Naavi.org

On the 23rd Anniversary of the notification of ITA 2000 which ushered in an era of legally recognized Digital Society, Naavi.org, FDPPI, Manipal Law School are organizing a round table discussion on the theme “Jago Regulators Jago”.

Event will he held physically at Manipal Law School Campus in Yelahanka between 2.00 pm and 5.00 pm and will be available on Virtual Platform.

Prominent Speakers such as Dr Triveni, Dr Anantha Prabhu, Dr Sanjay Sahay along with industry and academia are participating in the discussions.

Those of you who want to participate either physically or virtually, may kindly register at :  https://forms.gle/89p5MTpQQ35bxsJC7 or write to fdppi4privacy

In the recent days India is seeing an alarming trend where like “Dark Web” we have “Dark Villages” like Bharatpur, Jamtara, Nuh etc developing in pockets of India where the entire community has been criminalized and Cyber Crime along with Drug Trading, Terrorism etc are taking firm root. Law and Order in these places are yielding to the criminals.

In this context we would like to awaken the Regulators to initiate immediate actions to control these Cribe Crime hubs and long term plans to prevent such developments.

We believe that Cyber Crimes cannot be controlled only by creating awareness amongst the public so that we can keep blaming the victims for their ignorance. Today’s technology is inherently deceptive and enable Criminals to use deep fakes and AI aided phishing which cannot be identified by ordinary citizens whom I call as Netizens and Mr Modi call as Digital Nagariks.

We have a commitment to therefore demand that the MeitY, MHA, the Adjudicators, the RBI, CERT In etc all contribute to the control of Cyber Crimes by making fundamental changes in the Cyber Crime management in the country.

Some of the strategies that need to be considered are

1. Creation of a National Cadre of Cyber Crime Police having nationwide jurisdiction so that criminals cannot sit in one State and attack the victims in other states with the shield of Jurisdictional hurdles.
2. Create “Absolute Liability” for intermediaries like Banks for frauds forcing them to have impeccable security and complete coverage through insurance so that Bank Customers pushed to digital banking are not made scapegoats for new technology
3. Completely ban the use of Crypto Currencies like Bitcoin so that criminals donot have their currency of cyber crime and terrorism
4. Educate and Equip Adjudicators under ITA 2000 to quickly provide summary judgements and relief to the victims
5. Ensure CERT In does not ignore reported Cyber Crimes and its duty to pull up negligent Intermediaries
6. Ensure RBI cancels licenses of Banks in the Crime hubs openly indulging in money laundering
7. Ensure that CRPF is deployed in such places where Cyber Criminals in collusion with the community elements challenge the local police.

Join the discussion and let us have your views.

Naavi

FDPPI has started a Certification Program for DPOs and Data Auditors in India which covers knowledge of Indian law, Global laws and a special training on audit of DPDPA 2023 based on the DGPSI framework.

There is no other comparable Certification programs for Data Protection professionals in India today.

You can complete Module I and G on virtual recorded mode and join the Module A which will be held as week end virtual batch on October 28th/29th/Nov 3/4 for 3 hours each between 2.30 pm and 5.30 pm.

Don’t miss to adorn your profile with a following kind of certificate and Badge

Visit www.fdppi.in and register today.

Naavi

FDPPI and Cyber Law College recently completed the first Certification program after DPDPA 2023.

Following are some of the responses from the senior professionals who attended the program.

“The course was practice centric and application oriented.”

“I felt the questions were set in such a way that how someone would approach situations practically.”

“Overall good experience.”

“Overall the questions were more relativistic and based on application and overall understanding of our concept”

“You made the exam tougher than IAPP 😄”

“The overall experience of the examination was great! The pattern and questions in itself were very practical in nature and helped us apply our learning’s . Very exciting and enticing format. At the end there a certain level of satisfaction for the time and effort invested by Fdppi and us as students.”

On 17th September 2018, Foundation of Data Protection Professionals in India (FDPPI) obtained its Certificate of Incorporation. It must be considered as a day of great significance to the Privacy and Data Protection industry in India since this organization was an organization of the Professionals, By the Professionals and for the Industry.

It may be considered that GDPR which became effective from 25th may 2018 and caused a big flutter in the Indian industry with the fear of extra territorial jurisdiction was the driving force behind the formation of FDPPI.

By January 2018, India had started working on its own Data Protection Law and on January 13th, the Justice BN Krishna Committee held a public consultation in Bangalore

Naavi started a campaign for building awareness about GDPR and its impact on India highlighting “Today is GDPR Day…Love it or hate it, you cannot ignore it”. Additionally Cyber Law College in June 2018 started a course on GDPR on the Apnacourse.com platform (Presently not available) and called for “Tame the Monster of GDPR”.

By June 21, 2018, Cyber Law College introduced an integrated examination combining the then existing Certified Cyber Law Professional, Certified HIPAA Aware professional and Certified GDPR Aware Professional and called it as “Certified Indian Data Protection Professional”.

By July, a draft of the Bill proposed by B N Srikrishna Committee became available and discussions shifted to the proposed Indian law.

In this background FDPPI was contemplated and with the encouragement of many of the industry friends it was decided to start FDPPI as a Section 8 company. Mr Nagendra Javagal came forward to be the other Promoter Director as FDPPI filed its MOA and got its Certificate of Incorporation.

On December 7, the first batch of Certification Course in PDPA (CPDPA) was started and an era of Indigenous Certification for Privacy was started. Since at that time IAPP nor DSCI did not have a similar course on Indian data protection law, FDPPI became a pioneer in Privacy Education in India in collaboration with Cyber Law College.

By Data Privacy Day 2020 (January 2020), Naavi’s E Book on Personal Data Act was published and became the first such book in India.

By June 29, FDPPI introduced Module G of its certification program covering GDPR and other global laws.

While India struggled with Covid and JPC struggled with PDPB 2019, FDPPI continued to upgrade its programs from PDPB 2018 to PDPB 2019.

In November 2020, FDPPI embarked on IDPS as its flagship program on Data Privacy which has since seen IDPS 2021 and IDPS 2022.

In December 2020, FDPPI introduced the Module A training program based on PDPSI and DTS assessment completing the DPO training loop from Module I, G and A.

In January 2021, the Data Protection Journal of India (DPJI) was started though it remains under suspension after July 2022.

As JPC presented the new version DPA 2021, FDPPI upgraded its certification program and kept in tune with the developments.

Finally when DPA 2021 was withdrawn, there was a sudden lull in the market but we went ahead with discussions on “Shape of things to come” and held IDPS 2022 under this theme.

Now as we prepare for IDPS 2023, the Government has passed DPDPA 2023 and FDPPI Certification programs have been upgraded once again to DPDPA 2023. The first batch of Certified DPO and Data Auditors under the new DPDPA 2023 passed out today .

FDPPI has also recently introduced the Indian National Register of Data Protection Professionals to create a recognition for trained professionals. This is intended to be supported by the FDPC (Federation of Data Protection Professionals in India as a service exchange platform). FDPC and DDMAP (Data Disputes Mediation and Arbitration Platform) are two platforms creating professional engagement opportunities for trained professionals from FDPPI.

FDPPI has now embarked on another global mission of developing the PDPSI framework into DGPSI framework (Data Governance and Protection Standard of India) incorporating the recommendations of BIS on Data Privacy in its Data Governance Standard.

Thus FDPPI has moved in 5 years to a pole position in the industry. Its weekly Jnaana vardhini sessions are a great resource for continued education and the Unique DDMAP (Data Disputes Mediation and Arbitration Platform ) is ready to provide support to the industry with another first for the country.

Towards this end of the 5th year we had the privilege of honouring Sri K S Puttaswamy (Retd Justice) as Privacy Pitamaha, etching the name of FDPPI in the history of Data Privacy in India.

Future appears bright, with nearly 400 associates who are together promoting FDPPI as members and supporters. The unique concept of “Supporting Members” has created a base of over 23 members who can execute projects in association with FDPPI and generate revenue on an on going basis.

Presently FDPPI can boldly state that with its own Certification Program and Certifiable Framework for Audit and Assessment of Data Protection Compliance for DPDPA 2023, ITA 2000 and BIS data governance standard, FDPPI has firmly entrenched itself as the leader of Data Privacy in India.

I thought it was time to reflect on the past as we look forward to the future with optimism.

Naavi

On October 17, 2023, FDPPI and Manipal Law School propose to hold a round table to commemorate the Digital Society day on the broad theme of raising Cyber Crimes and how to tackle them.

I propose that the organizers consider the program as not just an awareness of Cyber Crimes to the masses but to elevate them to the regulators with a message as titled above.

My views on why I want this new approach is guided by my observations over the last 25 years since I started my journey on Cyber Law and Cyber Crimes when I have found that it is the apathy of the regulators (though often we keep our criticisms at the level of police only and donot question the Adjudicators and CERT IN for their dereliction of duty) that has contributed to this state of affairs.

Unless the regulators realize their responsibilities and start acting tough, the criminals will only feel emboldened to continue to commit crimes.

Hence we need to awaken the regulators first before we cry out for public awareness of Cyber Crimes as if it is the panacea for all cyber crimes.

I therefore record some of my views in this regard and urge the participants of the roundtable being organized by FDPPI and Manipal Law School on 17th October at 2.00 pm at the Yelahanka Campus of the MLS to be extended to the virtual world both in terms of speakers from outside India and observers of the discussion.

Those experts who want to share their views may kindly contact the organizers through e-mail on fdppi4privacy @ gmail.com

Naavi

---

---

There are no two opinions about Cyber Crimes being on the raise in India. As India that is Bharath is trying to promote its digital leadership to the world through globalization of the UPI system and the use of Aadhaar for Direct benefit Schemes, the raise of Cyber Crime hubs in towns like

Bharatpur, , Mewat, Bhiwani, Nuh, Palwal, Manota, Hasanpur, Hathan Gaon (all in Haryana),Ashok Nagar, Uttam Nagar, Shakarpur, Harkesh Nagar, Okhla, Azadpur (all in Delhi) (all in Delhi) Banka, Begusarai, Jamui, Nawada, Nalanda, Gaya (Bihar),Barpeta, Dhubri, Goalpara, Morigaon, Nagaon (Assam), Jamtara,Deoghar (Jharkhand), Asansol, Durgapur (West Bengal), Ahmedabad,Surat (Gujarat), Azamgarh (Uttar Pradesh) and Chittoor (Andhra Pradesh).

raises an alarm.

We are all aware of the “Darkweb”, but the trends in these towns and villages indicate that “Dark Towns” are emerging in physical space and like the Drug lords of Columbia and Mexico these are going to be sore points on the raising status of India as a Digital leader of the world.

Recently a few criminals arrested by Police in one of these towns were released by the villagers who attacked the Police party indicating that law and order is passing on to the mafia.

These organized Cyber Criminals are supported by the eco system of Bankers and Mobile Service Providers in these places who assist them in committing Cyber Crimes. Many business offices have emerged even in Noida where people are recruited into organized crimes and operations are run like a professional company.

Apart from these types of criminals there is also a gang of Cyber Urban Naxalites who try to target attacking Government assets as a target practice and hack into any Government service just to prove their hacking skills. In many such instances instead of strongly responding to such white collared criminals, CERT In remains a mute spectator and MeitY behaves as if it is not concerned. This lack of action by these regulators is worse than a Police inspector in a station refusing to register an FIR.

While MeitY and MHA are focussing on bringing new laws such as DIT or new IPC, there is little attention on ensuring that there is a national Cyber Crime policing outfit which will provide a long term cadre to experts in Cyber Crime police and render Cyber Crime Police stations as training ground for officers who after three years go back to bandobast duties.

Change is required more than in the law int he way law is administered. This requires the regulators to be educated on what the public think is their commitment to prevent Cyber Crimes. For the last 23 years we have been blaming the public for lack of awareness and always protecting the intermediaries and others who fail to do their duty.

In the Umashankar Vs ICICI Bank case as well as an earlier SBI case iN Kerala and a recent Gauhati High Court case, Judiciary has been open to hold the intermediaries liable for Cyber Crimes.

But this message that Intermediaries are the key to control Cyber Crimes has not gone to the regulators.

Otherwise, how can RBI give any banking license to Bankers in Jamtara like towns who are laundering money of innocent cyber crime victims? How is that the army is not called in to sweep these towns of “Cyber Weapons” in committing Cyber Crimes? Why is MHA not recognizing that Cyber Crimes are irretrievably linked to Terrorism, drug trade etc, Why is our Finance Ministry reluctant to ban the Criminal’s currency called Bitcoins?

These are the questions that need to be raised today on “Awareness”. Let us not treat the public as facilitators of Cyber Crimes by ignorantly passing on OTP. The OTP is not considered the safest measure of authentication and it is being used as the best available option for the time being. Without control of SIM cloning and other forms of OTP stealing, there is no technical safeguard which can be used by an ordinary citizen to protect himself.

Hence all financial cyber crimes should be the responsibility of the Intermediaries, no questions asked. If Bankers and mobile operators feel the pinch they will be more responsible in doing their KYC and distribute the weapons of crime.

Banks harass genuine customers with KYC demands again and again and in the process keep the KYC details every where in the network exposing the customers to greater danger.

We cannot ask these Banks what happened to my KYC last year and why are they asking for KYC once again.

We cannot ask them why it is so difficult for my ID to be verified while the criminals can very easily get their IDs verified and Banks accounts opened?

Why are we not questioning why Domain Name Registrars are able to hide the Domain Name registrant’s identity to facilitate phishing?

Why are the e-mail providers substituting the IP address of criminals with their own proxy addresses and creating hurdles for investigators?

Why are we not implementing the TRAI suggestion for Caller ID display on phone calls and why are we not introducing a similar system for E-Mail providers? though we are trying to implement such user ID display for WhatsApp and Twitter?

Why is that Meity succumbed to the pressures of business and gave up on Data Localization in the DPDPA to make it difficult for Police even to start an investigation?

These are the questions I would like to ask ..who else but Sri Rajeev Chandrashekar the MOS and Sri Ashwini Vaishnav the Minister of IT, Amit Shah, the MOH and ultimately Mr Narendra Modi the PM.

Let this “Jago Regulator Jago” campaign spread and every citizen of this country raise their voice that “Awareness is not only for the public but also for the Regulators”.

Naavi