Cyber Jurisprudence - A Comparative Study Of International And Indian Perspectives With Reference To Cyber Crimes
Author: LawSphereX
Category: Criminal Law
Published:
Updated:
CYBER JURISPRUDENCE: A COMPARATIVE STUDY OF
INTERNATIONAL AND INDIAN PERSPECTIVES WITH REFERENCE TO CYBER CRIMES
Arunadhita, Maharashtra National Law University Aurangabad (MNLUA)
ABSTRACT
This research delves into the emerging domain of cyber jurisprudence, centering on a comparative analysis of global and Indian viewpoints about cybercrimes. The legal systems that deal with cyber risks and crimes need to change as these concerns become more common. The study looks at how cyber laws have evolved, how well current legal defenses work to stop cybercrimes, and what obstacles the legal systems in India and internationally must overcome. The study intends to enhance the legal response to cybercrimes in India and throughout the world by highlighting best practices, identifying gaps, and proposing reforms through a comparative comparison. Keywords: Cyber Jurisprudence, Cyber Crimes, Information Technology Act, 2000, International Law
CHAPTER- I
INTRODUCTION
The definition of applying the law to computer networks and the internet is known as “cyber jurisprudence. ” The subject has expanded in recent years as courts grapple with issues such as the legitimacy of online defamation, unjust dismissal based on online interactions, and the privacy rights of internet users. The quick development of technology has changed how we communicate, work, and live. But as technology has advanced, so too have cybercrimes, presenting serious obstacles to established legal frameworks. The corpus of legislation that regulates online, or cyber jurisprudence, is essential to tackling these issues. The world of international connection, communication, and trade has seen significant change as a result of the digital revolution.
The growing dependence of people, corporations, and governments on digital platforms for a range of purposes has resulted in an increase in the complexity and frequency of “Cyber Crimes” and the accompanying hazards. “Cybercrimes” are a serious threat to established legal systems since they were not intended to deal with the intricacies of the virtual world. These crimes range from “hacking, identity theft, and cyberstalking to more complex forms of cyberwarfare and digital terrorism. ” A relatively new but quickly developing area of law called "cyber jurisprudence" aims to solve these issues by offering a framework for the legal conduct of cyberspace. It ensures that the rights and obligations of people and organizations in cyberspace are precisely defined and safeguarded by encompassing the laws, rules, and court rulings that control the use of digital technology.
The surge in cybercrimes has prompted the creation of extensive regulatory frameworks that not only prevent illegal activity online but also offer efficient redress to victims. Due to distinct legislative traditions, technical infrastructure, and socio-political circumstances, reactions to “cybercrimes” differ internationally. The efficacy of treaties like the “Budapest Convention,” which seek to standardize cyber rules and foster collaboration, is contingent upon each nation's desire and capacity to put agreed-upon principles into practice and uphold them. “The Information Technology Act of 2000” has played a pivotal role in India's strategy for enforcing digital laws and countering cyber-attacks.
However, due to the ever-evolving nature of technology and the worldwide reach of the internet, there are also constraints and difficulties to be faced, including questions of jurisdiction, the requirement for “specialist cybercrime units,” and how to strike a balance between national security and privacy. “CYBER JURISPRUDENCE”: “The study of legal concerns related to the use of technology, especially the internet, is known as cyber jurisprudence. It covers many different subjects, such as cybercrime, intellectual property, privacy, and freedom of expression. ”1 Because of the internet's explosive expansion and the growing amount of technology we use on a daily basis, “cyber jurisprudence” is becoming a crucial field of study. The legal ramifications of technology use increase along with our dependence on it.
There are not many significant differences between the concepts of “Cybercrime and Traditional crime. ” Both encompass behavior in which an act or omission results in a violation of the law and is balanced by official consequence. One must first grasp what constitutes a crime in order to comprehend the word cybercrime. Distinguished jurists have defined crime as the following: “AUSTIN”: “A wrong which is pursued at the discretion of the injured party and his representatives is a civil injury; a wrong which is pursued by the sovereign or his subordinates is a crime,” according to Austin's definition of crime. “BLACKSTONE”: In his “Commentaries on The Laws of England,” Blackstone defines crime. “An act committed or omitted in violation of a public law either forbidding or commanding it,” is how he described it.
“Violation of the public rights and duties due by the whole community, considered as a community, in its social aggregate capacity” is another definition of crime that he provided. With minor modifications, Stephen, the editor of Blackstone, defined a crime as “a violation of a right, considered in reference to the evil tendency of such violation as regards the community at large. ”
1 P.S Nikita, Aroshi Pal, Cyber Jurisprudence, 4 IJRRSS,168, 168 (2016)
https://ijrrssonline.in/HTMLPaper.aspx?Journal=International+Journal+of+Reviews+and+Research+in+Social+ Sciences%3bPID%3d2016-4-3-4 “BENTHAM”: According to Bentham, a crime is “anything the legislature has prohibited for good or for bad reasons.” “CYBERCRIME”: Any crime perpetrated using the Internet or other computer networks is referred to as cybercrime. “Online fraud, online harassment, identity theft, and cyber espionage” are just a few examples of the various forms that cybercrime may take. Because many cybercrimes are done online, covertly, and without witnesses, they can be challenging to detect and punish. Law enforcement is having difficulty keeping up with the increasing rate of cybercrime.2
1.1 SIGNIFICANCE OF THE STUDY
This study has significance because it addresses the urgent need for a strong legal framework to tackle the growing threat of cybercrimes in Indian and worldwide contexts. Because cybercriminals' techniques and level of expertise are always changing along with the digital world, it is crucial that legal processes be strengthened and regularly adapted. This research emphasizes the advantages and disadvantages of current legislation and points out areas that require attention by offering a comparative examination of international and Indian viewpoints on cyber jurisprudence.
1.2 OBJECTIVE
OF THE RESEARCH The following are the study's major objectives: • To comprehend the idea of cyber jurisprudence and its significance in the era of digital technology. • To evaluate and contrast India's and other countries' legal systems about cybercrimes. • To assess how well the current legal framework works to deter and punish cybercrimes. • To identify vulnerabilities in the existing legal systems and make recommendations for
2 Ms. Preeti Jain, “Cyber Crimes – Indian Perspective” MANUPATRA,183, 183-184 (2016)
https://docs.manupatra.in/newsline/articles/Upload/4CF7696D-4B8E-4ABA-BCBA-E12AE1C7988F.pdf possible changes.
1.3 SCOPE
AND EXTENT OF THE STUDY This research compares the legal systems of India and other countries with regard to Cybercrimes. Its scope includes a thorough analysis of Cyber Jurisprudence. Important international treaties, conventions, and agreements—like the “Budapest Convention on Cybercrime—as well as Indian laws—most notably “the Information Technology Act, 2000,” and its later amendments—will be examined in this research. Comparative Analysis: The research will evaluate and compare India's and other countries' legal responses to cybercrimes. Legal Framework Effectiveness: The impact of present cyber laws in the settings of India and other countries will be evaluated, as well as how well they handle new and developing cyber threats. Policy Implications: The study will point out weaknesses in the existing legal systems and provide recommendations for possible changes.
1.4 STATEMENT OF PROBLEM
Although the “Information Technology Act, 2000” offers a legal framework for dealing with cybercrimes in India, its applicability, enforcement, and flexibility in response to new threats are all limited. The goal of this research is to identify possibilities, problems, and gaps in the current legal frameworks in order to overcome the absence of a coherent and thorough approach to cyber jurisprudence. The creation of more resilient and unified regulations that can address the ever-changing nature of cyberthreats both globally and in India can be influenced by comparative study.
1.5 RESEARCH QUESTIONS
This Paper seeks to answer the following questions: Ø Whether the international and Indian legal frameworks for cybercrimes differ significantly in terms of scope, effectiveness, and enforcement?
Ø Whether India faces specific challenges in aligning its cyber jurisprudence with international standards while also addressing its unique legal and cultural context? Ø Whether the gaps and inconsistencies between international and Indian cyber laws can be effectively bridged to create a more cohesive and robust legal response to cybercrimes?
1.6 RESEARCH HYPOTHESIS
H1: The accessibility, efficiency, and application of Indian and international legal frameworks for combating cybercrimes varies significantly. H2: India's specific legal and cultural background makes it difficult for the country to harmonize its cyber law with international standards.
1.7
RESEARCH
METHODOLOGY
This study will use a “Doctrinal Research Methodology,” focusing on a comprehensive legal analysis. It involves a detailed examination of international conventions, national laws, judicial decisions, and regulatory practices related to cybercrimes.
1.8 LITERATURE REVIEW
Dr. P. Vasantha Kumar, “Cyber Jurisprudence of the 21st Century” The author of this article examined the idea of cyber jurisprudence from a modern standpoint. The author has provided detailed explanations of several concepts, including cyber science, Cyber jurisprudence, and cyber territory. The author has also gone into additional detail about the problems with cyberlaws in relation to cybercrimes in this modern day. However, the readers would have benefited more from this article if the author had discussed how the idea of cyber jurisprudence has evolved and what new legal trends are related to it. • Ms. Preeti Jain, “Cyber Crimes – Indian Perspective” This article focuses on cybercrimes with respect to Indian Laws. Author has done well in explaining about the different categories of cybercrimes in India as well as Cyber laws relevant to those crimes.
This Article shed lights mainly on Information Technology Act 2000 and
author has talked about this in detail. Although this article is exceptionally good in its sense but it would be easy for the readers to understand the concept better if author has mentioned some case studies and judicial approach to the cybercrimes in India. • Darrel C. Menthe, “Jurisdiction in Cyberspace: A Theory of International Spaces” The author of this paper primarily discussed cyberspace jurisdiction from an international viewpoint. The Principles of Jurisdictions and the evolution of cyberspace on an international scale are explained in depth in this article. The author has specifically addressed copyright regulations to aid with comprehension. To help readers better comprehend how international conventions are assisting in the development of laws about cyberspace, the author could have added the international conventions governing cyber laws in this article.
• Amalan Jyoti Baruah, Animesh Sarmah, Roshni Sarmah, “A Brief Study on Cyber Crime and Cyber Laws of India” The particular subject of this multi-author article is cybercrimes and cyber legislation in India. Different types of cybercrimes and their progression throughout time have been discussed by authors. This article concentrates on the Information Technology Act of 2000 and its many provisions. Though the “Indian Evidence Act (Now Bharatiya Sakhsya Sanhita 2023)” and “Indian Penal Code,(Now Bharatiya Nyaya Sanhita 2023)” which discuss organized crime and online evidence, would have been covered, as well as the international component of cyber laws, this article would have been of greater assistance.
1.9 SCHEME OF PRESENTATION
Chapter I: Introduction Chapter II: Historical Development The development of cyber jurisprudence is examined in this chapter, which links significant international agreements, the "Information Technology Act of 2000 in India," and early online laws and cybercrimes. Chapter III: Cyber Jurisprudence: Legal Framework-Indian Perspective This Chapter Discusses the Indian Legal Framework governing cybercrimes and cyberspace. Chapter IV: International Approach: Cyber Laws This Section provides an overview of cyber laws in countries like “US, UK, Malaysia and China. ” Chapter V: Challenges Faced by Indian Cyber Laws with Reference to Cyber Crimes This Chapter delves into issues related to the enforcement of laws against Cybercrimes in India Chapter VI: Cyber Jurisprudence: Age of Social Medial This section mentions impact and changing trend of Cyber Jurisprudence in the age of Socialmedia.
Chapter VII: Conclusion and Suggestions CHAPTER II HISTORICAL DEVELOPMENT Given that both the internet and cyber law are relatively new ideas, the history of cyber jurisprudence is rather recent. But there have already been a few significant rulings and regulations that have influenced how people currently view and utilize the internet. The case “Cubby, Inc. v. CompuServe, Inc,”3 was among the earliest cases concerning the internet. The central question in this case is whether CompuServe could be held accountable for the deeds of its users. In the end, the court decided that CompuServe was not responsible for the conduct of its users, which established a standard for how people currently view internet service providers.
2.1 INTIAL ADVANCEMENT IN CYBER LAW
When the internet became commercially viable in the 1990s, it created new legal obstacles in addition to previously unheard-of chances for trade, communication, and information sharing. Due to the internet's borderless character, traditional laws based on physical jurisdiction found it difficult to keep up with the decentralized, global nature of cyberspace. Theft of intellectual property, unapproved access to computer networks (hacking), and the dissemination of offensive material were the main legal concerns in the past. These difficulties demonstrated how inadequate the current legal frameworks were to deal with activities in the digital sphere, which led to the requirement for new laws designed with cyberspace in mind. Cybercrimes increased in sophistication and diversity as internet usage increased.
Early cybercrimes were frequently perpetrated by people taking advantage of vulnerabilities in computer systems for a variety of reasons, from financial gain to intellectual curiosity. One of the first widespread computer viruses to seriously damage internet networks was the “Morris Worm, which occurred in 1988” and is considered a notable example of an early cybercrime. This tragedy made governments take regulatory action by highlighting the
3 Cubby, Inc. v. CompuServe, Inc, 776 F. Supp. 135 (S.D.N.Y. 1991).
potential scope and consequences of cybercrimes. “THE MORRIS WORM ATTACK AND COMPUTER FRAUD AND ABUSE ACT 1986” “On November 2, 1988,” maliciously smart software was released online from a Massachusetts Institute of Technology (MIT) computer. Before a while, this cyber virus was causing machines to crash and spread remarkably quickly. Later that evening, an anxious University of California, Berkeley student sent an email stating, “We are currently under attack. ” Of the roughly 60,000 machines that were then linked to the Internet, an estimated 6,000 had been compromised in less than a day. Unlike viruses, computer worms may live and spread on their own without the aid of a software host. Although the worm was limited to machines running a particular version of the “Unix operating system,” its numerous attack routes allowed it to proliferate.
The worm was powerful even though it did not corrupt or destroy data. Important military and academic operations came to a standstill. Days passed before emails arrived. The network community worked hard to decipher the worm's mechanism and devise a method to eliminate it. While some organizations reset their systems, others kept their personal computers off the network for up to a week. Following the incident's public disclosure, the “Federal Bureau of Investigation” began its investigation. As soon as it was established that Morris was the perpetrator of the assault, agents started questioning him and his colleagues and decrypting his computer files, which produced a wealth of information that implicated him. “The Computer Fraud and Abuse Act, approved by Congress in 1986,” made it illegal for outsiders to access computers that are secured. Morris was charged by prosecutors in 1989.
He was found guilty by a jury the following year, becoming the first person to be found guilty under the 1986 statute. 4 In the development of cyber laws, the United States led the way, passing the “Computer Fraud and Abuse Act (CFAA) in 1986. ” One of the first attempts to categorize and make unauthorized access to computer systems and other cybercrimes illegal was the “Computer Fraud and Abuse 4 FBI, https://www. fbi. gov/news/stories/morris-worm-30-years-since-first-major-attack-on-internet-110218 (Last Visited on September 3, 2024) Act of 1986. ” By creating a model that other nations may emulate, the “Computer Fraud and Abuse Act” laid the groundwork for legislative frameworks that could tackle the issues raised by the rapidly changing digital realm. It made actions like fraud, hacking, and system destruction illegal and set the precedent for later global cyber laws.
2.2 FORMATION OF INTERNATIONAL CYBER CRIME CONVENTION
Early attempts at international collaboration were mostly informal and dispersed before the formalization of the international Agreement against cybercrime. Collaboration between law enforcement organizations from other nations was frequently hindered by disparities in legislative frameworks, cybercrime definitions, and technology advancements. At the “G8 Summit in 1997,” member nations acknowledged the rising threat of cybercrime and decided on the necessity of a coordinated global response, making it one of the first major international conferences to address the subject of cybercrime. Numerous bilateral agreements and regional initiatives ensued, although their reach and efficacy were frequently constrained.
5 “BUDAPEST CONVENTION (2004)”: In order to tackle cybercrime, the “Council of Europe” played a significant role in the development of the “Budapest Convention on Cybercrime, which was made available for signing in November 2001 and finally came into force in 2004. ”6 The earliest and most important international agreement devoted exclusively to combating cybercrime is the “Budapest Convention. ” In the battle against cybercrime, it offers a framework for coordinating national legislation, advancing investigative methods, and strengthening global collaboration. The convention is the first multilateral international pact against cybercrime that has legal force. It makes some cybercrime behaviors illegal and organizes international cybercrime investigations.
It provides a framework for international collaboration amongst state signatories to this treaty and acts as a roadmap for any nation creating comprehensive national legislation against 5 DHRISTI, https://www. drishtiias. com/daily-news-analysis/convention-on-global-cybercrime (Last Visited on September 3 2024)
6 COUNCIL OF EUROPE, https://www.coe.int/en/web/cybercrime/the-budapest-convention (Last Visited on
September 3 2024) cybercrime. A “Protocol on Xenophobia and Racism Committed” via Computer Systems is an addition to the “Budapest Convention. ” Signatory nations to the “Budapest Convention” are required to enact laws that make online actions such as data tampering, unauthorized access, and child pornography illegal. It also describes the steps law enforcement organizations should take to look into cybercrimes, standardizing protocols and encouraging global collaboration. A round-the-clock network for prompt reaction to cybercrime situations is made possible by the treaty, which also creates procedures for mutual aid, cooperative investigations, and the extradition of cybercriminals. An important turning point in the worldwide battle against cybercrime has been the creation of international agreement, most notably the Budapest Convention.
These treaties have given rise to a much-needed legal framework that will facilitate better international collaboration, standardize investigation methods, and harmonize national laws. But these frameworks will always need to change as the digital world does, and new international accords will need to be created that take into account the various legal and cultural circumstances that exist in every country.
2.3 EVOLUTION OF INDIAN CYBER LAW
The need for internet regulation became evident in the late 1990s, which is when India's cyber legislation first emerged. “In 1996, UNCITRAL, the United Nations Commission on International Trade Law, created the Model Law on Electronic Commerce. This Model Law was adopted by the UN General Assembly on January 30, 1997, through resolution A/RES/51/162.”7 This resolution suggested that, in light of the necessity for legal uniformity pertaining to alternatives to paper-based methods of communication and information storage, all States give the aforementioned Model Law favorable consideration when they create or amend their laws. As a result, the Indian government's Ministry of Commerce drafted the “E-commerce Act, 1998,” the first part of law, by these recommendations.
7 DR. S.R. MYNENI, INFORMATION TECHNOLOGY LAW (CYBER LAWS) 62-63 (3rd Edition 2023)
The Bill was drafted by the “Department of Electronics in mid-July 1998,” marking the first move. But it wasn't until December 16, 1999, when a new “Information Technology Ministry” was established, that it was introduced in the House. The Commerce Ministry made considerable adjustments to the draft to reflect their comments, especially about e-commerce and compliance with “World Trade Organization (WTO)” principles. The combined proposal was then reviewed by the Ministry of Law and Company Affairs, and on May 13, 2000, the Union Cabinet approved it. The Indian Parliament's “Information Technology Bill” was rapidly passed by both Houses and, on June 9, 2000, the President signed it into law. The Bill was officially signed into law on October 17, 2000, and was subsequently titled the “Information Technology Act, 2000 (IT Act).
”8 There have been several requests for improvements to be made to this Act since it was passed in order to ensure that it will effectively reduce the threat posed by cybercrime. Concerns about privacy and data leaks also began to make headlines. The “business process outsourcing (BPO)” industry in India, which was required to submit certificates of data security and privacy to compete for international projects that were being outsourced from Western nations, further fueled the calls for changes to the original Act. Following the enactment of the “Negotiable Instruments Miscellaneous Provisions Amendment Act, 2002 (55 of 2002),” an important section of the law, a significant revision was made to the Act, taking effect on February 6, 2003. The “Negotiable Instruments Act of 2002” was amended to acknowledge electronic checks for the first time.
Later, based on the suggestions made by a committee of experts that the “Ministry of Information Technology” had assembled. On December 23, 2008, the Indian Parliament enacted the “Information Technology (Amendment) Bill, 2006. ” Following the president's approval in February 2009, it became operative.
8 Aishwarya Agrawal, Evolution of Cyber Law in India, LAWBHOOMI (September 3 2024; 9:05PM)
https://lawbhoomi.com/evolution-of-cyber-law-in-india/#How_Cyber_Law_Evolved_in_India
CHAPTER III
LEGAL FRAMEWORK
INDIAN PERSPECTIVE Since its foundation, cyber law in India has experienced substantial changes as it has adapted to the ever-changing internet and technological world. India's dedication to tackling the issues brought on by the digital era is evident in the process of developing the original laws and the most recent modifications. Here are a few of the most significant legislation and initiatives about cyber jurisprudence in India: i. “Information Technology Act, 2000”: The principal legislation in India that regulates cyber activity and addresses cybercrimes is the “Information Technology Act, 2000 (IT Act). ” It defines cyber offenses, establishes the punishments for cybercrimes, and gives legal status to electronic transactions. ii.
“Indian Cyber Crime Coordination Centre”: The government of India formed the “Indian Cyber Crime Coordination Centre” as a specialized organization to coordinate and bolster the nation's efforts to combat cybercrimes. It aims to improve cyber law enforcement, capacity building, and cyber infrastructure. iii. “National Cyber Security Policy”: India has developed a “National Cyber Security Policy”
3.1 JURISDICTION IN CYBER SPACE
INDIAN CONTEXT OF CYBER JURISDICTION The term “jurisdiction” is defined in the “Code of Civil Procedure, 1908” rather than in the Cyber Laws or Information Technology. Functionally, cyberspace is a place where webpages and messages are posted for anyone in the world to see, provided they can find them. Cyberspace is not physically located anywhere, but rather is accessible to anyone with an internet connection. In current usage, the term “cyberspace” refers to the global network of interdependent computer processing systems, telecommunications networks, and information technology infrastructures. 10 Unless cyberspace is seen as an international arena, jurisdiction is the primary conceptual challenge for both local and foreign courts. Cyberspace reduces all conventional notions of conflicts of law to absurdity.
The laws that might apply to a basic homemade webpage are all of them, in contrast to conventional jurisdictional issues that could involve two, three, or more competing jurisdictions. Cyberspace jurisdiction necessitates precise guidelines based on international law. These principles are the only ones that can convince courts throughout the world to provide consistent answers to issues of sovereignty over cyberspace. When a suspected crime was committed online, internet jurisdiction is utilized to establish which legal body would have the authority to hear a case involving a defendant and plaintiff. Generally, the person who files a lawsuit, known as the plaintiff, seeks to hold someone accountable for a crime by appealing to the court that has jurisdiction over the location of the incident.
The originator of the website may reside in a different nation or area than the person who is the target of the alleged crime, making it challenging to pinpoint the exact location of internet crime. There are several ways to demonstrate the use of the Internet for business, including interactions between the website administrators and local companies through the website itself. Additionally, it may be shown if operators visited the area on work visits and sent faxes or phone calls. There are many alternative ways to demonstrate the intention to do business, and they are frequently decided upon on a case-by-case basis by the relevant court.
10 Tanya Gupta, Jurisdiction of Civil Courts Under Code of Civil Procedure, IPLEADERS( September 3,
2024;11:36PM) https://blog. ipleaders. in/jurisdiction-of-civil-courts-2/#Meaning_of_jurisdiction Cyber Jurisdiction and Criminal Procedure Code 1973 (Now Bharatiya Nagrik Suraksha Sanhita 2023) The following provisions of the “Criminal Procedure Code 1973 (Now Bharatiya Nagrik Suraksha Sanhita 2023)” are relevant for examining the consequences of cybercrimes from a criminal perspective. i. Ordinary Place of Inquiry and Trial “(Section 197 of Bharatiya Nagrik Suraksha Sanhita of 2023)” According to this Section “Every offense is typically investigated and prosecuted by the court that has local jurisdiction over the location where it was committed. ”11 ii.
Place of Inquiry or Trial “(Section 198 of Bharatiya Nagrik Suraksha Sanhita of 2023)” This Section states that “When it's unclear where an offense was committed among many localities, or When a crime is partially committed in one locality and partially in another, A court with jurisdiction over any of these local areas may investigate or try an offense if it is ongoing and being committed in many local areas, or if it consists of multiple actions performed in various local areas. ”12 iii. Offence triable where act is done or consequence ensues “(Section 199 of Bharatiya Nagrik Suraksha Sanhita of 2023)” cheating and dishonestly involving the delivery of property may be investigated or tried by a court within whose local jurisdiction the accused person received or the deceived party delivered the property. 14
3.2 INFORMATION TECHNOLOGY ACT 2000
India's main law controlling cyber activity is the “Information Technology Act, 2000. ” It covers a broad variety of topics, such as cybercrimes, data security, and internet commerce. Because the internet is global in scope, the jurisdiction issue has to be specifically addressed in the Information Technology Act. ” The Act aims to enact Indian cyber laws as an umbrella legislation. The purpose of the “Information Technology Act,” according to the preamble, is “to provide legal recognition for transactions carried out using electronic data interchange and other means of electronic communication, commonly referred to as “electronic commerce,” which involves the use of alternatives to paper-based methods of communication and information storage, to facilitate the electronic filing of documents with government agencies.
15 “Sui Juris” Approach “Sui juris” means having complete legal ability and being independent. A “Sui Juris” approach in relation to the “Information Technology Act 2000” suggests that India's cyber law legal framework functions autonomously and has a clearly defined jurisdictional reach that allows it to handle cybercrimes that originate in or impact India, regardless of the perpetrator's or the computer system's location. By extending its jurisdictional reach widely, the “Information Technology Act” takes a “Sui Juris” perspective on enabling Indian authorities to prosecute cybercrimes that significantly affect the nation, even when they are perpetrated outside its boundaries. Given the worldwide scope of cyber dangers, this strategy is crucial for their efficient management. 16
14 Bharatiya Nagrik Suraksha Sanhita,2023, § 202(1), No. 46, Acts of Parliament,2023(India)
15 Abhilash.K.S, Cyber Jurisprudence An Internalization In Indian Matrix, LEGALSERVICEINDIA (September 4 2024;1:20AM) https://www.legalservicesindia.com/article/1987/Cyber-Jurisprudence-An-Internalisation-In- Indian-Matrix.html#google_vignette
16 DR. S.R. MYNENI, INFORMATION TECHNOLOGY LAW (CYBER LAWS) 43-46 (3rd Edition 2023)
“Section 1(2) of the Information Technology Act 2000” According to “section 1(2) of the Information Technology Act, 2000, the Act embraces the entirety of India and any offense or violation committed by anybody outside India. ”17 Civil Court not to have Jurisdiction “(Section 61 of The Information Technology Act 2000)” “An adjudicating officer appointed under this Act or the Cyber Appellate Tribunal constituted under this Act is empowered by or under this Act to determine any matter regarding which a suit or proceedings may be brought, and no court or other authority may grant an injunction regarding any action taken or to be taken in pursuance of any power conferred by or under this Act.
”18 Act to Apply for Offence or Contravention Committed outside India “(Section 75 of The Information Technology Act 2000)” “According to Section 75, regardless of a person's nationality, any offense or violation committed outside of India will be subject to the provisions of Subsection (2) and the provisions of this Act. According to subsection (1), this act will be applied to any offense or violation committed outside of India by any individual if the offense or violation includes a computer, computer system, or computer network situated in India. ”19 “Section 13 of the IT Act of 2000” is relevant when discussing the jurisdiction of the Internet or Cyberspace. “Section 13 of the Information Technology Act of 2000 has sub-sections (3), (4), and (5)” that pertain to the cause of action clause. This provision is crucial in establishing jurisdiction while conducting online transactions.
“Section 13(3) states that, unless the parties have otherwise agreed, an electronic document is considered to have been sent from the originator's place of business and to have been received from the addressee's place of business. ”20
17 The Information Technology Act 2000, § 1(2), No.21, Act of Parliament 2000(India)
18 The Information Technology Act 2000, § 61, No.21, Act of Parliament 2000(India)
19 The Information Technology Act 2000, § 75, No.21, Act of Parliament 2000(India)
20 The Information Technology Act 2000, § 13(3), No.21, Act of Parliament 2000(India)
“Section 13(4) states that Even if the location of the computer resource may differ from the location where the electronic record is presumed to have been received by sub-section (3), the requirements of sub-section (2) (i. e. , computer resource) will still be applicable. ”21 “According to Section 13(5), the major place of business is taken into account if the originator or recipient has many places of business. Their regular place of residence is taken into consideration if they don't have a location of business. Regarding a body corporate, the registered location is referred to as the usual place of residence.
”22 Personal jurisdiction cases in the context of the Internet frequently involve owners of websites or internet-based services that either openly or covertly promote the nationality of their company, but they contend that they don't have enough ties to a given state to be subject to legal action there. As the Internet has expanded, courts have had to grapple with how to apply the well-established notions of personal jurisdiction to a global communication platform that allows people and companies to instantly communicate across state lines. In India, the “Information Technology Act of 2000” encompasses many of the emerging ideas such as e-commerce, e-governance, e-record, digital signature, and electronic signature. This legislation aligns with the “Model Law on E-commerce from 1996.
” The Information Technology (Amendment) Act, 2008 further modified it, bringing Indian law into compliance with the “Model Law on Electronic Signature (2001). ”23 However, to properly implement the Information Technology Act of 2000, some traditional laws—such as the “Indian Penal Code of 1860 (Now Bharatiya Nyaya Sanhita 2023),” the “Indian Evidence Act of 1872 (Now Bharatiya Sakshya Adhiniyam 2023),” “the Reserve Bank of India of 1934,” “the Banker's Book Evidence Act of 1891,” and the “Negotiable Instrument Act of 1881”—had to be amended, or other laws had to be interpreted more broadly. Amendment of Some Conventional Laws: a. Amendment of the “Bharatiya Sakshya Adhiniyam 2023:” Oral testimony and documentary 2023” officially acknowledged before the change. The electronic record was not acknowledged as evidence by law or regarded as official documentation.
As a result, the “Indian Evidence Act of 1872(Now Bharatiya Sakhsya Adhiniyam 2023)” was amended to provide electronic recordings legal status and permit their acceptance as evidence. b. Amendment of the “Bharatiya Nyaya Sanhita 2023:” Conventional law allows for the possibility of offenses against legal documents. Nevertheless, as the electronic record fell beyond the “Indian Penal Code's (Now Bharatiya Nyaya Sanhita 2023)” jurisdiction, no crime against electronic records was identified. However, new offenses against electronic records were also included in the “Indian Penal Code's (Now Bharatiya Nyaya Sanhita 2023)” jurisdiction following the modification that gave electronic records legal legitimacy. c. Amendment of the “Reserve Bank of India Act, 1934:” Electronic fund transfers between financial institutions were not permitted by law prior to the modification.
In order to provide legal recognition and enable electronic fund transfers between financial institutions, the “Reserve Bank of India Act, 1934” was modified. d. Amendment of the “Bankers Books Evidence Act, 1891:” “The Bankers' Books Evidence Act, 1891” was revised to provide legal sanctity for books of accounts kept by banks in electronic form because, under conventional law, e-books of accounts were not recognized.
3.3 CYBER CRIMES
INDIAN LEGISLATIONS Cybercrimes, sometimes referred to as computer crime, e-crime, hi-tech crime, or electronic crime, are covered under the “Information Technology Act 2000, which has been amended by the IT Act 2008. ” Cybercrimes comprise any illegal conduct if the source, instrument, object, or location of the crime is a computer or network. Illegal access, interception, data interference, system interference, mishandling of devices, forgeries, and electronic fraud are a few examples. Conventional crimes including embezzlement, blackmail, fraud, theft, and forgery also entail using computers or networks to support illegal activity. The act seeks to defend people against online crimes as well as society at large.
The “Information Technology Act, of 2000” offers a strong legal framework to combat different types of cybercrimes in India, together with pertinent parts of the “Bharatiya Nyaya Sanhita 2023. ” This framework has been essential in helping us adjust to the difficulties brought about by the digital era. To sustain an effective legal response to cybercrime, however, continual updates and revisions to existing laws as well as international collaboration are necessary given the ever-evolving nature of cyber threats. Cyber Crimes and Penalties Under “The Information Technology Act 2000” The Act stipulates severe penalties for cybercrimes, including a maximum of ten years in prison and a fine of up to one crore. Provisions for increased penalties for subsequent or repeated offenses have been introduced for several offenses.
The Act stipulates severe punishments for several offenses, which are included in Chapter XI and are listed in the table below: SECTIONS OFFENCE PUNISHMENT Interfering with computer source documents, Imprisonment Fine which have legal requirements for preservation
3 years
2 lakhs/or Both
Damage to a computer, computer system, etc. is
3 Years
5 lakhs, with the
penalized. aggrieved person receiving compensation of up to one crore or Both 66D Personation-based cheating
3 Years
With Fine Up to 1 lakh 66 E Taking pictures of someone else's private space
3 Years
With Fine Up to 1 and publishing them without their permission is lakh a privacy violation. 66F Cyber Terrorism (as defined in Sec 66 F) Life Imprisonment Punishment for publishing or transmitting I Offence – 3 With fine up to 5 obscene material in electronic form years lakhs Failure Comply direction of Controller
2 years
Fine up to 1 lakh or Both Failing to cooperate with the Controller's
7 Years
With Fine instructions to decrypt material in the sake of India's security and sovereignty, etc.
72A
Penalties for violation of contract disclosure
3 Years
Fine Up to 5 lakh or Both Penalties for disseminating misleading
2 Years
Fine up to 1 Lakh or information about a digital signature certificate Both in specific details. Publication for fraudulent purpose
2 Years
Fine Up to 1 Lakh or Both Cyber Crimes Under “Bharatiya Nyaya Sanhita 2023” In addition to the penalties outlined in the “Information Technology Act of 2000,” some offenses are also covered under the “Bharatiya Nyaya Sanhita 2023. ” The provisions are listed here, along with the several cybercrimes that fall within each Section's purview and their corresponding penalties. “Section 294 of Bharatiya Nyaya Sanhita 2023” Originally intended to deal with the selling of pornographic materials, this section has expanded to include a variety of cybercrimes, such as the electronic publishing and transfer of pornographic or exploitative activities featuring minors. Both the “Information Technology Act and The BNS 2023” identify these crimes as separate offenses, and they carry sentences of up to two years in jail as well as penalties of Rs. 2000.
If the offense be committed twice, the maximum penalty is five years in jail and a fine of Rs. 5000. 24 “Section 77 of Bharatiya Nyaya Sanhita 2023” Section 66E of the Information Technology Act of 2000” may be used. For first-time offenders, the penalty is one to three years; for repeat offenders, it is three to seven years. 25 “Section 78 of Bharatiya Nyaya Sanhita 2023” The section describes the penalties for “stalking,” which includes both online and offline stalking. It says that cyberstalking is when someone follows a lady online or bothers her when she doesn't want to be disturbed. For both the first and second infractions, the penalty consists of jail time and a fine. 26 In “Kalandi Charan Lenka v. The State of Odisha,”27 the plaintiff claims that she got offensive texts from an unidentified number that have harmed her reputation.
In addition, the accused wrote emails and made a phony Facebook account with altered images of the victim. As a result, the High Court concluded that the accused was first guilty of cyberstalking in accordance with certain “Information Technology Act provisions and Section 354D of the IPC (Now Section 78 of Bharatiya Nyaya Sanhita 2023)” “Section 319(2) and 318(4) of Bharatiya Nyaya Sanhita 2023” The “BNS” has relevant laws that deal with frauds, including email phishing and password theft, under “Sections 318(4) and 319(2). ” “Section 319(2)” addresses cybercrimes such as phishing emails and building fake websites. “Section 318(4)” addresses cyberfraud. The seriousness of the offense determines the penalty, which ranges from three years in jail or a fine under “Section 319(2) to seven years in prison or a fine under Section 318(4).
” “Section 352 of Bharatiya Nyaya Sanhita 2023” “Section 79 of Bharatiya Nyaya Sanhita 2023” This Section addresses the transgression of speaking, gesturing, or doing an act that might be seen as insulting to a woman's modesty. It also encompasses the noises produced and actions taken that violate a woman's privacy. If this violation is committed physically or electronically, “Section 79” applies, and the maximum sentence under that section is one year in jail, a fine, or both. 29
3.4 JUDICIAL INTERPRETATION AND LANDMARK CASES
In India, judicial interpretation has a significant influence on the development of cyber law. Important legal precedents have been established by courts as they have addressed a range of concerns pertaining to digital rights, privacy, and the applicability of current laws to cybercrimes. i) “Shreya Singhal v. Union of India (2015)30” Fact the Case: Two teenage girls in Mumbai were taken into custody in 2012 after they made remarks on Facebook about the city's closure for “Shiv Sena leader Bal Thackeray's” funeral. “Section 66A of the Information Technology Act,” which made sending threatening or offensive remarks online illegal, was the basis for the charges brought against them. Widespread indignation and requests for the abolition of “section 66A” were triggered by the arrests.
Shreya Singhal, a law student, filed a suit with the Supreme Court of India, contesting its legality and asserting that it was vague and restricted free speech. As the government was informed and further cases were brought under “section 66A” by the court, there was an increasing public uproar and a deluge of petitions contesting the validity of the law. Issue Raised: Whether the “Information Technology Act of 2000's Section 66A,” which made it illegal to disseminate offensive communications over communication services, is constitutional” Judgement: “The Supreme Court ruled that Section 66A was unconstitutional because it infringed upon Article 19(1)(a) of the Constitution, which guarantees the right to freedom of
29 Bharatiya Nyaya Sanhita 2023, § 79, No. 45, Acts of Parliament 2023(India)
30 Shreya Singhal v. Union of India (2015), AIR 2015 SC 1523
speech and expression. The Court determined that the provision would be arbitrarily enforced because it was too broad and ambiguous. ”31 ii) “Anvar P. V. v. P. K. Basheer (2014)”32 Fact of the Case: “Anvar P. V. ,” the petitioner in this case, contested the admission of several electronic documents that “P. K. Basheer,” the respondent, had produced as evidence. Among the electronic documents were CDs with vital information for the investigation. The primary issue under dispute was whether “Section 65B of Indian Evidence Act,” which requires certain protocols for admitting electronic evidence, could be used to accept these CDs as evidence without the required certification. Judgement of the Case: The standards of “Section 65B” must be met for electronic evidence to be admissible, according to the ruling of the Supreme Court of India.
The Court concluded that: For electronic records to be admitted in court, a certificate by “Section 65B” must be included. It is not possible to accept the electronic evidence as legitimate or trustworthy if such a certificate is not shown. The ruling highlighted the fact that secondary evidence consisting of electronic records would not be allowed if it did not have a valid “Section 65B certificate. ” iii) “Firos vs. State of Kerala (2006)”33 Declaring the “FRIENDS application software” to be a protected system under “Section 70 of the Information Technology Act,” the Keralan government released a notification. The software creator petitioned the High Court to have this notification's constitutionality contested. The court affirmed the legality of the notification and both parts, holding that “Section 70 is governed by the Copyright Act's requirements.
” A system other than “Government work” cannot be unilaterally designated as “protected” by the government under “Section 2(k) of the Copyright Act,” which acknowledges government copyright.
31 Suhani Dhariwal, Shreya Singhal vs Union of India – Case Explained, WRITINGLAW (September 4
2024;11:47PM) https://www.writinglaw.com/shreya-singhal-vs-union-of-india/
32 Anvar P.V. v. P.K. Basheer, [2014] 10 SCC 473.
33 Firos vs. State of Kerala, AIR2006 Ker 279, 2006.
iv) “P. R. Transport Agency Vs. Union of India & others”34 In an electronic coal auction conducted by Bharat Coking Coal Ltd (BCC), P. R. Transport Agency (PRTA) emerged victorious with an offer of 4000 metric tons from Dobari Colliery. PRTA sent BCC a check for Rs. 81. 12 lakhs, which BCC accepted and cashed. But instead of delivering the coal to PRTA, BCC emailed them to inform them that the e-auction and sale had to be canceled for technical reasons. PRTA filed a challenge to this communication with the Allahabad High Court, claiming that it had crossed the court's "territorial jurisdiction". According to the court, part of the cause of action had arisen in Uttar Pradesh (U. P. ), and the court had geographical jurisdiction because the acceptance was received at Chandauli/Varanasi and the contract became complete with receipt of the acceptance.
v) “Internet and Mobile Association of India v. Reserve Bank of India (2020)”35 Facts of the Case: The “Reserve Bank of India (RBI)” published a circular in April 2018 prohibiting all Indian banks and financial institutions from offering services to businesses engaged in virtual currencies, including exchanges that trade in cryptocurrencies. The hazards of cryptocurrencies, such as those related to money laundering, consumer protection, and market volatility, were mentioned by the RBI. It became challenging for anyone to trade or invest in cryptocurrencies as a result of the circular, which effectively blocked off cryptocurrency exchanges and individuals from the established financial system. The digital services industry is represented by the Internet and Mobile Association of India, a non-profit, which filed a lawsuit in the Supreme Court contesting the RBI's circular.
According to “Article 19(1)(g) of the Constitution,” the petitioners claimed that the prohibition was arbitrary and infringed upon their basic freedom to engage in commerce and business. Issues Raised: The main issue was whether the RBI had the authority to restrict the functioning of cryptocurrency exchanges by cutting off their access to the formal banking sector? Judgement of the Case: The Supreme Court of India ruled in favor of the Internet and Mobile which found that the banking prohibition on transactions involving cryptocurrencies was illegal and infringed upon the petitioners' basic rights. The RBI may regulate and take preventative action to safeguard the financial system, the Court said, but its decisions must be supported by reason and evidence.
The Court claimed that the RBI's circular lacked sufficient evidence to demonstrate that cryptocurrencies directly threatened the financial system. The Court underlined that there was no law in India that forbade the usage of cryptocurrencies and that they were not unlawful. The RBI would not be able to completely prohibit financial services linked to cryptocurrencies without such legislation. 36 CHAPTER IV CYBER JURISPRUDENCE: INTERNATIONAL APPROACH
4.1 JURISDICTION UNDER INTERNATIONAL LAW
A transaction in cyberspace often involves three parties: the user, the server host, and the party they are transacting with. All parties must fall under one cyberspace jurisdiction. The authority to hear a case and render a decision is conferred by jurisdiction on the relevant court. Choosing which cyber jurisdiction will win in a cybercrime case can be difficult because the offender and the victim are sometimes from different nations. Since the internet, as previously mentioned, knows no bounds, no particular country in cyberspace may claim ownership over its use. The user has unrestricted access to anything and everything from anywhere. There won't be a problem until a user's online behavior is lawful and doesn't violate any regulations. But jurisdiction plays a critical role when such acts turn unlawful and criminal.
Types of Jurisdiction International law recognizes three categories of cyber jurisdiction, which are as follows: 36Manasvi Mankar, Internet and Mobile Association of India v. Reserve Bank of India, THE LEGAL QUORUM(September 5 2024;12:53AM) https://thelegalquorum. com/internet-and-mobile-association-of-indiavs-reserve-bank-of-india-2020/ JURISDICTION Personal Jurisdiction Subject-Matter Pecuniary Jurisdiction Jurisdiction
1 Personal Jurisdiction
It is a jurisdiction where the court has the authority to exercise authority on specific entities and individuals. In the case of “Pennoyer v. Neff,”37 the US Supreme Court noted that direct jurisdiction over non-residents does not exist since the US Constitution's due process clause limits personal jurisdiction upon its inference on non-residents. But the minimum contact theory, which gave the authorities authority over non-residents as well, removed this restriction.
2 Subject-Matter Jurisdiction
It is a category of jurisdiction in which the court has the authority to hear and rule on individual issues involving specified matters. The plea will be refused and the plaintiff will have to file a case in the court that is relevant to the matter if the plaintiff sued in a different court but the exact subject matter is handled by another court. For example, since district consumer forums focus on consumer-related disputes, a complaint about a consumer good should be submitted there rather than in district court. In the same way, the National Green Tribunal hears all environmental cases instead of district courts.
3 Pecuniary Jurisdiction
This kind of authority primarily handles financial issues. The suit's structure and is based on the claims made during the proceedings. Essential Criteria for Establishing Jurisdiction in Cyberspace Three criteria must be met in order for a jurisdiction to be considered legitimate. One is required to abide by the laws and policies of the state. If someone breaks one of these laws, the state has the authority to penalize them.
1 Perspective Jurisdiction
A nation may enact laws due to this kind of jurisdiction, especially about an individual's behavior, status, situation, or preference. There is no limit to its jurisdiction. As a result, a nation may pass laws on any subject, even if the act took occurred in a different country or if the person's nationality differs. Nonetheless, no state may enact legislation that is in opposition to the interests of other nations under international law.
2 Jurisdiction to Adjudicate
Within this jurisdiction, the state may make decisions on a party in civil or criminal matters regardless of whether the state was a party; just a relationship between the two is necessary. It is not required that a state with prescribed jurisdiction likewise have adjudicative authority.
3 Jurisdiction to Enforce
This jurisdiction is dependent on prescriptive jurisdiction; therefore, it cannot be used to punish someone who violates its laws and regulations if prescriptive jurisdiction is lacking. Nevertheless, this jurisdiction is not absolute, and a state cannot use its jurisdiction to punish someone for a crime that occurred in another nation. Theories of Cyberspace Jurisdiction a. Subjective territoriality: According to this, the parties will be subject to the laws of the In the case of “United States v. Thomas,”38 wherein the defendant published phonographic material and gave subscribers a password to view and download it in exchange for completing a form containing their personal information, the plaintiff claimed that this violated domestic laws.
The court determined that "the effect of the defendant's criminal conduct reached the Western District of Tennessee, and that district was suitable for accurate fact-finding," thereby establishing the court's jurisdiction over cyberspace. The defendant in the landmark case of “Playboy Enterprise, Inc. v Chuckleberry Publishing, Inc. ”39 ran an offensive photo-sharing website in Italy with some US citizens among its users. The court determined that the website violated US statutes and prohibited it from coming under US jurisdiction; nevertheless, the court lacks the authority to completely prohibit use of the website by users from other states because it does not have cyberspace jurisdiction. c. Nationality: It is used to those who commit crimes while they are citizens of that state. if a state citizen violates domestic law while abroad, that state may choose to punish that citizen. d.
Universality: Acts like child pornography and hijacking are widely acknowledged as crimes. For performing such a horrible act, a cybercriminal can be found guilty in any nation. It is assumed that the nation has the authority to prosecute a cybercrime perpetrator. Tests Determining the Cyberspace jurisdiction Cyberspace jurisdiction in cybercrime matters is determined by a number of tests. These tests are explained below: Minimum Contact Theory The court established three standards following this case: The non-resident defendant must take some action, complete a transaction with the forum, or carry out some other action that consciously grants him the right to conduct activities in the forum, therefore claiming the advantages and safeguards. The defendant's actions in relation to the forum must give rise to the claim, and the jurisdictional exercise must be justified.
The court concluded in the “CompuServe Inc v. Patterson”41 case that contracts pertaining to cyberspace are inside the minimum contacts theory's purview. Sliding Scale Theory (Zippo Test) Zippo Test is another name for Sliding Scale theory. In internet cases, it is the most widely recognized test for determining personal jurisdiction. The websites' interactivity is what determines the jurisdiction. In the forum state, the courts have more personal jurisdiction over interactions the more there are. The courts have virtually no jurisdiction over a passive website; they may or may not have jurisdiction over a middle-spectrum website; but, if the website is extremely interactive, the courts have cyberspace jurisdiction. “Zippo Manufacturing Co. v. Zippo. Com, Inc”42 Fact of the Case: Zippo. Com, Inc.
, a California-based internet business that provided online news services, was sued for trademark infringement by Zippo Manufacturing Company, a Pennsylvania-based manufacturer of lighters. Zippo Manufacturing asserted that Zippo. Com had infringed upon its trademark by using the “Zippo” brand. Zippo. Com had a sizable customer base headquartered in Pennsylvania and had a website where visitors may join up for its services. Zippo. Com, however, was not physically present in Pennsylvania. Because the California-based company's website could be visited and had subscribers in Pennsylvania, the question of whether Pennsylvania courts had jurisdiction over it arose.
Issue Raised: The key legal question was whether operating a website that was accessible nationwide, including in Pennsylvania, was sufficient to establish “minimum contacts” with the state, thereby allowing Pennsylvania courts to exercise personal jurisdiction over Zippo. Com? Judgement: After ruling in Zippo Manufacturing's favor, the U. S. District Court for the Western District of Pennsylvania created the “Zippo Sliding Scale” test to determine personal jurisdiction in matters using the internet. The court decided that whether a court has jurisdiction over a defendant in another state depended on the type and intensity of the defendant's online activity. Because Zippo. Com website let Pennsylvanians to sign up for its services, it was categorized as “interactive. ” Since Zippo.
Com purposefully entered into contracts with Pennsylvania citizens and generated revenue from them, the court found that Zippo. Com had sufficient “minimum contacts” with Pennsylvania. It was for this reason that the court determined Pennsylvania had jurisdiction over Zippo. Com. Effects Test The Effect test has a few requirements that must be met, the primary one being that the action has to be taken specifically against the forum state with the knowledge and intent to harm the state. Personal cyberspace jurisdiction is asserted in cyberspace proceedings when there is no contact if the court determines that the defendant's actions caused harm to the forum state.
“Calder v Jones”43 The US Supreme Court emphasized in this precedent-setting case that a state's court had personal jurisdiction over non-residents. In this instance, an article defaming the inhabitants was published by the editor and writer of a major magazine. According to the case's circumstances, Shirley Jones filed a lawsuit against a national magazine's writer, distributor, and editor Calder for allegedly defaming her as an alcoholic. Although the piece was written and edited in Florida, Jones was a resident of California. Because the magazine was widely distributed throughout the state, Jones filed a lawsuit against the defendants in Californian court. The court decided that the defendants are under the personal jurisdiction of the Californian court.
“Panavision International v Toeppen”44 In this case, Toeppen, the defendant engaged in cybercrime by profitably exploiting the plaintiff's brand and reselling it to him for a substantial sum. The California court determined that it had personal jurisdiction over the non-resident defendant by using the effects test.
4.2 CYBER JURISPRUDENCE
DIFFERENT COUNTRIES United States of America Legislation, court decisions, and regulatory policies have established the legal framework around cyber jurisprudence in the United States. These policies are intended to handle various cyber-related issues, such as jurisdiction, privacy, security, and intellectual property. Legislative Framework The United States has numerous federal and state laws that regulate different facets of cyberspace, resulting in a strong legal framework that manages cyber-related activity.
1. “Computer Fraud and Abuse Act (CFAA) 1986”: One of the main laws controlling
cyberfraud illegal. Data theft, hacking charges, and cyber espionage have all been added to it over time.
2. “Electronic Communications Privacy Act (ECPA)”: Enacted in 1986, the “ECPA” governs
government monitoring and shields electronic correspondence from unapproved access. It also contains clauses allowing law enforcement organizations to have legitimate access to emails and other stored communications.
3. “Digital Millennium Copyright Act (DMCA)”: Digital work that is copyrighted is protected
by the "DMCA," which was passed into law in 1998. It creates a framework for handling copyright infringement on the internet and makes it illegal to get around “digital rights management (DRM)” systems. Additionally, the “DMCA” has safe harbor clauses that reduce online service providers' liability for user-generated content as long as they take prompt action to remove infringement-causing information upon notification.
4. “Children’s Online Privacy Protection Act (COPPA)”: “COPPA, which was passed in
1998,” establishes rules for safeguarding children's online privacy when they are less than
13 years old. Prior to collecting any personal information from children, websites and
online services must get permission from their parents.
5. “Cybersecurity Information Sharing Act (CISA)”: Enacted in 2015, “CISA” promotes
information sharing regarding cyber dangers between public and private sector organizations and the government to strengthen domestic cybersecurity. The statute also contains clauses that shield businesses from legal consequences if they provide the Department of Homeland Security with threat intelligence. Judicial Interpretation When it comes to interpreting cyber laws and resolving cutting-edge legal challenges in cyberspace, the US court has been instrumental. Cyber jurisprudence now has significant precedents due to several landmark decisions. “Reno v. ACLU (1997)”45 The “Communications Decency Act (CDA) of 1996,” which attempted to control offensive and debaucherous content on the internet, was partially overturned by the Supreme Court.
The Court recognized the internet as a medium deserving of the same degree of free speech protections as print media and found that the restrictions violated the First Amendment right to free expression. “Carpenter vs. United States 2018”46 Fact of the Case: Four males were taken into custody in 2011 after committing many robberies at American T-Mobile and RadioShack locations. One of the guys gave federal prosecutors the mobile phone names of their collaborators, which they used to file a SCA request for their accomplices' cell phone information. Timothy Carpenter was among the sixteen people whose CSLI records were collected by the FBI according to an order by federal magistrates. Carpenter was found guilty of encouraging and abetting robbery after the District Court rejected his request to have the data used just for his own benefit.
Carpenter filed an appeal with the Sixth Circuit, claiming that the Fourth Amendment was broken by the use of CSLI data, which was obtained without a warrant. Issue Raised: Whether getting users' location-revealing mobile phone records qualified as a “search” under the Fourth Amendment, and if so, whether access to that data was permitted without a warrant. Judgment of the Case: “The Supreme Court decided that in order for the government to get historical cell-site location information (CSLI) from wireless operators, a warrant must be obtained. In light of contemporary technology, this decision upheld the Fourth Amendment's protection of digital privacy. ”47 United Kingdom In the UK, the set of laws, rules, and court rulings that control behavior in cyberspace is known as cyber jurisprudence.
This body of work focuses on issues such as data protection, cybercrime, digital rights, and internet governance. The United Kingdom has established a
46 Carpenter vs. United States, 585 U. S. (2018)
47 PRIVACY LAW LIBRARY, https://privacylibrary. ccgnlud. org/case/carpenter-vs-unitedstates#:~:text=The%20Court%20held%20that%20individuals,professional%2C%20political%20and%20person al%20associations. (Last Visited on September 6 2024) comprehensive legal framework that tackles the obstacles presented by digital technologies, offering direction to individuals, enterprises, and law enforcement organizations conducting operations on the internet. Legal Framework The UK's approach to regulating cyberspace and managing cyber-related concerns is based on a variety of essential laws: a) “Data Protection Act 2018 (DPA)”: The “General Data Protection Regulation (GDPR)” of the EU is incorporated into UK legislation by the “DPA 2018,” guaranteeing the privacy rights and protection of personal data of persons.
Strict requirements, including obtaining consent, data security, and openness, are mandated for enterprises, organizations, and the government when processing personal data. To maintain cross-border data movement, the “DPA stays compliant with GDPR standards even in the wake of Brexit. ” b) “Computer Misuse Act 1990 (CMA)”: Hacking, data theft, and illegal access to computer systems are all prohibited by the “UK's Cyber Crimes Act (CMA). ” It includes actions such as activities intended to interfere with the proper functioning of a computer system, illegal access to computer data, and intent to conduct other offenses. The increasingly sophisticated nature of cyberattacks has prompted amendments to the CMA. c) “The Investigatory Powers Act 2016 (IPA)”: The IPA, also referred to as the “Snooper's “DPP v.
Lennon (2006)”48 In this case, the defendant's use of a “Distributed Denial of Service (DDoS)” attack to interfere with email systems resulted in a conviction under the “CMA. ” The decision upheld the application of conventional criminal law to online activities, supporting the notion that cyberattacks are illegal under current legislation. Malaysia The body of laws controlling actions in cyberspace in Malaysia is known as cyber jurisprudence, and it focuses on cybercrimes, digital rights, data protection, and internet regulation. Shaped by particular laws, regulatory organizations, and court judgments, Malaysia has proactively established laws and policies to handle issues and threats. a) “Computer Crimes Act 1997 (CCA)” Cybercrimes in Malaysia, such as unlawful access, alteration, and destruction of data, are governed under the “Computer Crimes Act.
” It deals with transgressions like as data deletion, hacking, and illegal access with the intention of committing further crimes. Cybercriminals are subject to fines and imprisonment as penalties, which serve as a legal basis for their prosecution. b) “Communications and Multimedia Act 1998 (CMA)” notification. Penalties and fines may be imposed for violations. In keeping with its emphasis on data privacy for Malaysian individuals, the “PDPA” also forbids data transmission to other countries unless specific requirements are satisfied. d) “Digital Signature Act 1997” This law creates the legal foundation for secure electronic communications and regulates the use of digital signatures. It encourages safe and reliable online transactions by granting legal validity to digital signatures.
e) “Sedition Act 1948 [Amended for Digital Offenses]” Despite being a legislation from the colonial era, the Sedition Act has been used in situations using internet platforms, especially when words made online are considered seditious. This has sparked discussions about free expression in Malaysia's internet environment. “Pendakwa Raya v. Muhammad Radzi bin Abu Bakar (2006)”49 Muhammad Radzi bin Abu Bakar was charged under the “Computer Crimes Act 1997” for unauthorized access to a telecommunications company's computer system. He was found guilty of hacking into the system without permission and causing damage by manipulating internal data for personal gain. The court ruled that Radzi’s actions violated “Section 3 of the Computer Crimes Act,” which prohibits unauthorized access to computer systems with intent to commit a further offense.
The judge emphasized the seriousness of cybercrime in modern society, especially when critical infrastructure is targeted. Radzi was convicted and sentenced to a fine and imprisonment, setting a precedent for future cases under the Act. “Fahmi Reza Case (2016)” According to the court's ruling, there are legal limitations on the right to free speech, but it remains fundamental. China China places a strong focus on internet sovereignty, national security, and state control, which makes its approach to cyber law unique. China has passed a number of regulations that allow the government broad control over the internet, affecting how international organizations, people, and corporations conduct themselves there. a) “Cybersecurity Law of the People’s Republic of China (2017)” China's internet security and control are governed by the Cybersecurity Law, which was passed in 2017.
To strengthen the nation's approach to internet sovereignty, it mandates that businesses keep data within China, carry out security assessments for acquisitions of foreign technology, put security measures in place, safeguard user data, and collaborate with the government on surveillance operations. b) “Data Security Law (2021)” China's Data Security Law prioritizes the protection of both commercial and national security interests by limiting cross-border data transfers and categorizing data according to significance. Penalties and fines may be imposed for violations. Data gathered inside China's borders is protected by law. c) “Personal Information Protection Law (PIPL) (2021)” cooperate with state officials in order to get intelligence.
Global concerns have been raised by this rule, especially with reference to the possibility that Chinese tech companies operating outside, such as TikTok and Huawei, may be forced to share data with the Chinese government.
4.3
COMPARATIVE
ANALYSIS
Diverse nations have diverse approaches to cyber laws, especially when it comes to their efficacy and enforcement. The cyber laws of China, the USA, the UK, Malaysia, and India can be briefly compared to show the main distinctions between these countries' approaches to cybersecurity, data protection, and cybercrime. US And India With several statutes including the “Electronic Communications Privacy Act (ECPA) and the Computer Fraud and Abuse Act (CFAA),” the USA takes a sectoral approach to cyber legislation. Effective data protection is ensured by laws such as the “California Consumer Privacy Act (CCPA),” which is modeled after the “GDPR;” nevertheless, state enforcement differs. The FBI and DHS are two of the federal agencies that police cyber laws in the United States, and they are generally well-established.
On the other hand, inconsistent cybercrime prosecution results from enforcement's decentralized structure. Compared to India, the United States has a significantly stronger enforcement apparatus, The national security requirements and online content regulation imposed by India's IT Act
2000 are not as strict. Although India takes a more balanced stance, trying to safeguard both
individual rights and national security, China enforces cyber laws with an iron grip. However, India encounters difficulties in enforcing these rules because of resource constraints and bureaucratic bottlenecks. UK And India With the introduction of GDPR-like requirements, the UK's Computer Misuse Act 1990 and Data Protection Act 2018 are regarded as being extremely successful in preventing cybercrime and protecting data privacy. Law enforcement and surveillance are greatly aided by the National Cyber Security Centre (NCSC) and Information Commissioner's Office (ICO). Enforcement is robust in the UK due to its well-established legal structure, especially when it comes to online fraud and data protection.
In comparison to India, where a comprehensive data protection law (such as the Personal Data Protection Bill) is still being debated, the UK has a significantly stricter policy in place. While it is improving, Indian enforcement is not as developed and comprehensive as that of the UK. Malaysia And India The Cybersecurity Policy, “Personal Data Protection Act 2010 (PDPA), and Computer Crimes Act 1997” of Malaysia offer a strong foundation for the fight against cybercrime. In contrast to international norms, the rules cover more ground in terms of older cyberthreats, but they are not as thorough. Due to a lack of money and experience, enforcement is mediocre at best. Although it enforces digital legislation, the Malaysian Communications and Multimedia Commission (MCMC) is frequently criticized for failing to take the necessary precautions in complex cybercrime cases.
Although both Malaysia and India have robust legal frameworks for cyber regulations, their limited resources make it difficult for them to be effectively enforced. But compared to Malaysia, India's bigger digital economy puts more strain on its cyber law enforcement. China is the most successful at enforcing stringent control, while the United States and the United Kingdom do a better job of balancing privacy, security, and individual liberties. India is making progress, but there are still issues with data security and criminal prosecution. Although freedoms are sacrificed in the process, China's government supervision guarantees uniform enforcement. With the help of specialized authorities, the USA and the UK firmly enforce the law. India's enforcement is getting better, although there are still issues with interagency cooperation and resource allocation.
CHAPTER V
CHALLENGES
FACED BY IT ACT 2000 The internet's and technology's quick development has brought to light a number of issues with its use, efficacy, and enforcement:
1. Despite a 2008 amendment amending certain portions, the IT Act, which was passed more
than 20 years ago, is out of date and inadequate to address contemporary cybercrimes such as ransomware assaults, data breaches, cryptocurrency frauds, and advanced hacking techniques.
2. Due to the increase in data usage and digital transactions, the Indian IT Act does not have
sufficient measures for data protection and privacy. India does not have a comprehensive Personal Data Protection Law, even though Section 43A provides compensation for data breaches.
3. A major obstacle was the improper use of Section 66A, which made "offensive" internet
communication illegal. It was commonly used to stifle free expression and bring legal action against users for posts they made on social media.
4. Since cybercrimes frequently involve perpetrators outside of India, it is challenging to apply
Indian law or extradite offenders. Coordination with foreign law enforcement agencies and establishing jurisdiction over foreign-based cybercriminals remain major obstacles. The global nature of the internet presents significant challenges in enforcing the IT Act across borders.
5. The IT Act's provisions are not well known by the general public, corporations, or law
enforcement organizations, which results in underreporting of cybercrimes and ineffectual legal remedies. Inadequate resources and technological constraints frequently confront Indian law enforcement organizations when it comes to cyber forensics and the specialized knowledge required to look into and prosecute sophisticated cybercrimes.
6. The IT Act lacks precise guidelines for the accountability of intermediaries (social media
platforms, online marketplaces, etc.), particularly with regard to misinformation, hate speech, and user data protection, despite the Intermediary Guidelines (2021) being introduced to hold social media platforms accountable.
7. The IT Act addresses cybercrimes, however the procedures for reporting, looking into, and
punishing these offenses are still insufficient. Victims are frequently dissuaded from pursuing legal action by the lengthy court procedure and the absence of a centralized system for reporting cybercrimes.
8. Lack of regulations for emerging technologies like blockchain, cryptocurrency, cloud
computing, and artificial intelligence creates legal ambiguities that make it hard to regulate activities like cryptocurrency transactions and AI-driven cybercrimes. The IT Act does not sufficiently address these issues. Although the IT Act of 2000 was an important first step, it has shown to be inadequate in addressing contemporary cybercrimes, enforcing jurisdiction, and safeguarding data privacy. As a result, extensive revisions to the law are now necessary to make it more effective and relevant in the current digital world. CHAPTER VI CYBER JURISPRUDENCE: AGE OF SOCIAL MEDIA Social media's rise has led to an increase in several cybercrimes in India, including:
1 Cyberbullying and Harassment
Cyberbullying is a serious problem, particularly for young
3 Misinformation and Fake News
In India, the dissemination of false information via social media platforms has grown to be a serious problem, swaying public opinion, sparking intercommunal strife, and inciting mob violence. Content that propagates false information or endangers national security has been actively blocked or removed by the Indian government under “Section 69A of the IT Act.”
4 Revenge Porn and Obscene Content
Social media users are reporting more and more instances of "revenge porn," or the non-consensual posting of intimate content. These offenses are prosecuted under the IT Act's “Sections 66E (violation of privacy) and 67A” (transfer of sexually explicit content). Intermediary Guidelines and Digital Media Ethics Code (2021) Social networking sites are required under these laws, which were passed under the IT Act, to make sure that they abide by Indian laws. The guidelines are intended to: a) Make social media platforms, as intermediaries, answerable for the content that is housed on them. b) Appoint grievance officers to handle complaints. c) Ensure content moderation and takedown of offensive content within specified timeframes. The rules address the regulation of online content, hate speech, and misinformation, reflecting the growing concern over the misuse of social media.
50 Social media has evolved into a vital tool in the age of Digital India, but it is also a platform that may be abused online. While the IT Act and Bharatiya Nyaya Sanhita's legislative structure offers channels for redress, in order to effectively combat cybercrimes in this developing digital economy, more stringent enforcement, technology advancements, and public awareness are needed. 50 PSR INDIA, https://prsindia. org/billtrack/the-information-technology-intermediary-guideli