<p>As the world is moving towards automation and digital world, cybercrimes and threats are also increasing and posing challenges in equal ratio, director-general of Indian Computer Emergency Response Team (CERT-In) Sanjay Bahl said on Thursday.</p>

<p>Bahl was addressing cybersecurity heads, IT employees, police officers from across the country, students and the public at the “Cyber Security Conclave 5.0 the Next Gen Threats and Solutions.”</p>

<p>The conclave was organised by the Society for Cyberabad Security Council (SCSC) in association with Cyberabad police, according to an official press release.</p>

<p>Bahl also presented CERT-Ins priorities that focussed on collecting, analysing and disseminating cyber threat intelligence to benefit all stake-holders who are potentially impacted by these attacks, the release said.</p>

<p>Cyberabad police commissioner V C Sajjanar said nowadays the complaints on cyber crimes are more than the usual crimes.</p>

<p>The complaints are more related to social media, online financial offences and data theft, and the loss due to cyber crimes is immense and poses tough challenges to the police, he said.</p>

<p>SCSC vice-chairman Bharani Kumar Aroll said the digital transformation happening across India is changing the way businesses operate efficiently and effectively and also brings with it risks.</p>

<p>He presented statistics on cyber attacks and also talked about the threat landscape and the promising future of cybersecurity, the release added.</p>


As the world is moving towards automation and digital world, cybercrimes and threats are also increasing and posing challenges in equal ratio, director-general of Indian Computer Emergency Response Team (CERT-In) Sanjay Bahl said on Thursday.

As the world is moving towards automation and digital world, cybercrimes and threats are also increasing and posing challenges in equal ratio, director-general of Indian Computer Emergency Response Team (CERT-In) Sanjay Bahl said on Thursday. Bahl was addressing cybersecurity heads, IT employees, police officers from across the country, students and the public at the “Cyber Security Conclave 5.0 the Next Gen Threats and Solutions.” The conclave was organised by the Society for Cyberabad Security Council (SCSC) in association with Cyberabad police, according to an official press release. Bahl also presented CERT-Ins priorities that focussed on collecting, analysing and disseminating cyber threat intelligence to benefit all stake-holders who are potentially impacted by these attacks, the release said. Cyberabad police commissioner V C Sajjanar said nowadays the complaints on cyber crimes are more than the usual crimes. The complaints are more related to social media, online financial offences and data theft, and the loss due to cyber crimes is immense and poses tough challenges to the police, he said. SCSC vice-chairman Bharani Kumar Aroll said the digital transformation happening across India is changing the way businesses operate efficiently and effectively and also brings with it risks. He presented statistics on cyber attacks and also talked about the threat landscape and the promising future of cybersecurity, the release added.

Cyber crimes, threats loom large as world goes digital: Expert

<p>Recently, the Supreme Court (SC) was called upon to decide the Constitutional validity of Section 139AA of the Income Tax Act, which provides that every Pan Card holder or Income Tax Assessee has to compulsorily enroll for an Aadhaar Card.&nbsp;</p>

<p>A challenge was laid to this Provision, inter alia on the ground that though the &lsquo;Aadhaar Act&rsquo; prescribes that enrolment to Aadhaar is voluntary as per Section 139AA which, however, adds an element of compulsion.&nbsp;<br />
It may be recalled that by way of interim Orders, the Supreme Court made it clear that Aadhaar could only be used for certain schemes like MGNREGS, Pensions, Jan Dhan Yojana, Provident Fund, public distribution of food grains and cooking fuels.&nbsp;</p>

<p>&nbsp;</p>

<div class="ui-state-default" contenteditable="false">
<div class="row">
<div class="article-blockquote">
<div class="col-sm-10 col-sm-offset-1 blockquote-content quoteshare">
<blockquote>
<h5>There is a valid risk of leakage and hacking of the database</h5>
</blockquote>
</div>

<div class="col-sm-1 blockquote-content">
<div class="share-blockquote"><a class="twitter popup" href="http://twitter.com/intent/tweet?text=There is a valid risk of leakage and hacking of the database" target="_blank"><i class="fa fa-share">&nbsp;</i></a></div>
</div>
<a class="close-mark close-div" href="#" id="jqquoteclosemark">&times;</a></div>
</div>
</div>

<p>&nbsp;</p>

<p>The Petitioners, thus, argued that Section 139AA was in violation of the Orders which provided that Aadhaar could not be used for any other purpose.&nbsp;Besides, it was also emphasised that there is a valid risk of leakage and hacking of the database.&nbsp;The Court, after a careful consideration of the submissions from both sides, held that the Parliament is empowered to make a particular Provision directory in one statute (Aadhaar Act) and compulsory in the other (Income Tax Act). That by itself cannot be a ground to question the competence of the Legislature.&nbsp;</p>

<p>The Court recognised the various advantages of Aadhaar such as (i) benefits of welfare schemes reaching people for whom they were meant; (ii) tackling corruption and black money; (iii) helping enforcement agencies to combat terrorism and other crimes; (iv) weeding out duplicate PANs.On the issue of PAN, the Court observed it has an impact on day to day activities and commercial transactions. Therefore, till the larger aspects of Right to Privacy and human dignity, etc. are not decided by the Constitution Bench, it is necessary to impose a partial stay to prevent PANs being made invalid retrospectively.&nbsp;</p>

<p>&nbsp;</p>

<div class="ui-state-default" contenteditable="false">
<div class="row">
<div class="article-blockquote">
<div class="col-sm-10 col-sm-offset-1 blockquote-content quoteshare">
<blockquote>
<h5>Implementation of Aadhaar, in its present form raises a number of concerns, which have either been dealt with quite casually by the Government or have not been addressed at all</h5>
</blockquote>
</div>

<div class="col-sm-1 blockquote-content">
<div class="share-blockquote"><a class="twitter popup" href="http://twitter.com/intent/tweet?text=Implementation of Aadhaar, in its present form raises a number of concerns, which have either been dealt with quite casually by the Government or have not been addressed at all" target="_blank"><i class="fa fa-share">&nbsp;</i></a></div>
</div>
<a class="close-mark close-div" href="#" id="jqquoteclosemark">&times;</a></div>
</div>
</div>

<p>&nbsp;</p>

<p>It must be respectfully stated that there are a few aspects which the Court does not seem to have fully considered. More importantly, the manner in which Aadhaar is sought to be implemented by the Government is not entirely appropriate either.&nbsp;There is no doubt that the initiative of the present Government is praiseworthy. Its advantages are undeniable. However, despite these apparent advantages, the implementation of Aadhaar, in its present form raises a number of concerns, which have either been dealt with quite casually by the Government or have not been addressed at all.&nbsp;</p>

<p>A valid concern is that of possible data leak collected from the individuals. Although the Court in its Judgment, recognises data leak as a real possibility, it only states that this concern needs to be addressed by the Government by ensuring that a proper scheme in this regard is devised at the earliest.&nbsp;Despite this direction, which itself is more of an observation, there is little chance that the Government may do much about it, given the manner in which it has approached the security concern so far. Till date, neither in the Parliament nor in the Court has the Government been able to provide a clear plan on how it would go ahead in tackling this critical issue.&nbsp;It is important to mention that the present Bench of two Judges (Sikri and Bhushan J.J.) was only called upon to look into the Constitutional validity of Section 139AA. The larger issue of whether Aadhaar impinges on the &lsquo;Right to Privacy&rsquo; and &lsquo;Human Dignity&rsquo; is pending before the larger Constitution Bench.&nbsp;</p>

<p>The two Judge Bench had made it clear that it was not going to touch upon the Privacy issue. Had the Petitioners insisted on arguing the right to privacy, the matter would have been &lsquo;tagged&rsquo; with the pending challenge before the Constitution Bench.&nbsp;Instead, the Petitioners decided that they would not be raising the &lsquo;Right to Privacy&rsquo; and would be questioning the validity of Section 139AA, primarily on Articles 14 and 19 of the Constitution.&nbsp;<br />
In my humble view, whether it is a challenge to the Aadhaar Act itself before the Constitution Bench, or to Section 139AA of the Income Tax Act before the Division Bench, neither of these cases can be decided effectively without touching upon concepts of &lsquo;Right to Privacy&rsquo;, &lsquo;Bodily Integrity&rsquo; and &lsquo;Informational Self-Determination&rsquo;. By giving up arguments of Privacy etc., the Petitioners have unfortunately fought with one hand tied behind their backs.<br />
It appears that the Petitioners chose to go ahead before the Division Bench by giving up the &lsquo;Privacy&rsquo; argument since the Constitution Bench had not been able to take up the matter for final determination despite various urgent mentionings. In addition, the deadline of &nbsp;July 1, 2017, mentioned in Section 139AA for linking PAN cards and Income Tax Returns was fast approaching.&nbsp;</p>

<p><br />
The larger challenge before the Constitution Bench has itself been pending for a very long time now. In the meantime, the Government is going ahead rapidly with the implementation, thereby leading to a possible situation where the entire challenge may become only academic, if not redundant.&nbsp;The Government, in going ahead (however noble or much needed the step may be), without addressing or properly analysing the risks it is clearly putting the cart before the Horse. It cannot be denied that there are certain pressing apprehensions that require immediate attention.</p>

<p>&nbsp;</p>

<div class="ui-state-default" contenteditable="false">
<div class="row">
<div class="article-blockquote">
<div class="col-sm-10 col-sm-offset-1 blockquote-content quoteshare">
<blockquote>
<h5>UIDAI has lodged a criminal complaint, saying that certain firms have been storing biometrics and using them illegally</h5>
</blockquote>
</div>

<div class="col-sm-1 blockquote-content">
<div class="share-blockquote"><a class="twitter popup" href="http://twitter.com/intent/tweet?text=UIDAI has lodged a criminal complaint, saying that certain firms have been storing biometrics and using them illegally" target="_blank"><i class="fa fa-share">&nbsp;</i></a></div>
</div>
<a class="close-mark close-div" href="#" id="jqquoteclosemark">&times;</a></div>
</div>
</div>

<p>&nbsp;</p>

<p>Such database may create opportunities for people who are vulnerable or perceived as a threat. For instance, a person may be implicated falsely by the Police in serious cases, such as terrorism or murder by simply taking his fingerprints from the database and planting them at the scene of the crime. History has shown us time and again, the propensity of investigative agencies to incriminate people falsely. There is also a huge concern about private or foreign entities being contracted to collect and store data. If the registration machines do not belong to the State, it is extremely difficult for the State to guarantee that such sensitive information will not be leaked or misused.&nbsp;<br />
It was recently reported that the UIDAI has lodged a criminal complaint, saying that certain firms have been storing biometrics and using them illegally. With the growing footprint of Aadhaar and the same being made mandatory, such crimes are only likely to rise in the future. Unfortunately, we are not ready to handle mass online attacks, in a space where criminals are getting more sophisticated every day. On the other hand, our Cyber Crime Cells are lagging abysmally behind, with little or no training being imparted to these so-called specialised Police Officers.&nbsp;</p>

<p>One major criticism of the Aadhaar Act is that it came to be passed as a Money Bill, cleverly escaping passage through the Rajya Sabha. It is difficult to understand how &lsquo;Aadhaar&rsquo; was categorised as a Money Bill. In fact, at the time when the Bill was passed on 11.03.2016 by the Lok Sabha, the attendance was merely 73 persons out of a total strength of 543 members. When the Rajya Sabha returned the Bill with suggestions/amendments, they were taken up by the Lok Sabha on 16.03.2016 and none of the amendments/suggestions was accepted. Running down the Parliamentary Institution and Procedures sets a very dangerous trend, which must be avoided at all costs.&nbsp;<br />
The possibility per se of misuse does not render a Legislation invalid. However, with the nature of this project, the risk is too high to not be addressed in a proper manner. The least that such an ambitious project required was a proper and informed debate in both houses of the Parliament as also, inviting suggestions from all stakeholders, including the public at large.</p>

<p>It is also difficult to understand the extreme urgency to implement Aadhaar when its Constitutionality is yet to be determined by the Court.&nbsp;If there are genuine apprehensions in the minds of the citizens in parting with sensitive information and linking it with various aspects of their daily life, it is the bounden duty of the State to allay such fears.&nbsp;Despite all odds, however, the citizens, ever hopeful and optimistic, place their faith in the government&rsquo;s intention to address such grave issues and not wait for it to turn into a tool for abuse.&nbsp;</p>

<p>As it has been said, &ldquo;our eyes were on the other-world, the stars, the Gods. We didn&rsquo;t keep watch on the world around us. And when we eventually lowered our heads and studied the waters closer to home, it was too late&rdquo;.</p>


Recently, the Supreme Court (SC) was called upon to decide the Constitutional validity of Section 139AA of the Income Tax Act, which provides that every Pan Card holder or Income Tax Assessee has to compulsorily enroll for an Aadhaar Card. A challenge was laid to this Provision, inter alia on the ground that though the ‘Aadhaar Act’ prescribes that enrolment to Aadhaar is voluntary as per Section 139AA which, however, adds an element of compulsion. It may be recalled that by way of interim Orders, the Supreme Court made it clear that Aadhaar could only be used for certain schemes like MGNREGS, Pensions, Jan Dhan Yojana, Provident Fund, public distribution of food grains and cooking fuels. There is a valid risk of leakage and hacking of the database × The Petitioners, thus, argued that Section 139AA was in violation of the Orders which provided that Aadhaar could not be used for any other purpose. Besides, it was also emphasised that there is a valid risk of leakage and hacking of the database. The Court, after a careful consideration of the submissions from both sides, held that the Parliament is empowered to make a particular Provision directory in one statute (Aadhaar Act) and compulsory in the other (Income Tax Act). That by itself cannot be a ground to question the competence of the Legislature. The Court recognised the various advantages of Aadhaar such as (i) benefits of welfare schemes reaching people for whom they were meant; (ii) tackling corruption and black money; (iii) helping enforcement agencies to combat terrorism and other crimes; (iv) weeding out duplicate PANs.On the issue of PAN, the Court observed it has an impact on day to day activities and commercial transactions. Therefore, till the larger aspects of Right to Privacy and human dignity, etc. are not decided by the Constitution Bench, it is necessary to impose a partial stay to prevent PANs being made invalid retrospectively. Implementation of Aadhaar, in its present form raises a number of concerns, which have either been dealt with quite casually by the Government or have not been addressed at all × It must be respectfully stated that there are a few aspects which the Court does not seem to have fully considered. More importantly, the manner in which Aadhaar is sought to be implemented by the Government is not entirely appropriate either. There is no doubt that the initiative of the present Government is praiseworthy. Its advantages are undeniable. However, despite these apparent advantages, the implementation of Aadhaar, in its present form raises a number of concerns, which have either been dealt with quite casually by the Government or have not been addressed at all. A valid concern is that of possible data leak collected from the individuals. Although the Court in its Judgment, recognises data leak as a real possibility, it only states that this concern needs to be addressed by the Government by ensuring that a proper scheme in this regard is devised at the earliest. Despite this direction, which itself is more of an observation, there is little chance that the Government may do much about it, given the manner in which it has approached the security concern so far. Till date, neither in the Parliament nor in the Court has the Government been able to provide a clear plan on how it would go ahead in tackling this critical issue. It is important to mention that the present Bench of two Judges (Sikri and Bhushan J.J.) was only called upon to look into the Constitutional validity of Section 139AA. The larger issue of whether Aadhaar impinges on the ‘Right to Privacy’ and ‘Human Dignity’ is pending before the larger Constitution Bench. The two Judge Bench had made it clear that it was not going to touch upon the Privacy issue. Had the Petitioners insisted on arguing the right to privacy, the matter would have been ‘tagged’ with the pending challenge before the Constitution Bench. Instead, the Petitioners decided that they would not be raising the ‘Right to Privacy’ and would be questioning the validity of Section 139AA, primarily on Articles 14 and 19 of the Constitution. In my humble view, whether it is a challenge to the Aadhaar Act itself before the Constitution Bench, or to Section 139AA of the Income Tax Act before the Division Bench, neither of these cases can be decided effectively without touching upon concepts of ‘Right to Privacy’, ‘Bodily Integrity’ and ‘Informational Self-Determination’. By giving up arguments of Privacy etc., the Petitioners have unfortunately fought with one hand tied behind their backs. It appears that the Petitioners chose to go ahead before the Division Bench by giving up the ‘Privacy’ argument since the Constitution Bench had not been able to take up the matter for final determination despite various urgent mentionings. In addition, the deadline of July 1, 2017, mentioned in Section 139AA for linking PAN cards and Income Tax Returns was fast approaching. The larger challenge before the Constitution Bench has itself been pending for a very long time now. In the meantime, the Government is going ahead rapidly with the implementation, thereby leading to a possible situation where the entire challenge may become only academic, if not redundant. The Government, in going ahead (however noble or much needed the step may be), without addressing or properly analysing the risks it is clearly putting the cart before the Horse. It cannot be denied that there are certain pressing apprehensions that require immediate attention. UIDAI has lodged a criminal complaint, saying that certain firms have been storing biometrics and using them illegally × Such database may create opportunities for people who are vulnerable or perceived as a threat. For instance, a person may be implicated falsely by the Police in serious cases, such as terrorism or murder by simply taking his fingerprints from the database and planting them at the scene of the crime. History has shown us time and again, the propensity of investigative agencies to incriminate people falsely. There is also a huge concern about private or foreign entities being contracted to collect and store data. If the registration machines do not belong to the State, it is extremely difficult for the State to guarantee that such sensitive information will not be leaked or misused. It was recently reported that the UIDAI has lodged a criminal complaint, saying that certain firms have been storing biometrics and using them illegally. With the growing footprint of Aadhaar and the same being made mandatory, such crimes are only likely to rise in the future. Unfortunately, we are not ready to handle mass online attacks, in a space where criminals are getting more sophisticated every day. On the other hand, our Cyber Crime Cells are lagging abysmally behind, with little or no training being imparted to these so-called specialised Police Officers. One major criticism of the Aadhaar Act is that it came to be passed as a Money Bill, cleverly escaping passage through the Rajya Sabha. It is difficult to understand how ‘Aadhaar’ was categorised as a Money Bill. In fact, at the time when the Bill was passed on 11.03.2016 by the Lok Sabha, the attendance was merely 73 persons out of a total strength of 543 members. When the Rajya Sabha returned the Bill with suggestions/amendments, they were taken up by the Lok Sabha on 16.03.2016 and none of the amendments/suggestions was accepted. Running down the Parliamentary Institution and Procedures sets a very dangerous trend, which must be avoided at all costs. The possibility per se of misuse does not render a Legislation invalid. However, with the nature of this project, the risk is too high to not be addressed in a proper manner. The least that such an ambitious project required was a proper and informed debate in both houses of the Parliament as also, inviting suggestions from all stakeholders, including the public at large. It is also difficult to understand the extreme urgency to implement Aadhaar when its Constitutionality is yet to be determined by the Court. If there are genuine apprehensions in the minds of the citizens in parting with sensitive information and linking it with various aspects of their daily life, it is the bounden duty of the State to allay such fears. Despite all odds, however, the citizens, ever hopeful and optimistic, place their faith in the government’s intention to address such grave issues and not wait for it to turn into a tool for abuse. As it has been said, “our eyes were on the other-world, the stars, the Gods. We didn’t keep watch on the world around us. And when we eventually lowered our heads and studied the waters closer to home, it was too late”.

Aadhaar: Putting the Cart before the Horse

cyber-crime-cells

Cyber Crime Cells, News on Cyber Crime Cells, stories on Cyber Crime Cells, articles on Cyber Crime Cells, Cyber Crime Cells stories at Wion, Cyber Crime Cells news, Cyber Crime Cells latest news

cyber crime-cells

Cyber crimes, threats loom large as world goes digital: Expert

Aadhaar: Putting the Cart before the Horse