Centre for Internet and Society

India's landmark online speech ruling is step toward greater press freedom

praskrishna — 2015-03-29T00:55:35Z

In an historic decision, India's Supreme Court on Tuesday struck down part of a law used to silence criticism and free expression. While this marks a pivotal victory that has been welcomed in many quarters, many challenges remain for press freedom in the country.

The blog post by Sumit Galhotra was published by CPJ (Committee to Protect Journalists) on March 28, 2015. Pranesh Prakash is quoted.

Section 66A of the Information Technology Act--the vaguely worded provision struck down by the court--criminalized online speech deemed "grossly offensive" or "menacing," along with information for the purpose of causing "annoyance" or "inconvenience." Individuals convicted under the provision could face up to three years in prison. This law, along with others that remain on the books, has allowed India to become a paradise for the offended.

The law was challenged by a public interest litigation mounted by Shreya Singhal, in 2012. Singhal, who had just returned to Delhi from her studies in the U.K., was infuriated at how the law was being used to stifle debate and criticism in her home country, according to reports.

The September 2012 arrest of cartoonist Aseem Trivedi, on a range of charges including one under Section 66A, over his cartoons on politics and corruption, caught Singhal's attention. A few weeks later, she learned of the arrest of 21-year-old Shaheen Dhada, who questioned on Facebook the shutdown of Mumbai following the death of a politician, Singhal said. Dhada's friend, Renu Srinivasan, who had merely "liked" the comment, was arrested under the law. According to news reports, both were charged. These cases sparked a national debate on the space for free expression in the world's largest democracy, and led Singhal to challenge the law, she told reporters.

"It's a big victory," Singhal, who is currently studying law in Delhi, told the media following Tuesday's decision. "The Internet is so far-reaching and so many people use it now, it's very important for us to protect this right."

India is expected to overtake the U.S. as the second largest population of Internet users in the world, behind only China, according to the Internet and Mobile Association of India, a nonprofit group representing the Web and mobile industry. As Internet usage accelerates in India, thanks in large part to the widespread use of mobile devices, there has been an ongoing debate on how best to policeit in a country that has to contend with frequent episodes of violence, civil unrest, and terrorist attacks.


Karuna Nundy, an advocate at the Supreme Court of India who helped the legal challenge, says the country has several laws that are a threat to press freedom. (Geoffrey King)

Lawrence Liang, a lawyer and researcher at the Bangalore-based Alternative Law Forum, an Indian legal research organization, shared in Singhal's welcoming of the decision. "It is important to note that this is the first judgment in decades in which the Supreme Court has struck down a legal provision for violating freedom of speech, and in doing so, it simultaneously builds upon a rich body of free speech cases in India and paves the way for a jurisprudence of free speech in the 21st century, the era of the Internet and social media," he told CPJ.

Pranesh Prakash, policy director at Bangalore-based Centre for Internet and Society, an organization that focuses on issues of digital pluralism, called the judgment "a moral victory." He said the decision "furthers free speech jurisprudence in India, but also in all those other countries where an Indian precedent would be important," including many countries in Asia, and places such as South Africa.

As part of the judgment, the court narrowed its reading of Section 79 of the IT Act, under which private parties could submit notice-and-takedown orders directly to Internet intermediaries. The court held that intermediary liability can be pursued only through a court order or other government order, reports said.

Liang told CPJ the judgment falls short in some areas. The Supreme Court's 123-page judgment kept in place Section 69A of the IT Act and Information Technology Rules 2009 that allows the government to block websites if the content in question has the potential to create communal discord, social disorder, or impact India's relations with other countries, according to news reports.

"I would say that if there is missed opportunity in the judgment, it is the clarification of the process of blocking websites. If Section 66A was found to be arbitrary in that its scope covered protected and unprotected speech, then the procedure for blocking websites as laid out in Section 69A is also beset with similar problems," Liang said.

According to Chinmayi Arun, research director at the Centre for Communications Governance at the National Law University in Delhi, the 2009 rules require blocking requests and implementation to be kept confidential. "This means that speakers will have no way of finding out that the government has ordered intermediaries to block their content. Speakers will therefore not be able to question unconstitutional blocking orders before the judiciary--this is a clear interference with their constitutional rights," she told CPJ via email, referring to online users who could fall foul of the law.

Academic in me: As a matter of legal & constitutional analysis, the SC judgment is at its best on #66A, but weaker on 69A & weakest on 79.
-- Pranesh Prakash (@pranesh_prakash) March 24, 2015

For some journalists, the decision highlights how virtually no national party in India, including the ruling Bharatiya Janata Party (BJP), is a champion of these rights. In a piece for independent news website Scroll, journalist Shivam Vij criticizes the current Narendra Modi-led government for missing an opportunity by not acting decisively to address the problematic law. "It has become routine for India's politicians to avoid taking tough political decisions if they can be left to the courts," he said. "When in power, the BJP is as happy as the Congress to have at its disposal laws that can muzzle voices of dissent."

Trivedi told CPJ he agreed that the previous and current government did little to address abuses of the law. Trivedi, who up until the court decision, faced charges under Section 66A, and had joined Singhal as a petitioner in the case, added: "This decision marks a strong first step." The cartoonist's lawyer, Vijay Hiremath, told CPJ that the Section 66A charge has now been removed, but Trivedi still faces charges under the National Emblem Act.

While the striking down of Section 66A is a step in the right direction, many challenges remain for press freedom in India. Karuna Nundy, an advocate at the Supreme Court of India, who was at the forefront of the legal challenge, told CPJ numerous colonial-era laws, particularly in India's penal code, continue to pose threats to free speech and press freedom in India. CPJ has long documented cases of Indian journalists being threatened with sedition, defamation, and laws that criminalize "outraging religious sentiment."

Actually, next step(s): a review of the constitutionality of sedition, challenge criminal defamation, constitutionalise civil defamation.
-- Gautam Bhatia (@gautambhatia88) March 24, 2015

But Nundy expressed optimism for the challenges ahead for press freedom in India and elsewhere. She said the judgment shows, "If you do the work, you take the trouble, you make the challenge, you can achieve the kinds of values that you stand for. That is the work that is the duty of all us as national citizens and citizens of the world."

[Geoffrey King, CPJ Internet Advocacy Coordinator, contributed to this report from Manila]

For more details visit http://editors.cis-india.org/internet-governance/news/cpj-march-28-2015-sumit-galhotra-indias-landmark-online-speech-ruling-is-step-toward-greater-press-freedom

India's Internet Privacy Woes

praskrishna — 2013-09-05T11:09:30Z

“For the sake of national security and to protect the privacy of its citizens, India should develop its own social media platforms,” says Dr Kamlesh Bajaj, CEO of Data Security Council of India (DSCI), a Nasscom-promoted ‘self-regulatory’ organisation on data protection and privacy in India, in a blog post dated August 13.

This article by Rohin Dharmakumar was published in Forbes India on August 26, 2013. Pranesh Prakash is quoted.

Citing a litany of woes, including American control over internet infrastructure, Bajaj makes the case for India to take a leaf out of China’s playbook (“even though its reasons were different”) and encourages the creation of “Indian” social media sites and search engines.

“Unfortunately, Dr Bajaj provides a wrong solution to a correct diagnosis,” says Pranesh Prakash, a policy director with the Centre for Internet and Society. “First, I can’t think of any governmental intervention—short of a ban on existing foreign services—that can make a new Indian service successful. Second, India’s privacy laws are worse than those in the US. Nothing will stop the US and Indian governments from coming after this company too.”

The problem arises because services like Facebook and Google store all your data unencrypted on their servers, making it easy for them, or governments and hackers, to monitor everything you do. The correct solution, says Prakash, would be to encourage the creation and use of de-centralised and end-to-end encrypted services that do not store all your data in one place.

For more details visit http://editors.cis-india.org/news/forbesindia-august-26-2013-india-internet-privacy-woes

India's Internet Growth & Challenges

praskrishna — 2013-05-22T05:37:28Z

For more details visit http://editors.cis-india.org/internet-governance/blog/indias-internet-growth-challenges

India's cyber cafes going porn-free

praskrishna — 2011-05-06T04:53:41Z

Pornography fans in India who like to indulge in the sexual eye candy at public cyber cafes may be in for a forced intervention as a new government ruling bans porn websites, requires cafe owners to keep a one-year log of all sites accessed by customers and forces customers to produce an ID card prior to use. This news was published on msnbc.com on April 28, 2011.

These new guidelines, which were released April 11, are getting a lot of pushback from privacy advocates in India, who cite the legality of watching porn in the country.

"Watching pornography is not illegal in India," Pawan Duggal, a lawyer who specializes in IT laws, told The Times of India."It's absurd to ask cyber cafe owners to tell their customers not to access pornographic material even as law allows individuals to access adult websites unless it's not child pornography. The new rules require a second look."

The "Information Technology (Guidelines for Cyber Cafe) Rules, 2011" imposed by the Ministry of Communications and Information Technology (aka the Department of Information Technology) have several requirements, all of which have met with more questions and concerns over the impact on everyone who accesses the Internet through the cafes, not just porn watchers. Here are the notable issues that show some Big Brother tendencies:

Cyber cafe owners must register with an unnamed agency for licenses for their establishments.

Cyber cafe users must produce a legally valid form of identification prior to using a computer, such as school ID, passport, driver's license and voter ID card. Children without ID must be accompanied by an adult with acceptable identification documents.
If the cyber cafe user isn't able to produce legit ID, then they may be photographed through a webcam.
Refusal to produce identification or to be photographed will result in the user not being allowed to use a computer at the cyber cafe.
"All the computers in the cyber café shall be equipped with the safety/filtering software so as to the avoid access to the websites relating to pornography, obscenity, terrorism and other objectionable materials."
Webcam photos will be part of the log cyber cafe owners need to maintain for a minimum of one year, either in print or online. Cyber cafe owners will also be required to submit monthly reports to the Ministry's overseeing agency that give details about computer use, including: "History of websites accessed, logs of proxy server installed at the the cafe, mail server logs, logs of network devices such as routers, switches, systems etc. installed at the cyber cafe and logs of firewall or Intrusion Prevention/Detection systems, if installed."
Finally, the guidelines bring down barriers between users by disallowing partitions of more than 4.5 feet at computer stations. Children are not to be allowed to use the computers unsupervised.

Duggal told The Times that he thought these rules may very well force cafe owners out of business.

Non-profit watchdog Privacy India has these guidelines square in its sights, protesting: the redundancy of the licensing process (cyber cafes are already subject to registration and licensing), how the guidelines may make cafe owners vulnerable to liability for the actions of their users and blocking internet access to children from "poorer classes, (since they are most likely to routinely access internet through cyber cafes) and denies them the opportunity of developing their computer skills which are crucial for the growth of the “knowledge economy” that India is trying to head towards."

Naturally, privacy is the issue that most concerns the group, which would insist on a purge of the logs after "the minimum retention period." Here's what they have to say about kids and their right to privacy:

In addition, we believe that children are more susceptible to exploitation and consequently have a heightened privacy expectation which must be honoured. We recommend that the current sub-rule be deleted and replaced with a clause which specifically exempts children from proving their identity and forbids taking photographs of them under any circumstance.

And why adults need it, too:

There are many uses of the internet for which a user may legitimately require privacy: For instance, patients, including HIV patients and those with mental illness, may wish to obtain information about their condition. Similarly sexuality minorities may wish to seek support or reach out to a larger community. Enforcing the architecture stipulated in this rule would discourage their access to such vital information. In addition, this architecturewould make it easier for cyber crimes such as identity theft to take place since it would be easier to observe the login details of other users at the cyber café.

The group is also not a fan of all the info that cyber cafes will be sitting on. "We further believe that access to the history of websites and mail server logs is a serious invasion of a person’s privacy, and should be omitted from the back up logs."

As if all those new guidelines weren't already cramping the carefree surfing experience, cyber cafes will also be subject to periodic visits by police inspectors who will have the power to demand all logs and check for compliance.

Read the original here

For more details visit http://editors.cis-india.org/news/cyber-cafes-porn-free

India's centralised snooping system facing big delays

praskrishna — 2013-07-15T06:35:05Z

Central Monitoring System lacks algorithms, database and data.

This blog post by Phil Muncaster was published in "The Register, UK" on July 9, 2013. The Centre for Internet & Society is mentioned.

After recent revelations about governments snooping on their own citizens, it's nice to know that not every such effort is going smoothly, as India’s much criticised NSA-style Centralised Monitoring System (CMS) is facing big delays after it emerged that the project is still missing the vital software which will allow analysts to search comms data.

The nation's Department of Telecommunications has now told the Center for Development of Telematics (C-DoT), which is installing the system, to speed things up, according to official documents seen by the Wall Street Journal.

The Rs.4 billion (£47.8m) CMS was originally conceived as a way of allowing the authorities to lawfully intercept voice calls and texts, emails, social media and the geographical location of individuals.

However, the Intelligence Bureau, which will be manning the system, has delayed its introduction for several reasons.

Firstly, mobile operators in only seven of the sub-continent’s 22 service areas have been connected to the CMS, leaving holes in its reach.

There’s also a major issue in that the system currently lacks the search algorithms needed to identify specific documents, meaning that as it stands operatives would have to search every email in the CMS to find the one they’re looking for.

The datacentre where intercepted data is to be stored is also apparently not yet ready, while the country’s Central Bureau of Investigation has yet to be given access to the system, causing further delays.

At a time when mass government monitoring of communications networks is a hot topic around the world thanks to Edward Snowden’s NSA revelations, rights groups have roundly slammed India’s CMS plans.

Human Rights Watch branded the scheme “chilling” in a strongly worded response, while India’s Centre for Internet and Society warned that the country currently doesn’t have privacy laws which could protect individuals from potential abuse of the system.

A Stop ICMS campaign has also been launched online in an attempt to mobilise opposition to the plans.

For more details visit http://editors.cis-india.org/news/theregister-uk-phil-muncaster-july-9-2013-indias-centralised-snooping-system-facing-big-delays

India's biometric database crosses billion-member mark

praskrishna — 2016-04-07T02:54:08Z

India's biometric database notched up one billion members on Monday, as the government sought to allay concerns about privacy breaches in the world's biggest such scheme.

The news by AFP was published by Daily Mail, UK on April 4, 2016. Sunil Abraham gave inputs.

The database was set up seven years ago to streamline benefit payments to millions of poor people as well as to cut fraud and wastage. Under the scheme, called Aadhaar, almost 93 percent of India's adult population have now registered their fingerprints and iris signatures and been given a biometric ID, according to the government.

IT minister Ravi Shankar Prasad hailed it as "an instrument of good governance" at a ceremony in New Delhi marking the crossing of the one-billion member mark.

Prasad said the initiative, inherited from the previous left-leaning Congress government, had enabled millions to receive cash benefits directly rather than dealing with middlemen.

He said the government had saved 150 billion rupees ($2.27 billion) on its gas subsidy scheme alone -- by paying cash directly to biometric card holders instead of providing cylinders at subsidised rates.

He also said all adequate safeguards were in place to ensure the personal details of card holders could not be stolen or misused by authorities given access to the database.

"We have taken all measures to ensure privacy. The data will not be shared with anyone except in cases of national security," Prasad said.

His comments come after parliament passed legislation last month giving government agencies access to the database in the interests of national security.

It was passed using a loophole to circumvent the opposition in parliament, where the ruling Bharatiya Janata Party (BJP) lacks a majority in the upper house.

The way it was passed, as well as the legislation itself, raised concerns about government agencies accessing private citizens' details.

Internet experts have also raised fears about the safety of such a massive database, including hacking and theft of details.

"It was as if Indian lawmakers wrote an open letter to criminals and foreign states saying, 'we are going to collect data to non-consensually identify all Indians and we are going to store it in a central repository. Come and get it!'," Sunil Abraham, executive director of the Centre for Internet and Society, wrote in India's Frontline news magazine.

For more details visit http://editors.cis-india.org/internet-governance/news/daily-mail-april-4-2016-afp-india-biometric-database-crosses-billion-member-mark

India's billion-member biometric database raises privacy fears

praskrishna — 2016-03-17T15:25:45Z

India's parliament is set to pass legislation that gives federal agencies access to the world's biggest biometric database in the interests of national security, raising fears the privacy of a billion people could be compromised.

The article by Sanjeev Miglani and Manoj Kumar was published by Reuters on March 16, 2016. Sunil Abraham was quoted.

The move comes as the ruling Bharatiya Janata Party (BJP) cracks down on student protests and pushes a Hindu nationalist agenda in state elections, steps that some say erode India's traditions of tolerance and free speech.

It could also usher in surveillance far more intrusive than the U.S. telephone and Internet spying revealed by former National Security Agency (NSA) contractor Edward Snowden in 2013, some privacy advocates said.

The Aadhaar database scheme, started seven years ago, was set up to streamline payment of benefits and cut down on massive wastage and fraud, and already nearly a billion people have registered their finger prints and iris signatures.

Now the BJP, which inherited the scheme, wants to pass new provisions including those on national security, using a loophole to bypass the opposition in parliament.

"It has been showcased as a tool exclusively meant for disbursement of subsidies and we do not realize that it can also be used for mass surveillance," said Tathagata Satpathy, a lawmaker from the eastern state of Odisha.

"Can the government ... assure us that this Aadhaar card and the data that will be collected under it – biometric, biological, iris scan, finger print, everything put together – will not be misused as has been done by the NSA in the U.S.?"

Finance Minister Arun Jaitley has defended the legislation in parliament, saying Aadhaar saved the government an estimated 150 billion rupees ($2.2 billion) in the 2014-15 financial year alone.

A finance ministry spokesman added that the government had taken steps to ensure citizens' privacy would be respected and the authority to access data was exercised only in rare cases.

According to another government official, the new law is in fact more limited in scope than the decades-old Indian Telegraph Act, which permits national security agencies and tax authorities to intercept telephone conversations of individuals in the interest of public safety.

"POLICE STATE"

Those assurances have not satisfied political opponents and people from religious minorities, including India's sizeable Muslim community, who say the database could be used as a tool to silence them.

"We are midwifing a police state," said Asaduddin Owaisi, an opposition MP.

Raman Jit Singh Chima, global policy director at Access, an international digital rights organization, said the proposed Indian law lacked the transparency and oversight safeguards found in Europe or the United States, which last year reformed its bulk telephone surveillance program.

He pointed to the U.S. Foreign Intelligence Surveillance Court, which must approve many surveillance requests made by intelligence agencies, and European data protection authorities as oversight mechanisms not present in the Indian proposal.

The Indian government brought the Aadhaar legislation to the upper house of parliament on Wednesday in a bid to secure passage before lawmakers go into recess.

To get around its lack of a majority there, the BJP is presenting it as a financial bill, which the upper chamber cannot reject. It can return it to the lower house, where the ruling party has a majority.

In its assessment of the measure, New Delhi-based PRS Legislative Research said law enforcement agencies could use someone's Aadhaar number as a link across various datasets such as telephone and air travel records.

That would allow them to recognize patterns of behavior and detect potential illegal activities.

But it could also lead to harassment of individuals who are identified incorrectly as potential security threats, PRS said.

Sunil Abraham, executive director of the Bengaluru-based Centre for Internet and Society, said Aadhaar created a central repository of biometrics for almost every citizen of the world's most populous democracy that could be compromised.

"Maintaining a central database is akin to getting the keys of every house in Delhi and storing them at a central police station," he said.

"It is very easy to capture iris data of any individual with the use of next generation cameras. Imagine a situation where the police is secretly capturing the iris data of protesters and then identifying them through their biometric records.

For more details visit http://editors.cis-india.org/internet-governance/news/reuters-march-16-2016-sanjeev-miglani-and-manoj-kumar-indias-billion-member-biometric-database-raises-privacy-fears

India's Aadhaar with biometric details of its billion citizens is making experts uncomfortable

praskrishna — 2017-02-14T14:57:33Z

"Indians in general have yet to understand the meaning and essence of privacy," says Member of Parliament, Tathagata Satpathy.

The blog post was published by Mashable India on February 14, 2017. Sunil Abraham was quoted.

But on Feb. 3, privacy was the hot topic of debate among many in India, thanks to a tweet that showed random people being identified on the street via Aadhaar, India's ubiquitous database that has biometric information of more than a billion Indians.

That's how India Stack, the infrastructure built by the Unique Identification Authority of India (UIDAI), welcomed OnGrid, a privately owned company that is going to tap on the world's largest biometrics system, conjuring images of Minority Report style surveillance.

But how did India get here?

Aadhaar's foundation

Not long ago, there were more people in India without a birth or school certificate than those with one (PDF). They had no means to prove their identity. This also contributed to what is more popularly known as “leakage” in the government subsidy fundings. The funds weren’t reaching the right people, in some instances, and much of it was being siphoned off by middlemen.

Nearly a decade ago, the government began scrambling for ways to tackle these issues. Could technology come to the rescue? The government dialled techies, people like Nandan Nilekani, a founder of India's mammoth IT firm Infosys, for help.

In 2008, they formulated Aadhaar, an audacious project "destined" to change the prospects of Indians. It was similar to Social Security number that US residents are assigned, but its implications were further reaching.

At the time, the government said it will primarily use this optional program to help the poor who are in need of services such as grocery and other household items at subsidized rates.

Eight years later, Aadhar, which stores identity information such as a photo, name, address, fingerprints and iris scans of its citizens and also assigns them with a unique 12-digit number, has become the world's largest biometrics based identity system.

According to the Indian government, over 1.11 billion people of the country's roughly 1.3 billion citizens have enrolled themselves in the biometrics system. About 99 percent of all adults in India have an Aadhaar card, it said last month.

Today, the significance of Aadhaar, which on paper remains an optional program, is undeniable in the country. The government says Aadhaar has already saved it as much as $5 billion.

But that's not it.

There's a bit of Aadhaar in everyone's life

Aadhaar (Hindi for foundation) has long moved beyond helping the poor. The UPI (Unified Payment Interface), another project by the Indian government that uses Aadhaar, is helping the country's much unbanked population to avail financial services for the first time. Nilekani calls it a "WhatsApp moment" in the Indian financial sector.

In December last year, Prime Minister Narendra Modi launched BHIM, a UPI-based payments app that aims to get millions of Indians to do online money transactions for the first time, irrespective of which bank they had their accounts with. With BHIM, transferring money is as simple as sending a text message. People can also scan QR codes and pay merchants for their purchases.

"This app is destined to replace all cash transactions," Modi said at the launch event. "BHIM app will revolutionize India and force people worldwide to take notice," he added.

The next phase, called Aadhaar Enabled Payments System will do away with smartphones. People will be able to make payments by swiping their finger on special terminals equipped with fingerprint sensors rather than swiping cards.

Last year, the government said people could store their driver license documents in an app called DigiLocker, should they want to be relieved from the burden of carrying paper documents. DigiLocker is a digital cloud service that any citizen in India can avail using their Aadhaar information.

The government also plans to hand out "health cards" to senior citizens, mapped to their Aadhaar number, which will store their medical records, which doctors will be able to access.

“Aadhaar is an instrument for good governance. Aadhaar is the mode to reach the poor without the middlemen,” Ravi Shankar Prasad, India’s IT minister said in a press conference last year.

But despite all the ways Aadhaar is making meaningful impact in millions of lives, some people are very skeptical about it. And for them, the scale at which Aadhaar operates now is only making things worse.

A security nightmare

There have been multiple reports suggesting bogus and fake entries in Aadhaar database. Instances of animals such as dogs and cows having their own Aadhaar identification numbers have been widely reported. In one instance, even Hindu god Hanuman was found to have an Aadhaar card.

The problem, it appears, is Aadhaar database has never been verified or audited, according to multiple security experts, privacy advocates, lawyers, and politicians who spoke to Mashable India this month.

“There are two fundamental flaws in Aadhaar: it is poorly designed, and it is being poorly verified,” Member of Parliament and privacy advocate, Rajeev Chandrasekhar told Mashable India. “Aadhaar isn’t foolproof, and this has resulted in fake data get into the system. This in turn opens new gateways for money launderers,” he added.

Another issue with Aadhaar is, Chandrasekhar explains, there is no firm legislation to safeguard the privacy and rights of the billion people who have enrolled into the system. There’s little a person whose Aadhaar data has been compromised could do. “Citizens who have voluntarily given their data to Aadhaar authority, as of result of this, are at risk,” he added.

Rahul Narayan, a lawyer who is counselling several petitioners challenging the Aadhaar project, echoed similar sentiments. “There’s no concrete regulation in place,” he told Mashable India. “The scope for abuses in Aadhaar is very vast,” he added.

But regulation — or its lack thereof — is only one of the many challenges, experts say. Sunil Abraham, the executive director of Bangalore-based research organisation the Centre for Internet and Society (CIS), says the security concerns around Aadhaar are alarming.

“Aadhaar is remote, covert, and non-consensual,” he told Mashable India, adding the existence of a central database of any kind, but especially in the context of the Aadhaar, and at the scale it is working is appalling.

Abraham said fingerprint and iris data of a person can be stolen with little effort — a “gummy bear” which sells for a few cents, can store one’s fingerprint, while a high resolution camera can capture one’s iris data.

Aadhaar doesn’t use basic principles of cryptography, and much of its security is not known.

Aadhaar is also irrevocable, which strands a person, whose data has been compromised, with no choice but to get on with life, Abraham said, adding that these vulnerabilities could have been averted had the government chosen smart cards instead of biometrics.

On top of this, he added, that Aadhaar doesn’t use basic principles of cryptography, and much of the security defences it uses are not known.

Had the government open sourced Aadhaar code to the public (a common practice in the tech community), security analysts could have evaluated the strengths of Aadhaar. But this too isn’t happening.

At CIS, Sunil and his colleagues have written over half-a-dozen open letters to the UIDAI (the authority that governs Aadhaar project) raising questions and pointing holes in the system. But much of their feedback has not returned any response, Abraham told Mashable India.

India Stack: A goldmine for everyone

As part of its push to make Aadhaar more useful, the UIDAI created what is called India Stack, an infrastructure through which government bodies as well as private entities could leverage Aadhaar's database of individual identities. This is what sparked the initial debate about privacy when India Stack tweeted the controversial photo.

Speaking to Mashable India, Piyush Peshwani, a founder of OnGrid, however dismissed the concerns, clarifying that the picture was for representation purposes only. He said OnGrid is building a trust platform, through which it aims to make it easier for recruiters to do background check on their potential employees after getting their consent.

India Stack and OnGrid have since taken down the picture from their Twitter accounts. "OnGrid, much like other 200 companies working with UIDAI, can only retrieve information of users after receiving their prior consent," he said.

The lack of information from the UIDAI and India Stack is becoming a real challenge for citizens, many feel. There also appears to be a conflict of interest between the privately held companies and those who helped design the framework of Aadhaar.

As Rohin Dharmakumar, a Bangalore-based journalist pointed out, Peshwani was part of the core team member of Aadhaar project. A lawyer, who requested to be not identified, told Mashable India that there is a chance that these people could be familiar with Aadhaar’s roadmap and use the information for business advantage, to say the least.

Most people Mashable India spoke to are questioning the way these third-party companies are handling Aadhaar data. There is no regulation in place to prevent these companies from storing people’s data or even creating a parallel database of their own — a view echoed by Abraham, Narayan, and Chandrasekhar.

Not mandatory only on paper

But for many, the biggest concern with Aadhaar remains just how aggressively it is being implemented into various systems. For instance, in the past one month alone, students in most Indians states who want to apply for NEET, a national level medical entrance test, were told by the education board CBSE that they will have to provide their Aadhaar number.

A few months ago, Aadhaar was also made mandatory for students who wanted to appear in JEE, an all India common engineering entrance examination conducted for admission to various engineering colleges in the country.

The apex Supreme Court of India recently asked the central government to register the phone number of all mobile subscribers in India (there are about one billion of those in India) to their respective Aadhaar cards. Telecom carriers are already enabling new connections to get activated by verifying users with Aadhaar database.

A prominent journalist who focuses on privacy and laws in India questioned the motive. “When they kickstarted UIDAI, people were told that this an optional biometrics system. But since then the government has been rather tight-lipped on why it is aggressively pushing Aadhaar into so many areas,” he told Mashable India, requesting not to be identified.

"It is especially difficult to explain why privacy is necessary for a society to advance when taken in the context of Aadhaar."

“It is especially difficult to explain why privacy is necessary for a society to advance when taken in the context of Aadhaar. The Aadhaar card is being offered to people in need, especially the poor, by making them believe that services and subsidies provided by the government will be held back from them unless they register,” Satpathy told Mashable India.

The central government said last week Aadhaar number would be mandatory for availing food grains through the Public Distribution System under the National Food Security Act. In October last year, the government made Aadhaar mandatory for those who wanted to avail cooking gas at subsidized prices.

“No matter how many laws are made about not making Aadhaar mandatory, ultimately it depends on the last mile person who is offering any service to inform citizens about their rights,” Satpathy added.

“These last-mile service providers are companies who would benefit from collecting and bartering big data for profit. They would be least interested to inform citizens about their rights and about the not mandatory status of Aadhaar.

“As Aadhaar percolates more and is used by more government and private services, the citizen will start assuming it's a part of their life. This card is already being misunderstood as if it is essential like a passport,” he added.

“My worry is that this data will be used by government for mass surveillance, ethnic cleansing and other insidious purposes,” Satpathy said. “Once you have information about every citizen, the powerful will not refrain from misusing it and for retention of power. The use of big data for psycho-profiling is not unknown to the world anymore.”

Mashable India reached out to UIDAI on Feb. 8 for comment on the privacy and security concerns made in this report. At the time of publication, the authority hadn't responded to our queries.

For more details visit http://editors.cis-india.org/internet-governance/news/mashable-india-february-14-2017-india-aadhaar-uidai-privacy-security-debate

India's Aadhaar mandate for smartphone makers may rile global firms

praskrishna — 2016-09-15T02:25:31Z

They are unlikely to oblige to request to make changes in their operating system and devices to ensure Aadhaar authentication is done securely on smartphones.

The article by Alnoor Peermohammed was published in the Business Standard on September 14, 2016. Sunil Abraham was quoted.

India is asking global smartphone makers such asApple and Google to adopt locally designed standards on their devices or operating systems that would allow use of biometric scanners for Aadhaarauthentication, a move that could face resistance from global firms.

Apple, the world’s largest smartphone maker runs its own iOS closed ecosystem and mandates apps built by developers to be certified by the company. Its closest rival Google, which owns the Android operating software that runs on nine out of ten smartphones in India, has directives for device makers to comply with. Firms such as Samsung, Lenovo and Micromax build smartphones on the Android OS that are sold in India.

Most global companies are unlikely to oblige India’s request that would require to make changes in their operating system and devices to ensure Aadhaarauthentication is done securely on smartphones, say analysts.

“There is no clarity so far. As of now, it is impossible that they (global smartphone makers) would oblige for a hardware safe zone baked on the sensors,” says Sunil Abraham, executive director at Centre for Internet and Society, a Bengaluru-based researcher that works on emerging technologies. “Because the biometrics contain sensitive personal information, they (UIDAI) don’t want anybody — vmobile manufacturer, OS vendor, telco or ISP — to intercept it”.

India is hoping that global firms would accept the country’s plea considering that most of India’s population use a mobile phone as their only computing device and need them to authenticate on Aadhaar for using government and banking services.

“Right now we’re in consultation with all these device manufacturers as well as the operating system vendors,” said Ajay Bhushan Pandey, Director General of the Unique Identification Authority of India (UIDAI) in a phone interview. “Basically we’re trying to evolve our system wherein a manufacturer or the devices where those operating systems are being used will have a facility where Aadhaar authentication can be made possible in a secure manner.”

India has over 105 crore people or 98% of adult population with Aadhaar. Most government and private organisations use Aadhaar authentication to issue services or products such as opening a bank account, getting a ration card or buying a mobile connection.

Reliance plans to reduce paperwork and issue connections in less than an hour usingAadhaar and try to get its 100 million target market sooner.

Over a fifth of India’s one billion users own smartphones and as the country sees better mobile internet access, more people are expected to upgrade to smartphones and use apps to access their banks to transfer funds, do online shopping and access government services.

For more details visit http://editors.cis-india.org/internet-governance/news/business-standard-alnoor-peermohammed-september-14-2016-indias-aadhaar-mandate-for-smartphone-makers-may-rile-global-firms

India's ‘Facebook ruling’ is another nail in the coffin of the MNO model

praskrishna — 2016-02-28T03:44:34Z

Ability to access 'net from mobe no longer considered a miracle.

The article was published in the Register on February 15, 2016. Pranesh Prakash gave inputs.

Nobody could accuse India’s telecoms regulator, TRAI, of being in the operators’ pockets. This month it has, once again, set eye-watering reserve prices for the upcoming 700 MHz spectrum auction (see separate item), and now it has taken one of the toughest stances in the world on net neutrality, in effect banning zero rated or discounted content deals like Reliance Communications’ Facebook Basics, or Bharti Airtel’s Zero.

In a ruling last Monday, TRAI said telecoms providers are banned from offering discriminatory tariffs for data services based on content, and from entering deals to subsidize access to certain websites. They have six months to wind down any existing arrangements which contravene the new rules. Its stance is even stricter than in other countries with strong pro-neutrality laws, such as Brazil and The Netherlands.

“This is the most extensive and stringent regulation on differential pricing anywhere in the world,” Pranesh Prakash, policy director at the Centre for Internet and Society, said. “Those who suggested regulation in place of complete ban have clearly lost.”

Such decisions, combined with high spectrum costs, will quickly make the traditional cellular business model unworkable in India, and the more that happens, the more wireless internet innovation will switch to open networks running on Wi-Fi and unlicensed spectrum. R.S. Sharma, chairman of TRAI, was careful to tell reporters that the zero rating ruling would not affect any plans to offer free Wi-Fi services, like those planned by Google in a venture with Indian Railways.

A disaster for MNOs, not Facebook

Facebook pronounced itself “disappointed” at TRAI’s ruling, having lobbied aggressively for a more flexible approach since RCOM was forced to suspend the Basics offering in December while the consultation process took place. But while the ruling bars the Basics offering – which provided free, low speed access, on RCOM’s network, to a selection of websites, curated by Facebook – it does not stop the social media giant pursuing other initiatives within its internet.org umbrella. These include projects to extend access using its own networks, powered by drones and unlicensed spectrum, to the unserved of India and other emerging economies.

So while the TRAI decision may be a setback for Facebook, it is not the body blow that it represents for the MNOs with their huge debt loads and infrastructure costs, and low ARPUs. Facebook, with 130m users in India, has a comparable reach to the Indian MNOs (only three, Bharti Airtel, Vodafone and Idea, have more subscribers than Facebook has users), and is better skilled at monetizing those consumers.

The challenge for companies like Facebook is that strict neutrality rules reduce their ability to harness others’ networks in order to reach out to new users. There are about 240m people in India who are online, but don’t use Facebook, and about 800m who are not connected, so the growth potential is far larger than in the other 37 countries where Basics is offered, such as Kenya or Zambia (Facebook is blocked in China). Using RCOM’s network and marketing activities was a far cheaper way to reach some of those people than launching drones, but Facebook has other options too, including its existing efforts to make its services more usable on very basic handsets and connections; the ability to leverage the WhatsApp brand; and partnerships with Wi-Fi providers.

The drones may have less immediate results than Basics, but they are a high profile example of an ongoing shift towards open networks, which has been going on for years, driven more by Wi-Fi proliferation than neutrality laws. The latter will be an accelerant, however.

All internet will be free, not zero rated

Currently, zero rating is an increasingly popular tactic to lure users with an apparently cheap deal and then, hopefully, see them upgrade to richer data plans, or spend money on m-commerce and premium content, in future. Zero rating involves allowing users access to selected websites and services without it affecting their data caps or allowances.

The US regulator has so far tolerated the practice, but the debate is raging, there and elsewhere, over whether it infringes neutrality laws, by offering different pricing for different internet services. If other authorities take the stance adopted by TRAI in India, operators will have to find new ways to attract customers and differentiate themselves.

Increasingly, access to a truly open internet will be the baseline, and priced extremely low. That low pricing will be made commercially viable by rising use of Wi-Fi to reduce cost of data delivery, whether for MNOs, wireline providers or web players like Google and Facebook, which are moving into access provision. Providers, whether traditional or new, will have to stop regarding access to the internet as a premium service or a privilege – it will be more akin to connecting someone to the electricity grid, just the base enabler of the real revenue model.

Just as it’s only when users plug something into that grid that they start to pay fees, so the operators will charge for higher value offerings which ride on top of the internet – premium content, enterprise services, cloud storage, freemium applications and so on.

The mobile operators have not embraced these ideas willingly. For years, the ability to access the internet from a mobile device was regarded as a value-add, almost a miracle. Now that the wireless network is often the primary access method, they need to change their ideas and be more like the smarter cablecos – which have tacked internet access onto a model driven by paid-for content and services – or the web giants, which have worked out ways to monetize ‘free’ access, from advertising to big data.

This, of course, is one of the goals of internet.org and Google’s similar initiatives involving drones, white space spectrum and satellites. The more users are able to access the internet, preferably for free, and the more they see Google or Facebook as their primary conduits to the web, the more data these companies have to feed into their deep learning platforms, their context aware services and their advertising and big data engines.

So while critics of TRAI said the zero rating decision was a setback to the goal of getting internet access into the hands of the huge underserved population of India, that population is too large and potentially rich for Facebook and its rivals to give up at the first hurdle.

Facebook CEO Mark Zuckerberg wrote in a blog post: "While we're disappointed with today's decision, I want to personally communicate that we are committed to keep working to break down barriers to connectivity in India and around the world. Internet.org has many initiatives, and we will keep working until everyone has access to the internet."

For more details visit http://editors.cis-india.org/telecom/news/the-register-february-15-2016-india-facebook-ruling-is-another-nail-in-coffin-of-mno-model

India's 23rd regional Wikipedia, in Tulu, goes live

praskrishna — 2016-08-07T10:31:21Z

The Tulu Wikipedia has just gone live, giving another boost to yet another ancient Indian language otherwise struggling to keep up with the times and speedily changing technology.

Originally published by IANS, it was mirrored by Business Standard on August 6, 2016.

The news was announced by two key community organisers on Saturday who helped to make an eight-year-dream come true. Dr Vishwanatha Badikana, a PhD in Kannada literature in Mangalore (Karnataka) and Bharathesha, a mechanical engineer based in Muscat, announced this while attending Wikiconference India 2016, India's second national Wikipedia meet in half a decade being held here this weekend.

Tulu is a language spoken by around two million native speakers mainly in southwest Karnataka and in Kasaragod district, Kerala. It belongs to the Dravidian family of languages. Some scholars suggest Tulu is among the earliest Dravidian languages with its roots going back some 2000 years.

Wikipedia itself is available in 22 Indian languages, with Tulu becoming the 23rd. There are another one-and-half dozen Indian language Wikipedias in the incubator stage at present. Not all languages have an active wiki community.

Located at tcy.wikipdia.org, the Tulu Wikipedia has been in "incubation" since 2008. This term is used to describe such online collaborately-crafted encyclopedias which are still waiting to to go "live" or active and come online.

Around 2014, it was reactivated. Following some meetings and workshops, the concept was also showcased that year at a "World Tulu Conference" stall in December of that year.

After much work, some 1,100 articles (or 1,050 if one could ignore those which are not redirects) went live. There are currently about 100 editors who have made over 10 edits each.

"Dr Vishwanatha and Bharathesha are the number one and number two contributors," said Dr UB Panavaja, a former scientist and techie and long-term supporter of Kannada computing. Pavanaja currently looks after the CMR (Creating Movement Resources) of the Bengaluru-based Centre for Internet and Society which works with some language groups to promote their Wikipedia presence.

"After we became live, we will import articles from the 'incubator' site, build the 'village pump', set up policies, administration structure, info boxes and templates," said Pavanaja, describing the tools that any new Wikipedia needs to set up.

Scholars like the nineteenth missionary-linguist Bishop Robert Caldwell have called this language "peculiar and very interesting". According to him, "Tulu is one of the most highly developed languages of the Dravidian family. It looks as if it had been cultivated for its own sake."

The language has a lot of written literature and a rich oral literature such as the Epic of Siri, according to the Wikipedia itself.

In coastal Karnataka, both the Mangalore and Udupi areas today allow the language as an optional third-language in local schools.

This role in schooling makes it all the more mandatory to create encyclopaedic texts in the language, say its Wikipedia promoters. Mangalore University also has a Tulu language chair while St Aloysius's Radio Sarang community radio station broadcasts daily in this tiny language and the local All India Radio also broadcasts in the language.

Some five Kannada language representatives and one from Tulu are presently in Mohali-Chandigarh attending Wikiconference India 2016.

Indian Wikipedias include Assamese, Bengali, Bhojpuri, Bishnupriya Manipuri, Gujarati, Hindi, Kannada, Kashmiri, Konkani, Maithili, Malayalam, Marathi, Nepali, Newari, Odia, Pali, Punjabi, Sanskrit, Sindhi, Tamil, Telugu and Urdu, besides, now, Tulu.

(Frederick Noronha can be contacted at fredericknoronha1@gmail.com)

For more details visit http://editors.cis-india.org/a2k/news/business-standard-august-6-2016-india-23-regional-wikipedia-in-tulu-goes-live

India's 23rd Regional Wikipedia Launches

praskrishna — 2016-08-09T03:14:58Z

A Tulu version has gone live on Wikipedia, making it the 23rd one in an Indian language to do so.

The blog post by Ranu P. was published by CCM.net on August 8, 2016. Dr. U.B. Pavanaja was quoted.

Tulu, an Indian language that is popular in the southern part of the country has received its own Wikipedia version — for which over 100 editors created 1,100 articles. The announcement was made on Aug. 6 during the Chandigarh-based WikiConference India 2016 by Vishwanatha Badikana and Bharatesha Alasandemajalu, two community organizers who made an 8-year-old dream come true. The greatest hope is that the Tulu wiki will lend support to the struggling language, which is used by just over 2 million native speakers who largely reside in Karnataka. Some research even suggests that it is among the earliest of Dravidian languages, which would make it roughly 2,000 years old.

"After we became [sic] live, we will import articles from the 'incubator' site, build the 'village pump,' set up policies, administration structure, info boxes, and templates," said Dr. UB Panavaja, an engineer and a longtime supporter of regional language computing. In addition to the 23 already-launched Indian Wiki versions, which include Bengali, Manipuri, Hindi, Nepali, Punjabi, and Urdu, there are another 18 Indian languages that are still in the incubator stage awaiting publishing.

For more details visit http://editors.cis-india.org/a2k/news/ccm-august-8-2016-ranu-p-india-23-regional-wikipedia-launches

India's 23rd Regional Language Wikipedia Goes Live in Tulu

praskrishna — 2016-08-09T03:02:16Z

The Tulu Wikipedia has just gone live, giving another boost to yet another ancient Indian language otherwise struggling to keep up with the times and speedily changing technology.

Originally published by Indo Asian News Service, the blog post was mirrored by NDTV on August 8, 2016.

Located at tcy.wikipedia.org, the Tulu Wikipedia has been in "incubation" since 2008. This term is used to describe such online collaborately-crafted encyclopedias which are still waiting to to go "live" or active and come online.

Around 2014, it was reactivated. Following some meetings and workshops, the concept was also showcased that year at a "World Tulu Conference" stall in December of that year.

After much work, some 1,100 articles (or 1,050 if one could ignore those which are not redirects) went live. There are currently about 100 editors who have made over 10 edits each.

The language has a lot of written literature and a rich oral literature such as the Epic of Siri, according to the Wikipedia itself.

In coastal Karnataka, both the Mangalore and Udupi areas today allow the language as an optional third-language in local schools.

Some five Kannada language representatives and one from Tulu are presently in Mohali-Chandigarh attending Wikiconference India 2016.

For more details visit http://editors.cis-india.org/a2k/news/indo-asian-news-service-ndtv-august-8-india-23-regional-language-wikipedia-goes-live-in-tulu

India won't censor social media: Telecom Minister

praskrishna — 2012-03-01T07:15:29Z

India does not intend to censor online social networks such as Facebook, a minister said Tuesday, but he demanded that they obey the same rules governing the press and other media. The article by AFP was published in the Tribune on February 14, 2012.

“I never wanted to censor social media and no government wants to do so. But like the print and electronic media, they have to obey the laws of the country.” He held a number of meetings with leading Internet companies late last year in which he asked about the possibility of checking content before it is posted online by users.

The minister was said to have shown Internet executives examples of obscene images found on the Internet that risked offending Muslims or defaming politicians, including the boss of the ruling Congress party, Sonia Gandhi. “The media reported I had said I wanted to pre-screen the content on social media. I have never even heard the word pre-screen,” he told the summit.

Since these meetings, 19 Internet firms including Google, Yahoo! and Facebook have been targeted in criminal and civil cases lodged in lower courts, holding them responsible for content posted by users of their platforms. The government has given its sanction for the firms to be tried for serious crimes such as fomenting religious hatred and spreading social discord — offences that could land company directors in prison.

“All I want is that they (social media) should follow the laws of the land. Social media must not consider itself to be above that,” Sibal said. But Internet privacy groups say social media sites may not have the resources to screen obscene material that violates local laws posted on the Internet. Local laws prohibit the sale or distribution of obscene material as well as those that can hurt religious sentiments in overwhelmingly-Hindu India.

“It is just not humanly possible to pre-censor content and Sibal knows that very well,” said Rajan Gandhi, founder of a New Delhi-based advocacy group Society in Action. Pranesh Prakash of the Bangalore-based Centre for Internet and Society said he was “glad Sibal does not believe in censorship and that companies operating in India should follow local laws.” “But on the other hand he has asked them to evolve new guidelines and actively monitor user content which is not legally sanctioned. This makes him look two-faced,” Prakash added.

Google and Facebook said earlier this month they had removed the allegedly offensive content used as evidence in the court cases.

The groups have appealed to the Delhi High Court asking for the cases against them to be quashed on the basis they cannot be held responsible for their clients’ actions. The comments of a judge hearing the case raised further fears that freedom of expression online could be restricted. “You must have a stringent check. Otherwise, like in China, we may pass orders banning all such websites,” the judge said at the January hearing. Facebook is banned in China and Google moved its operations out of the country in 2010 in protest at censorship laws there.

The debate about social networks mirrors a larger national dialogue about freedom of speech in the world’s biggest democracy following recent protests by religious groups. Indian-origin writer Salman Rushdie was prevented from speaking at a literature festival in Jaipur last month after Muslim groups protested against his presence over his allegedly blasphemous 1988 novel “The Satanic Verses.” A group led by author and journalist Nilanjana Roy organised public readings of banned literary works on Monday to protest against what it said were recent curbs on intellectual freedom.

The initiative, called “Flashreads for free speech”, was widely advertised on social networks including Twitter and Facebook.

Originally published by AFP and reproduced in the Tribune.

For more details visit http://editors.cis-india.org/news/india-wont-censor-social-media

India WhatsApp Privacy Fight May Affect Multinationals

praskrishna — 2017-02-02T02:28:23Z

The Indian Supreme Court’s review of Facebook Inc.'s and WhatsApp Inc.'s data security practices may lack teeth but also presages a desire for a stronger privacy regime and oversight of multinationals, internet and privacy specialists told Bloomberg BNA.

The article by Nayanima Basu was published by Bloomberg BNA on February 1, 2017. Pranesh Prakash was quoted.

WhatsApp revised its privacy policy in August 2016 to share data with owner Facebook and allow targeted ads and messages from businesses, laying the groundwork for the free messaging service to monetize such data. But a public interest complaint, akin to a class action in the U.S., filed by two Indian students and regulatory inquiries have resulted in India’s top court asking Facebook and WhatsApp about their data protection practices.

The court’s move Jan. 17 to seek the information may make multinational companies jittery, Rahul Khullar, former secretary of commerce for India’s Ministry of Commerce and Industry, told Bloomberg BNA. Although stronger data privacy enforcement is needed, all the high court has done is aggravate Facebook and other large multinationals, he said.

Facebook is the second largest media company in the world with a $367 billion market capitalization, Bloomberg data show. It acquired WhatsApp in 2014 for approximately $18 billion, data show. Facebook didn’t immediately respond to Bloomberg BNA’s e-mail request for comments.

Khullar, who is also the former chairman of the Telecom Regulatory Authority of India, said multinationals need to be more careful in sharing their data because of the “distinction between digital non-commercial data and digitally sensitive data,” he said. A strong national data privacy law would resolve some of these issues, he said.

An U.S. official based at the U.S. Embassy in New Delhi, speaking on background, told Bloomberg BNA that any maneuver that restricts the free flow of data may harm the operations of U.S.-based multinationals and similar companies.

Clarity, Stronger Laws Needed

Some internet and privacy specialists say that Facebook and WhatsApp failed to provide effective data protection under Indian law.

Pranesh Prakash, policy director at the nonprofit digital technologies advocate Centre for Internet and Society, told Bloomberg BNA that Facebook and WhatsApp are in violation of Section 43A of the Information Technology Act that lays out “reasonable security practices and procedures.”

Indian citizens are reaching out to the courts for data protection enforcement because lawmakers have “failed to do so,” he said. That highlights the need for robust data protection laws in India and, he said, hopefully “goads the government and Parliament into enacting a privacy and data protection law.”

In lieu of further legislative action, companies may be able to resolve some issues by establishing clearer privacy policies, Niraj Gunde, a Mumbai-based attorney and consumer advocate, told Bloomberg BNA. Most software agreements have a clandestine clause that allows companies to access user data, but those agreements should also state how the data will be used, stored and eventually disposed of, he said.

For more details visit http://editors.cis-india.org/internet-governance/news/bloomberg-bna-february-1-2017-nayanima-basu-india-whatsapp-privacy-fight-may-affect-multinationals