UNIT 5: CYBER LAWS AND FORENSICS
5.1 Introduction to Cyber Law & Jurisprudence
-
Definition: Cyber Law governs legal issues related to the use of cyberspace (the global network of computers and information). It addresses crimes, contracts, intellectual property, privacy, and governance in the digital environment.
-
Scope & Need: Bridges gap between traditional, territorial laws and the borderless, instantaneous nature of digital technology. Essential for regulating e-commerce, digital signatures, cybercrimes, and data protection.
-
Sources:
-
National Statutes: Primary legislation (e.g., IT Act, 2000).
-
International Conventions/Treaties: e.g., Budapest Convention.
-
Model Laws: UNCITRAL model laws on e-commerce/electronic signatures.
-
Judicial Precedents: Court interpretations.
-
-
Key Principles:
-
Territoriality & Jurisdiction: Challenge of applying territorial laws to global acts. Principles: objective territoriality (effect doctrine), protective principle, passive personality principle.
-
Attribution: Determining the identity of the actor behind a digital act (IP address, digital signature).
-
Evidence Rules: Adapting "best evidence" and "hearsay" rules for digital records.
-
[!TIP] Exam Focus: Be prepared to differentiate between cyber law (broad) and cybercrime law (specific subset). Understand why jurisdiction is the foundational challenge in cyber law.
5.2 Major National Cyber Legislations (Focus on Indian IT Act, 2000 & Amendments)
A. The Information Technology Act, 2000
-
Objective: To provide legal recognition for transactions carried out by means of electronic data interchange and other means of electronic communication.
-
Salient Features: Legal validity of electronic records and digital signatures; regulation of Certifying Authorities (CAs); provisions for electronic governance; defined cyber offenses and penalties.
| Chapter | Subject Matter | Key Sections & Provisions |
|---|---|---|
| II | Digital Signature & Electronic Governance | Sec 3: Digital Signature authentication. Sec 5: Legal recognition of digital signatures. Sec 7: Attribution of electronic records. |
| III | Regulation of Certifying Authorities | Sec 11-39: Licensing, duties, and powers of CAs. Sec 18: Power to delegate. |
| IV | Electronic Governance | Sec 4: Legal recognition of electronic records. Sec 5: Legal recognition of digital signatures. Sec 10A: Contract formation via electronic means. |
| V | Secure Electronic Records & Signatures | Sec 15-23: Standards for security procedures, duties of subscribers. |
| VI | Penalties & Adjudication | Sec 43: Penalty for damage to computer, etc. (compensation). Sec 43A: Compensation for failure to protect sensitive personal data. Sec 44: Penalty for failure to furnish information. Sec 45: Adjudicating Officer powers. |
| VII | Offenses | Sec 65: Tampering with computer source documents. Sec 66: Hacking (now broader than original). Sec 66A: Sending offensive messages (struck down in Shreya Singhal). Sec 66B: Dishonest receipt of stolen computer. Sec 66C: Identity theft. Sec 66D: Cheating by personation. Sec 66E: Violation of privacy. Sec 67: Publishing obscene information. Sec 67A: Publishing child porn. Sec 67B: Child pornography. Sec 69: Power to issue directions for interception, monitoring, decryption. Sec 69A: Power to block access to information. Sec 70: Protected systems. Sec 72: Breach of confidentiality and privacy. |
| VIII | Network Service Provider Liability | Sec 79: Safe Harbor for intermediaries (condition: due diligence). |
B. The Information Technology (Amendment) Act, 2008
- Key Changes: Introduced cyber café regulation; added data protection principles (Sec 43A);