Cyber Law & Intellectual Property Rights (CY-504 (A)) - Unit 2 Short Notes

UNIT 2: CYBER LAW & INTELLECTUAL PROPERTY RIGHTS

I. FOUNDATIONS & INTRODUCTION

Need and Importance of Intellectual Property Laws (India)

• Need: To incentivize innovation, protect creators/innovators, attract foreign investment, align with global standards (TRIPS), and prevent unauthorized exploitation.

• Importance in India:

  • Fosters domestic R&D and creative industries (Bollywood, IT, pharma).

  • Provides legal framework for enforcement against piracy and counterfeiting.

  • Balances public interest (access to knowledge) with private rights.

  • Key Acts: Patents Act 1970, Copyright Act 1957, Trade Marks Act 1999.

[!TIP] Exam Focus: Always link IPR importance to India's economic growth and TRIPS compliance.

Overview of Cyber Law

• Definition: Body of law governing legal issues arising from the use of the internet, digital networks, and information technology.

• Scope: Covers e-commerce, digital signatures, cybercrimes, data protection, intellectual property in digital form, jurisdiction.

• Significance: Provides legal certainty for digital transactions, combats cybercrime, protects privacy and data, and regulates online behaviour.

Digital Rights

• Concept: Rights of individuals in the digital environment, including privacy, freedom of expression, access to information, and ownership of digital content.

• Protection Mechanisms in India:

  • IT Act, 2000: Legal recognition of electronic records/documents (Sec. 4), digital signatures (Sec. 2(1)(p)).

  • Copyright Act, 1957: Protection for software, databases, and digital content.

  • Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011: Data protection.

  • Judicial Precedents: Right to privacy recognized as fundamental right (Justice K.S. Puttaswamy v. Union of India).

Cyber Terrorism

• Definition: Premeditated use of computer networks to disrupt, destroy, or damage critical infrastructure, or to intimidate/coerce governments or societies for political/ideological objectives.

• Measures:

  • Technical: Firewalls, intrusion detection systems, encryption.

  • Legal: IT Act sections (43, 66, 66F), National Critical Information Infrastructure Protection Centre (NCIIPC).

  • Organizational: CERT-In, cyber security policies, international cooperation.

• Challenges: Attribution difficulty, borderless nature, rapid evolution of attack vectors, lack of international consensus on definition.

II. INTELLECTUAL PROPERTY RIGHTS (IPR) - SUBSTANTIVE LAW

A. Patents

B. Copyrights

• Concept: Right granted to creators of original literary, dramatic, musical, artistic works and cinematograph films, sound recordings. Protects expression, not idea. Includes related/neighbouring rights (performers, producers, broadcasters).

• When Copyright is Infringed (Sec. 51)?

  • When any person, without a license, does anything that only the copyright owner has the right to do (e.g., reproduce, publish, perform, adapt).

  • Key Exceptions (Fair Dealing): For private study, research, criticism, review, reporting current events, education.

• Remedies (Sec. 55, 63):

  • Civil: Injunction, damages, account of profits, seizure & delivery of infringing copies.

  • Criminal: Imprisonment (min. 6 months, max. 3 years), fine.

  • Administrative: Registration with Copyright Office (prima facie evidence).

C. Trademarks

• Trademark & Rights from Registration (Trade Marks Act, 1999):

  • Definition: A graphical representation capable of distinguishing goods/services of one person from others.

  • Rights upon Registration (Sec. 28): Exclusive right to use the mark; right to obtain injunction against infringement; right to claim damages.

• Trademark Infringement (Sec. 29): Use of an identical/similar mark in relation to identical/similar goods/services that is likely to cause confusion/association with the registered trademark.

  • Illustrative Cases:

    • Yahoo! Inc. v. Akash Arora & Anr.: Domain name yahoos.com infringed Yahoo! trademark (passing off).

    • ITC Ltd. v. British American Tobacco: Use of “Gold Flake” for cigarettes infringed ITC’s “Gold Flake” trademark.

• Jurisdiction in Trademark Disputes (Sec. 134):

  • Court where the defendant resides or carries on business.

  • Court where the cause of action arose (place of infringement/sale).

  • For online infringement, jurisdiction can be where the plaintiff’s business is located or where the infringing website is accessed.

D. Software Piracy

• Concept & Forms:

  • Counterfeiting: Illegal copying & distribution of software with fake labels.

  • Cracking: Removing copy-protection mechanisms.

  • Hard-disk Loading: Installing unauthorized copies on computers for sale.

  • End-User Piracy: Using unlicensed software in an organization/home.

• Legal Consequences:

  • Copyright Act, 1957: Infringement of computer software (literary work). Criminal penalty: Imprisonment up to 3 years, fine.

  • IT Act, 2000: Tampering with computer source documents (Sec. 65) can apply.

• Solutions:

  • Technical: DRM, activation keys, online verification.

  • Legal: Strict enforcement, raids, public awareness campaigns.

  • Economic: Affordable licensing models (OEM, volume licensing).

III. CYBER LEGAL FRAMEWORK (INDIAN STATUTES)

A. The Information Technology Act, 2000

• Salient Features & Objectives:

  • Provide legal recognition for electronic records & digital signatures.

  • Facilitate electronic filing of documents with government agencies.

  • Define cyber offences and provide for punishment.

  • Regulate Certifying Authorities (CAs).

  • Establish Cyber Appellate Tribunal.

• Key Provisions:

  • Digital Signatures (Sec. 2(1)(p), 15-17): Authentication of electronic records.

  • Certifying Authorities (Sec. 17-34): License issuance, duties, and revocation.

  • Cyber Offences (Sec. 43-47, 66-66F): Damaging computer (43), hacking (66), publishing obscene info (67), cyber terrorism (66F).

• Cyber Appellate Tribunal (India) (Sec. 50-56):

  • Establishment: Under Cyber Appellate Tribunal Act, 2005.

  • Powers: Hear appeals against orders of Adjudicating Officers (appointed under IT Act) and Controller of Certifying Authorities.

  • Jurisdiction: Only for civil claims/disputes arising under IT Act (not criminal offences).

  • Procedure: Summary procedure; not bound by Civil Procedure Code; can regulate its own procedure.

B. Evidence Laws in Digital Context

• Indian Evidence Act, 1872 (Relevant Features):

  • Sec. 3: Definition of "evidence" now includes electronic records.

  • Sec. 65B: Primary evidence of electronic record is the electronic record itself. Secondary evidence (printout, copy) admissible if conditions are met (regular use, proper operation, etc.). Critical for admitting emails, logs, database records.

• Bankers' Books Evidence Act, 1891:

  • Purpose: To give evidentiary status to entries in bankers' books.

  • Recognition of Electronic Books (Sec. 4): A printout of data stored in a bank's computer system is deemed to be a "copy" of the banker's book if accompanied by a certificate (as per Sec. 65B IT Act) from the bank manager.

  • Important Aspect: Facilitates banks to produce digital transaction records as evidence in courts.

C. Other Relevant Indian Legislation

• Indian Contract Act, 1872 & E-Contracts:

  • Application: General principles of contract (offer, acceptance, consideration, capacity, free consent) apply to e-contracts.

  • Sec. 22 - Contracts by Minors/ Persons of Unsound Mind: Contracts entered by minors or persons of unsound mind are void. This applies to online contracts too. Case: Mohori Bibee v. Dhurmodas (1903) - contract by minor is void.

• Contract Labour (Regulation & Abolition) Act, 1970:

  • Objectives:

    1. Regulate employment of contract labour in certain establishments.

    2. Prevent its misuse by principal employers.

    3. Abolish contract labour system in certain situations/industries.

IV. E-COMMERCE & DIGITAL TRANSACTIONS

A. E-Contracts

B. Digital Signatures & Authentication

• Role in E-Commerce: Provides authentication (verifies sender identity), non-repudiation (sender cannot deny sending), and integrity (ensures message not altered). Essential for secure online banking, e-tendering, e-filing.

• Laws in India (IT Act):

  • Sec. 2(1)(p): Defines digital signature.

  • Sec. 15: Attribution of digital signature.

  • Sec. 16: Procedure for affixing digital signature.

  • Sec. 17: Powers of Controller to recognize foreign CAs.

• E-Sign Regulations: Global & India:

  • Global: eIDAS (EU), ESIGN Act (USA) - grant legal equivalence to electronic signatures.

  • India: IT Act provides for digital signatures (asymmetric crypto). Procedure: Obtain from licensed Certifying Authority (CA) after verification. Not yet a separate "E-Sign" regulation, but Aadhaar-based eSign (via NPCI) is an emerging service for certain documents.

C. Taxation in E-Commerce

• Concept of E-Taxation: Application of existing tax laws (Income Tax, GST, Equalisation Levy) to digital/e-commerce transactions.

• Issues & Challenges:

  • Nexus & Permanent Establishment (PE): Determining when a foreign e-commerce entity has a taxable presence in India (e.g., servers, warehouses, agents).

  • Characterization of Income: Is it business income, royalty, or technical service fee?

  • Valuation & Transfer Pricing: For intra-group digital services.

  • Collection Mechanism: Who collects and deposits tax (e.g., Equalisation Levy on specified online advertisement services).

  • Example: Taxing Google/Facebook's advertising revenue from Indian users.

V. CYBER CRIMES, JURISDICTION & INVESTIGATION

A. Specific Cyber Offences & Concepts

• Defamation (IPC in Cyber Context - Sec. 499, 500): Publishing false statement online harming person's reputation. Example: Posting defamatory content on social media. Punishment: Imprisonment up to 2 years, fine.

• Denial of Service (DoS) Attacks:

  • Definition: Attack that makes a machine/network resource unavailable to intended users.

  • Types:

    1. Volumetric: Flood network with traffic (ICMP/UDP floods).

    2. Protocol: Exploit protocol weaknesses (SYN flood, Ping of Death).

    3. Application Layer: Target specific apps (HTTP flood, Slowloris).

• Cyber Stalking (IT Act Sec. 354D): Repeatedly following, contacting, or monitoring a person's online activity without consent, causing fear or distress. Punishment: Imprisonment 1-5 years, fine.

• Reverse Hijacking (Domain Hijacking): Unauthorized change of domain name registration details to gain control. Often done via social engineering or exploiting registrar vulnerabilities.

B. Jurisdiction in Cyberspace

• Types of Jurisdiction:

  • Personal Jurisdiction: Court's power over the person (defendant).

  • Territorial Jurisdiction: Court's power over events within a geographical area.

  • Subject-Matter Jurisdiction: Court's power over a type of case (e.g., cybercrime, IPR).

• Challenges in Cyber Jurisdiction:

  • Borderless Nature: Act committed in one country, effect in another.

  • Anonymity: Offender identity hidden.

  • Conflicting Laws: Different legal systems.

  • Forum Shopping: Plaintiffs choosing favourable courts.

• Jurisdiction in Online Trademark Disputes: Based on where the infringing website is accessed (causing effect), where server is located, or where defendant resides/carries business (Sec. 134 Trade Marks Act).

C. Investigation & Evidence

• Role and Procedure of Cyber Tribunal (Cyber Appellate Tribunal):

  • Role: Appellate body for orders under IT Act (not criminal trials).

  • Procedure: Summary procedure; parties appear in person/through advocate; can call for evidence; passes orders as it deems fit. Decisions can be appealed to High Court on substantial question of law.

• Use of Internet Relay Chat (IRC) in Investigations:

  • IRC: Real-time text-based group communication (channels).

  • Investigative Use:

    1. Monitoring: Law enforcement can join channels to observe criminal planning (hacking, drug deals).

    2. Log Analysis: IRC servers maintain logs (IP addresses, timestamps, messages) crucial as electronic evidence (Sec. 65B IT Act).

    3. Undercover Operations: Posing as criminals to gather intelligence.

  • Legal Basis: Surveillance powers under IT Act Sec. 69 (interception, monitoring) and CrPC.

VI. INTERNATIONAL LEGAL FRAMEWORK & EMERGING ISSUES

A. International Instruments

• UNCITRAL Model Law on Electronic Commerce (1996):

  • Purpose: To harmonize national laws on e-commerce, remove legal obstacles, and promote electronic communications.

  • Importance: Provides uniform rules for legal recognition of data messages, attribution, acknowledgement, and retention. Adopted by over 70 countries (including India via IT Act).

• International Legal Framework on Cyber Crime (Budapest Convention, 2001):

  • First international treaty on cybercrime.

  • Key Provisions: Harmonizes domestic criminal offences (illegal access, interception, data interference, system interference), provides for international cooperation (extradition, mutual legal assistance), and empowers law enforcement for real-time collection of traffic data.

  • India: Not a signatory yet, but provisions influence Indian law (IT Act amendments).

B. Data Protection & Privacy

• Concept: Legal governance of collection, storage, processing, transfer of personal data to prevent misuse and protect individual autonomy.

• Legal Regime & Challenges in India:

  • Regime: Primarily IT Act Sec. 43A (compensation for negligent disclosure of sensitive personal data) and Sec. 72A (punishment for breach of privacy). SPDI Rules, 2011 (consent, disclosure, security).

  • Challenges:

    • Fragmented Law: No comprehensive data protection act (pending Digital Personal Data Protection Act, 2023).

    • Enforcement: Weak regulatory oversight.

    • Cross-Border Data Flow: Restrictions under SPDI Rules vs. global business needs.

    • Surveillance vs. Privacy: Balancing national security (IT Act Sec. 69) with privacy rights.

C. Technology-Specific Legal Issues

• Legal Issues Related to Electronic Data Interchange (EDI):

  • Contract Formation: When does a binding contract arise in automated EDI systems?

  • Attribution & Error: Who is liable for erroneous automated messages? (IT Act Sec. 11, 12).

  • Evidence: Admissibility of EDI transaction logs (Sec. 65B).

  • Security & Confidentiality: Ensuring data integrity and preventing unauthorized access.

• Legal Aspects of Internet Relay Chat (IRC) Services:

  • Intermediary Liability (IT Act Sec. 79): IRC service providers (hosts) are "intermediaries". They enjoy safe harbour if they comply with due diligence (no actual knowledge of illegal content, act expeditiously on receiving knowledge).

  • Surveillance & Monitoring: Law enforcement can monitor IRC under Sec. 69 for investigation.

  • Evidence: Chat logs are admissible as electronic records if certified per Sec. 65B.

  • Content Regulation: Liability for hosting illegal content (defamation, obscenity) if due diligence not observed.