Centre for Internet and Society

Indian Internet Lawsuit Puts Spotlight on Freedom of Expression

praskrishna — 2012-01-19T08:59:15Z

In India, Internet giants such as Google and Facebook are fighting a lawsuit after the government authorized their prosecution for online content on their sites deemed to be offensive. The case has put the spotlight on free speech in the world’s largest democracy.

The criminal lawsuit filed by the editor of New Delhi-based Urdu weekly Akbari accuses 21 Internet companies of violating Indian law. Vinay Rai alleged that online material on their websites has the potential to incite religious conflict.

Rai said his colleagues brought to his attention images of Prophet Muhammad which could offend Muslims. He cited other images and text which could hurt sentiments of Hindus and Christians. Rai wants Internet companies to screen content before it is posted.

Google and Facebook have asked the Delhi High Court to dismiss the case against them. In an appeal, they said it is impossible to filter all content or stop individuals from posting material online.

Editor Rai filed the case after the government indicated its approval for the prosecution. The official go-ahead came weeks after the government also raised a similar demand.

Voluntary framework

Telecommunications Minister Kapil Sibal told Internet company representatives to come up with a voluntary framework to keep offensive material off the net. After confronting them with photos and material derogatory of Indian Prime Minister Manmohan Singh and Congress Party leader Sonia Gandhi, he said the companies had not cooperated.

Both the court case and the government’s demands have stoked fears of net censorship in the world’s largest democracy.

Advocacy groups say the dispute between authorities and websites began simmering last year when India tightened laws to block content which could be deemed offensive. Citizens and officials can ask sites to block objectionable material and failure to comply within 36 hours can attract penalties or imprisonment of up to seven years.

Sunil Abraham, with the Center for Internet and Society in India, said these rules have the potential to curtail debate and discussion on the net.

“These limits are vague. They allow for all sorts of subjective tests by private parties and we predicted they would have a chilling effect on freedom of expression online," Abraham said. "Policy in India has been headed in a very worrisome direction."

Abraham pointed out that one of his organization’s recent studies indicates that, faced with the threat of stiff penalties, most service providers removed content when asked to do so, even when it was not offensive or controversial.

Free media?

The government insists its objective is not to encroach on the fundamental right of free speech guaranteed by India’s democratic constitution. The clarification came from Minister Kapil Sibal after his meetings with Internet companies last month.

"This government does not believe in censorship," noted Sibal. "This government does not believe in either directly or indirectly interfering in the freedom of the press, and we have demonstrated that time and again."

India does have a vibrant free media and Internet access is largely free, unlike in China. But in a country with a history of religious violence, authorities have long tussled with the dilemma of balancing free speech with the need to not inflame sentiments among religious groups. India was one of the first countries to ban Salman Rushdie’s “The Satanic Verses.”

Other books and articles have also faced bans. Many are challenged in courts and several have been overturned. Now the focus is on the Internet and questions are being raised about whether the web should or can be policed.

Online freedom

In a remark widely quoted in the domestic media, a judge hearing the case had warned websites that like China, India might be compelled to block some of them if they did not create means to curb material seen as offensive.

However, Abraham from the Center of Internet and Society hopes that, as the latest case navigates its way through Indian courts, online freedom will come up the winner.

"I think the executive in India has always been very conservative in freedom of expression. It is usually the courts in India that protect freedom of expression, the precedent," Abraham said. "So we are every hopeful that the current case is in the appropriate venue, and we are confident that, as in the past, the judiciary in India will stand on the side of freedom of expression."

With 100 million people surfing the web, India has the world’s third largest number of Internet users after China and the United States.

Published in the Voice of America on 19 January 2012. Sunil Abraham is quoted in this.

For more details visit http://editors.cis-india.org/news/indian-internet-lawsuit-puts-spotlight-on-freedom-of-expression

Indian ID crisis unveils Aadhaar doubts

praskrishna — 2013-03-15T04:52:49Z

Two separate organizations are capturing biometric data of over 1 billion Indians, creating fresh doubts in the government's justification to catalogue citizens.

The blog post by Mahesh Sharma was published in ZD Net on March 14, 2013. Sunil Abraham is quoted.

A new US$1 billion national identity card project has undermined the Indian government's ambitious "Aadhaar" project to catalogue the biometric details of over 1 billion citizens.

Indians' biometric details are being captured by two separate organizations: the National Population Register, to develop the resident identity card (RIC); and the Unique Identification Authority of India (UIDAI), to create a unique identifier (UID), commonly referred to as "Aadhaar" number.

Both projects are designed to streamline the distribution of welfare and social services to citizens--a process that is currently mired in corruption.

In an interview with ZDNet, Centre for Internet and Society's India executive director, Sunil Abraham, said the ID smartcard and ID number are fundamentally different, not complementary, as the government has previously said.

"Those are two very separate visions. You cannot mix them up and make some kind of salad and have a little bit of this and a little bit of that. You have to go the whole hog in one direction," Abraham said.

He said it was easier for the government to proceed with both projects, rather than cancel Aadhaar, which has been criticized over reports there were duplicate biometric information and data abuse.

"The government is afraid it made a mistake," Abraham said. "It could just continue to create a hodgepodge of both ideas, both visions, and continue making big mistakes and have ghosts [in the UID system] and large scale corruption."

On March 12, India's house of representatives, the Lok Sabha, Member of Parliament, P. Karunakaran asked the Minister of State, R.P.N. Singh, to clarify the overlap between the proposed biometric identity card and UID. Singh confirmed the government would spend over US$1 billion (55.52 billion rupees) to issue a resident identity card (RIC) that featured the Aadhaar number.

"The RIC would enable both online and offline authentication of identity in a secure manner and will complement the efforts of Aadhaar," Singh said in a written response. To avoid duplication, he explained that if citizen biometric data was already captured by the UIDAI, then the Aadhaar number would be recorded on the RIC smart card.

Independent lawyer Usha Ramanathan told ZDNet the government had overstepped its legal bounds. She said the UIDAI has demonstrated biometrics are imperfect but the government has persisited with the project.

"The UID is lawless. Now we will have an RIC which will be lawless," Ramanathan said. "All we are offered is the UIDAI 'confidence' that the project will work."

"Privacy and personal security continue to be unprotected. And there seems to be an inexhaustible amount of money to experiment on the whole population," she noted.

For more details visit http://editors.cis-india.org/news/zdnet-mahesh-sharma-march-14-2013-indian-id-crisis-unveils-aadhar-doubts

Indian Govt to Build Machine Translation System for 22 Indic Languages

praskrishna — 2013-12-11T07:14:35Z

National Translation Mission is preparing a Machine Translation System (MTS) to instantly translate texts from vernacular Indian languages to English, reports New Indian Express.

Brindaalakshmi's article was published by Medianaama on November 14, 2013. CIS memorandum of understanding with Goa University is mentioned.

The report states that scientific and technical terminologies are being developed in 69 disciplines of study in 22 languages as part of this project. Apparently, 25,000 to 30,000 lexicons have been identified in each subject to create the MTS.

Speaking at a media event, Prof V Saratchandran Nair, Director of National Translation Mission said that the project is being initiated to help students who have done their schooling in vernacular languages but have to study in English during college. He also added that only Tamil currently has translated materials in all 69 disciplines, while Oriya has it in 49 disciplines. In contrast, there is no science material available in Santhali, Manipuri and Konkani languages.

National Translation Mission is a Government of India initiative that intends to establish translation as an industry and facilitate higher education by making available translated study material for students. The program also trains translators in different languages. Interestingly, the website states that it will not replicate the efforts of other organisations like C-DAC, TDIL that are also involved in creating indic support for computers and services. However, it seeks to build technology to directly translate a sentence typed in English into an Indian language. When we checked, we noticed that the website also offers dictionaries and other resources for translators.

Other efforts to provide indic support: In September 2013, the Goa university had entered into a three year memorandum of understanding (MoU) with the Centre for Internet and Society (CIS) for building the Konkani Wikipedia. As part of this partnership, Goa University will be uploading the four volumes of Konkani encyclopedia. This could be a good start to building a repository of translated works for science in Konkani.

In July 2013, Technology Development for Indian Languages Programme (TDIL) of DeitY (Department of Electronics and IT) had developed Urdu language fonts and keyboard drivers for Windows and Android.

In June 2013, DeitY had also created a repository of fonts for all 22 constitutionally recognized languages through TDIL. These fonts are available as a CD that can be procured from TDIL or the entire suite can also be downloaded from the TDIL website.

For more details visit http://editors.cis-india.org/news/medianama-november-14-2013-brindaalakshmi-indian-govt-to-build-machine-translation-system-for-22-indic-languages

Indian Govt looks to provide free access to publicly-funded research works

praskrishna — 2014-07-28T05:34:37Z

Sunil Abraham gave his inputs to the blog entry published in Medianama on July 23, 2014.

Department of Biotechnology (DBT) and Department of Science and Technology (DST), under the Ministry of Science and Technology recently released (pdf) the draft of what is termed as Open Access Policy and has invited comments from the public until July 25, reports The Times of India. Comments can be submitted to madhan@dbt.nic.in.

The objective of this policy is to provide unrestricted access to research work funded by the departments. The draft states that since all funds disbursed by DBT and DST are public funds, it is important that the information and knowledge generated through the use of these funds are made publicly available as soon as possible.

As per the draft, DBT/DST will be creating a central repository wherein grantees can either publish their papers in an open-access journal or post the final accepted manuscript to an online repository. This includes papers funded by the two departments in 2012-13 as well as review articles invited by DBT/DST or author initiated that received funding from these departments.

The draft suggests that the full text of the research paper and metadata of all research projects fully or partially funded by DBT/DST or the projects that utilised infrastructure built with the support of DBT/DST will have to be made publicly available, failing which they wouldn’t be considered for future grants or fellowship opportunities among others.

The department believes that providing free access to these publications through gratis open access repository will enable increasing the distribution of these publications and will ensure that these research can be read and built upon.

Copyright of research papers: The draft also sheds light on copyright issues. It states that research work produced by a scientist as an employee of a government body or private institution the copyright would remain with the respective government body or private institution. However, following the final acceptance of the paper by any journal, it has to be deposited in an open access repository within a period of one week.

The author of the research paper will retain the right to reproduce, distribute, publicly perform, and publicly display the article in any medium for non-commercial purposes. They can also prepare derivative works from the article, and authorise others to make any non-commercial use of the article with credit.

Implications: This is a godsend for students, teachers and institutions that don’t have the means to purchase expensive academic journals. Sunil Abraham, executive director of Centre for Internet and Society (CIS) told TOI that the idea is that taxpayers shouldn’t pay twice to access research funded by taxpayers’ money.

Earlier developments in Open Data

In August 2013 the Department of School Education and Literacy, Ministry of Human Resource Development, the Central Institute of Educational Technology (CIET), and National Council of Educational Research and Training (NCERT) had launched an initiative called National Repository of Open Educational Resources (NROER). The objective was to provide free educational resources to school students under the Creative Common license.

The Union Cabinet had cleared the DST formulated National Data Sharing and Accessibility Policy (NPDSA) back in February 2012. NPDSA was supposed to increase accessibility and ease sharing of non-sensitive data amongst the registered users and their availability for scientific, economic and social developmental purposes. However, very little has been reported on how NPDSA was utilised since then.

Click to read the article published in Medianama here.

For more details visit http://editors.cis-india.org/news/medianama-july-23-2014-riddhi-mukherjee-indian-govt-looks-to-provide-free-access-to-public-funded-research-works

Indian govt blocks 40 smut sites, forgets to give reason

praskrishna — 2013-07-01T09:04:26Z

Don't mind us, we're just censoring your content for you...

The article by Phil Muncaster was published in "The Register" on June 27, 2013. Sunil Abraham is quoted.

The Indian government has ordered ISPs to block 39 smut flick web sites hosted outside the country without giving any explanation, stoking further fears of online censorship by the back door.

Most of the sites are web forums and so allow for the uploading of naughty images and URLs where smut-seekers can download their grumble flicks, according to Times of India.

However, the sites claim to operate under the 18 USC 2257 rule, meaning actors are (supposedly) over 18 years of age, and there is apparently no indication from the Department of Telecom's order why ISPs are being asked to comply.

The message greeting web users who try to visit a blocked site now reads as follows:

This website has been blocked until further notice either pursuant to court orders or on the directions issued by the Department of Telecommunications.

While the law, updated in 2011, does forbid production, transmission and sharing of smutty content in India - therefore requiring internet cafes, for example, to block such content - there is no ban on consumption, especially from sites hosted outside India.

Sunil Abraham, director of Indian not-for-profit the Centre for Internet and Society, told ToI that the government is probably interpreting the law to serve its own ends, and that its ISP order “is a clear overreach”.

The Union government has certainly been quick in the past to order blocks on any content deemed inappropriate.

Facebook and Google were forced to remove “objectionable content” from their Indian sites last year after complaints it was offensive to Muslims, Hindus and Christians.

The government was also one of many across the globe to force Google to block notorious YouTube video Innocence of Muslims.

A controversial anti-piracy ruling last June, meanwhile, led to a clumsy, large-scale block on a number of legitimate sites in the country – drawing the ire of hacktivist group Anonymous.

The government also closed hundreds of sites and social media accounts in August last year in a bid to prevent the escalation of sectarian violence across the country.

In fact, the number of content removal requests received by Google increased by 90 per cent from July-December 2012 compared with the previous six months.

For these reasons, India only enjoys “Partly Free” status, according to the Freedom on the Net 2012 report from not-for-profit Freedom House.

For more details visit http://editors.cis-india.org/news/the-register-phil-muncaster-june-27-2013-indian-govt-blocks-40-smut-sites-forgets-to-give-reason

Indian government websites: Gold mine for cybercriminals

praskrishna — 2014-01-31T06:18:12Z

If you are a cybercriminal trying to commit identity theft or digitally impersonate a citizen, you have help from the unlikeliest of sources — the Government of India.

The article by Srutijith KK was published in the Times of India on January 3, 2014. Sunil Abraham is quoted.

Various government agencies have put vast amount of personal information online, often with little barrier to access and with hardly any provision to prevent their misuse.

Combine a few of these databases and you have a gold mine of information on India's citizens, including some of its wealthiest residents, whose bank accounts are of special interest to thieves. "If I want to target someone, I now have access to so much detail that shouldn't have been in public. Hackers with good social engineering skills will be able to call a call centre and impersonate a person. And from a stalking perspective, it has implications for not just celebrities, but anybody with a jilted lover, a political rival, and so on," said Binoo Thomas, a digital security expert at McAfee Labs.

For example, if somebody wants to get personal details of some of India's richest people, he would simply need to click on the LPG transparency links on Indane, Bharat Gas and HP portals and narrow the search to the South Mumbai region. Many gas agencies have their area of service in their names, such as Bandra Gas Agency or Colaba Gas Agency.

Select one of these gas agencies and you have a list of all the customers, with their consumer number, address and, in many cases, a mobile number. This database is also searchable by name. You can quickly search for any famous surname and be rewarded with a consumer number, residence address and in many cases, a mobile phone number.

A cursory search gave ET the mobile number and full residential address of the well-known matriarch of a famous business family. A search under the Bandra Gas Agency promptly showed the full residential address of a famous Bollywood actress. Your next stop could be the website of the Election Commission of India, which has asked all state Election Commissions to place the entire voter rolls online.

The voter roll also has the full residential address, age and gender of a person. A quick search on the MTNL Mumbai directory online will reveal the landline number for a person. With a little bit of luck and time to troll social networks such as Facebook and LinkedIn, a skilled cybercriminal can discern your date of birth and professional details.

Date of birth, phone number, alternate number and billing address are the details many telephone companies and banks use to determine whether a person calling its customer helpline is indeed who she says she is. This kind of information also allows a hacker to design effective phishing attacks, which lures a person into revealing information such as passwords or credit card numbers. An email that lists accurate personal information appears authoritative and has greater likelihood of being trusted by a recipient.

Thread of identity theft
This kind of crime has been on the rise. In December, US Department of Justice estimated that $24.7 billion were lost to identity theft in 2012, as 11.5 million Americans found themselves defrauded. Similar data is unavailable for India. "Privacy has become a matter of personal security. As the state has been pushed to function in a more transparent manner, authorities are making the details about us transparent instead! The data protection principles are well evolved all over the world.

All of these data controllers are in violation of every good principle. We don't need to wait for a law to observe these principles," said Usha Ramanathan, an independent law researcher specialising in privacy, surveillance and related issues. The ministry of rural development, which administers the Mahatma Gandhi National Rural Employment Guarantee Scheme, goes a step further, and places online the bank account numbers and IFSC codes for all its beneficiaries.

RTI requirements
The justification for publishing this kind of data online is typically section 4 of the RTI Act, which requires all government departments to proactively publish details of subsidy programmes, including details of the subsidy availed. However, section 8(1) of the same Act says that personal information that invades privacy of an individual need not be published unless an appellate authority decides that a larger public interest is served by it. It's unclear what public interest is served by the publication of full residential address, mobile number or bank accounts by various agencies.

In some cases, like the MNREGS and the voter rolls, sector-specific laws also apply. "Going by the provisions of the MGNREGA, which mandates proactive disclosures, we keep all processes in the public view... We have not perceived any threat in displaying bank account numbers of wage seekers, most of which have been opened for receiving wages," said R Subrahmanyam, the joint secretary at the ministry of rural development who heads the MNREGA division.

The petroleum ministry did not respond to an email requesting comment. In an emailed response, Chief Election Commissioner VS Sampath referred to Rule 33 of the Registration of Elector Rules, 1960, to establish that the voter roll was a public document. "Thus it can be seen that Electoral Roll is a public document which is available to the public for inspection. The Commission has, therefore, given instructions to put this public document on the website to facilitate inspection by public. When law stipulates that it is a public document, the public has a right to access it," he said. But no law states that anonymising techniques or relevant barriers to accessing private information should not be deployed.

Legal vacuum
India does not have an omnibus privacy law that overrides sector specific legislation. According to Sunil Abraham of the Bangalore-based thinktank Centre for Internet and Society, there are some 50 different laws that have a privacy element in India. The Department of Personnel and Training has been working on a draft privacy law for three years now.

"We need to think of this problem in the light of the privacy law that is being drafted. Traditionally and culturally our view of privacy has been different. A more explicit understanding of the privacy needs of the citizens is certainly welcome. Section 43A of the IT Act has provisions for data protection," said J Satyanarayana, secretary at the department of information technology.

But 43A applies only to corporations, and government agencies are not bound by it. Apart from the central government agencies, several state government agencies and schemes also collect and store personal information. But no standard protocol binds them in deciding who shall have access and who shall not.

For more details visit http://editors.cis-india.org/news/the-times-of-india-january-3-2014-sruthijit-kk-indian-govt-websites-gold-mine-for-cybercriminals

Indian government wakes up to risk of Hotmail, Gmail

praskrishna — 2013-12-30T04:24:57Z

Worried by US spying revelations, India has begun drawing up a new email policy to help secure government communications, but the man responsible for drafting the rules still regularly uses Hotmail.

This was originally published by AFP on December 7, 2013, was also mirrored by the Times of India, Livemint, Reuters, Dawn, NDTV, Yahoo News, The Malaysian Insider and Asia One Digital. A slightly modified version was published by Silicon India on December 11. Sunil Abraham is quoted.

Like many of his peers in ministries across New Delhi, IT Minister Kapil Sibal's office recently sent an email inviting journalists to the launch of his new personal website using the free email service.

Others, including senior foreign ministry officials, the information and broadcasting minister and the health ministry secretary, also use Gmail, Hotmail or Yahoo instead of their government accounts.

When asked why he continued to use his Hotmail for official use, Sibal declined to comment, but a senior bureaucrat in his ministry admitted that he personally preferred Gmail because it is "just a lot easier".

"We keep moving, get different designations, go different places and with that, our emails change. You lose contacts and important emails, which you don't need to worry about with a Gmail account," the bureaucrat told AFP.

"To be honest, the quality of our official mail isn't that great yet. It still needs some work," he added on condition of anonymity.

Security concerns

IT security expert Sunil Abraham said the use of Gmail and the like was highly risky since the American services had their servers in the US and the National Security Agency has been known to tap into their database systems.

It is unclear how many state and federal public workers actively use popular email services for office, but some of the estimates are startling.

"As much as 90 percent of government officials use private email (services) for official use... that's because their official email is not as stable or speedy," said Abraham, executive director of the Bangalore-based Centre for Internet and Society.

In September Sibal's ministry announced a new "Email Policy of the Government of India" in the wake of spying allegations about the NSA revealed by former NSA contractor Edward Snowden.
NSA's tentacles not only crept into the Indian embassy in Washington and its UN office in New York, but also accessed email and chat messenger contact lists of hundreds of millions of ordinary citizens worldwide, according to media reports.

During a single day last year, the NSA's Special Source Operations branch collected 444,743 email address books from Yahoo, 105,068 from Hotmail, 82,857 from Facebook, 33,697 from Gmail and 22,881 from unspecified other providers, The Washington Post said, according to an internal NSA presentation.

The $11 million Indian project aims to bring some five million public employees onto the government's email domain powered by the National Informatics Centre (NIC) as early as mid-December.

It is awaiting clearances and suggestions from all ministries before the proposal goes to the cabinet this month.

J. Satyanarayana, secretary of the department of electronics and IT, dismissed claims that the policy was too late and was a response to the Snowden scandal.

"The policy is not a reaction to any global spying revelations, it was already in the works. It is just a mere coincidence that both came around the same time," he said.

Fresh doubts

Some cyber security experts say bringing millions aboard a centralised server could make a hacker's job easier, with all critical government information available on a single platform.
More than 11,000 Indian websites were hacked or defaced between May and August this year, with a large number of attacks on the ".in" domain whose servers are in India, the Times of India reported last month.

"Making the use of a centralised government server is not the best way to proceed. Having everything on one platform makes it even more vulnerable to cyber attacks and hacking," said Abraham.

"It also brings about new worries of the NIC becoming the local snoop."

Some also predict that the ambitious policy would eventually fizzle out for lack of attention from ministers and bureaucrats, who work in government offices where stacks of yellowing files and papers are still a common sight.

"It's sad but most of these officials don't understand much about technology, so mastering email is something that is miles and miles away," said Vijay Mukhi, a Mumbai-based cyber security expert.

"These guys saw all the snooping news and suddenly they woke up and said 'lets make an email policy'. Enforcing this is not possible on a practical basis."

The IT ministry also plans to conduct workshops to teach employees about email security such as when to change passwords and user names and how to use email.

"Every employee should know how, what and when critical data can be vulnerable... with most work still done on paper, it is important to know the nitty-gritty of using email," Satyanarayana said.

For more details visit http://editors.cis-india.org/news/afp-december-7-2013-annie-banerjee-indian-government-wakes-up-to-risk-of-hotmail-gmail

Indian government to bar politicians from using Gmail for official business

praskrishna — 2013-09-05T09:52:17Z

US-based email services seen as too risky.

This article by Neil McAllister was published in the Register on August 30, 2013. Sunil Abraham is quoted.

The government of India is reportedly planning to bar its employees from using Gmail and other foreign-based email services, amid concerns over surveillance by US spy agencies.

"Gmail data of Indian users resides in other countries as the servers are located outside," J Satyanarayana, India's secretary of electronics and information technology, told the Times of India. "Currently, we are looking to address this in the government domain, where there are large amounts of critical data."

The Indian government currently employs some 500,000 people, many of whom use Gmail for their primary email addresses. A quick glance at the contact page for the country's Department of Electronics and Information Technology reveals at least eight senior officials using Gmail, and still others with Yahoo! addresses.

Under the new directive, government employees will be asked to stick to official email addresses provided by India's National Informatics Centre (NIC). But an unnamed senior government IT official told the Times of India that many government workers choose Gmail and other foreign services because they are easier to use, and setting up accounts is much faster than working within the bureaucratic process of the NIC.

The move toward locally run email for Indian government workers comes in the wake of a string of revelations from documents leaked by Edward Snowden. Among the recent disclosures has been details of US electronic surveillance of foreign governments on US soil, where the National Security Agency even went as far as to snoop encrypted communications from United Nations headquarters in New York City.

No doubt equally concerning was a motion filed by Google in a US district court earlier this month, in which the Chocolate Factory asserted that "a person has no legitimate expectation of privacy in information he voluntarily turns over to third parties" such as Gmail.

But Sunil Abraham of the Bangalore-based think tank the Centre for Internet and Society said that foreign spying wasn't the only reason why government officials should be required to use a homegrown email.

"Use of official government email would also make it easier to achieve greater transparency and anti-corruption initiatives," Abraham told the paper. "Ministers, intelligence and law enforcement officials should not be allowed to use alternate email providers under any circumstance."

When contacted for comment, a spokeswoman for Google India said the company had not been informed of the proposed ban, adding, "Nothing is documented so far, so for us, it is still speculation." ®

For more details visit http://editors.cis-india.org/internet-governance/news/the-register-neil-mc-allister-august-30-2013-indian-govt-to-bar-politicians-from-using-gmail-for-official-business

Indian Government still blocks 20+ websites – Indian Censorship on Internet

praskrishna — 2015-01-03T03:47:16Z

Indian Government has blocked 20+ major websites to counter ISIS propaganda. The government has removed blocking of github.com, vimeo.com and other 10+ websites blocked till December 31, 2014.

The article was published in the Times of Assam on January 2, 2015. Pranesh Prakash is quoted.

A confidential department of telecom order – dated December 17, 2014 – instructing all internet service licensees to block the websites appeared online on Wednesday.

When contacted to verify the news, Dr Gulshan Rai – Director of the Indian Computer Emergency Response Team (CERT-In) – told, the directions had been issued to internet service providers following a Mumbai Additional Chief metropolitan magistrate’s November order directing the government’s Department of Electronics and Information Technology (DeitY) to implement the same.

Pranesh Prakash – Policy Director at Bengaluru-based Center for Internet and Society – questioned the lack of transparency around the practice of blocking websites under the Indian law. “Qn for govt: Why does the law require secrecy of web blocking orders when it doesn’t allow such secrecy for books, films? #GoIBlocks,” he tweeted, adding, “The 69A Rules don’t allow for transparency, accountability, time-limits on blocks, etc. So easily misused by govt. + courts + individuals.” The websites were blocked under section 69 A of the IT Act, 2000 and the IT (Procedure and sdafeguards for Blocking of Access of Information by Public) rules, 2009.

Currently, the Supreme Court is in the middle of hearing a clutch of petitions challenging several IT Act provisions, including blocking and takedown of websites.

For more details visit http://editors.cis-india.org/internet-governance/news/times-of-assam-january-2-2015-indian-govt-still-blocks-websites-india-censorship-on-internet

Indian Government says it is still drafting privacy law, but doesn’t give timelines

praskrishna — 2017-05-15T02:10:26Z

Read the original published by Medianama here

The Government is drafting a legislation to protect privacy of individuals breached through unlawful means in consultation with stakeholders, the minister for communications and information technology Ravi Shankar Prasad said in the Rajya Sabha. However, no timeline was provided, which is really the problem: Is the Indian government even interested in a privacy law?

In August last year, the Government of India had said in the Supreme Court of India that had said that “violation of privacy doesn’t mean anything because privacy is not a guaranteed right”, actually arguing that the citizens of India do not have a fundamental right to privacy.
In September last year, the DeitY had also sought to make encryption (and personal and business security) weaker via a draft policy on encryption, requiring all users to store the plaintexts of the corresponding encrypted information for 90 days from the date of transaction and provide the verifiable plain-text to Law and Enforcement Agencies if required. After a public outcry, the paper was withdrawn.
Last month, the DoT made it mandatory to have GPS on all phones by 2018.

We’re in a situation where the country doesn’t have a privacy law on one hand, and is setting up surveillance systems like the Centralized Monitoring System, NETRA, NATGRID (for collecting data from across databases), and linking citizens and databases across the unique identity number in Aadhaar on the other.

What happened to the old Privacy bill?

While India does not yet have a comprehensive privacy policy, back in 2014, the Centre for Internet and Society received a leaked version of the draft Privacy Bill 2014 that the Department of Personnel and Training, Government of India had drafted. A comparison of the draft bill from 2014 and the draft privacy bill of 2011 can be found here.

As per Prasad, as of now, the Section 43, 43A and 72A of the IT Act of 2000 provide the legal framework for digital privacy and security, mandating that agencies collecting personal data must provide a privacy policy, and compensations must be paid to the victim in case of unauthorized access or leakage of information.

Questions asked in Rajya Sabha:

Whether Government intends to bring a specific legislation to address the concerns regarding privacy in the country, if so, the details thereof, if not, the reason therefore; and

Whether the legislation would provide for protection of ‘personal data’ along the lines of the European Union’s Data Protection Directive, if so, the details thereof, if not, the reasons therefor

EU Privacy Bill

Interestingly, the question posed to the minister asked if the legislation would provide for protection of personal data along the lines of European Union’s General Data Protection Directive (GDRP), which were approved just last month. EU’s directive defines “any information relating to an identified or identifiable natural person directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity”, as personal data.

The GDRP has a pretty wide scope and is pretty consumer friendly. The laws require users to provide explicit consent for data collection, companies to report as soon as they have a data breach, and a ‘right to erasure’ that lets users request all personal data related to them to be deleted. It also imposes a significant fine of up to 4% of annual worldwide turnover of a company in the previous financial year, in case of non compliance. For a comprehensive overview of the policy read handbook on European data protection law (pdf).

Email privacy bill US

The US does not have a comprehensive digital privacy law like the EU and mostly relies on the the privacy act of 1974. However, recently the US House of Representatives unanimously passed the Email Privacy Act that would require investigators to get a warrant before forcing companies to hand over customer email or other electronic communications, no matter how old the communication.

For more details visit http://editors.cis-india.org/internet-governance/news/medianama-vivek-pai-may-4-2017-indian-govt-says-it-is-still-drafting-privacy-law

Indian Government Quietly Brings In Its 'Central Monitoring System': Total Surveillance Of All Telecommunications

praskrishna — 2013-07-02T09:12:49Z

There's a worrying trend around the world for governments to extend online surveillance capabilities to encompass all citizens -- often justified with the usual excuse of combatting terrorism and/or child pornography.

The blog post was published in tech dirt on June 8, 2013. Pranesh Prakash is quoted.

The latest to join this unhappy club is India, which has put in place what sounds like a massively intrusive system, as this article from The Times of India makes clear:

The government last month quietly began rolling out a project that gives it access to everything that happens over India's telecommunications network -- online activities, phone calls, text messages and even social media conversations. Called the Central Monitoring System, it will be the single window from where government arms such as the National Investigation Agency or the tax authorities will be able to monitor every byte of communication.

This project has been under development for two years, but in almost total secrecy:

"In the absence of a strong privacy law that promotes transparency about surveillance and thus allows us to judge the utility of the surveillance, this kind of development is very worrisome," warned Pranesh Prakash, director of policy at the Centre for Internet and Society. "Further, this has been done with neither public nor parliamentary dialogue, making the government unaccountable to its citizens."

That combination of total surveillance and zero transparency is a dangerous one, providing the perfect tool for monitoring and controlling political and social dissent. If India wishes to maintain its claim to be "the world's largest democracy", its government would do well to introduce some safeguards against abuse of the new system, such as strong privacy laws, as well as engaging the Indian public in an open debate about what exactly such extraordinary surveillance powers might be used for.

For more details visit http://editors.cis-india.org/news/tech-dirt-june-8-2013-indian-govt-quietly-brings-central-monitoring-system

Indian government defends Internet blocking

praskrishna — 2012-08-28T10:07:50Z

India on Friday defended itself against accusations of heavy-handed online censorship, saying it had been successful in blocking content blamed for fuelling ethnic tensions.

Published by AFP on August 23, 2012. Pranesh Prakash is quoted.

The government over the past week has ordered Internet service providers to block 309 webpages, images and links on sites including Facebook, Twitter, Wikipedia, news channel ABC of Australia and Qatar-based Al-Jazeera.

The orders were an effort to halt the spread of "hateful" material and rumours that Muslims planned to attack students and workers who have migrated from the northeast region to live in Bangalore and other southern cities.

"We have met with success. These pages were a threat to India's national security and we demanded their immediate deletion," Kuldeep Singh Dhatwalia, a spokesman for India's home ministry, told AFP.

"Spreading rumours to encourage violence or cause tension will not be tolerated. The idea is not to restrict communication."

The government has blamed Internet activity for fanning fears that resulted in tens of thousands of migrants fleeing back to the northeast last week from Bangalore and elsewhere.

But Twitter users, legal experts and analysts criticised the government's approach, which appeared to have resulted in only partial blocking of material, much of which was still accessible.

"The officials who are trusted with this don't know the law or modern technology well enough," Pranesh Prakash, programme manager at the Centre for Internet and Society research group, told AFP.

"I hope that this fiasco shows the folly of excessive censorship and encourages the government to make better use of social networks and technology to reach out to people."

Among the blocked content were photographs by AFP and other news agencies from Myanmar in the British Daily Telegraph, a parody Twitter account pretending to be from Prime Minister Manmohan Singh and dozens of YouTube videos.

ABC issued a statement saying it was "surprised by the action" after content on its website about unrest in Myanmar between Muslims and Buddhists was included on the blocking list.

India's Home Minister Sushil Kumar Shinde insisted in a statement the government was "only taking strict action against those accounts or people which are causing damage or spreading rumours."

Shinde added that the government sought to block the Myanmar online photos because they were "disturbing the atmosphere here in India."

The government said photographs of clashes in Myanmar were circulating on the Internet with fake captions claiming the scenes were from the northeastern Indian state of Assam, where 80 people have died in recent ethnic violence.

Vivek Sood, senior Supreme Court lawyer and an author on Internet legalisation, called the government's step "a gross abuse of power."

"It's completely illegal under the Indian IT Act," he told The Economic Times.

Indian journalist Kanchan Gupta, who is often critical of the government, had his Twitter account targeted by a government blocking order in a move he called a "political vendetta".

Al Jazeera webpages on the blocking list, including a report on the exodus from Bangalore, appeared unaffected by the government orders, the channel's Delhi bureau chief Anmol Saxena told AFP.

Ministers earlier complained they had not received cooperation from websites and social network groups.

The government on Thursday said Twitter had agreed to remove six fake accounts parodying Prime Minister Singh.

The prime minister's office issued a statement on Friday quoting Twitter that they have "removed the reported profiles from circulation due to violation of our Terms of Service regarding impersonation".

United States State Department spokeswoman Victoria Nuland said as India "seeks to preserve security, we are urging them also to take into account the importance of freedom of expression in the online world".

The above was carried in the following places as well:

The National (August 25, 2012)
MSN News (August 24, 2012)
StarAfrica.com (August 24, 2012)
Jakarta Globe (August 24, 2012)

For more details visit http://editors.cis-india.org/news/afp-com-aug-23-2012-indian-govt-defends-internet-blocking

Indian government at second position after U.S.A for demanding user data from Google

praskrishna — 2012-11-30T05:05:01Z

The Indian government has secured 2nd position in the list of the governments demanding for Web user information. It is behind only from the United States government.

This blog entry was published in WHDI Reviews on November 22, 2012. Pranesh Prakash is quoted.

This fact came to light in the ‘Transparency Report’ published by web services major. The report covers the time period from January to June in the present year. During this time period, the Govt. of India has asked Google for user information 2,319 times over 3,647 user accounts.

This has been done by the way of court orders and requests made by police. Google has allowed the disclosure of the information sometimes partially and sometimes completely. The U.S.A government on the other hand requested for more information 7,969 requests over 16,281 accounts. The compliance rate by Google to Indian and U.S requests was 64% and 90% respectively. The report gives details about two categories of interactions: firstly to divulge data and secondly to pull down content. India now ranks 7th in the list of countries which had made requests to pull down data. India could have achieved even a better rank but owing to the lack of any constitutional power which backs its action, it has to be satisfied with the seventh position. According to Pranesh, (policy director with Bangalore-based Centre for Internet and Society) these requests for pulling down data are an attempt made by the government so that its criticism is not able to reach a wide audience.

Google (which is banned in China) supports the cause of disclosure of the information related to governments. The other net service providers which put out similar transparency reports are twitter, Linkedin and Cloud storage service Dropbox. These content pull down request made by the government is not healthy for a democratic country like India.

For more details visit http://editors.cis-india.org/news/whdi-reviews-nov-22-2012-indian-government-at-second-position-after-usa-for-demanding-user-data-from-google

Indian Express Article

praskrishna — 2015-12-29T01:54:33Z

Indian Express Article

For more details visit http://editors.cis-india.org/home-images/IndianExpressMangaluruDec122015.jpg

Indian experts doubt government ban on porn sites will be effective

praskrishna — 2016-07-01T15:00:32Z

The Indian government directed service providers to block 240 websites but doubts have surfaced over the legality of such an order.

This was published in ZDNet on June 20, 2016.

Last year, the Indian government identified more than 850 websites that provided escort services but action has been initiated only with respect to 240 such websites after a Mumbai court issued an order to ban them last week.

These sites were banned under the provision of Section 79(3)(b) of the Information Technology Act, 2000 -- as their content relate to morality and decency as given in Article 19(2) of the Constitution of India -- on June 13 after a committee of experts in the Indian Home Ministry recommended action against them.

But experts doubt whether the government can proscribe them in view of a lack of adequate legislation. Jaspreet Grewal, programme officer with the Centre for Internet and Society, said that though the websites offering escort services may potentially be in violation of the law, they cannot be banned under the existing provisions of the IT Act.

Even the government appears to be in a dilemma, as although it notified internet service providers to disable 857 websites on July 31, 2015, it modified the orders four days later, saying that the service providers were free "not to disable" any of the 857 sites if they did not have child pornographic content.

Following an uproar, with netizens lashing out at the government on the social media platforms such as Reddit and Twitter saying that it was trying to impose censorship and also curb freedom of expression, the government decided to rescind its July 31 directives.

According to a report in Delhi-based English daily Hindustan Times, Indian Minister for Communication and Information Technology Ravi Shankar Prasad rejected that the present government was a Talibani government, as being said by some of the critics. "Our government supports free media, respects communication on social media, and has respected freedom of communication always," he said.

The minister, while making a statement in Parliament last month, admitted that it was a significant challenge to filter the sites with pornographic content as most of the pornographic sites were hosted outside the country, where viewing pornography is legal.

"These websites keep on changing the names, domain addresses, and hosting platforms from time to time, making it difficult to filter or block such websites using technical tools available in the market," he added.

The minister also said that the government was asking the service providers regularly to upgrade their infrastructure and technology to effectively address the shortcomings with regard to identifying and blocking encrypted websites. "The government is also in regular touch with social networking sites, having their offices in India, to disable objectionable contents at the source from their websites," he added.

However, the government seems to be treading cautiously and an indication to this effect was given by a senior official in the Department of Electronics and Information Technology (DeitY). "Though a debate is taking place for a long time, the government is now taking a calibrated approach," DeitY Joint Secretary Rajiv Bansal said at an ICANN event held in Delhi on Thursday.

He also felt that banning the websites was not a solution as new sites were sprouting to replace the blocked ones.

For more details visit http://editors.cis-india.org/internet-governance/news/zdnet-vl-srinivasan-june-20-2016-indian-experts-doubt-government-ban-on-porn-sites-will-be-effective