Women’s protection Ordinance clashes with ITA 2008

Government of India has promulgated an ordinance titled “The Criminal Law (Amendment) Ordinance, 2013” following the public outrage on the the recent incident in which a girl was gangraped in a Delhi bus. The Ordinance has initiated some provisions to strengthen the laws against sexual assault on women including acid attacks, rape and rape leading to death or reduction of the victim to vegetable status etc.

Apart from some of the provisions that directly relate to physical society offences, there are at least two provisions which directly conflict with the provisions of ITA 2008.

One of the conflicting provisions is “voyeurism” which conflcits with Section 66E of ITA 2008 and the other is on “Stalking” which conflicts with Section 66A.

The amended IPC section 354C states as follows.

Section 354C: voyeurism:

“Whoever watches, or captures the image of, a woman engaging in a private act in circumstances where she would usually have the expectation of not being observed either by the perpetrator or by any other person at the behest of the perpetrator shall be punished on first conviction with imprisonment of either description for a term which shall not be less than one year, but which may extend to three years. and shall also be liable to fine, and be punished on a second or subsequent conviction, with imprisonment of either description for a term which shall not be less than three years, but which may extend to seven years, and shall also be liable to fine.

Explanation 1.- for the purpose of this section, “private act” includes an act carried out in a place which. in the circumstances,would reasonably be expected to provide privacy, and where the victim’s genitals, buttocks or breasts are exposed or covered only in underwear,or the victim is using a lavatory or the person is doing a sexual act that is not of a kind ordinarily done in public.

Explanation 2.- Where the victim consents to the capture of images or any act, but not to their dissemination to third persons and where such image or act is disseminated, such dissemination shall be considered an offence under this section.”

Section 66E of ITA 2008 on the other hand states

“Whoever, intentionally or knowingly captures, publishes or transmits the image of a private area of any person without his or her consent, under circumstances violating the privacy of that person, shall be punished with imprisonment which may extend to three years or with fine not exceeding two lakh rupees, or with both”

For the first time offender Section 66E has a harsher punishment where as for the second time offender, IPC 354C will be harsher. It is not clear however if a person can be punished for the first time under ITA 2008 and for the second time under IPC. Also section 66E addresses capture as well as publishing and transmission of a picture of a private part of a person. If however the publishing and transmission involves content which falls under Section 67, 67A or 67B (Obscenity) then there would be harsher punishments under ITA 2008.

In the IPC section however, the offence relates to “watching and capturing” a “Private act” and the punishment may be as little as one year in the first instance. “Watching a private act” falls only under IPC, where as “Capturing” falls under both IPC and ITA2008 “Publishing” and “Transmission” falls only under ITA 2008.

Section 354D of the proposed ordinance states as under:

354D: Stalking:

(1) Whoever follows a person and contacts or attempts to contact such person to foster personal interaction repeatedly, despite a clear indication of disinterest by such person, or whoever monitors the use by a person of the internet, email or any other form of electronic communication, or watches or spies on a person in a manner that results in a fear of violence or serious alarm or distress in the mind of such person, or interferes with the mental peace of such person, commits the offence of stalking:

Provided that the course of conduct will not amount to stalking if the person who pursued it shows
(i)that it was pursued for the purpose of preventing or detecting crime and the person accused of stalking had been entrusted with the responsibility of prevention and detection of crime by the state; or
(ii) that it was pursued under any law or to comply with any condition or requirement imposed by any person under any law. or
(iii) that in the particular circumstances the pursuit of the course of conduct was reasonable.

(2) Whoever commits the offence of stalking shall be punished with imprisonment of either description for a term which shall not be less than one year but which may extend to three years, and shall also be liable to fine.’

Section 66A has been extensively discussed on this site (Refer : Misconceptions about Section 66A). It applies to “Persistent” sending of emails/messages to create annoyance which is the effect of “Stalking”. The punishment is 3 years.

Section 354 D overlaps with Section 66A since it specifically refers to “Use of internet or email”. The punishment is between one to three years.

If the ordinance had been carefully drafted the overlapping of IPC with ITA 2008 could have been avoided. It may be noted that IPC ordinance is issued from the Ministry of Home Affairs and ITA 2008 is managed by Ministry of Communications and Information Technology. Unfortunately the two ministries perhaps had no consultation process which could have avoided the conflicts.

Naavi

Posted in Uncategorized | Leave a comment

Advisory on Section 66A

A copy of the advisory sent by the Ministry of Communications and Information Technology to State Governments following the recent controversies on arrest of Palghar ladies is now available here

The advisory is issued by the Group Coordinator & Director General, Department of Electronics and Information Technology, Government of India to the Chief Secretaries and DGPs of all States and Union Territories.

According to the Advisory

“State Governments are advised that as regard to arrest of any person in complaint registered under section 66A of the Information Technology Act 2000, the concerned police officer of a police station under the State’s jurisdiction may not arrest any person until he/she has obtained prior approval of such arrest from an officer not below the rank of the Inspector General of Police in the metropolitan cities or af an officer not below the ran of Deputy Commissioner of Police or Superintendent of Police at the district level, as the case may be.

It is requested that appropriate instructions may be issued in the matter to all concerned”

Since the advisory is in conflict with the provisions of Section 80 of ITA 2000/8 this advisory appears to be ultra-vires the Act.

Naavi

Posted in Cyber Crime, Cyber Law, ITA 2008 | Leave a comment

Dont be confused with iaadhaar.com or iaadhar.com

Cyber Squatting is a practice where some people register popular domain names or small typographic variations thereof with the object of attracting visitors. Some times it may be harmless to the visitor since the purpose may be to only generate advertisement revenue out of such stray visitors. But there is a potential risk of the site being misused for gathering personal information of visitors.

We have recently come across two websites iaadhar.com and iaadhaar.com both being “Confusingly similar” to the Government of India project of issuing Aadhar cards through UID authoity of India (UIDAI).

Both these sites are not related officially to UIDAI. Though the site iaadhaar.com provides information about the aadhaar registration process only and also provides a disclaimer, the iaadhar.com site is presently only a domain parking site.

It is necessary for the public not to misunderstand these as the official sites and part with any sensitive information about them. UIDAI is however is using a sub domain http://eaadhaar.uidai.gov.in.

It is to address situations like these that naavi had way back in 2000 introduced a service which is still available at www.lookalikes.in.

It is preferable for UIDAI to place a possible disclaimer in its own site so that public are not at any time in future be misguided with cyber squatters resulting in identity thefts.

Screen shots: iaadhaar.com :: iaadhar.com::eaadhar.uidai.gov.in

Naavi

Posted in Uncategorized | Leave a comment

2.5 lakh Twitter passwords compromised

It is reported that about 2.5 lakh Twitter IDs with passwords have been compromised. It is also reported that Twitter has informed the affected users and asked them to change passwords.

Details in TOI

Posted in Cyber Crime, Privacy | Leave a comment

Rs 1 Crore lost by executive in Mumbai Bank fraud

In one of the larger Bank frauds of recent times, an executive in Mumbai has lost Rs 1 crore through a series of fraudulent transactions in his Bank account. The transactions occurred through 12 RTGS debits within a space of 45 minutes indicating a total failure of the Bank’s security warning system.

The Bank involved is Yes Bank.

As it always happens the victim is now running around the Police where as it is the Bank which should run around the Police. The victim is entitled to be fully reimbursed of his losses by the Bank immediately and it is the Bank which has to file a police complaint and pursue its recovery.

Details  in TOI

It must be pointed out that the Damodaran Committee on Customer Services set up by RBI had recommended that Customers should be provided complete control on fixing daily limits on such transactions as well as a freedom to switch on and off the Internet banking facility. It had also clearly defined the bank’s liabilities in such cases and the need to immediately reimburse the losses to the customers.

Unfortunately, powerful Bankers such as SBI and ICICI Bank have used their influence in the Indian Banking Association and prevented RBI from implementing the recommendations of the Damodaran Committee.

RBI has not shown the courage to ignore the objections of IBA and go ahead with the Damodaran Committee recommendations.

If therefore this case is taken to a  Court, I would advise IBA to be made a party to the suit along with RBI.

Naavi

Naavi

Posted in Bank, Cyber Crime, Information Assurance | Leave a comment

Mumbai Consumer Court awards compensation in ATM fraud case

Maharashtra State Consumer Disputes Redressal Commission ordered Citibank to pay Rs 9.44 lakh to a man, after Rs 6 lakh wasfraudulently withdrawn from his account with an ATM card which he did not even possess.

In December 2006,Ratilal Israni a SB Account holder in Citi Bank noticed that between November 22, 2006 and December 5, 2006, Rs 6 lakh was shown as withdrawn using an ATM card. Israni contended that he never had an ATM card relating to his saving bank account. Israni alleged that it was a fraudulent act on the part of the bank officials to debit the account for the amount claimed to be withdrawn by using an ATM card.

Details in TOI

Posted in Bank, Cyber Crime, Uncategorized | Leave a comment