Cyber Laws, Intellectual Property Rights, and Cyber Forensics form the core legal framework regulating digital commerce, electronic evidence, cyber offenses, and online intellectual creations in India. These detailed Semester 4 class notes examine statutory provisions under the Information Technology Act, 2000, Section 65B evidence standards, and forensic investigation protocols.
Fundamentals of Cyber Law and the IT Act, 2000
The Information Technology Act, 2000 (IT Act), enacted in response to the UNCITRAL Model Law on Electronic Commerce, provides legal recognition for transactions carried out via electronic data interchange and electronic communication in India:
- Objectives and Scope: Grants legal validity to electronic records, digital signatures, and e-contracts under Section 4 and Section 5. Section 1(2) and Section 75 establish extra-territorial jurisdiction, applying the Act to offenses committed outside India if the computer resource involved is situated in India.
- Electronic Governance Architecture: Facilitates government filings and e-service delivery. The regulatory framework establishes the Controller of Certifying Authorities (CCA) under Section 17 to license and supervise Certifying Authorities issuing digital signature certificates.
- 2008 Amendments: Introduced technologically neutral electronic signatures, updated corporate data privacy obligations under Section 43A, and expanded cybercrime definitions.
Cybercrimes, Penalties, and Intermediary Liability
The IT Act balances civil remedies for unauthorized access with criminal penalties for serious cyber offenses:
- Civil Contraventions (Section 43): Prescribes financial compensation for unauthorized copying, downloading, introduction of malware, disruption of systems, or denial of access to authorized users.
- Source Code and System Tampering (Section 65 & 66): Penalizes intentional tampering with computer source documents with imprisonment up to three years. Section 66 criminalizes dishonest or fraudulent acts under Section 43, while Sections 66B to 66F penalize receipt of stolen computer resources, identity theft, cheating by personation, privacy violations, and cyber terrorism.
- Intermediary Safe Harbour (Section 79): Protects network service providers, web hosts, and online platforms from third-party content liability, subject to fulfilling due diligence and acting expeditiously upon receiving court orders or government notices.
Digital Evidence Admissibility and Section 65B Certification
The presentation of electronic records in judicial proceedings is governed by Section 65B of the Indian Evidence Act, 1872 (now Section 63 of the Bharatiya Sakshya Adhiniyam, 2023):
- Mandatory Certificate Requirement: Electronic records are admissible as secondary evidence only when accompanied by a statutory certificate under Section 65B(4) signed by a person occupying a responsible official position in relation to the operation of the device.
- Technical Conditions (Section 65B(2)): Requires proof that the output was produced during the regular course of activities by a computer operating properly without unrecorded alterations.
- Landmark Judicial Precedents: In Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473 and Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020) 7 SCC 1, the Supreme Court ruled that Section 65B is a mandatory, self-contained code that strictly overrides general rules of secondary documentary proof.
Cyber Forensics and Chain of Custody
Digital forensics is the disciplined application of scientific techniques to identify, preserve, extract, analyze, and present digital artifacts in court-admissible form. Professionals managing complex matters frequently consult specialized cyber and IP law advisors alongside expert digital forensics services to secure forensic disk images, extract volatile memory artifacts, and safeguard chain of custody documentation.
Key stages of forensic handling include:
- Identification and Seizure: Documenting physical and network environments, noting active connections, and securing devices with write-blocking hardware.
- Acquisition and Imaging: Creating bit-stream forensic duplicates (raw DD or E01 formats) without modifying source media, generating SHA-256 or MD5 cryptographic hashes to verify image integrity.
- Preservation and Chain of Custody: Maintaining continuous chronological logs of evidence possession, storage in anti-static Faraday bags, and secure vault transfers.
- Analysis and Reporting: Reconstructing timeline events, analyzing registry keys, event logs, deleted file remnants, and formulating neutral expert reports compliant with statutory evidentiary standards.
Intellectual Property Rights in Cyberspace
The intersection of intellectual property law and digital technology creates distinct jurisdictional and enforcement challenges:
- Software Copyright: Computer software programs and source codes receive literary work protection under the Copyright Act, 1957. Protection covers literal code copying as well as non-literal structure, sequence, and organization.
- Domain Name Disputes and Cybersquatting: Domain names serve as business identifiers and trademarks in cyberspace. Disputes involving bad-faith registration are resolved under the Uniform Domain-Name Dispute-Resolution Policy (UDRP) and the .IN Dispute Resolution Policy (INDRP).
- Online Trademark and Patent Issues: Enforces remedies against unauthorized meta-tagging, keyword bidding infringements, and evaluates patentability of computer-related inventions (CRIs) demonstrating technical effect.