www.cyberlawcollege.com
First Case Under Information Technology Act
A Beginning on the Wrong Foot?
.

Unfortunately, Indian public has little respect for our law enforcement authorities. This is  because they have proved time and again that they are prone to mis-interpret legal provisions, over react in some cases and act wrongfully in many other cases. In the process, they punish innocent persons even before a competent court can hear the appeal and take a balanced view of the  case. 

It was this fear that brought about adverse reactions to the provision for "Arrest without warrant" in the ITA-2000. The  Communication Convergence Bill which is presently under discussion  has even harsher provisions than the ITA-2000 which could be a cause of concern to "Netizen Rights Activists". It is therefore time that the Indian Police show a level of maturity that is in consonance with the powers that is falling into their hands in the new pieces of legislation that are being enacted in the e-era.

We have already discussed in these columns, the Police excess in arresting of Radiant Software Branch managers in a Copyright dispute between the Company and Oracle. Now the news comes that in Delhi, two software professionals have been arrested on the charge of "Hacking".

As per the report of "The Hindu" ,the facts of the case are as follows. 

www.go2nextjob.com, was a web site owned by Mr Manmohan Gupta and hosted on the server owned by M/s Softweb Solutions Inc ostensibly owned by Ms Amit Prasad and Kapil Juneja. From the facts presented it can be inferred that there is a payment dispute between the server owners and the site owner. The server owner has therefore blocked the site and put up a notice "This site is closed due to non payment of bills". The site owners don't seem to disown the fact that there are financial dues. The Police seem to have come to the conclusion that the server owner has no right to block the site and they should have gone to the court to recover the dues instead.

The arrested persons are aged 23 and 24 and one has done his B Tech from Open university in Columbia and the other a diploma in Computers after completing his graduation. The go2nextjob.com site has been a winner of a "Best Web site Award" and perhaps (not confirmed) was designed by the same firm that has hosted the site.

The Police appear to have been highhanded in their treatment of the complaint from Mr Gupta and classifying the dispute as a "Case of Hacking". Police have no right to suggest that a dispute between the service provider cannot exercise his right to withdraw the contracted service in case of failure of one of the parties to the contract to meet the payment obligations. Next, they have jumped immediately to "Arrest" the accused which was not warranted at all.  The reasons for coming to this conclusion could be the following:

Wrong Classification:

"Hacking" is a concept which should be applied for "Unauthorised Access  to Networks" and damaging of the content. naavi.org has been highlighting the fact that it was unnecessary to define hacking in law as has been done under Section 66 of the ITA 2000 and such definition could lead to misinterpretation. The current case is one such. In the instant case, the information has not perhaps been tampered with at all by the accused. What would have happenned is that the DNS link would have been changed to a new default page. While this may have an effect on delinking the existing site, it is by no stretch of imagination equivalent to "Hacking". The information belonging to the site owner would be in tact and can be copied onto a floppy and handed over to them.

It is quite possible that the Server Hosting Company in this case might not have entered into a written contract with the Site owner laying down the exact conditions of service. This is a mistake most ISP s are doing today.  A deemed contract however can be presumed as per the normal business practice.  It is however incomprehensible to think that any service provider will continue to provide hosting service if the payment has not been made and also that any hosting Company will part with its Network administration rights that includes linking the domain name to a given default html page in a directory residing in the server.

If it is held in principle that a service provider cannot discontinue the service when payment for the facility is not made, then, Telephone authorities cannot cut telephone connection, Electricity Department cannot cut the Electricity Connection, Cable TV supplier cannot cut the Cable connection, VSNL cannot withdraw the Internet connection etc etc.. for non payment of financial dues. In all such cases, the service provider  has to go to court for recovery of the money due and in the meantime continue to provide the service. Also, Telephone authorities cannot change the existing telephone numbers by linking the line to a different socket in the exchange. If these have been established as not possible, it must be agreed that it is also not possible for a hosting company to provide continued service in the absence of payment. 

Can we presume that in the instant case there was an agreement to provide the service without payment? 

We don't this know from the reported facts. This  could only be presumed if the hosting company was an equity partner for the portal or such prior agreement could be produced in evidence by the complainant. The onus of proof should be on the complainant in this case to prove that the service was offered free to him and could not be withdrawn.

It would however be considered prudent on the part of the service providers to serve a notice of discontinuance of service. But the "Right to Discontinue Service" should not be faulted.  After all,  if "Web site, which is a collective publication of  electronic documents" is a "Virtual Property" of the site owner, bought on lease from the server owner for a rental, it must be possible to  exercise a "sort of  lien" on this "Virtual Property". Holding back of service cannot therefore be compared to unauthorized damage to information residing in a computer resource as per Sec 66 of ITA-2000. 

Moreover in the instant case, one cannot presume an "Intent to Cause Damage". The intention here is to "Recover legitimate Dues". In that sense, one may say that the offense could be brought under Sec 43 of ITA-2000 for damages. However Sec 43 refers to data or information residing in the computer network belonging to the owner of the information. In the present case the owner of the system is the accused himself. In that sense neither Sec 66 nor Sec 43 is applicable in this case.

Need To Arrest:

Another aspect which should be debated in this context is "When should the Police resort to Arrest of Persons?". Even when a person is accused of an offense which may result in conviction by imprisonment, common sense suggests that unless a person is proven guilty, he should not be punished by the Police at the trial stage itself. The only  justification for the Police to arrest persons is when there is a strong possibility of tampering with evidence if the accused is at large. Neither in this case nor in the Radiant Software case there was such an exigency. The Police have therefore committed excesses in both the cases. When we realize that criminals who have been accused of "Tandoori murders" can be out free on the streets of Delhi,  the two technocrat's arrest by the Delhi Police looks hardly justifiable.

If the Cyber Crime Wings of the Police departments have to draw respect from the community, then it is absolutely essential that they behave more responsibly than they have been doing at present. Along with the "E-Transformation" of the Police, there  is a need for transformation of their approach towards "Cyber Crimes". Otherwise, the current perception of the public that  Police are "undesirable"   at close range will extend to the Cyber Police also and no technocrat will try to voluntarily help the Police in solving Cyber Crimes.

I hope that the top brass in the Police give a serious thought at developing a different "Community Friendly" and "Fair Thinking" image for the Cyber police.

P.S: This is not to criticise any individual Police officer involved in any of the cases referred to in the article but to highlight the general trends of the society.

Naavi
February 9, 2001
Your views can be sent here
.

Back to naavi.org