Write short notes on the following: e-commerce | cyber hacking | Functions of Controller of Certifying Authority | Shreya Singhal v. UOI, 2012
Here is a comprehensive 600-word response in point-wise format with short notes on each of the following topics under IT Law:
(a) E-Commerce
-
Definition:
E-commerce (electronic commerce) refers to buying and selling goods or services through electronic platforms, especially the Internet. -
Types of E-commerce:
-
B2B (Business to Business)
-
B2C (Business to Consumer)
-
C2C (Consumer to Consumer)
-
C2B (Consumer to Business)
-
-
Modes of Operation:
Online marketplaces (e.g., Amazon, Flipkart), direct company websites, mobile applications, and social media platforms. -
Key Features:
-
Paperless transactions
-
Online payment gateways
-
Real-time order processing and delivery tracking
-
-
Legal Recognition under IT Act:
Section 10A of the IT Act grants legal validity to electronic contracts. -
Benefits:
-
Faster transactions
-
Wider market access
-
Reduced operational cost
-
-
Challenges:
-
Cybersecurity threats
-
Data privacy concerns
-
Legal jurisdiction issues in cross-border sales
-
(b) Cyber Hacking
-
Definition:
Cyber hacking refers to unauthorized access to computer systems or networks to steal, alter, or destroy data. -
Types of Hacking:
-
Ethical hacking (White hat)
-
Malicious hacking (Black hat)
-
Grey hat hacking
-
-
Common Hacking Techniques:
-
Phishing
-
Malware
-
Ransomware
-
Denial of Service (DoS) attacks
-
SQL Injection
-
-
Legal Provisions under IT Act:
-
Section 43: Unauthorized access and data theft
-
Section 66: Hacking with malicious intent
-
-
Consequences:
-
Financial losses
-
Identity theft
-
Reputational damage
-
National security risks
-
-
Prevention Techniques:
-
Firewalls and antivirus software
-
Strong password policies
-
Cyber hygiene training
-
Regular software updates
-
(c) Functions of Controller of Certifying Authorities (CCA) under the IT Act, 2000
-
Authority:
Appointed under Section 17 of the Information Technology Act, 2000. -
Primary Function:
To regulate and oversee the Certifying Authorities (CAs) who issue digital signatures. -
Key Responsibilities:
-
Granting licenses to Certifying Authorities.
-
Ensuring CAs comply with rules and guidelines.
-
Certifying public keys to ensure secure electronic transactions.
-
Maintaining the Digital Signature Certificate Repository.
-
-
Audit & Compliance:
-
Conducting audits of CAs
-
Monitoring their performance and security policies
-
-
Suspension & Revocation:
Has the power to suspend or revoke the licenses of defaulting Certifying Authorities. -
Cybersecurity Support:
Works with the Indian Computer Emergency Response Team (CERT-In) and law enforcement for cybersecurity initiatives.
(d) Shreya Singhal v. Union of India, 2012
-
Background:
This landmark case challenged the constitutionality of Section 66A of the IT Act, 2000. -
Facts of the Case:
Two girls were arrested for posting and liking a Facebook post criticizing the shutdown of Mumbai for Bal Thackeray’s funeral. -
Legal Issues Raised:
-
Whether Section 66A violates Article 19(1)(a) – Right to Freedom of Speech and Expression
-
Whether the section is vague and arbitrary
-
Whether it leads to abuse of power by the State
-
-
Judgment (2015):
-
Supreme Court struck down Section 66A as unconstitutional.
-
Held that the law was vague and prone to misuse.
-
The expressions like “grossly offensive” and “annoying” were not clearly defined.
-
-
Significance of the Judgment:
-
Strengthened digital free speech rights.
-
Set a precedent for reviewing vague laws.
-
Emphasized that restrictions on freedom of speech must be reasonable and narrowly defined.
-
-
Other Observations:
-
The Court upheld Section 69A (blocking websites) with safeguards.
-
The ruling led to wider discussions on data privacy and net neutrality.
-
