Skip to main content

Posts

Showing posts with the label IT act India

Contact Tracing Apps. How it works? Privacy Concerns with ArogyaSetu.

Contact Tracing apps alerts others (as well as the Government) that they may have been in contact with people carrying/infected with the Virus. Many Countries has released official apps for contact tracing. Lets see how it works and what are the security and privacy concerns with it. In this post, i specifically compares India's Arogya Setu contact tracing app with other Nation's contact tracing applications. How it works? The app can be download from the App/Play store. User has to manually install this.All these contact tracing app uses a set of permissions such as Bluetooth, storage, network access etc. However it primarily make use of Bluetooth Low Energy (BLE) protocol for contact tracing. It tries to measures how far you are from the other person( Usually 1.5 meters). The application checks and connect with other mobile phones installed with the application over Bluetooth. This data will be stored on the phones. This depends and differs on applications. for example UK...

Cloud computing, Data protection law in India and Sprinklr controversy #opinion

There is no legislation in India that specifically recognizes cloud computing. Hence all these computer related cases or crimes may be dealt with the existing IT Act and Privacy Laws. When compared to EU-GDPR or Canada's PIPEDA, these laws are very weak. Cloud computing services that deal with personal or sensitive personal information need to comply with the requirements set out under the Privacy Rules related to security, encryption, access to data subject, disclosure, international transfer and publication of policy statements. Cloud service providers in India may also be required to comply with the Information Technology (Intermediaries Guidelines) Rules 2011 (Intermediary Guidelines) prescribed under the IT Act. Controversy : Sprinklr agreement is based on Laws in New York./Govt sells the data/without consent from citizen. India lacks stringent data privacy laws as well a strong IT act. However as per current law, the IT Act  covers offenses committed outside of India if...

Non-Sense or Over-Confidence? TRAI chairman's personal data leaked after he threw the Challenge

So finally some proof has been shown on personal data leakage to the Indian Bureaucrats . As per Government of India, "There is nothing called absolute right to privacy" and the privacy “should be subject to reasonable restrictions.” Read my previous post on Why India needs a Stringent Data Privacy Law? Here. Citizen's personal data has been shared with various organizations those are in sectors like Telecom, Service, retailers, E-commerce etc. In my opinion, before implementing the data sharing, the government must implement some data privacy laws and standards like the European GDPR in India. Once it is implemented and audited properly for the compliance, then the government can consider about data sharing. Currently there is no stringent laws and policies on data leak. The penalty is there for a few clauses but considering the value of the data, the penalty is negligibly small.   The Reply came within hours , Sweet Sour !!! The TRAI chairman challenged A ...

Facts: Facebook Deactivation vs Deletion

So the #deletefacebook campaign has been circulating over the internet, lets analyze the impact of deactivation and deletion of Facebook account and how to perform it. Tip : If you don't want to read this article fully, here is the direct link for account deletion :  https://www.facebook.com/help/delete_account Ok lets start, Firstly Deactivation. So as per FB, " Deactivating your account will disable your Profile and remove your name and photo from most things that you've shared on Facebook. Some information may still be visible to others, such as your name in their Friends list and messages that you've sent .". Also " Your Messenger account will remain active unless you deactivate it from the Messenger app. Using Messenger will not reactivate your Facebook account. Your profile picture will still be visible in your conversations and people will still be able to search for you by name to send you a message. You will continue to appear...

Cambridge Analytica and Information Technology Act of India: Why India needs a Stringent Data Privacy Law?

Last few days, the Cambridge Analytica scandal has been shaking different governments around the world. Also in the news that, CA/FB or its partners was allegedly involved in different elections in India actively. Let’s see how practical it is to punish CA/FB/or any other organization that violates the data privacy. Currently, data protection in India is governed by provisions of the Information Technology Act, 2008.So if the Cambridge Analytica scandal has been taken up to the court, the only way it can be dealt with is by using India's Information Technology Act. Here is what the India’s Union Minister’s response on the Cambridge Analytica Scandal. “Mr Mark Zuckerberg, you better note the observation of the IT Minister of India. We welcome the FB profile in India, but if any data theft of Indians is done through the collusion of Facebook's system, it shall not be tolerated. We have got stringent powers in the IT Act, and we shall use it, including to summon you in Indi...