Category: Regulation

Policy Lessons for India from Europe’s Artificial Intelligence Act

Posted on by Tech Law Forum NALSAR

[Ed Note: The following post is part of the TLF Editorial Board Test 2021-22. It has been authored by Mehreen Mander, a fourth year student of NALSAR University of Law.]

Of late, the Government of India has been prioritizing the development, adoption and promotion of Artificial Intelligence. In 2018, substantial funding was allocated to the national program for artificial intelligence. Many Union Ministries are also making great leaps in the field of AI. In 2017, the Union Ministry of Commerce and Industry set up an AI Task Force which, in its report, hailed the potential of AI to be a solution to many socio-economic problems across ten identified sectors. Furthermore, the Union Ministry of Electronic and Information Technology set up four committees to prepare a roadmap for the National Artificial Intelligence Programme.

Read more

Regulating Real Money Games: Examining Alternatives to Prohibition (Part I)

Posted on by Tech Law Forum NALSAR

[This is the first part of a two-part post authored by Mitali Kshatriya, a fourth-year law student at RMLNLU, Lucknow. Part II can be found here]

The Indian Gaming Industry is expected to swell to $2.8 Billion with an annual growth rate of 40%. Indian gamers have a 13% share of global game sessions and are expected to add 40 million online gamers during 2020−22. A significant part of India’s gaming industry consists of real money gaming. The increasing popularity of real money games has led to problems such as addiction, misleading advertisements, overspending by users etc. This has led states enacting knee-jerk legislations imposing blanket bans on real money games.

Read more

Legal issues with Blockchain in Corporate Governance System of Indian Banks

Posted on by Tech Law Forum NALSAR

[This post has been authored by Harinie. S, a fourth-year law student at Symbiosis Law School, Hyderabad]

The recent onset of economic recession highlights the need to overhaul the governance system of the largest player of the economy- the banks. The failure of Lakshmi Vilas Bank and Yes Bank, and the downfall of Dhanalakxmi bank’s management are a result of a bad corporate governance system. The same has been acknowledged by the Reserve Bank of India (‘RBI’).

Read more

Inclusive FinTech: Bridging the Gap

Posted on by Tech Law Forum NALSAR

[The following post has been authored by Harshita Lilani, a third year student of NALSAR University of Law. This essay is part of an ongoing collaboration between r – TLP and the NALSAR Tech Law Forum Blog and is the fourth post in the series. The first entry can be found here, and the rest of series is available here.]

Financial inclusion and inclusive growth have emerged as one of the main agendas in the past decade as several nations have become aware that sustainable and inclusive growth of all the sections of the society is important for a nation to prosper. By working parallelly with traditional financial institutions like banks, credit unions and insurance companies, Financial Technology or ‘FinTech’, claims to enhance financial inclusion by offering novel products that are better tailored to consumers’ needs at a lower cost. However, a wide ‘FinTech gender gap’ shows that women are significantly less likely to use fintech products or services offered by the fintech entrants than men. This article discusses this gender gap in the FinTech industry and analyses the existing government policies and initiatives that claim to regulate fintech with an aim to bridge this gap. Finally, it highlights the key regulatory and policy changes that are required to create an enabling environment for financial inclusion in India.

Read more

Fighting “Unlawful” Content: Moderation and the New Intermediary Guidelines

Posted on by Tech Law Forum NALSAR

[This post has been authored by Sanjana L.B., a 4th year student at Symbiosis Law School, Hyderabad.]

Introduction

In January 2021, India had the highest number of Facebook users at 320 million. This was followed by the United States of America (“USA”), with 190 million users. As of February 2021, about 53.1% of the population of Myanmar were active social media users. These numbers are not only indicative of internet penetration, but also of the audience for user-generated content on platforms like Facebook. This article focuses, firstly, on the need for content moderation on social media by looking at harmful precedents of inefficient moderation, and secondly, on the Indian Government’s approach to content moderation through the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (“Intermediary Guidelines”) and recent developments surrounding the regulation of social media content in India.

Read more

Breaking Encryption and Violating User Privacy: Is there a Way Out?

Posted on by Tech Law Forum NALSAR

[This post has been authored by Shamik Datta and Shikhar Sharma, first year students at NALSAR University of Law and National Law School India University respectively.]

How the IT Rules break End-to-End Encryption

End-to-end encryption ensures that intermediaries or third parties don’t have access to the content of the message and identity of the communicating parties. However, Rule 4 (2) of the new Informational Technology (Guidelines for Intermediaries and Digital Media Ethics Code) Rules 2021 specifies that all ‘significant social media intermediaries’ must enable the traceability of the first originator of a message. The collected information may be used if and when required by a court of competent jurisdiction or competent authority under Section 69A of the Information Technology Act, 2000. The information derived via the breaking of end-to-end encryption may be used to investigate offences abetted or caused by the spread of fake news. This includes open-ended offences like disturbing ‘public order’, which are broad in their scope, and thus, leave a wide scope for their blatant misuse and arbitrary interpretation. The proviso to Rule 4(2) states that intermediaries are not required to reveal the content of the message, or any other related information. However, under Rule 4 of the IT (Procedure and Safeguards for Interception, Monitoring and Decryption) Rules, 2009, the government possesses the power to demand the revelation of the content of electronic messages. The government could, upon identifying the user under the 2021 Rules, ask the intermediary to decrypt the content of other messages of the same user under the 2009 IT Rules citing “public order” (for example, citing the history of the user as a fake news spreader). This would render the proviso to Rule 4(2) of the 2021 Rules meaningless. Therefore, when the information about the first originator is gathered via enabling traceability and powers to disclose the content of the message is exercised, it leads to a break in end-to-end encryption. This destroys the very purpose of the cryptographic keys and encryption protocols developed over the years to encode the messages and safeguard the identity of their sender. 

Read more

Geospatial Data Deregulation and Personal Data Protection

Posted on by Tech Law Forum NALSAR

[This post has been authored by Varsha Rajesh, a final year law student at School of Law, Christ University, Bangalore.]

In February 2021, the Department of Science and Technology of the Government of India issued the Guidelines for acquiring and producing geospatial data and geospatial data services including Maps which applies to entities collecting geospatial data, mapping and other allied products and services which are offered by the Government and privately-owned bodies.

Read more

Mapping the rise of the surveillance state amid the COVID-19 crisis

Posted on by Tech Law Forum NALSAR

[This post has been authored by Noyanika Batta, a Senior Associate at Lakshmikumaran & Sridharan Attorneys. She is a 2018 graduate from Gujarat National Law University.]

There exist dichotomous views on the usefulness of surveillance and its relationship with public health. The disease control strategies adopted by the states often necessitate extensive surveillance practices having an overbearing and intrusive effect on the daily lives of its citizens. The debate thus lies in striking the right balance between public health and the need to strengthen public health infrastructures vis-a-vis privacy protection for individual citizens. With the rapid spread of COVID19 debilitating economies and causing health systems across the globe to crumble, it became imperative for governments and organizations to take immediate actions to protect its people. This in turn saw a fierce boom in surveillance technologies dedicated towards monitoring whole populations, with governments trying to chart the virus’ trajectory from broad swathes of personal data. This article seeks to examine the disproportionate risks to data privacy caused by the use of invasive and pervasive technologies such as contact tracing across the world.

Read more

Facial Recognition and Data Protection: A Comparative Analysis of laws in India and the EU (Part I)

Posted on by Tech Law Forum NALSAR

[This two-part post has been authored by Riddhi Bang and Prerna Sengupta, second year students at NALSAR University of Law, Hyderabad. Part II can be found here]

With the wave of machine learning and technological development, a new system that has arrived is the Facial Recognition Technology (FRT). From invention to accessibility, this technology has grown in the past few years. Facial recognition comes under the aegis of biometric data which includes distinctive physical characteristics or personal traits of a person that can be used to verify the individual. FRT primarily works through pattern recognition technology which detects and extracts patterns from data and matches it with patterns stored in a database by creating a biometric ‘template’. This technology is being increasingly deployed, especially by law enforcement agencies and thus raises major privacy concerns. This technology also attracts controversy due to potential data leaks and various inaccuracies. In fact, in 2020, a UK Court of Appeal ruled that facial recognition technology employed by law enforcement agencies, such as the police, was a violation of human rights because there was “too broad a discretion” given to police officers in implementing the technology. It is argued that despite the multifarious purposes that this technology purports to serve, its use must be regulated.

Read more