new.
To spread the awareness of Wikipedia as a powerful tool.
To develop articles on environment related issues & villages

Output

The edit-a-thon was aimed at creating/editing wikipedia pages of women activists and environmental issues in India. Extensive discussion on the issues was conducted to develop the theme and basic concepts. Participants were completely unaware about Marathi Wikipedia and editing. They were trained in basic editing skills and search for the concerned articles, categorisation and translation from other language wikipedias.

More info on Wikimedia Blog

For more details visit https://cis-india.org/a2k/blogs/marathi-wikipedia-edit-a-thon-on-environment-management

Women's Day Edit-a-thon at Jeewan Jyoti Women's Empowerment Centre, Pune

subodh — 2017-04-10T16:04:03Z

Sterlite Tech Foundation and Jnana Prabodhini joined hands with the Centre for Internet & Society's Access to Knowledge team to hold a Wikipedia edit-a-thon at Jeewan Jyoti Women's Empowerment Centre, Ambawane in Pune on March 10, 2017. Subodh Kulkarni was one of the trainers. The edit-a-thon was attended by 28 students.

Background

Sterlite Tech Foundation and Jnana Prabodhini are the organisations working for Women's Empowerment in Velhe Block of Pune District Maharashtra. Jeewan Jyoti - Sterlite’s flagship initiative aims to address these issues by empowering the under privileged sections of society, especially rural women with equal learning opportunities and with professional training courses in their formative years; thereby providing them with sustainable income opportunities.

On the occasion of World Women's Day, Women's Wikipedia edit-a-thon week is arranged across the world. The organisers collaborated with The Centre for Internet & Society-Access to Knowledge Program to conduct this workshop for rural women.

Project Goal

The goal of this Wikipedia Workshop is to build resources in the field of rural development & women empowerment on Marathi Wikipedia and equip its participants with the process of contributing to Wikipedia, and to introduce it as a concept to them. Another focus of the workshop will be on village articles.

Primary Goals

To introduce Wikipedia as an encyclopedia for research and a concept to new editors.
To Promote Marathi Wikipedia Community & promote the use of regional languages in Wikipedia.
To have an open interaction within the editors, existing as well as new.
To spread the awareness of Wikipedia as a powerful tool.
To develop articles on gender & environment related issues

More info on Wikimedia Blog

For more details visit https://cis-india.org/a2k/blogs/womens-day-edit-a-thon-in-pune

January 2017 Newsletter

praskrishna — 2017-03-01T06:00:37Z

Welcome to the January 2017 newsletter of the Centre for Internet and Society (CIS).

Dear readers,

We are pleased to bring you the Centre for Internet & Society's January newsletter. Previous issues of the newsletters can be accessed here.

Highlights
The Rights of Persons with Disabilities (RPD) Act, which was passed in December 2016, seeks to give effect to the rights and obligations enshrined in the United Nations Convention on the Rights of Persons with disabilities, which India signed and ratified nearly a decade ago. Nirmita Narasimhan in a blog entry has summarized the key provisions of the Act relating to digital accessibility. The latest judgment in the matter of Super Cassettes v. MySpace is a landmark and progressive ruling, which strengthens the safe harbor immunity enjoyed by Internet intermediaries in India. CIS was one of the intervenors in the case, and has been duly acknowledged in the judgment. Meena Gayathri became the first South Indian Wikiwoman to complete 100 Wikidays challenge. The challenge required Wikipedians to create one new article per day for one hundred days in a row. Gayathri's contribution and passion towards Telugu language and culture have transcended into a "knowledge revolution". The Committee on Digital Payments constituted by the Ministry of Finance and chaired by Ratan P. Watal, Principal Advisor, NITI Aayog, submitted its report on the "Medium Term Recommendations to Strengthen Digital Payments Ecosystem" on December 09, 2016. The report was made public on December 27, and comments were sought from the general public. CIS submitted its comments. The comments were authored by Sumandro Chattopadhyay. ICANN sought community input on the Proposed ICANN Community Anti-Harassment Policy on 7 November 2016. In response to this CIS submitted its comments. The comments were authored by Padma Venkataraman, Rohini Lakshané, Sampada Nayak and Vidushi Marda. The eleven sessions selected for the Internet Researchers' Conference 2017 (IRC17) to be held at the IIIT Bangalore campus during March 3-5, 2017 has been announced. The conference is being organised by the Centre for Information Technology and Public Policy (CITAPP) at IIIT Bangalore and CIS.

CIS in the news

India’s Digital ID Rollout Collides With Rickety Reality (Gabriele Parussini; Wall Street Journal; January 13, 2017).
Millions of Indians move from cash to digital payments. But some ask whether it’s safe (Rama Lakshmi; Washington Post; January 14, 2017).
Sunil Abraham on Aadhaar's misuse during demonetisation (Economic Times; January 14, 2017)
The soon-to-be launched Aadhaar Pay will let you make purchases using your fingerprint (Indulekha Aravind; January 15, 2017).
Lost your phone? Here's how you can make your mobile theft-proof (Sanjay Kumar Singh; Business Standard; January 16, 2017).
The Dangers Of Aadhaar-Based Payments That No One Is Talking About (Mayank Jain; Bloomberg; January 17, 2017).
Supreme Court issues notice to WhatsApp, Centre on data privacy (MJ Antony, Ayan Pramanik and Apurva Venkat; Business Standard; January 17, 2017).
Demonetisation: Cost Vs Benefit (NDTV; December 24, 2016). Sunil Abraham took part in the Big Fight programme aired by NDTV. The video was published on January 17, 2017.
For India’s complaints department, visit Facebook Live (Amy Kazmin; Financial Times; January 23, 2017).

CIS members wrote the following articles:

Cashlessness Needs Connectivity (Shyam Ponappa; Business Standard; January 4, 2017).
Digital Native: The Dream of the Cyborg (Nishant Shah; Indian Express; January 8, 2017).
Digital transitions in the newsroom: How are Indian language papers adapting differently? (Zeenab Aneez; London School of Economics and Political Science; January 16, 2017).
Digital native: Back at it Again (Nishant Shah; Indian Express; January 22, 2017).

Jobs

Policy Officer (Cyber Security)
Senior Policy Officer (Cyber Security)
Internship - Application accepted throughout the year
Survey Participants for Research on Musician Livelihood

Blog Entry

Digital accessibility in the Rights of Persons With Disabilities Act 2016 (Nirmita Narasimhan; January 23, 2017).

Participation in Event

Workplace Solutions Champions Consultative Workshop (Organized by Enable India, January 21 - 22, 2017; Ecumenical Christian Centre, Bangalore). Nirmita Narasimhan attended the workshop.

-----------------------------------
Access to Knowledge
-----------------------------------
Our Access to Knowledge programme currently consists of two projects. The Pervasive Technologies project, conducted under a grant from the International Development Research Centre (IDRC), aims to conduct research on the complex interplay between low-cost pervasive technologies and intellectual property, in order to encourage the proliferation and development of such technologies as a social good. The Wikipedia project, which is under a grant from the Wikimedia Foundation, is for the growth of Indic language communities and projects by designing community collaborations and partnerships that recruit and cultivate new editors and explore innovative approaches to building projects.

►Copyright and Patent

Blog Entry

Super Cassettes v. MySpace (Redux) (Anubha Sinha; January 16, 2017).

Event Organized

Seminar on Rethinking Copyright and Licensing for Digital Publishing Today (Organized by Pro Helvetia - Swiss Arts Council, Goethe-Institut Max Mueller Bhavan New Delhi, and CIS; New Delhi; January 23, 2017). Anubha Sinha attended the event.

►Wikipedia

Blog Entries

WikiSangamotsavam 2016 (Manasa Rao; January 18, 2017).
Telugu Wikipedia Stall at Hyderabad Book Fair (Manasa Rao; January 18, 2017).
Telugu Wikipedia Stall at Rajahmundry Book Fair (Manasa Rao; January 18, 2017).
Mini Workshop on Tools: Wikipedia Monthly Meetup, Hyderabad (Manasa Rao and Pavan Santhosh; January 18, 2017).
Meet Telugu Wikipedian Surampudi Meena Gayathri – the first South Indian Wikiwoman completing 100 Wikidays Challenge (Ting-Yi Chang; January 23, 2017).

Event Organized

Odia Wikipedia and Orientation Training Programme (Organized by CIS-A2K team; Indian Institute of Mass Communication, Dhenkanal; January 31, 2017).

►Openness

Participation in Event

CBGA - Consultation on Opening Up Access to Budget Data in India (Organized by CBGA; January 27, 2017; New Delhi). Sumandro Chattapadhyay was a speaker.

-----------------------------------
Internet Governance
-----------------------------------

►Privacy

Submission

Comments on the Report of the Committee on Digital Payments (Sumandro Chattapadhyay and Amber Sinha; January 12, 2017).

Blog Entries

The Design & Technology behind India’s Surveillance Programmes (Udbhav Tiwari; January 20, 2017)
Workshop on ‘Privacy after Big Data’ (Amber Sinha; January 27, 2017).

Events Organized

Discussion on Ranking Digital Rights in India (India Islamic Cultural Centre, New Delhi; January 7, 2017).
Rankathon on Digital Rights (CIS office, New Delhi; January 8, 2017).

Participation in Events

Global Governance Futures 2027 - Session 3 (Organized by Global Public Policy Institute and supported by Robert Bosch Stiftung; New Delhi; January 17, 2017). Sumandro Chattapadhyay joined Ankhi Das (Facebook) and Arun Mohan Sukumar (Observer Research Foundation) to discuss the "data governance" scenarios developed by the GGF 2027 Fellows.
CPDP (Computers, Privacy and Data Protection) 2017 (Organized by Privacy International; Brussels, January 26, 2017). Amber Sinha participated as a panelist.

►Big Data

Blog Entry

New Media, personalisation and the role of algorithms (Amber Sinha; January 2, 2017).

Participation in Events

Training programme for Chairs, Convenor and Experts for International Standardization Work (Organized by National Institute of Training for Standardization, under the Bureau of India Standards; January 19 - 20, 2017; NOIDA). Udbhav Tiwari attended the training programme.
Seminar on Understanding Financial Technology, Cashless India, and Forced Digitalisation (Centre for Financial Accountability; New Delhi; January 24, 2017). Sumandro Chattapadhyay spoke on the emerging architecture of FinTech in India.

►Free Speech & Expression

Submission

Comments on the Proposed ICANN Community Anti-Harassment Policy (Padma Venkataraman, Rohini Lakshané, Sampada Nayak and Vidushi Marda; January 13, 2017).

Blog Entry

Social Media Monitoring (Amber Sinha; January 13, 2017).

-----------------------------------
Telecom
-----------------------------------
CIS is involved in promoting access and accessibility to telecommunications services and resources, and has provided inputs to ongoing policy discussions and consultation papers published by TRAI. It has prepared reports on unlicensed spectrum and accessibility of mobile phones for persons with disabilities and also works with the USOF to include funding projects for persons with disabilities in its mandate:

Article

Cashlessness Needs Connectivity (Shyam Ponappa; Business Standard; January 4, 2017 and Organizing India Blogspot; January 5, 2017).

Event

Internet Researchers' Conference 2017 (IRC17) - Selected Sessions (Organized by Centre for Information Technology and Public Policy and CIS; IIIT, Bangalore; March 3 - 5, 2017). Eleven sessions have received 10 or more nominations.

-----------------------------------
About CIS
-----------------------------------
The Centre for Internet and Society (CIS) is a non-profit organisation that undertakes interdisciplinary research on internet and digital technologies from policy and academic perspectives. The areas of focus include digital accessibility for persons with disabilities, access to knowledge, intellectual property rights, openness (including open data, free and open source software, open standards, open access, open educational resources, and open video), internet governance, telecommunication reform, digital privacy, and cyber-security. The academic research at CIS seeks to understand the reconfigurations of social and cultural processes and structures as mediated through the internet and digital media technologies.

► Follow us elsewhere

Twitter: http://twitter.com/cis_india
Twitter - Access to Knowledge: https://twitter.com/CISA2K
Twitter - Information Policy: https://twitter.com/CIS_InfoPolicy
Facebook - Access to Knowledge: https://www.facebook.com/cisa2k
E-Mail - Access to Knowledge: a2k@cis-india.org
E-Mail - Researchers at Work: raw@cis-india.org
List - Researchers at Work: https://lists.ghserv.net/mailman/listinfo/researchers

► Support Us

► Request for Collaboration

For more details visit https://cis-india.org/about/newsletters/january-2017-newsletter