Shloka Narayanan

Course 4: Legal Aspects of Cyber Space

Contents

Online Contracting: Writings in Ether.....................................................................3

The Enforceability of Electronic Click Wrap and Browse Wrap Agreements.....3
Transacting Online – Summary.................................................................................4
ELECTRONIC COMMERCE............................................................................................ 7
“Guidelines for Prevention and Regulation of Dark Patterns, 2023” -
Summary...................................................................................................................... 9
Contracting Components in Technology Law........................................................10
Electronic Signatures: Class Notes.......................................................................13
TRADEMARKS............................................................................................................ 15
Internet and Copyright Law....................................................................................24
Fundamental Principles of Copyright Law – Class Lecture.................................28
Patents....................................................................................................................... 30
Copyright Protection............................................................................................ 33
Patentability of Computer Programs.................................................................33
Legal Framework Governing Banking in India.....................................................34
RBI Payment Aggregators and Payment Gateways.............................................40
Introduction to Cryptocurrency and RBI Regulations.........................................41
Non-Fungible Tokens (NFT).....................................................................................43
NFT, Copyright, and Intellectual Property Commercialization..........................45
Metaverse.................................................................................................................. 46
Artificial Intelligence................................................................................................ 48
Digital Personal Data Protection Act, 2023..........................................................54
Sections 75 and 81................................................................................................... 57
Right to Privacy........................................................................................................ 58
Online Defamation.................................................................................................... 60

Page 1 of 68
Online Contracting: Writings in Ether

Types of Online Contracts

1. Click-Wrap Agreements:
o Definition: Users must click “I Agree” to accept terms before proceeding.
o Legal Precedents: The document cites several US cases, such
as Savetsky v Pre-Paid Legal Services, Inc., which validate the
enforceability of click-wrap agreements provided users have prior
notice of the terms.
o Indian Context: Indian courts have upheld the validity of click-wrap
agreements, provided the terms are clear and users have the
opportunity to review them.
2. Shrink-Wrap Agreements:
o Definition: Terms are included inside the product packaging, and opening
the package signifies acceptance.
o US Cases: Key cases like ProCD, Inc. v Zeidenberg and Hill v
Gateway2000, Inc. are discussed, which upheld the enforceability of
shrink-wrap agreements.
o Indian Cases: Indian courts have also recognized shrink-wrap
agreements, focusing on the user’s prior knowledge and acceptance of
terms.
3. Browse-Wrap Agreements:
o Definition: Users implicitly agree to terms by using the website, without
explicitly clicking an “I Agree” button.
o Legal Challenges: The document discusses the difficulty in enforcing
browse-wrap agreements due to the lack of explicit user consent.
Cases like Nguyen v Barnes & Noble Inc. highlight the need for clear and
conspicuous notice of terms.
Legal Principles and Enforcement
 Prior Notice: A recurring theme is the necessity for users to have prior
notice of the terms and conditions. Courts have consistently held that users
must be made aware of the terms before they can be bound by them.
 Reasonableness and Fairness: Contracts must be reasonable and not
unconscionable. The document references Lord Denning’s principles on fairness
in contracts, emphasizing that terms should not exploit the weaker party.
 Constructive Notice: The concept of constructive notice is crucial, where users
are deemed to have accepted terms if they are reasonably accessible and
visible.
------------------------------------------------------------------------------------------------------------
-----------------------

The Enforceability of Electronic Click Wrap and Browse Wrap

Agreements

Introduction
 Electronic Contracts: Defined as agreements formed through data
messages, often involving automated systems.
 Types: Primarily click-wrap and browse-wrap agreements.
 Issues: Formation of contracts, information asymmetry, and limited user choices.

Standard Contract of Adhesion

 Definition: A take-it-or-leave-it contract offered by a party with superior
bargaining power.
 Characteristics: Numerous terms, drafted by one party, non-negotiable, and
typically used in regular transactions by businesses.

Page 2 of 68
  Importance: Integral to the economy, especially in online transactions.

Nature of Browse-Wrap Agreements

 Function: Governs website usage and transactions.
 Visibility: Often less conspicuous than click-wrap agreements.
 User Experience: Perceived as user-friendly but can obscure important terms.
Validity and Enforceability of Browse-Wrap Agreements
Statutory Stance
 International Conventions: UNCITRAL Model Law, UN Convention, and EU
Directives affirm the validity of electronic contracts.
 US Laws: UETA and UCITA validate electronic contracts based on user assent.
 Singapore: Electronic Transactions Act (ETA) supports the validity of electronic
contracts.
Judicial Stance
 General Approach: Courts aim to uphold contracts, including electronic ones.
 Notice of Terms: Essential for enforceability. Users must have adequate
notice and opportunity to review terms.
 Case Examples:
o Hotmail Corp. v. Van Money Pie, Inc.: Click-wrap agreements upheld.
o Dell Computer Corp. v. Union des Consommateurs: Adhesion contracts
binding if terms are presented for review.
o Specht v. Netscape Communications Corp.: Importance of conspicuous
notice.
Key Principles for Enforceability
1. Adequate Notice: Users must be informed of the terms.
2. Opportunity to Review: Users should have a meaningful chance to read the
terms.
3. Manifestation of Assent: Users must take an action that indicates agreement.
4. Unconscionability: Contracts must not be unduly harsh or one-sided.

Challenges and Considerations

 User Awareness: Many users do not read terms and conditions.
 Fairness: Courts may strike down contracts that are unfair or unconscionable.
 Equity: Contracts must be fair and not exploitative.

Transacting Online – Summary

The Evolution and Regulation of Electronic Contracts

1. Introduction

A critical component of E-commerce is the concept of Electronic Contracts, which are

agreements formed through electronic means to define rights and obligations
for commercial purposes. The effectiveness of E-commerce relies on the legal
framework governing these electronic contracts, raising essential questions regarding the
adequacy of traditional commercial rules, the differences between electronic and
traditional contract formation, and the necessity for specific regulations for electronic
contracts.

2. Defining Electronic Contracts

Electronic contracts are legally enforceable agreements concluded using electronic

mediums. The UNCITRAL Model Law on Electronic Commerce (1996) does not
provide a specific definition but asserts that contracts can be formed through
data messages, emphasizing that the validity of such contracts should not be denied

Page 3 of 68
 based on the electronic means used. Electronic contracts encompass various transaction
types, including Business-to-Business (B2B), Business-to-Consumer (B2C), and Consumer-
to-Consumer (C2C) transactions.

3. Types of Transactions in Electronic Contracts

Electronic contracts can take various forms, such as click-wrap and shrink-wrap
agreements.
**Click-wrap Agreements**: Users agree to terms by clicking an "I agree" button,
which requires user action but may not guarantee awareness of the terms.
**Shrink-wrap Agreements**: Terms are included within a product package, and
acceptance occurs when the package is opened. This type has been subject to legal
scrutiny, as consumers may not review terms before purchase.

4. Elements of a Valid Contract under Indian Contract Act

For any contract, including electronic contracts, to be valid and enforceable, it must meet
specific criteria as outlined in the Indian Contract Act, 1872:

a) **Offer**: A clear proposal made by one party.

b) **Acceptance**: The agreement of the other party to the offer.
c) **Intention**: Both parties must intend for the agreement to be legally binding
d) **Consideration**: There must be lawful consideration exchanged.
e) **Competence**: Parties must be legally capable of entering into a contract.
f) **Free Consent**: Consent must be given freely without coercion, misrepresentation,
or undue influence.

5. Formation of Electronic Contracts under Information Technology Act, 2000

India lacks specific legislation solely governing electronic contracts; however, the
Information Technology Act, 2000, provides a legal framework based on the
UNCITRAL Model Law. This Act aims to recognize electronic transactions and facilitate
electronic communication.

6. Validity of E-Contracts

Section 10A of the Information Technology Act states that contracts formed through
electronic means are not unenforceable solely due to their electronic nature.
This provision aligns with Section 3 of the Indian Contract Act, which outlines the
communication of proposals and acceptances can be made by any act or
omission of the intending party which has the effect of communication. The Indian
Evidence Act, 1872 expands the definition of 'evidence' to include electronic
records, making electronic contracts valid and enforceable under the
Interpretation clause.

7. Time of Dispatch and Receipt of Electronic Records

 Section 13 of the Information Technology Act addresses the timing of dispatch
and receipt of electronic records. For implementation of Section 13, it has to
be read along with Section 4 of the Indian Contract Act, 1872 which
provides certain rules regarding when the communication of proposal,
acceptance and revocation gets completed.

 Communication of a proposal is complete when it comes to the knowledge of

the person to whom it is made.

Page 4 of 68
  Communication of an acceptance is complete as against the offeror, when the
electronic record enters a computer resource outside the control of the originator
(acceptor) and as against the acceptor, when the electronic record enters any
information system designated by the offeror, or, if no system is designated, when
the electronic record enters the information system of the offeror.

The Indian Supreme Court differentiated between 'postal rule' and 'instantaneous
rule' in Bhagwandas Goverdhandas Kedia v. Girdharilal Parshottamdas and Co., The
court ruled that Section 4 applies only to non-instantaneous forms of
communication, such as contracts concluded via postal mail, and may not be
applicable to instantaneous forms like web-click contracts. In instantaneous forms, a
contract is formed when the offeror receives acceptance, unlike non-
instantaneous communication where a contract is formed or concluded when acceptance
is transmitted out of the acceptor's power.

8. Legal Recognition of Electronic Signature

The Information Technology Act also recognizes electronic signatures, which utilize
public key cryptography to validate electronic records. This legal recognition is
crucial for facilitating electronic transactions. The Act also provides for licensing
'Certifying Authorities' to issue Electronic Signature Certificates to subscribers.

9. Jurisdiction Issues Concerning Electronic Contracts

The advent of electronic contracts complicates traditional jurisdictional principles. Courts
must determine where a contract is formed and the appropriate jurisdiction for
disputes. Various cases illustrate the complexities of jurisdiction in electronic contracts,
emphasizing the need for clarity regarding where a contract is deemed to be concluded.
a) In Casio India Co. Ltd. v. Ashita Tele Systems Pvt. Ltd. , Delhi High Court held
that once a web site can be accessed from Delhi, it is enough to invoke
the territorial jurisdiction of the Court.

b) But in another case, India TV Independent News Service Pvt. Ltd. v. India
Broadcast Live LLC , it was held that the mere fact that a website is
accessible in a particular place may not itself be sufficient to invoke the
territorial jurisdiction of the Court. However, where the website is not
merely passive but it is interactive permitting the browsers to not only access
the contents of the site but also to subscribe to the services provided by the
owners, then the position would be different.

10. Scope of ‘Carrying on Business’ for Jurisdiction in Intellectual Property

Disputes
In Dhodha House v. S.K. Maingi, the Supreme Court has clarified that "carrying on
business" does not necessitate physical presence at a location. Instead, it can
occur through agent. The Supreme Court further stated that the following three
conditions should be satisfied for the purpose of establishing that the plaintiff
is ‘carrying on a business’ within the territorial limits of the court:
a) The agent must be a special agent who exclusively handles the principal's
business in the principal's name. Should not a general agent who does business
for any one that pays him.
b) The person acting as agent must be an agent in the strict sense of the term.
c) To constitute ‘carrying on business’ at a certain place, the essential part of the
business must take place in that place.

In World Wrestling Entertainment, Inc. v. Reshma Collection, the Hon'ble Division

Bench referred to Dhodha House case where the Supreme Court had laid
down the test to determine where is the contract concluded when a
transaction takes place over the internet.
a) The Supreme Court established the rule for determining this, declaring that
for a contract to be regarded "carrying on business" at a certain

Page 5 of 68
 location, the important portion of the activity must occur there. In this
case, it was assumed that the web server of the Appellant's website was not
located in Delhi; however, if a customer were to purchase an article from
the website, the customer would access the Appellant's website on their
computer in Delhi, and then pay using a debit/credit card/cash card from
Delhi, and the goods would be delivered to the customer in Delhi.
b) The court also looked at Bhagwan Goverdhandas Kedia v. Girdharilal, in
which the Supreme Court compared contracts concluded by post and
telegraph to contracts done over the telephone in terms of determining where
the cause of action arose. The court ruled that because the transactions in
this case were completed in Delhi, it amounted to essential part of
business being done in Delhi and hence territorial jurisdiction could
be exercised in Delhi.
c) The Court noted that due to technological advancements and the rapid
emergence of new online business models, an entity can maintain a
virtual presence in a location far from its physical premises. The
ability to conduct transactions via a website in a specific area is
essentially equivalent to a seller having physical stores in that area.
d) The court observed that, wrt business done over the internet, just as in the
case of telephonic conversation, there is instantaneous communication in
case of business over the internet also. Therefore, the rule that applies
to contracts concluded over the telephone would apply to contracts
concluded over the internet. It means that contract will be concluded
where the acceptance is communicated, received and understood i.e.
place where offeror is located

The above cases indicate that pinpointing the exact moment an electronic
contract is formed can be challenging. Specifically, it is unclear whether acceptance
occurs when the offeree sends it or when the offeror receives it which complicates
determining the contract’s location. However, this issue becomes less significant if
the contract includes a jurisdiction and governing law clause agreed upon by
both the originator and the addressee.

The case Bhagwandas Goverdhandas Kedia vs. M/S. Girdharilal Parshottamdas

(1966) clarified jurisdiction in contract formation over the telephone. The Supreme Court
ruled that the contract is formed where the acceptance is communicated to the offeror.
Thus, the Ahmedabad court had jurisdiction since the acceptance was received
there. This decision established that the place of contract formation is where the
acceptance is communicated, not where it is spoken.

------------------------------------------------------------------------------------------------------------
--------------

ELECTRONIC COMMERCE

Definition of E-commerce
E-commerce is defined as the buying or selling of goods or services, including
digital products, over a digital or electronic network [1].

 This definition includes both physical and digital products, as well as services
that can be delivered digitally.
 Digital products can include items such as digital contracts and insurance
services [1]. Insurance, although traditionally considered a service, can be
delivered through digital means, thus falling under the e-commerce umbrella.
 There is a noted ambiguity in the definitions of platforms and services within e-
commerce. For example, on-demand services and gig platforms often overlap with
e-commerce platforms, creating confusion for regulators [1]. The discussion points

Page 6 of 68
 out that platforms providing marketplaces for other services are distinct from
those offering the actual service.

Consumer Protection in E-commerce: Consumer protection measures in e-

commerce:

1) Provide Information about Nature of Entity: E-commerce entities must

provide clear and accurate information about their nature, including details such
as the type of goods or services they offer [1].
2) Nodal Contact Person: Entities must appoint a nodal contact person
responsible for ensuring compliance with the Consumer Protection Act and
associated rules [1].
3) No Unfair Trade Practice: E-commerce entities must avoid engaging in unfair
trade practices, such as misleading advertisements, false claims about product
quality, or deceptive pricing strategies [1].
4) Grievance Officer: Entities must appoint a grievance officer to handle consumer
complaints, acknowledging them within 48 hours and resolving them within one
month [1].
5) Imported Goods: For imported goods, e-commerce entities must mention the
details of the importer to ensure transparency and accountability [1].
6) Best Efforts – National Consumer Helpline: Entities are encouraged to make
their best efforts to join the National Consumer Helpline platform provided by the
government [1].
7) No Cancellation Charges: E-commerce entities should not levy cancellation
charges on consumers unless a similar charge is imposed on the seller if they
cancel the order [1].
8) No Automatic Consent – Affirmative Action: Entities should avoid pre-selected
checkboxes for options like donations or accepting terms and conditions, ensuring
that consumers provide affirmative consent [1].
9) RBI Approved Payments: All payments must be made through RBI-approved
methods, ensuring secure and regulated transactions [1].

Definition and Examples of Unfair Trade Practices

"Unfair trade practice" means a trade practice which, for the purpose of promoting the
sale, use or supply of any goods or for the provision of any service, adopts any unfair
method or unfair or deceptive practice including any of the following practices, namely
1. Misleading Advertisements: Unfair trade practices include misleading
advertisements that provide false or deceptive information about the quality,
quantity, grade, composition, style, or model of goods or services [1]. For
example, advertising a product as "ice cream" when it does not contain the
required ingredients like milk or cream is considered misleading [1].
2. False Claims: Making false claims about the benefits or features of a product is
another form of unfair trade practice. For instance, if a hair oil is advertised as
containing specific beneficial ingredients but does not actually include them, it is
a false claim [1].
3. Unfair Contract Terms: Contracts that impose unreasonable terms on
consumers, such as excessive security deposits, disproportionate penalties, or
unilateral termination without cause, are considered unfair [1]. For example, a car
rental company demanding a high security deposit or a service provider imposing
high cancellation fees without a valid reason [1].
Unfair Contracts
Unfair contract means a contract between a manufacturer/trader/ service provider and a
consumer, having such terms which cause significant change in the rights of such
consumer, including the following, namely:--

 Manifestly excessive security deposits

 Penalties

Page 7 of 68
  Early repayment of debts + penalty
 Entitling unilateral termination
 Assignment to the detriment
 Imposing unreasonable charge

Fair Consumer Practices by Marketplace Ecom Entity (like Amazon, Flipkart)

 Comply with S.79 of the IT Act: Marketplace e-commerce entities must

comply with Section 79 of the IT Act, which requires them to exercise due
diligence in monitoring and managing the content posted by third-party sellers
[1].
 Sellers to Provide Undertaking: Sellers must provide undertakings about the
content and services they offer on the marketplace platform, ensuring
transparency and accountability to consumers [1].
 All Information to be Provided to Consumer about Seller: Marketplace
entities must ensure that all relevant information about the seller, including
contact details and product specifications, is provided to consumers to facilitate
informed purchasing decisions [1].
 Ticket for Complaint: Sellers must issue ticket numbers for every complaint
logged on their website, enabling consumers to track the resolution process and
ensuring accountability [1].
 Return, Refund and Exchange, etc.: Sellers must have clear and customer-
friendly policies on returns, refunds, and exchanges, which should be easily
accessible and understandable to consumers [1].
 Parameters to Rank Goods: Marketplace entities should have provisions for
consumers to provide feedback on goods in terms of quality, service, and other
relevant parameters, helping to rank products fairly [1].
 IPR Violations: Marketplace entities must ensure that the products sold on their
platform do not violate intellectual property rights, and they should take
appropriate measures to address any violations [1].

Fair Consumer Practices by Sellers

1) No Unfair Trade Practices: E-commerce sellers must avoid engaging in unfair

trade practices, such as misleading advertisements, false claims about product
quality, or deceptive pricing strategies [1].
2) Cannot Write Reviews Posing as Consumers: Sellers should not write or
solicit fake reviews posing as consumers to artificially inflate the ratings of their
products or services [1].
3) No Refusal to Take Back: Sellers must not refuse to accept returns or
exchanges of products, provided the return policies are clearly stated and adhered
to [1].
4) Contract in Writing with E-commerce Entity: Sellers should have a written
contract with the e-commerce entity outlining the terms and conditions of their
partnership, including responsibilities and liabilities [1].
5) Grievance Redressal: Sellers must appoint a grievance officer to handle
consumer complaints, acknowledge them within 48 hours, and resolve them
within one month [1].
6) Consistent Advertising: Sellers should ensure that their advertising is
consistent with the actual product or service offered, avoiding any misleading or
exaggerated claims [1].
7) Provide Information: Sellers must provide accurate and comprehensive
information about the nature of goods and services, including quality, quantity,
grade, composition, style, or model [1].

Standard Form Contracts

Definition and Necessity

Page 8 of 68
Standard Form Contracts are pre-drafted agreements used by businesses to streamline
transactions with a large number of consumers. These contracts are necessary because
they simplify the process and avoid the need for individual negotiations with each
consumer [1].
Issues with Standard Form Contracts
1. Unequal Bargaining Power: SFCs often involve unequal bargaining power,
where consumers have little to no ability to negotiate terms. This can lead to
unfair terms being imposed on consumers [1].
2. Lack of Choice: Consumers typically have no choice but to accept the terms of
SFCs, which can include clauses that are unfavorable or unreasonable [1].
Legislative Measures to Make SFCs More Equitable
1. Legislation: Laws can prohibit certain unfair terms and conditions in SFCs. For
example, e-commerce rules may specify that cancellation charges cannot be
imposed unless a similar charge is imposed on the seller [1].
2. Cooling-off Period: Providing a free look period of about 7 to 10 days for
consumers to reconsider their decision after signing a contract [1].
3. Substantive Mandatory Choices: Laws can mandate certain terms that cannot
be deviated from, such as jurisdiction clauses for aggregator cab services [1].
4. Section 6 of the Contract Act: Section 6 of the Contract Act addresses undue
influence, where one party dominates the will of the other. If a contract is
obtained through undue influence, the dominated party has the choice to avoid
the contract.
Case Examples
1. Lily White v. R. Munuswami: A consumer filed a case against a laundry service
for losing their clothes. The laundry's defense was that damages were limited to
50% of the value of the clothes, but the court found this term to be unfair due to
the lack of logic and choice for the consumer.
2. Indigo Airlines Case: A consumer missed a flight due to lack of proper
announcements and claimed deficiency in service. The court found that the airline
had not taken diligent care to ensure the consumer reached the boarding gate [1].

------------------------------------------------------------------------------------------------------------
--------------

“Guidelines for Prevention and Regulation of Dark Patterns,

2023” - Summary

 Applicable to all platforms offering goods or services in India, advertisers, and

sellers.
 No person or platform shall engage in any dark pattern.
 Engaging in practices specified in Annexure 1 constitutes a dark pattern.

Specified Dark Patterns

1. False Urgency: Creating a false sense of urgency or scarcity to prompt
immediate action. Examples: False claims of high demand or limited availability.
2. Basket Sneaking: Adding items to the cart without user consent, increasing the
total payable amount. Examples: Pre-ticked boxes for additional services,
automatic addition of subscriptions.
3. Confirm Shaming: Using guilt or shame to influence user decisions. Examples:
Phrases like “I will stay unsecured” for declining insurance.
4. Forced Action: Forcing users to take unrelated actions to access desired
services. Examples: Mandatory newsletter subscriptions, downloading additional
apps.
5. Subscription Trap: Making subscription cancellations difficult or hiding
cancellation options. Examples: Complex cancellation processes, mandatory
payment details for free trials.

Page 9 of 68
 6. Interface Interference: Manipulating UI to highlight certain information and
obscure others. Examples: Concealing cancellation options, misleading pop-up
designs.
7. Bait and Switch: Advertising one outcome but delivering another. Examples:
Offering a product at a low price but switching to a more expensive one at
checkout.
8. Drip Pricing: Not revealing full prices upfront or adding costs post-purchase.
Examples: Hidden fees, in-app purchases for advertised free services.
9. Disguised Advertisement: Masking ads as other types of content. Examples:
Ads posing as user-generated content or news articles.
[Link]: Overloading users with requests or interruptions unrelated to their
intended actions. Examples: Repeated app download prompts, constant
notification requests.
--------------------------------------------------------------------------------------------------------------

Contracting Components in Technology Law

The Five Essential Ingredients of a Valid Contract

1) Offer

An offer is a clear proposal made by one party to another, indicating a

willingness to enter into a contract under specified terms. In the digital
domain, offers can be made through various means, including emails,
websites, and electronic platforms. The challenge arises in ensuring that the
offer is communicated effectively and that the recipient understands the
terms being proposed.

2) Acceptance

Acceptance is the unequivocal agreement to the terms of the offer.

Traditionally, acceptance required a clear indication of agreement, which could be
verbal or written. However, in the electronic realm, acceptance has
transformed into more automated forms, such as "click-wrap"
agreements, where users indicate their acceptance by clicking an "I Agree"
button. This shift raises questions about the nature of consent and
whether users fully comprehend the implications of their acceptance.

3) Consideration

Consideration refers to something of value exchanged between the parties

involved in a contract. In the context of technology, consideration can take
various forms, including monetary payment, services, or even digital assets like
cryptocurrencies. The emergence of cryptocurrencies, such as Bitcoin, has
introduced new dimensions to the concept of consideration, as these
digital currencies operate within a unique legal framework that differs
from traditional forms of payment. Cryptocurrencies serve as a medium of
exchange in online transactions, redefining the concept of consideration and
raising questions about their legal status and enforceability.

4) Consensus ad Idem (Mutuality of Mind)

Consensus ad idem, or mutuality of mind, is the agreement of both parties on

the same terms. This principle is crucial for the validity of a contract, as it
ensures that both parties share a common understanding of their obligations. In
the digital landscape, achieving mutuality can be complicated by the use

Page 10 of 68
 of Standard Form Contracts (SFCs), where one party presents terms that the
other must accept without negotiation. This "take it or leave it" (Hobson's Choice)
approach potentially undermines the concept of true mutual consent and
can lead to disputes regarding the validity of consent.

5) Competence to Contract

Competence to contract refers to the legal ability of parties to enter into a

contract. This includes considerations of age, mental capacity, and legal
authority. The digital environment poses unique challenges in verifying
the competence of parties, particularly when minors can easily engage
in contracts through online platforms. In the United States, legislation like
the Children’s Online Privacy Protection Act (COPPA) mandates parental
consent for minors engaging in online contracts, a protective measure that
is not uniformly adopted in other jurisdictions, including India.

The Impact of Electronic Contracts

1) Harmonization of Laws

The introduction of electronic contracts has prompted a harmonization of existing

laws to accommodate digital transactions. The UNCITRAL Model Law on E-
commerce, established in 1996, serves as a guiding framework for
countries to adapt their legal systems to recognize electronic records
and communications. Many jurisdictions, including India, have incorporated
provisions from this model law into their legal frameworks, facilitating the validity
and enforceability of electronic contracts.
Case Law Illustrations

a) Gaussian Network Pvt Ltd v. Ms. Monica Lakhanpal

In this case, the Delhi District Court highlighted the distinction between online and
offline activities. The court noted that while certain games of skill are legal in
the physical realm, the same rationale may not apply to their online
counterparts. Whilst the judgment of the Delhi District Court does not have
precedent value, it still highlights the possibility of such interpretations or
distinctions being drawn between the real and the virtual world. This case
underscores the need for courts to adapt traditional legal principles to the
nuances of the digital landscape.

b) All Kerala Online Lottery Dealers Association v. State of Kerala

The Supreme Court of India addressed the legality of online lotteries, emphasizing
the need for a nuanced interpretation of laws governing different mediums. The
court upheld the prohibition of online lotteries while allowing paper-
based lotteries, illustrating the complexities of applying existing laws to new
technological contexts.

2) Jurisdictional Challenges

One of the primary complexities arising from electronic contracts is

jurisdiction. The global nature of the internet means that actions legal in one
jurisdiction may be illegal in another. Courts have grappled with determining
applicable laws for online contracts, often relying on principles such as the
"minimum contacts test" and the "purposive availment test" to establish

Page 11 of 68
 jurisdiction. This complexity underscores the need for clear legal standards
governing electronic transactions.
Minimum Contacts Test
The minimum contacts test originates from the Supreme Court case
International Shoe Co. v. Washington (1945). It determines whether a
court can exercise personal jurisdiction over a non-resident defendant.
The following factors are considered in determining whether a defendant has met
this requirement:
a) Purposeful Availment: The defendant must have purposefully directed their
activities toward the forum state, such as conducting business, entering
contracts, or targeting residents.
b) Nature of Contacts: The contacts must be substantial and continuous
rather than isolated or random. This includes regular business
transactions, advertising, or other interactions that indicate a connection to
the forum.
c) Relatedness: The plaintiff’s claim must arise out of or relate to those
contacts. If the defendant’s activities in the state are unrelated to the lawsuit,
jurisdiction may not be appropriate.
d) Fairness: Exercising jurisdiction must be reasonable and fair, considering the
defendant’s connections to the forum.
e) Interactivity of Online Conduct: A passive website may not suffice for
jurisdiction, while an active website that targets forum residents can
establish minimum contacts.
Application in India
In India, the Minimum Contact Theory has been applied to expand jurisdiction
in cases involving trademark infringement and domain name disputes.
Courts have interpreted Section 20© of the Code of Civil Procedure liberally,
allowing jurisdiction based on the defendant’s online activities and their impact on
the local market. Notable cases include: India TV v. India Broadcast Live. The
court found sufficient minimum contacts based on the accessibility of the
defendant’s website in India.

3) Special Contracts in Technology

a) Technology-Driven Complexities

Certain contracts, particularly those involving emerging technologies,

require distinct consideration due to the unique challenges they present.
For instance, contracts related to autonomous vehicles and unmanned aerial
vehicles (UAVs) raise questions of liability and privacy that differ from traditional
contracts. The complexities inherent in these technologies necessitate
specialized contractual frameworks to address the specific risks and
responsibilities involved.

b) Data Protection and Privacy

As data traverses multiple jurisdictions, the need for harmonized data protection
laws becomes paramount. Corporations often resort to contracts to ensure
compliance with varying data protection regulations across jurisdictions.
The complexities of data ownership, usage, and retention further complicate the
contracting landscape, necessitating careful consideration in contract drafting.
Case Law: Maximillian Schrems v. Data Protection Commissioner
This landmark case in the European Union highlighted the difficulties in regulating
data protection across jurisdictions. The court's ruling emphasized the need for
robust data protection measures, even in jurisdictions with stringent
regulations. In contrast, the Delhi High Court's decision in Karmanya Singh

Page 12 of 68
 Sareen v. UOI showcased the challenges faced by Indian courts in addressing
data privacy issues, particularly in the context of popular applications like
WhatsApp. The court refused to intervene in “Whatsapp” sharing data
with its parent Company “Facebook”.

4) The Role of Data

Data has emerged as a critical asset in the digital economy, leading to the
creation of contracts that govern data usage and protection. The rise of big data
analytics and automatic data collation has prompted organizations to establish
comprehensive data protection policies and contractual agreements to
ensure compliance with legal standards. The interplay between
technology and data underscores the need for contracts that address
the nuances of data ownership, usage rights, and liability.

------------------------------------------------------------------------------------------------------------
----------------

Electronic Signatures: Class Notes

1. Introduction to Electronic Signatures

 UNCITRAL Model Law on Electronic Signatures: Provides a framework for the
legal recognition of electronic signatures. Article 6: Specifies the requirements
for an electronic signature to be considered reliable.
 UNCITRAL Definition: An electronic signature is data in electronic form, affixed
to or logically associated with a data message, used to identify the signatory and
indicate their approval of the information contained in the message.
 Purpose: To authenticate the identity of the signatory and ensure the
integrity of the signed document.
 Indian IT Act, 2000: Governs electronic signatures in India.
Section 3: Digital Signature
 Definition: According to Section 2(1)(p) of the Information Technology Act,
2000, a digital signature means "authentication of any electronic record by a
subscriber by means of an electronic method or procedure in
accordance with the provisions of section 3."
 Sec 3 allows authentication of electronic records using digital
signatures.
 Must use an asymmetric cryptosystem and a hash function.
 Digital signatures created as per these requirements are legally valid.
Section 3A: Electronic Signature
 Definition: As per Section 2(1)(ta) of the Information Technology Act, 2000,
an electronic signature means "authentication of any electronic record by a
subscriber by means of the electronic technique specified in the Second
Schedule and includes digital signature."
 Sec 3A allows authentication of electronic records using electronic
signatures.
 Electronic signature must meet reliability criteria to be valid.
o Unique: Signature and data linked to signatory and no one else.
o Control: Signature creation data was at control of signatory at time of
signing and no one else
o Detectability: Any alteration of signature can be detected.
 Electronic signatures that meet these criteria and are specified in the Second
Schedule are legally valid.
These definitions highlight the distinction between digital and electronic signatures, with
digital signatures being a subset of electronic signatures that employ specific
cryptographic techniques for enhanced security and authenticity.

Page 13 of 68
These sections ensure the legal validity of both digital and electronic signatures
for authenticating electronic records in India.

2. Functions of a Signature
 Identity: Indicates the identity of the person who signed the document.
 Association: Associates the signatory with the contents of the document.
 Certainty as to the personal involvement of that person

3. Types of Electronic Signatures

1. Totally Unsecured Electronic Signatures: These are the least secure forms
of electronic signatures. They can be easily copied or forged since they do
not have any inherent security features. Example: A scanned image of a
handwritten signature or a typed name at the end of an email.

2. Moderately Secure Electronic Signatures: These signatures are more

secure than totally unsecured signatures but may not include advanced
verification methods like cryptographic keys. They often rely on the security
of the platform used to create and manage the signature. Example: Signatures
created using platforms like DocuSign or Adobe Sign without additional
security measures.

3. Extremely Secure Electronic Signatures: These signatures provide the

highest level of security. They involve complex encryption techniques to
ensure the authenticity and integrity of the signed document. Verification
can be done through a trusted third party or a certification authority. Example:
Digital signatures that use cryptographic methods, such as those involving public
and private key pairs.

Symmetric and Asynchronous Encryption

Private Public Key

Key

Hashing in Electronic Signatures

1. Definition and Purpose:
o A hash function is a mathematical process based on an algorithm that
creates a digital representation (compressed form) of a message, often
referred to as a message digest or fingerprint.
o The hash value or hash result is of a standard length, usually much smaller
than the original message but substantially unique to it.
2. Hash functions are used to verify the authenticity of a message. When a hash
function is applied to a message, it generates a hash value. If the message is
altered in any way, the hash value will change, indicating tampering.
3. The same hash function applied to the same message will always produce
the same hash value, ensuring consistency and reliability.
4. Legal Requirements:

Page 14 of 68
 oAccording to the UNCITRAL Model Law and the Indian IT Act, for an
electronic signature to be valid, it must follow an asymmetric
cryptosystem and hash function.
o The hash function must ensure that it is computationally infeasible to
derive or reconstruct the original message from the hash result.
Additionally, two different electronic records should not produce the
same hash result.
5. Application in Digital Signatures:
o Digital signatures use hash functions to ensure the integrity and
authenticity of the signed document. The document is hashed, and the
hash value is encrypted with the signatory's private key to create the
digital signature.
o Any alteration to the document after signing will result in a different
hash value, which can be detected during the verification process.
o When a document is signed digitally, the hash function generates a hash value
of the document. This hash value is then encrypted using the signatory's
private key. The recipient can decrypt the hash value using the signatory's
public key and compare it with a newly generated hash value of the received
document to verify its integrity and authenticity.

6. Case Laws
 Mehta vs. Jay Pereira Fernandes SA: The court ruled that a typed name in
an email could serve as an electronic signature, but merely including a
name was insufficient for legal purposes.
 Hewlett Packard India vs. Jalan Infotech: The Kolkata High Court
acknowledged email communications as valid acknowledgments of debt,
even without digital signatures, due to the lack of contestation by the
defendant.
 Forcelli v. Gelco Corp: The New York Supreme Court recognized emails as
valid contracts, emphasizing that the absence of a handwritten signature
does not invalidate the agreement.
 Balaji Export Corporation v. Food Corporation of India: An Indian case
where the court upheld the validity of digitally signed tender documents.
 Monte Carlo v. National High Speed Rail Corporation: The Delhi High Court
held that a digitally signed bid authenticates all documents within the bid.
 Jaikrishna v. Registrar of Companies: The Madras High Court held that the
authenticity of a forged electronic signature must be decided by a civil or
criminal court.

------------------------------------------------------------------------------------------------------------
--------------

TRADEMARKS

Section 2(1)(zb) of the Trademarks Act, 1999 (India) defines what constitutes a
"trademark." According to this section, a trademark is any mark that can be
represented graphically and is capable of distinguishing the goods or services
of one person from those of others. This section covers both traditional and non-
traditional marks, as long as they serve as identifiers of origin for the goods or services
provided.
Detailed Breakdown
1. Graphic Representation:
 This requires that the trademark be something that can be represented
visually. Examples of marks that can be graphically represented include words,
logos, symbols, numbers, or even sounds, as long as there’s a visual way
to document them.

Page 15 of 68
  Example: The McDonald's "Golden Arches" logo or the "Nike Swoosh" can be
graphically represented and easily identifiable as associated with their respective
brands.
2. Distinctive Character:
 A trademark should have a distinctive character, meaning it should be unique
enough to differentiate the goods or services it represents from others
in the marketplace. Generic terms or purely descriptive terms may not be
eligible for registration unless they have acquired distinctiveness through
usage.
 Example: The word "Apple" as used by Apple Inc. for electronics is distinctive
because, in that context, it does not directly describe the product category
(electronics) but uniquely identifies the brand.
3. Goods or Services:
 Trademarks can apply to goods or services. This versatility allows for brands to
protect not only tangible goods like clothing, electronics, and food but also
services like banking, consulting, or entertainment.
 Example: The mark "Taj" used by the Taj Group of Hotels identifies their hotel
services distinctly from other hotels.
4. Used in Relation to Goods or Services:
 This means the trademark should be used commercially concerning particular
goods or services. The trademark helps consumers identify the source or origin of
goods or services and assures them of the quality and consistency associated
with it.
 Example: The brand "Ray-Ban" used on sunglasses is recognized by consumers
as a mark of quality and origin, distinguishing it from other sunglass brands.
5. Types of Marks Covered:
 Traditional Marks: Words, logos, slogans, names, numerals, and letters.
 Non-Traditional Marks: This includes sound, color marks, shapes, packaging, or
even smells, though non-traditional marks are more challenging to register.
 Example: The NBC chimes (a tri-tone chime sound) is a registered sound mark
associated with NBC.
Protection of Registered Trademarks under Statute Law
A registered trademark is protected under the statutory framework of the Trademarks
Act, 1999. This Act provides exclusive rights to the owner, allowing them to prevent
others from using a similar mark for similar goods or services.
Key Features of Protection for Registered Trademarks:
 Exclusive Right: The owner has exclusive rights to use the mark for specific
goods or services.
 Right to Sue for Infringement: Registered trademark owners can file an
infringement lawsuit against any party using a similar mark that may cause
confusion among consumers.
 Legal Presumption of Ownership: Registration provides a legal presumption of
ownership, making it easier for the owner to prove rights in the event of litigation.
 Remedies: Available remedies for trademark infringement include injunctions
(to stop the infringer from using the mark), damages, or account of profits
made by the infringer.
Examples of Registered Trademarks in India Under Section 2(1)(zb)
1. Word Marks: Unique words or names that identify a brand. Example: The word
"TATA" is registered as a trademark for multiple categories, including automobiles
and steel.
2. Logo Marks: Distinctive logos used by companies. Example: The logo of
"Reliance Industries" is registered and recognized as a trademark in India.
3. Color Marks: Specific colors associated with a brand. Example: The color
"purple" associated with Cadbury chocolates is a color trademark that helps
consumers identify Cadbury products in the confectionery industry.
4. Shape Marks: Unique shapes of products or packaging that are associated with a
brand. Example: The unique shape of the "Coca-Cola" bottle is a registered
trademark.

Page 16 of 68
 5. Sound Marks: Sounds that are distinctively associated with a particular brand.
Example: The Yahoo yodel sound and the Airtel tune are examples of sound
marks registered in India.
Important Case Law:
S. Syed Mohideen v. P. Sulochana Bai (2015):
o Facts: This case involved a dispute over the use of the trademark "Iruttu Kadai
Halwa" by both parties. The plaintiff had a registered trademark for the name.
o Outcome: The Supreme Court emphasized the importance of registration in
claiming exclusive rights under statutory protection. The judgment reinforced
the idea that registered trademark owners have greater security and easier
avenues for legal recourse in infringement cases.

Protection of Unregistered Trademarks: Action for Passing Off

An unregistered trademark, while lacking statutory protection, can still be defended
under the common law of tort for "passing off." Passing off protects the
reputation or goodwill associated with a mark, preventing another party from
misrepresenting their goods or services as those of the mark owner. The primary
objective is to avoid deception of consumers and protect the goodwill built by
the unregistered mark.
Elements of Passing Off:
To succeed in a passing off action, the plaintiff generally needs to establish the
following:
1. Goodwill: The plaintiff must show that their mark has acquired a reputation and
goodwill among consumers.
2. Misrepresentation: There must be evidence of a misrepresentation by the
defendant that leads the public to believe that their goods or services are those of
the plaintiff.
3. Damage: The plaintiff must show that they suffered damage or are likely to suffer
damage due to the defendant’s actions.
Example: The Case of McDowell’s No. 1: McDowell’s, a popular brand for spirits, was
initially an unregistered trademark when it became widely recognized. Any competitor
that used "No. 1" in a way that misled consumers to think they were purchasing
McDowell's would be liable under passing off.
Important Case Law:
 Honda Motors Co. Ltd. v. Charanjit Singh (2003):
o Facts: Honda filed a suit against the use of "Honda" for generators, despite
not being registered for generators.
o Outcome: The Delhi High Court held that Honda, having substantial goodwill,
could claim passing off. The court restrained the defendant from using
"Honda" in generators, as it caused confusion and could damage Honda’s
reputation.
 Cadbury Schweppes v. Pub Squash Co. (1981):
o Facts: In the UK, Cadbury filed a passing off suit against Pub Squash for a
similar drink, claiming it would mislead customers into believing Pub Squash
was associated with Cadbury.
o Outcome: The court held in favor of Cadbury, noting that the similarity in
marketing and branding could mislead consumers. This established that
unregistered brands could successfully prevent others from piggybacking on
their reputation.
Key Differences between Registered and Unregistered Trademark Protection

Criteria Registered Trademark Unregistered Trademark (Passing Off)

Basis of Statutory (Trademarks Act,
Common law
Protection 1999)
Right to Sue Can sue for infringement Can sue for passing off
Exclusive No exclusive rights; only prevents
Exclusive right to use
Right misrepresentation

Page 17 of 68
 Criteria Registered Trademark Unregistered Trademark (Passing Off)
Burden of Easier, due to legal Higher burden to prove goodwill,
Proof presumption of ownership misrepresentation, and damage
Remedies Injunction, damages, account Injunction, damages, proof of loss may be
Available of profits required

Domain names
Domain names are an essential aspect of a brand's online identity, serving as unique
addresses for accessing websites. While domain names are not automatically
trademarks, they can acquire trademark status if they meet certain conditions,
such as being distinctive and used in commerce to identify the source of goods
or services. Domain names can thus qualify as trademarks if they are recognized
by consumers as identifiers of origin. They may also fall under other forms of
intellectual property if they represent a valuable digital asset.
When a Domain Name Can Qualify as a Trademark
For a domain name to qualify as a trademark, it must satisfy these criteria:
1. Distinctiveness: The domain must be unique and not descriptive or generic in its
industry.
2. Association with Goods or Services: The domain should be used to identify
specific goods or services, creating a commercial association.
3. Recognition by Consumers: Consumers should recognize the domain as
identifying the source of the brand’s goods or services, rather than merely acting
as a web address.
Example: The domain name "[Link]" is a registered trademark. As a unique
identifier of Amazon’s online retail services, it is not only a domain but also a globally
recognized trademark.
Legal Protection for Domain Names
1. Trademarks: If a domain name meets the trademark requirements, it receives
protection under trademark laws, allowing the owner to enforce rights against
infringement.
2. Domain Name Dispute Resolution: If it doesn’t meet requirement of
trademark, the Uniform Domain Name Dispute Resolution Policy (UDRP)
offers a process to resolve domain disputes involving cybersquatting (the practice
of registering domains identical or similar to a trademark to resell them at high
prices).
3. Anti-Cybersquatting Consumer Protection Act (ACPA): In the U.S., this act
enables brand owners to file suits against individuals who register domain names
in bad faith that are similar to established trademarks.
Important Case Laws
1. Yahoo! Inc. v. Akash Arora & Anr. (1999)
 Facts: Yahoo Inc., a global internet company, filed a case against Akash Arora,
who registered "[Link]" as his domain. Yahoo claimed that the domain
name was deceptively similar and could mislead consumers.
 Outcome: The Delhi High Court ruled in favor of Yahoo, stating that "yahoo"
had acquired trademark status through extensive use and was
recognized by consumers. The court granted an injunction, restraining Akash
Arora from using the domain name.
 Significance: This case established that domain names can serve as
trademarks if they have achieved consumer recognition and are used as brand
identifiers.
2. Rediff Communication Ltd. v. Cyberbooth & Anr. (2000)
 Facts: Rediff Communication filed a suit against Cyberbooth, which had
registered the domain name "[Link]." Rediff claimed the domain name was
phonetically similar and could mislead consumers.

Page 18 of 68
  Outcome: The Bombay High Court ruled that "Rediff" was a well-known
brand name in India, and consumers might be confused by the similar
domain. The court sided with Rediff, providing an injunction against Cyberbooth.
 Significance: This case reinforced that domain names can act as
trademarks, especially when they resemble established brands, as they can
mislead consumers and harm brand identity.
3. Satyam Infoway Ltd. v. Sifynet Solutions Pvt. Ltd. (2004)
 Facts: Satyam Infoway, the owner of domains like "[Link]" and
"[Link]," filed a lawsuit against Sifynet Solutions, who registered similar
domains. Satyam claimed these domains infringed on their established trademark
and confused consumers.
 Outcome: The Supreme Court of India ruled in favor of Satyam, recognizing
that domain names can serve as trademarks, especially when they are
unique and linked to specific services. The court granted an injunction to prevent
further use of the infringing domain.
 Significance: This landmark case by the Supreme Court clarified that domain
names could be legally protected as trademarks in India.
4. Coca-Cola Company v. Purdy (U.S. Case, 2005)
 Facts: Coca-Cola sued a cybersquatter, Purdy, who registered domains like
"[Link]" and "[Link]" and used them for non-commercial websites
promoting his views.
 Outcome: The court ordered Purdy to transfer the infringing domain names to
Coca-Cola, as they could lead to brand dilution and confusion among consumers.
 Significance: The case highlights that using domain names identical or
similar to trademarks, even for non-commercial purposes, can constitute
infringement, especially for well-known brands.
5. Panavision International, L.P. v. Toeppen (1998)
 Facts: Dennis Toeppen, a known cybersquatter, registered the domain
name "[Link]," intending to sell it to Panavision, a well-known camera
and film equipment company. Panavision filed a suit, claiming Toeppen was
attempting to profit by exploiting its trademark.
 Outcome: The U.S. Ninth Circuit Court ruled in favor of Panavision, holding that
Toeppen’s registration of the domain name constituted "trademark
dilution." The court found that using a famous brand as a domain with the intent
to sell it back constituted bad faith.
 Significance: This case set an important precedent in anti-cybersquatting,
supporting trademark owners in reclaiming domains registered in bad faith
and protecting their brand equity online.
6. Bally Total Fitness Holding Corp. v. Faber (1998) - "BallySucks" Case
 Facts: Faber created a website under the domain "[Link]," criticizing
Bally Total Fitness. Bally sued Faber, claiming trademark infringement and
dilution, arguing that the site tarnished its brand.
 Outcome: The court ruled in favor of Faber, stating that his use of the
domain constituted free speech and legitimate criticism, not trademark
infringement. The court found that a "sucks" domain used for non-commercial
criticism did not violate Bally's trademark rights.
 Significance: This case became a significant precedent for "gripe sites,"
affirming that using a trademark in domains to express criticism does not
necessarily infringe on the mark when it’s non-commercial.
7. Archdiocese of St. Louis v. Internet Entertainment Group (Papalvisit1999)
 Facts: Internet Entertainment Group registered "[Link]," a domain
coinciding with Pope John Paul II’s visit to St. Louis. The Archdiocese of St. Louis
argued that the domain could mislead the public and harm the Church's image if
associated with inappropriate content.
 Outcome: The court granted an injunction in favor of the Archdiocese, ordering
Internet Entertainment to relinquish the domain name. The decision was based on
the potential for public confusion and the importance of protecting religious
events from misuse.

Page 19 of 68
  Significance: This case underscored the court’s willingness to intervene
when domain names related to significant public events are exploited,
emphasizing the importance of public interest and preventing misuse of culturally
sensitive domains.
8. AR MANI vs. ARMANI
 Main Issue: The primary issue was whether the defendant’s use of "AR MANI"
infringed on the "ARMANI" trademark and whether it was likely to confuse
consumers by creating an association with the well-known "ARMANI" brand.
 Outcome: The court ruled in favor of Giorgio Armani S.p.A., stating that:
o Similarity in Phonetics and Appearance: The court found "AR MANI" to be
deceptively similar to "ARMANI" due to phonetic resemblance and minor visual
differences.
o Likelihood of Confusion: Even though the defendant's brand may not
offer identical products, the similarity in names could cause
consumer confusion, especially given the high recognition of the "ARMANI"
brand worldwide.
o Trademark Infringement: The court held that the defendant’s use of a
similar mark constituted trademark infringement, as it could dilute the
brand equity of "ARMANI" and harm its goodwill.
The court issued an injunction against the defendant, preventing them from
using "AR MANI" in any manner that could infringe upon the "ARMANI" trademark.
 Significance of the Case: This case underscores several important
principles in trademark law:
o Global Recognition and Goodwill: Well-known brands, like "ARMANI," have
extensive protection under trademark law, especially where public recognition
and reputation are at risk.
o Likelihood of Confusion: Even slight phonetic or visual similarities may be
sufficient to cause confusion and constitute infringement.
o Dilution of Brand Equity: Brands with a high reputation enjoy broader
protection against marks that could potentially dilute their brand value or
suggest an unauthorized association.

Key Differences: Domain Names as Trademarks vs. Domain Names as

Intellectual Property

Category Domain Name as Trademark Domain Name as Other IP

Must be distinctive and associated Any unique address representing
Criteria
with goods/services a business online
Protected under UDRP or national
Legal Protection Protected under trademark laws
domain laws
Requirement of Must be recognized as an identifier No specific requirement, can
Use by consumers simply be a web address
"[Link]" used as a trademark "[Link]" not
Example
for online auctions trademarked but a digital asset
Legal Recourse Trademark infringement suits, UDRP for domain name disputes;
for Disputes ACPA some national laws on domains

Typographical Cybersquatting (also called Typosquatting) is a form of

cybersquatting in which individuals register domain names that are intentionally
misspelled or mistyped versions of well-known brand names. This practice aims
to capture internet users who make minor typing errors when entering web addresses,
directing them to potentially malicious sites or sites that generate revenue through ads.
Key Features of Typographical Cybersquatting
1. Intentional Misspelling: The domain includes small spelling errors, such as
omitted letters or swapped characters (e.g., "[Link]" for "[Link]").

Page 20 of 68
 2. Deceptive Similarity: The goal is to make the fake domain resemble the
legitimate one closely enough to trick users.
3. Monetization or Malicious Use: Typosquatters often monetize through pay-per-
click ads or phishing schemes, or redirect users to competitors.
Examples
 "[Link]" or "[Link]" instead of "[Link]"
 "[Link]" instead of "[Link]"
 "[Link]" instead of "[Link]"
In each of these cases, a user making a small typographical error could land on a
fraudulent or malicious site instead of the intended one.
Important Case Laws
1. Microsoft Corporation v. Shah (2004):
o Facts: Microsoft sued a defendant for registering domains like
"[Link]" and "[Link]" which closely resembled Microsoft’s
trademarks.
o Outcome: The court ruled in favor of Microsoft, ordering the transfer of
domains to Microsoft, as they were designed to deceive users by exploiting
minor typing errors.
o Significance: This case demonstrated that registering similar-sounding or
similar-looking domains with the intent to mislead users is an infringement
on trademark rights.
2. Verizon California Inc. v. Navigation Catalyst Systems Inc. (2008):
o Facts: Verizon sued Navigation Catalyst for registering hundreds of
domains with slight misspellings of "Verizon," like "[Link]" and
"[Link]."
o Outcome: The court ruled in favor of Verizon, determining that Navigation
Catalyst engaged in typographical cybersquatting and acted in bad faith
by creating confusion.
o Significance: This case reinforced the Anti-Cybersquatting Consumer
Protection Act (ACPA) provisions, showing that even minor misspellings can
infringe on trademark rights if they cause confusion.
3. Yahoo! Inc. v. Zuccarini (2000):
o Facts: Zuccarini registered numerous domains that were misspelled
versions of "Yahoo!" such as "[Link]" and "[Link]."
o Outcome: The court ruled that Zuccarini engaged in typographical
cybersquatting, ordering him to stop using the domains and awarding
Yahoo damages.
o Significance: This case was among the early ones to address
typographical cybersquatting, establishing that it infringes upon trademark
rights and misleads consumers.
Reverse Cybersquatting: Explanation, Examples, and Case Laws
Reverse Cybersquatting, also known as Reverse Domain Name Hijacking, occurs
when a trademark holder attempts to take control of a domain name from a
rightful domain owner, often through legal threats or by filing a complaint, despite
the domain owner having legitimate rights to the domain. Instead of defending
their own trademark, the trademark owner seeks to use their trademark rights to take
over a domain name, sometimes by alleging that the domain is infringing on their brand.
Key Features of Reverse Cybersquatting
1. Targeting Legitimate Domain Owners: A trademark holder tries to take over a
domain even though the domain name owner acquired it in good faith and uses it
legitimately.
2. Misuse of Legal Processes: The trademark holder may misuse the Uniform
Domain-Name Dispute-Resolution Policy (UDRP) or similar legal mechanisms
to unfairly claim the domain.
3. Attempt to Deprive Ownership: The objective is to deprive the legitimate
owner of their domain name by leveraging trademark laws inappropriately.
Examples of Reverse Cybersquatting

Page 21 of 68
  A company called "BlueWave Tech," trademarked years after the domain
"[Link]" was legitimately registered and used by an individual for
unrelated purposes, files a UDRP complaint against the domain owner.
 A business registers a trademark similar to a generic domain like "[Link]"
and then attempts to seize the domain from the owner by claiming trademark
rights.
Important Case Laws
1. Lowe’s Companies, Inc. v. Loews Hotel Group (2002):
o Facts: Loews Hotels, which held a trademark for "Loews," filed a UDRP
complaint against Lowe’s Companies, a large retailer, over the domain
"[Link]." However, Lowe’s had registered the domain legitimately and in
good faith as it reflected its business name.
o Outcome: The UDRP panel ruled against Loews Hotels, finding that their
complaint constituted reverse domain name hijacking.
o Significance: This case underscored that holding a trademark does not
entitle a company to seize a domain name, especially if the domain
reflects the legitimate business interests of the registered owner.
2. Avery Dennison Corp. v. Sumpton (1999):
o Facts: Avery Dennison, known for office supplies, filed a complaint against
Sumpton, who owned the domain "[Link]" as part of a domain
registration service. Avery Dennison argued that Sumpton was infringing
on its trademark.
o Outcome: The U.S. Ninth Circuit Court ruled that Sumpton’s use of
"[Link]" was legitimate, as he was not targeting the Avery Dennison
brand specifically, and there was no intent to infringe.
o Significance: The case reinforced that a company cannot claim every
domain containing a word or name similar to its trademark, especially if
the name has other generic uses.
3. [Link], Inc. v. George Oates (2000):
o Facts: A company with interests in astronomy and "Planets" trademarks
attempted to claim the "[Link]" domain owned by George Oates,
who used the site legitimately for non-commercial purposes.
o Outcome: The court rejected the complaint, finding that Oates had
registered the domain in good faith and that the trademark holder was
attempting reverse cybersquatting.
o Significance: This case highlighted that generic or common terms in
domain names cannot be arbitrarily claimed by trademark holders if they
are already used in good faith by the domain owner.
Uniform Domain Name Dispute Resolution Policy (UDRP)
The Uniform Domain Name Dispute Resolution Policy (UDRP) is a globally recognized
procedure established by the Internet Corporation for Assigned Names and
Numbers (ICANN) to resolve disputes over domain names, particularly when
someone registers a domain that appears to infringe on a trademark.
1. What is UDRP?
 The UDRP is a policy adopted by ICANN that provides a legal framework for
resolving disputes between a domain name registrant and a third party
over the abusive registration and use of a domain name (commonly
referred to as "cybersquatting").
 It is used to resolve cases where a registered domain name is identical or
confusingly similar to a trademark or service mark in which the complainant
has rights, and the domain was registered and is being used in bad faith.
2. UDRP Criteria for Filing a Complaint
 For a UDRP complaint to succeed, the complainant must establish three main
elements:
1. Identical or Confusingly Similar: The disputed domain name is identical
or confusingly similar to a trademark or service mark in which the
complainant has rights.

Page 22 of 68
 2. No Legitimate Interest: The registrant has no rights or legitimate
interests in respect of the domain name.
3. Bad Faith Registration and Use: The domain name has been registered
and is being used in bad faith.

3. How Does the UDRP Process Work?

 Filing a Complaint: The complainant files a complaint with an ICANN-approved
dispute resolution service provider.
 Notification: The domain name registrant is notified of the complaint.
 Response Period: The registrant has an opportunity to file a response, usually
within 20 days.
 Panel Decision: An administrative panel reviews the submissions from both
parties and makes a decision, usually within 14 days.
 Implementation: If the panel rules in favor of the complainant, the domain name
will be transferred to the complainant or canceled, depending on the request. The
losing party has the option to challenge the decision in court.
4. Examples of Bad Faith Under UDRP
 Cybersquatting: Registering a domain name that is similar to a well-known
brand or trademark to sell it at a profit.
 Typosquatting: Registering misspelled versions of popular domain names to
capture traffic from users who mistype the URL.
 Registering Domain Names to Disrupt a Competitor's Business: This
involves registering a competitor's trademark as a domain to prevent them from
using it.
 Using the Domain Name to Attract Internet Users for Commercial Gain:
For example, using a famous brand's name to attract users to a website that sells
competing products.
5. Important Case Laws
 Panavision International v. Toeppen (1998): This was an early case that
helped shape the development of domain name dispute policies, where the
defendant registered the domain name "[Link]" and offered to sell it to
Panavision, a well-known camera and film company, for a substantial amount.
 Madonna Ciccone v. Dan Parisi (2000): The famous singer Madonna filed a
complaint under the UDRP to obtain the domain "[Link]." The panel found
that the domain was registered in bad faith because it was intended to profit from
Madonna's fame.
 Harrods Limited v. Harrod’s Closet (2001): The luxury retailer Harrods
succeeded in its complaint against a domain name registered by a small business
that used the term "Harrod's" in a way that suggested a connection to the well-
known brand.
 Bayerische Motoren Werke AG v. DMCL (2002): BMW won a dispute over the
domain name "[Link]," where the registrant was found to have no legitimate
interest and had registered the domain in bad faith.

 Reed Executive plc vs. Reed Business Information Ltd (2004)

 Summary: Reed Executive plc, a recruitment business, sued Reed Business

Information Ltd, a publishing company, over the use of the word "Reed" in
their business names and domain names. The dispute centered on whether
there was trademark infringement and confusion among the public regarding
the use of the word "Reed."
 Outcome: The court held that there was no likelihood of confusion
between the two companies’ services, even though they both used
the word "Reed." The court found that "Reed" was a common surname and
that the defendants were not infringing the plaintiff's trademark by using it in
a descriptive manner.
2. Interflora Inc. vs. Marks and Spencer Plc (2014)

Page 23 of 68
  Summary: Interflora, a flower delivery service, claimed that Marks and Spencer
(M&S) infringed its trademark by bidding on the keyword "Interflora" in
Google AdWords. When users searched for "Interflora," ads for M&S appeared,
potentially misleading customers into thinking that M&S was affiliated with or part
of the Interflora network.
 Outcome: The court ruled in favor of Interflora, finding that M&S’s use of the
"Interflora" trademark as a keyword constituted trademark infringement
because it could mislead consumers into believing there was a connection
between the two companies. This case set a significant precedent on the use
of trademarks in keyword advertising.
3. Playboy Enterprises, Inc. vs. Netscape Communications Corp. (2004)
 Summary: Playboy sued Netscape, a web browser company, and Excite, a search
engine, for selling banner ads triggered by searches for "Playboy" and
"Playmate," which led to ads from competitors appearing on the results
page. Playboy argued that this constituted trademark infringement and dilution.
 Outcome: The court ruled in favor of Playboy, finding that the practice of
displaying ads linked to Playboy's trademarked terms without clearly
distinguishing them from search results could confuse consumers into
believing that the ads were endorsed or associated with Playboy.
4. Rescuecom Corp. vs. Google Inc. (2009)
 Summary: Rescuecom, a computer repair service, sued Google for trademark
infringement for selling its trademark as a keyword in Google AdWords. When
users searched for "Rescuecom," competitors’ ads appeared, potentially causing
confusion.
 Outcome: The U.S. Court of Appeals for the Second Circuit ruled that Google's
practice of selling keywords related to trademarks constituted "use in commerce"
and could potentially lead to trademark infringement. The case was significant
because it opened the door for similar claims against search engines and set a
precedent for keyword advertising litigation.
5. 800-JR Cigar, Inc. vs. [Link], Inc. (2006)
 Summary: JR Cigar, a cigar retailer, sued [Link] (later known as Overture
Services, which was acquired by Yahoo) for selling its trademark "JR Cigar" as a
keyword in its search engine advertising program. This allowed competitors’ ads
to appear when users searched for JR Cigar.
 Outcome: The court ruled in favor of JR Cigar, finding that [Link]'s sale of the
"JR Cigar" trademark as a keyword for sponsored advertisements could constitute
trademark infringement and unfair competition, as it could mislead consumers
into clicking on competitors' ads.
6. Gulshan Khatri vs. Google Inc. (2011)
 Summary: Gulshan Khatri, an individual, filed a complaint against Google
regarding Google's AdSense program and claimed issues related to copyright
infringement and loss of revenue.
 Outcome: The case did not result in any significant ruling against Google, as
courts generally ruled in favor of the company. It did not lead to substantial legal
precedents in trademark or keyword advertising law.
7. Consim Info Pvt. Ltd. vs. Google India Pvt. Ltd. & Ors. (2013)
 Summary: Consim Info, an Indian online matrimony service (parent company of
Bharat Matrimony), sued Google and competitors for using its trademarked
terms as keywords in Google's AdWords program. Consim argued that this
practice infringed on its trademarks and led to unfair competition.
 Outcome: The Madras High Court directed Google to implement a "negative
keyword" policy for trademarked terms to prevent the unauthorized use
of trademarks in advertising. This ruling highlighted the issue of trademark
protection in the digital advertising space, especially in India.

Section 16(b) of the Companies Act, 2013: Rectification of Name of Company

Section 16 of the Companies Act, 2013 deals with the rectification of a company's name.
It specifies the procedure to be followed if a company’s name is identical to or resembles

Page 24 of 68
the name of another registered company or trademark, potentially causing confusion.
Section 16(b) focuses on the rectification process when such objections arise.
Key Provisions:
1. Objection Raised by Central Government:
o If, after registration, the Central Government is of the opinion that a
company's name is identical with or too closely resembles the name of an
existing company or a registered trademark, the company must change its
name.
o The objection must be raised within three years from the date of
incorporation or registration of the company.
2. Rectification Requirement:
o The company is required to comply with the directive to change its name
within a period of three months from the date of the order.
3. Procedure for Name Change:
o The company needs to pass a special resolution to change its name
and comply with the procedures laid down under Section 13 of the Act.
o It must notify the Registrar of Companies (RoC) about the change.
Important Case Laws:
1. Larsen & Toubro Ltd. vs. Lachmi Narain Trades and Others (1980):
o In this case, the court held that the name of a company should not deceive
or cause confusion in the minds of the public. It established the principle
that a company's name should not be identical or deceptively similar to an
existing company or trademark.
2. Telefonaktiebolaget LM Ericsson vs. Lava International Limited (2012):
o The Delhi High Court ruled that companies must choose names that do not
infringe on the rights of well-known trademarks, reinforcing the need to
avoid using names that could potentially cause confusion with established
brands.
3. ITC Limited vs. I.T.C. Hotels Limited (1990):
o The court directed the latter company to change its name to avoid
misleading the public, as ITC was a well-known name in the market and
could create confusion.
Section 16(b) thus helps protect the interests of existing companies and trademark
owners by preventing misleading or confusing company names.
------------------------------------------------------------------------------------------------------------
------------------------

Internet and Copyright Law

1. Growth of the Internet and Its Legal Implications

• The Internet, often called an "information superhighway," has evolved into a

global network for sharing intellectual property.
• By 2012, over 2.4 billion users were online, increasing copyright challenges,
especially in digital formats.
• Copyright law has struggled to adapt to the unique nature of digital copies and
transmissions.

Implications
This rapid expansion raises significant questions about how copyright law applies to the
vast amounts of content shared online. As more users engage with digital content,
the potential for copyright infringement increases, necessitating a re-evaluation of
existing legal frameworks.
2. Concept of the Internet
The Internet is often described as a “network of networks,” facilitating the
transfer of intellectual property across interconnected public
telecommunication networks. This decentralized nature means that no single

Page 25 of 68
 entity controls the Internet, leading to what some describe as “information
technology communications anarchy.”
Legal Understanding
For lawmakers and content creators, understanding the technology and its implications is
crucial. The Internet allows for the easy access, retrieval, and distribution of
content, which complicates the enforcement of copyright laws that were
originally designed for physical media.
3. Ubiquitous Nature of Copies

• Data transmitted via the Internet creates multiple interim copies (e.g., in
routers, RAM).
• This differs from physical objects, where "copies" are distinct and countable.
• Copying is fundamental to Internet communication, raising legal questions
about transient copies.

Conceptual Challenges
Unlike physical documents, which can be distinctly identified as originals or
copies, digital documents exist as binary data that can be stored in
multiple locations. This blurs the lines between original works and copies,
complicating copyright enforcement.
4. Copyright Implications
The 2012 amendments to Indian Copyright Act aimed to align Indian law with
international treaties like the WIPO Copyright Treaty (WCT) and the WIPO
Performances and Phonograms Treaty (WPPT). World Intellectual Property
Organization (WIPO)
5. Functional Parameters of the Internet

a) E-mail: Sending an e-mail itself does not violate copyright. However, if

someone sends copyrighted material (like music, text, or images)
through e-mail to others, it constitutes an unauthorized reproduction and
communication of copyrighted content, thus violating the copyright
owner’s rights.

b) Bulletin Boards:
o A bulletin board is an online platform where users can "post"
messages or articles, which are then automatically forwarded to other
users or accessed directly.
o Users who upload or download copyrighted material without
consent violate copyright law, unless exceptions or limitations apply.
o Bulletin board operators can also be held liable for facilitating
illegal distribution of copyrighted material.
c) Access to Information: The use of File Transfer Protocol (FTP) and web browsing
raises questions about the legality of accessing and storing copyrighted materials.
d) Browsing and Copyright: Browsing the Internet creates temporary copies of
content in a user’s device memory (RAM).
o According to section 17 (6) of UK Copyright Designs and Patents Act,
1988 and decision in the MAI case from the United States, online browsing
amounts to reproduction.
o According to EC Directive browsing, resulting in transient copy on RAM,
having no economic significance, is exempted from the reproduction
right.
o US Court in Religious Technology Center Vs Netcom: Browsing digital
works is generally considered fair use if it's not for commercial
purposes or depriving the copyright owner of profits.
o Amendments: Section 52(b) of the Indian Copyright Act (2012) exempts
transient copies created for technical transmission.

Page 26 of 68
 oStorage for private or personal use including research (for offline
browsing), would be covered by the doctrine of fair dealing under
Explanation to section 52 (a) inserted by the amendments of 2012.
e) Caching:
o Caching involves storing website content temporarily to improve browsing
speed and reduce network congestion.
o Cached versions may continue to circulate even after a site owner removes
infringing or defamatory content. Users could bypass restrictions, sharing
paid content with unauthorized users by downloading it to a proxy server.
o To protect content, creators can use technological measures, such as
password protection, to control access and prevent unauthorized
reproduction.

f) Linking: Refers to references to Internet addresses without original

content and is a key tool for information sharing on the Internet. Key points:
 Links can be created without the knowledge or consent of the linked
document's author.
 Using a link does not create a copy of the web page on the user's
computer or the web author's server.
 Links are similar to references in other works and are considered facts, not
copyrightable. However, compilations of links with original
descriptions can be copyrighted. Legal Cases:

• Shetland Times Ltd. v. Dr. Jonathan Wills and Zet News Ltd: Linking
directly to articles in Shetland Times webpage, ZetNews benefited from the
Shetland Times’ work without proper attribution or authorization. The
court issued a temporary restraining order ruling that the use of the
headlines constituted a prima facie case of copyright infringement
which could potentially result in a loss of advertising revenue for
The Shetland Times

 Ticketmaster v. [Link]: The court ruled that hyperlinking does not

violate copyright as no copying is involved.

g) Framing: Embedding another website’s content in one’s own, often leading to

disputes over unauthorized reproduction. All cases have ended in out of
court settlements, whose terms probably have been dictated by the balance
of powers between the parties rather than facts, or technology.

h) Offline Web-browsing:
o Involves downloading and storing website content on a client's
computer for later use without an active Internet connection.
o Used generally by schools owing to limited resources and to prevent
access to objectionable materials.
o Raises copyright issues, as it involves storing data, which is an
exclusive right of the author. However, storage for private or personal
use, including research, may be permissible.

The Right of Reproduction - Transient copies made during transmission

1. European Union: Temporary, transient reproductions essential for technological
processes are not copyright infringement.
2. United Kingdom: The 1988 Act considers even temporary or incidental
copies of any work as copying. However, proving that such transient
copying has occurred can be challenging.
3. United States:

Page 27 of 68
  Courts have varied in their rulings on whether temporary copies in RAM
constitute infringement.
 The MAI Systems Corp vs Peak Computer Inc case held that loading
software into RAM creates a copy, while other cases like Apple
Computer Inc. v. Formula International and Lewis Galoob Toys, Inc. v.
Nintendo of America Inc. image of data stored in RAM may not qualify as
"copy "
 The Digital Millennium Copyright Act (1998) provides exceptions for
certain copies to avoid infringement.
4. India: Sections 52(b) and (c) of the 2012 Amendment Act exempts transient
copies from being considered infringement.

6. Liability of Internet Service Providers (ISPs)

A significant portion of the debate around Internet copyright revolves around the liability
of ISPs. The document discusses various theories of liability:
 Direct Infringement: This occurs when an ISP itself engages in activities
that violate copyright laws, such as hosting infringing content. Case Law:
Playboy Enterprises v. Frena (1993) - A bulletin board operator held liable for
allowing users to distribute copyrighted images.
 Contributory Infringement: ISPs may be liable if they knowingly contribute
to the infringement of another party. This can include facilitating access to
infringing content or failing to act when aware of such activities.
o Case Law:
 A & M Records v. Napster (2001) - Found liable for not policing infringing
activities.
 Sega Enterprises Ltd. v. MAPHIA - Found liable for encouraging
infringing activities
 Vicarious Infringement: This theory applies when an ISP benefits financially
from infringing activities and has the ability to control those activities.
Importantly, knowledge of the infringement is not always required for
vicarious liability.
o Case Law: Super Cassette Industries v. MySpace (2011) - Indian courts
held MySpace liable under Section 51(a)(ii) for hosting infringing content.

Indian IT Act, 2000, and the Copyright Act impose obligations on intermediaries to
act on notices of infringement.

Case Studies
Several landmark cases illustrate these principles:
1. Playboy Enterprises Inc. v. Frena: The court held the operator of a
bulletin board liable for distributing copyrighted photographs from
Playboy, even though the operator did not upload the images himself. This case
established that merely making copies available can constitute infringement.
2. Religious Technology Center v. Netcom: This case ruled that an online
service provider (OSP) could not be held liable for direct infringement if
it had no knowledge of the infringing activity. The court emphasized that absent
any volitional act by the OSP, liability would be unreasonable.
3. Sega Enterprises Ltd. v. MAPHIA: The court refused to hold a bulletin
board service (BBS) operator directly liable for unauthorized copying of
Sega’s video games, but found the operator liable for contributory
infringement due to encouraging such activities.
4. A & M Records v. Napster: Napster was found liable for contributory
infringement for facilitating the sharing of copyrighted music files. The
court determined that Napster had a duty to take reasonable steps to
prevent further distribution of infringing works after being notified.
5. Super Cassette Industries v. Myspace Inc.: In this case, the Delhi High Court
addressed the liability of a social networking site for user-uploaded

Page 28 of 68
 content. The court ruled that the site could be held liable for copyright
infringement if it permitted users to upload infringing material for profit
(vicarious liability).
6. Perfect 10 Inc. v. [Link]: The court ruled that providing HTML
instructions to access images does not constitute copyright
infringement, as it does not involve making a copy. This case clarified the
legal status of linking and framing in relation to copyright.
7. International Treaties and National Laws
The WCT and WPPT were established to address the challenges posed by digital
technologies. These treaties emphasize the need for countries to provide legal
protections against the circumvention of technological measures used to protect
copyright.
National Implementation
Countries like the United States and India have enacted laws to comply with these
treaties:
 Digital Millennium Copyright Act (DMCA): Provides safe harbors for ISPs
under certain conditions.
 Indian Copyright Amendment Act (2012): Introduced provisions (Sec 65A) to
protect rights management information and prevent circumvention of
technological measures.
8. Technological Protection Measures
1. Digital Rights Management (DRM):
o Copy Control Flags: Digital bits embedded in content that indicate
whether copyright is authorized, controlling the number of copies or
viewing duration.
o Serial Copy Management System (SCMS): Prevents copying from
copies.
o Encryption: Scrambles content to restrict unauthorized access.
2. Access Control:
o Password Protection: Limits access to authorized users.
o Identification: Verifies devices and users for compliance.
3. Watermarking: Embeds information in content for tracking and rights
management.
4. Rights Management Information (RMI): Information that identifies the
work, author, and copyright owner, which must be preserved to ensure
proper rights management.
5. Anti-Circumvention Laws: Prohibit bypassing technological protections, with
penalties for violations.
Balancing Rights and Access
While these measures aim to protect copyright holders, they also raise concerns about
user rights and fair use. The challenge lies in finding a balance between
protecting intellectual property and allowing legitimate access to content.

• Section 52(a): Private and educational uses are non-infringing.

• Section 52(b): Transient or incidental storage exempted.

Case Law: Netcom On-Line Communications (1995) - Browsing as fair use unless it
causes economic harm
9. Jurisdictional Issues
The global nature of the Internet complicates jurisdictional matters. Questions arise
regarding:
 Jurisdiction to Adjudicate: Where can a copyright dispute be legally addressed?
 Applicable Law: Which country’s laws apply in a cross-border dispute?
 Enforcement of Judgments: How can judgments be enforced internationally?
Jurisdictional issues are often resolved through principles of private international law,
which vary by country. Some regions have harmonized these rules through treaties, while
others rely on principles of international comity.

Page 29 of 68
--------------------------------------------------------------------------------------------------------------------------

Fundamental Principles of Copyright Law – Class Lecture

• Scope: Protects expressions of creativity in traditional (books, music, art) and

modern formats (software, databases, films).
• Balance:
• Protects authors’ rights (exclusive rights to reproduce, adapt, and distribute).
• Promotes public access through fair use.

Copyright protects expression, not ideas, themes, or facts. Case Law: R.G. Anand v.
Deluxe Films (1978):

• Facts: A play (Hum Hindustani) alleged to be copied in a movie.

• Ruling: No copyright in ideas; infringement occurs only if the form and expression
are substantially copied.
• Test: Whether the audience perceives the new work as a clear imitation.

Originality in Copyright
Categories of Works:

1. Original Works: Created independently (e.g., paintings, novels).

2. Derivative Works: Based on existing works but modified with skill, judgment,
and labour (e.g., compilations, databases).

Tests for Originality:

1. Sweat of the Brow Doctrine (Pre-2008):

• Protection granted based on effort and labour, irrespective of creativity.
• Case Law:
• Gopal Das v. Jagannath Prasad (1938): Compilations revised with
effort are original.
• Burlington Home Shopping v. Rajnish Chhibber (1995): A
database of customer addresses deemed original.

2. Modicum of Creativity (Post-2008):

• Introduced by Eastern Book Co. v. D.B. Modak (2008).
• Issue: Copyright claimed over copy-edited Supreme Court
judgments.
• Ruling: The court held that EBC’s editorial contributions,
including headnotes, summaries, and material arrangement,
demonstrated sufficient skill, judgment, and creativity,
qualifying them for copyright protection under the modicum of
creativity standard

Key Case Examples:

• University of Oxford v. Narendra Publishing House (2008):

• Facts: Guidebooks using textbook questions.
• The Delhi High Court ruled in favor of the University of Oxford,
emphasizing the importance of protecting intellectual property rights and
the need to balance fair use with copyright protection
• Emergent Genetics v. Shivam (2011): DNA sequences lack originality as
they are extrapolated from nature. The Delhi High Court found that Emergent
Genetics did not establish a strong case for copyright protection over
the DNA sequences of their hybrid seeds.

Page 30 of 68
Remedies for Copyright Violations

Exclusive Rights: Section 14 grants rights like reproduction, distribution, performance,

and adaptation.

Types of Remedies:

1. Injunctions:
• Courts frequently issue injunctions to prevent further copyright
infringement.
• Case Law: Ravinder Singh v. Evergreen (2018): Reproduction of
question papers without transformation led to an injunction.
2. Digital Enforcement:
• Blocking Rogue Websites:
• Case Law: Star India v. Haneeth Ujwal (2014): Entire websites
with infringing content blocked, not just specific URLs.
• Dynamic Injunctions:
• Case Law: UTV Software v. 1337X (2019): Injunctions
automatically extended to mirror websites to counter evasion
tactics.

Intermediary Liability:

• Digital platforms can claim "safe harbour" under Section 79 of the IT Act, but
only if they act upon infringement notices.
• Case Law: Myspace v. Super Cassettes (2016):
• Active platforms facilitating infringement cannot claim protection.

Fair Use/Fair Dealing

• Permits limited use of copyrighted works for purposes like education,

criticism, and reporting.
• Balances authors’ rights with public interest.

Indian Approach (Section 52):

1. Private Use: Includes research, education, and examination purposes.

• Case Law: University of Oxford v. Rameshwari Photocopy Services
(2016): Course packs for educational institutions deemed fair
dealing. The court emphasized that the use of copyrighted works to create
course packs was for non-commercial and non-profit educational
purposes, directly benefiting students and enhancing access to education.
The judgment was celebrated as a landmark case advocating
affordable access to education in India.

2. Criticism and Review:

• Case Law: India TV v. Yashraj Films (2013): Brief use of songs during
interviews upheld as fair use (de minimis doctrine applied - it implies
that minor or negligible use of copyrighted material, which does not cause
harm to the copyright owner, may not amount to infringement).

3. Current Affairs and Reporting:

• Case Law: ESPN v. Global Broadcast News (2008): Clips of cricket
matches for news reporting allowed; full-length programs prohibited.

Page 31 of 68
Judicial Standards:

• Courts consider:
• Purpose: Non-commercial, public interest.
• Extent: Only essential portions used.
• Impact: Minimal effect on the market for the original work.

Evolving Issues in Copyright

1. Technological Challenges:
• Mirror websites, unauthorized online distribution, and intermediary roles.
• Case Law: Swami Ramdev v. Facebook (2019):
• Indian courts can order global takedowns if the infringing
content originates in India.

2. Fair Use in Education:

• Courts lean towards access over protection for educational materials.
• Case Law: University of Cambridge v. B.D. Bhandari (2011):
Guidebooks allowed for their transformative nature.

3. Commercial Use and Limits:

• Unauthorized commercial exploitation is not protected under fair use.
• Case Law: Tips Industries v. Wynk Music (2019): Commercial renting of
sound recordings violated copyright.

Copyright Issues in AI-Generated Content

1. Ownership of AI-Generated Works: It was concluded that works created

entirely by AI cannot be copyrighted unless there is human authorship
involved. The US Copyright Office has ruled that copyright protection requires a
human creator, which means that purely AI-generated content lacks the
necessary criteria for copyright.
2. Infringement Concerns: There are ongoing debates about whether AI tools
infringe on existing copyrights when they generate content based on learned
data. The discussion pointed out that if an AI model uses copyrighted
material to produce new outputs, it could potentially violate the
copyright of the original works.
3. Legal Ambiguities: The conversation acknowledged that the legal landscape
surrounding AI and copyright is still evolving. Courts are grappling with conflicting
rulings, and there is no definitive answer yet regarding the extent of
copyright infringement by AI-generated content.
4. Fair Use Considerations: The concept of fair use was mentioned, particularly in
the context of AI learning from existing works. However, the application of fair
use in these scenarios remains complex and is subject to legal
interpretation.
5. Future Implications: The discussion suggested that as AI technology advances,
there will likely be more legal challenges and clarifications needed regarding
copyright laws and AI-generated content.
------------------------------------------------------------------------------------------------------------
-------------------

Patents

Patent Law Fundamentals

a) Definition of Patent: A patent grants exclusive rights for inventions for 20
years from the application date.

Page 32 of 68
b) Criteria for Patentability:
i. Novelty: An invention must be new and not previously disclosed to
the public. This means that it cannot be a mere modification of an
existing product or process. For example, if a pharmaceutical company
slightly alters a drug's composition to extend its patent life, this is often
scrutinized under the concept of "evergreening," which is generally not
permitted.
ii. Inventive Step: The invention must involve an inventive step that is
not obvious to someone skilled in the relevant field. This means that
the invention should provide a solution that is not readily apparent
based on existing knowledge. For instance, if a new method for
synthesizing a compound is developed, it must be shown that this method
is not something that a skilled person in the field would have easily
deduced.
iii. Industrial Applicability: The invention must be capable of being
used in some kind of industry. This does not mean it has to be
currently applied, but it should at least be theoretically applicable. For
example, a scientific discovery that has potential applications in medicine
or technology can qualify, even if it hasn’t been commercialized yet.
c) Evergreening: The concept of evergreening was explained in detail, particularly
in the context of pharmaceutical patents, where slight modifications to existing
drugs are made to extend patent protection. This practice is often scrutinized by
courts.
d) Exclusions from Patentability

1. US
• Three specific categories not patentable - “laws of nature, physical
phenomena and abstract ideas”
• Computer Program - difference needs to be drawn whether the
computer program is an application of an abstract idea or an abstract idea
itself. Application of an abstract idea alone is patentable.

o Legal Tests for Patentability

Machine or Transformation Test: This test is often used to determine
whether a process is patentable. It involves two parts:
a) Machine Implementation: The process must be implemented
using a specific machine or apparatus in a non-trivial way.
b) Transformation: The process must transform an article into a
different state or thing. This means that the end result of the
process must be significantly different from the starting point.

2. UK

o Patentable Inventions: To be patentable, an invention must be new,

involve an inventive step, and be capable of industrial application
o Exclusions: Certain things are not patentable, including discoveries,
scientific theories, mathematical methods, literary, dramatic, musical
or artistic works, and methods for performing a mental act, playing a
game, or doing business

3. Europe
a. Article 52(2)(c) and (3) of the European Patent Convention does not
recognize granting of patent protection to computer programs
claimed ‘as such’.
b. A Computer Invented Implementation (CII) patent may be
granted if the program solves a technical problem in a novel and
non-obvious manner. Emphasis has always been placed on the fact

Page 33 of 68
 that for patent protection in Europe, inventions must have a
technical character associated with it.
4. India

a) Mathematical Methods and Algorithms: Under Section 3(k) of the

Indian Patents Act, mathematical methods, business methods,
and computer programs per se are not patentable. This means
that while the application of an algorithm in a novel way might
be patentable, the algorithm itself cannot be patented.
o Delhi High Court in Ferid Allani v. Union of India: Delhi
High Court ruled that computer-related inventions
demonstrating a technical contribution or technical
effect are patentable, even if they are based on a computer
program. This decision emphasized a more balanced approach
to software patenting in India, interpreting Section 3(k) of the
Patents Act
b) Abstract Ideas: Similar to mathematical methods, abstract ideas
cannot be patented. The distinction lies in whether the idea is
applied in a practical, novel manner. For instance, a new method
of encrypting data could be patentable if it solves a specific
technical problem, but a general algorithm for encryption would not
qualify.
e) Important Case Laws
a) US Copyright Office Ruling (2022): Clarifies that AI-generated works
cannot be copyrighted without human authorship.
b) Diamond v. Diher: the U.S. Supreme Court ruled that a process for
curing synthetic rubber, which involved the use of a
mathematical formula and a digital computer, was patentable.
The Court held that the process was not merely an abstract
mathematical formula but a practical application that transformed an
article into a different state or thing
c) Microsoft vs. Director General of Patents: A recent case where the
Delhi High Court upheld a patent for a user authentication
process, emphasizing the need for technical solutions to real-world
problems.
1. Copyright Protection of Computer Programs in the UK

Under the UK Copyright, Designs and Patents Act 1988, computer programs are
protected as literary works. This means:

 Automatic protection: Copyright arises automatically when a program is

created, without the need for registration.
 Rights granted: The author (or employer, if created in the course of
employment) has exclusive rights to reproduce, adapt, distribute, and
communicate the software.
 Duration: Copyright typically lasts for 70 years after the death of the author.

Section 17(6) of the Act, which clarifies that even temporary copies of software (e.g., in
RAM during browsing) may constitute reproduction. However, EU and UK law provide
exceptions for transient copies that have no economic significance.

2. Patentability of Computer Programs in the UK

Per UK Patents Act 1977 computer program is not patentable “as such”. Software is
not patentable if it merely performs a business method or abstract idea on a computer.
Software may be patentable if it makes a technical contribution like improving the
internal functioning of a computer or controlling a technical process.

Page 34 of 68
1. Copyright Protection (India & USA)

In both India and the USA, computer programs are protected under copyright law
as literary works:
 India: Under the Copyright Act, 1957, software is protected as a literary work.
Copyright arises automatically upon creation and provides the author with
exclusive rights to reproduce, adapt, and distribute the work.
 USA: Similarly, under the U.S. Copyright Act, software is protected as a literary
work. The protection covers the expression of the idea (i.e., the code), but not
the underlying idea, algorithm, or functionality.
Copyright protects the expression of the software, not the functionality.

2. Patentability of Computer Programs

India

 Indian Patents Act, 1970 excludes “a mathematical or business method or a

computer program per se or algorithms” from patentability.
 The Delhi High Court in Ferid Allani v. Union of India (2019) if a computer program
demonstrates a technical effect or technical contribution, it may be
patentable.

USA

 The U.S. allows software patents provided the invention is novel, non-
obvious, and useful.
 Key Precedents:
o Alice Corp. v. CLS Bank International (2014): The U.S. Supreme Court ruled
that abstract ideas implemented on a computer are not patentable unless
they involve an “inventive concept.”

 Current Practice: The U.S. Patent and Trademark Office (USPTO) grants software
patents if they demonstrate a practical application and are not merely abstract
ideas.
In contrast to India, the USA has a more permissive approach, though still bounded
by the “abstract idea” doctrine.

Copyright Protection

Aspect UK India USA

Legal Copyright, Designs and
Copyright Act, 1957 U.S. Copyright Act
Basis Patents Act 1988
ProtectionComputer programs are
Same as UK Same as UK
Type protected as literary works
Yes, but registration is
Automatic Yes, no registration
Yes, no registration required recommended for
? required
enforcement
Protects source code, object Protects code, structure,
Protects code and
Scope code, structure, and and user interface
documentation
expression elements
70 years after author’s 60 years after 70 years after author’s
Duration
death author’s death death

Page 35 of 68
Patentability of Computer Programs

Aspect UK India USA

Patents Act, 1970
Legal Basis Patents Act 1977 35 U.S.C. § 101
(Section 3(k))
Patentable if not an
Not patentable “as such” Not patentable “per
abstract idea and
General Rule unless it provides a se”; must show
includes an inventive
technical contribution technical effect
concept
Aerotel/Macrossan 4-step Ferid Allani case: Alice test: abstract
Key Tests test; “technical technical effect or idea + inventive
contribution” requirement contribution is key concept
Embedded software Algorithms with
Examples of Software that improves
with hardware practical application
Patentable computer performance or
interaction or technical or technical
Software controls a technical process
advancement improvement
More liberal;
Patent Office Conservative; aligned with Conservative; prefers
software-only patents
Approach EPO hardware tie-in
possible

------------------------------------------------------------------------------------------------------------
--------------------

Legal Framework Governing Banking in India

Key Statutes:
1. Reserve Bank of India Act, 1934 (RBI Act)
2. Banking Regulation Act, 1949
3. Payment and Settlement Systems Act, 2007
4. Various RBI Circulars
Reserve Bank of India Act, 1934
Key Sections:
 Section 3: The RBI is constituted for taking over the management of
currency from the central government and carrying on the business of banking
in accordance with the provisions of this act.
 Section 6: Offices of the RBI. Specifies the locations of RBI offices and general
provisions on the appointment of the Governor, Deputy Governors, and Directors.
 Section 17: Lists the businesses the RBI can conduct. Includes issuing
banknotes, maintaining reserves, acting as the banker to the government, and
regulating the monetary policy. The section provides a comprehensive list of 16
items, including residuary powers to perform all necessary functions.
 Section 20: RBI transacts government business. The RBI accepts money for
and on behalf of the central government, making it the government's banker.
 Section 22: RBI's right to issue banknotes. Grants the RBI the exclusive right
to issue banknotes in India.
 Section 24: Denomination of currency notes. Specifies the denominations of
currency notes, starting from ₹2 up to ₹10,000.
 Section 25: Design and material of banknotes. The RBI decides the design and
material of banknotes, subject to the approval of the central government.
 Section 26: Legal tender character of banknotes. Defines the legal tender
status of currency notes, making them a promise to pay the bearer the
specified amount. For any money to be recognised or to be able to use money, it
has to be recognised as a legal tender as per the law.
 Chapter 3A: RBI's power to collect credit information. Allows the RBI to collect
credit information from financial institutions to monitor and regulate credit in the
economy.

Page 36 of 68
  Section 45: RBI's power to regulate non-banking financial institutions.
Grants the RBI overriding powers to regulate non-banking financial institutions,
ensuring monetary policy stability.
RBI's Role in Inflation
1. Monetary Policy Committee (MPC): The MPC was set up under the RBI Act in
2021. The main aim of the MPC is to regulate inflation in the country. The
committee consists of the Governor of the RBI, the Deputy Governor, and
some nominated members from the Central Board of the RBI.
2. Inflation Targeting: The MPC is responsible for determining the inflation
target in terms of the Consumer Price Index (CPI). The MPC determines
the policy rate required to maintain inflation targets in the country. The
introduction of the monetary policy chapter aims to have some accountability
on how inflation is managed in the economy.
3. Monetary Policy Tools:
 Repo Rate: The RBI controls the repo rate, which is the rate at which
commercial banks borrow money from the RBI against govt securities.
Adjusting the repo rate influences short-term liquidity and inflation.
(Comm Bks -- Gov Sec – S.T. rate)
 Bank Rate: The bank rate is the interest rate at which RBI lends money (in
form of short-term loans) to domestic banks. The bank rate affects the
cost of borrowing for banks and, consequently, the long-term interest
rates for consumers and businesses. (Domest Bks – ST Loans – L.T. rate)
4. Overriding Powers:
 Section 45: The provisions of the RBI Act, especially the chapter on
monetary policy, have overriding effect on all other laws/ provisions. This
ensures that the RBI's decisions on monetary policy, including inflation
control, take precedence.
Key Functions of the Reserve Bank of India (RBI)
1. Monetary Authority:
 Formulation and Implementation of Monetary Policy: The RBI
formulates and implements monetary policy to maintain price stability
and ensure adequate flow of credit to productive sectors.
 Inflation Targeting: Through the Monetary Policy Committee, the RBI
targets inflation to ensure economic stability.

2. Issuer of Currency:
 Issuance of Banknotes: The RBI has the sole authority to issue banknotes
in India, ensuring an adequate supply of clean and genuine currency.
 Currency Management: The RBI manages the design, production, and
distribution of currency notes.

3. Regulator of the Financial System:

 Regulation and Supervision of Banks: The RBI regulates and supervises
commercial banks, cooperative banks, and non-banking financial companies
(NBFCs) to ensure the stability and soundness of the financial system.
 Prudential Norms: The RBI sets prudential norms for capital adequacy,
asset classification, and provisioning to ensure the financial health of banks.

4. Manager of Foreign Exchange:

 Foreign Exchange Management: The RBI manages the Foreign Exchange
Management Act (FEMA) to facilitate external trade and payments and
promote orderly development and maintenance of the foreign exchange
market.
 Foreign Exchange Reserves: The RBI maintains and manages the
country's foreign exchange reserves.

5. Developmental Role:

Page 37 of 68
  Financial Inclusion: The RBI promotes financial inclusion by ensuring
access to banking services for all sections of society.
 Development of Financial Markets: The RBI develops and regulates
financial markets, including money, government securities, and foreign
exchange markets.

6. Regulator of Payment and Settlement Systems:

 Payment Systems Oversight: The RBI regulates and oversees payment
and settlement systems to ensure their safety, efficiency, and accessibility.
 Innovation in Payment Systems: The RBI promotes innovation in
payment systems, such as the introduction of the Unified Payments
Interface (UPI).

7. Consumer Protection:
 Grievance Redressal: The RBI provides mechanisms for addressing
consumer grievances related to banking services.
 Financial Literacy: The RBI promotes financial literacy to empower
consumers to make informed financial decisions.

Regulating Virtual Currency

1. Initial Attempts at Regulation
 2013 Warning: The RBI began its regulatory efforts in 2013 by issuing a
warning that cryptocurrencies are not legal tender in India. The RBI
cautioned the public about the risks associated with virtual currencies, including
their lack of backing by any central authority.

 Expansion of Powers: The RBI's authority to regulate virtual currencies

stems from amendments to the RBI Act in 2016, which expanded its
scope to include broader monetary policy aspects. This allowed the RBI to
issue directives beyond traditional banking, including those related to
cryptocurrencies.

2. 2018 Circular
 Prohibition on Regulated Entities: In 2018, the RBI issued a circular
prohibiting entities regulated by it from dealing with or providing
services for virtual currencies. This included banks, payment system
providers, and non-banking financial companies (NBFCs).

 Indirect Ban: The circular did not directly ban cryptocurrencies but
restricted regulated entities from facilitating transactions involving
virtual currencies. This effectively limited the ability of individuals and
businesses to use cryptocurrencies within the formal financial system.

 Supreme Court Ruling: The Supreme Court of India struck down the 2018
circular in 2020, stating that the RBI's action was disproportionate and
lacked sufficient evidence of harm. The court ruled that the RBI had not
provided enough material to justify a complete prohibition on dealing with
virtual currencies.

3. Current Status and Future Outlook

 No Prohibition, No Regulation: As of now, there is no prohibition on dealing
with virtual currencies in India, but there is also no specific regulation
governing their use. This creates a legal gray area for individuals and businesses
involved in cryptocurrency transactions.

 Pending Litigation: A public interest litigation (PIL) is pending before the Delhi
High Court, seeking to declare cryptocurrencies as illegal. The outcome of this

Page 38 of 68
 case could have significant implications for the future regulation of virtual
currencies in India.

 Potential for New Circulars: The Supreme Court's ruling does not prevent the
RBI from issuing new circulars to regulate cryptocurrencies. The RBI may issue
new guidelines or directives in the future to address the regulatory challenges
posed by virtual currencies.

Customer Protection
1. Guidelines for Unauthorized Transactions
 Zero Liability: Customers have zero liability in cases of unauthorized
transactions if the loss is due to:
o Bank's Negligence: For example, if a bank employee mishandles a
customer's password or if the bank's systems are hacked due to
inadequate security practices.
o Third-Party Breach: If the unauthorized transaction is due to a breach by
a third party and the customer reports it within 3 working days of
becoming aware of the transaction.
 Limited Liability: Customers may have limited liability if they report
unauthorized transactions within 4 to 7 working days. The liability is
capped based on the type of account and the amount involved.

2. Bank's Responsibilities
 Robust Systems: Banks are required to have robust systems and
procedures to prevent unauthorized transactions. This includes
mandatory registration for SMS alerts and 24/7 access for reporting
unauthorized transactions.
 Immediate Response: Banks must provide an immediate response to
customers reporting unauthorized transactions, including an auto-response
acknowledging the complaint with a registered complaint number.

3. Customer Negligence
 Full Liability: Customers bear full liability for losses due to their
negligence, such as sharing payment credentials or OTPs (One-Time Passwords).
For example, if a customer shares their OTP with a fraudster, they are responsible
for the resulting loss.
 Proving Negligence: In cases of dispute, the burden of proof lies with the
bank to demonstrate that the customer was negligent. The circular protects
consumers by requiring banks to prove customer negligence.

4. Resolution and Reversal

 Shadow Reversal: Banks are required to provide a shadow reversal of the
disputed amount within 10 days of receiving the complaint. This means the
amount is temporarily credited back to the customer's account while the
investigation is ongoing.
 Discretion to Waive Liability: Banks have the discretion to waive customer
liability even in cases of customer negligence, especially for small amounts
or if the customer has a good relationship with the bank.

5. Legal Recourse
 Banking Ombudsman: Customers can approach the Banking Ombudsman for
resolution of disputes related to unauthorized transactions. The Ombudsman is
required to resolve complaints within 90 days.
 Consumer Protection: Customers can also file a complaint with the Consumer
Protection Forum or pursue legal action in civil courts, depending on the value of
the transaction and the nature of the dispute.

Page 39 of 68
  Information Technology Act: In cases involving hacking or other cybercrimes,
customers can seek recourse under the Information Technology Act by
approaching the adjudicating officer appointed in each state.

Banking Regulation Act, 1949

Key Definitions:
 Banking: Accepting deposits for lending or investment, repayable on demand or
otherwise, and withdrawable by check, draft, order, or otherwise.
 Banking Company: A company that transacts the business of banking. Does not
include isolated instances of lending money. Accepting deposits or debentures
from public also does not make the company a banking company since the
deposits are for use in business/ trading and not for purpose of lending to others.
 Banking Policy: Refers to guidelines by the Reserve Bank to ensure the
stability and growth of the banking system and the economy. These policies
consider the interests of depositors, the amount of deposits and resources banks
have, and aim to allocate and use these resources efficiently and fairly.
Key Sections:
 Section 2: Application of other laws. The provisions of this act are in addition to
and not in derogation of the Companies Act and other laws.
 Section 5: Defines banking as accepting deposits for lending or
investment, repayable on demand or otherwise, and withdrawable by check,
draft, order, or otherwise. Banking company means any company which transacts
the business of banking
 Section 5A: Provisions of the act will take precedence over any conflicting
terms in a bank's Memorandum of Association, articles, or agreements. If
there is a conflict, the act's provisions will prevail, rendering the conflicting parts
void.
 Section 5CA: "Banking policy" refers to any policy set by the Reserve Bank to
support the banking system, monetary stability, or economic growth. It considers
the interests of depositors, the amount of deposits and resources of the bank, and
the fair and efficient use of these resources.
 Section 6: Other forms of business a bank can engage in. Lists various activities
banks can engage in, such as discounting bills, issuing travelers' checks, and
dealing in securities.
 Section 7: No company, except a banking company, can use the words
"bank," "banker," or "banking" in its name or business. Also, any company doing
banking business in India must include at least one of these words in its name.
 Section 21: Banking Regulation Act grants the RBI the power to control
advances by banking companies. The RBI can direct banks on their
lending policies, including the types of loans and the terms of lending.
For example, different rules apply to education loans, housing loans, and personal
loans. While banks have some discretion, they must follow the RBI's directions.
The RBI also controls the amount banks can advance based on their capital and
deposits.
A notable case, RBI vs. Peerless General Finance and Investment Co. Ltd.
(1996), affirmed the RBI's wide regulatory powers. The Supreme Court
upheld that the RBI's directions under the Banking Regulation Act have
statutory value and must be followed.
 Section 21A: Courts cannot review transactions between a bank and its
debtor based on the interest rate being too high, regardless of any other
laws about loans or debt.
The provisions of this Act shall be in addition to, and not in derogation of the
[Companies Act, 1956], and any other law for the time being in force.
Power to suspend operation of Act.— The Central Government, on a representation
made by the Reserve Bank, may suspend for not more than 60 days, the
operation of all or any of the provisions of this Act, either generally or in relation to
any specified banking company.

Page 40 of 68
The Banking Regulation Act (1949) and the RBI Act (1934) were established long before
the advent of modern banking technologies like debit cards, credit cards, and e-banking.
As technology advanced, the RBI introduced guidelines to keep pace with
these changes. For instance, in 1996, the RBI issued directions for internet
banking services, followed by guidelines for mobile banking and other digital
payment methods. These guidelines cover aspects such as security,
authentication, and infrastructure requirements. The RBI's regulatory framework
ensures that banks adopt these technologies while maintaining security and compliance.
The Information Technology Act does not specifically address internet banking,
making the sectoral laws the primary regulatory framework for online banking.

--------------------------------------------------------------------------------------------------------------------------

Payment and Settlement Systems Act, 2007

The legislation aims to empower the Reserve Bank of India (RBI) as the authority to
regulate and oversee payment systems in India. Key points include:
1. Regulation and Oversight: RBI will regulate various payment systems,
including those operated by non-banks.
2. Authorization Procedures: Establish procedures for authorizing and revoking
payment systems.
3. Standards and Guidelines: Set operational and technical standards, issue
directions, and guidelines.
4. Information and Audits: Call for information, audit, and inspect systems and
premises.
5. Duties and Penalties: Define duties of system providers and impose fines for
non-compliance.
6. Legal Recognition: Provide legal recognition to netting procedures and
settlement finality.
7. Dispute Resolution: Empower the Securities Appellate Tribunals to resolve
disputes between RBI and system providers.
Definitions:
1. Bank: Includes scheduled banks, post office bank, banking company, co-
operative bank and other RBI-specified banks.
2. Electronic Funds Transfer: Moving money by instructing bank via various
forms of electronic methods, including point of sale transfers, ATM transactions,
direct deposits or withdrawals, and transfers made by phone, internet, or card
payment.
3. Settlement: Refers to the settlement of payment instructions, including
securities and foreign exchange transactions.
4. Gross Settlement System: Means a payment system where each transaction
is settled individually.
5. Netting System: Calculating the total amount of money owed/ payable by
adjusting the payment obligations among participants. This includes claims
and obligations if a participant becomes insolvent or dissolves, so only the net
amount is settled.
6. Payment Instruction: Any tool, authorization, or order (including electronic) to
make a payment from a person to a system participant or From one system
participant to another.
7. Payment Obligation: The debt one system participant owes to another
due to clearing or settling payment instructions related to funds, securities,
foreign exchange, derivatives, or other transactions.
8. Payment System: A system that allows payments between a payer and a
beneficiary, involving clearing, payment, or settlement services. It does
not include stock exchanges. Includes systems enabling operations of credit
card, debit card, smart card, money transfer, etc

Page 41 of 68
 9. Settlement: means settlement of payment instructions and includes the
settlement of securities, foreign exchange or derivatives or other transactions
which involve payment obligations.

10. System Participant: A bank or any other person involved in a payment system,
including the system provider.
11. System Provider: A person who operates an authorized payment system.
12. Trade Repository: A person who collects, stores, processes, or shares
electronic records or data related to derivatives or financial
transactions, as specified by the Reserve Bank.

Designated Authority
1. The Reserve Bank is the authority for regulating and supervising payment
systems under this Act.
2. The Reserve Bank will perform its duties through the "Payments Regulatory
Board."
3. The Board will include:
 The Governor of the Reserve Bank (Chairperson).
 The Deputy Governor in charge of Payment and Settlement Systems.
 One officer nominated by the Central Board of the Reserve Bank.
4. Three persons nominated by the Central Government.

No one, except the Reserve Bank, can start or operate a payment system without
authorization from the Reserve Bank. Existing payment systems can continue to
operate for up to six months after this Act begins.
The Reserve Bank notified that certain rules in the Payment and Settlement Systems Act,
2007, do not apply to:
(a) Banks for transactions within the same bank.
(b) Clearing houses run by State Bank of India, its subsidiaries, and certain
other banks.
(c) The Department of Posts for their payment systems.
Application to Commence Payment System

1) Application for Authorization: Anyone wanting to start or run a payment

system must apply to the Reserve Bank for authorization in the prescribed form.
2) Inquiry by the Reserve Bank: After receiving an application, the Reserve Bank
may conduct inquiries to verify the details, the applicant's ability to operate the
system, and the credentials of participants. It may also request a report from an
authorized person.
3) Issue or Refusal of Authorization: The Reserve Bank may issue authorization
if satisfied that the application is complete and meets the Act's requirements,
considering:
a. The need for the proposed payment system.
b. The technical standards or design.
c. The terms and conditions of operation, including security procedures.
d. Any other relevant factors.
4) Every application for authorisation shall be processed by the Reserve Bank as
soon as possible and an endeavour shall be made to dispose of such application
within six months from the date of filing of such application.
5) Meal vouchers (Alternative payment/settlement system) provided by companies
like Sodexo are not considered "goods" for the purpose of local body tax (LBT) or
octroi. The Supreme Court ruled that these vouchers are a service, not a sale
of goods. They are printed for specific customers and used by employees,
and are not transferable. Therefore, they are not subject to LBT or octroi
taxes.

Page 42 of 68
 6) Case Law: Google Pay does not require authorization under the Payment
Systems Act as it is not a payment system but a third-party application
provider.

The Reserve Bank can revoke a system provider's authorization if they:

1. Break any provisions of the Act.
2. Do not follow regulations.
3. Ignore orders or directions from the designated authority.
4. Operate the payment system against the conditions of the authorization.
Before revoking, the Reserve Bank must:
1. Give the system provider a chance to be heard.
2. Ensure the payment system stops operating until the revocation order is issued.
The Reserve Bank can also revoke authorization if it's necessary for the country's
monetary policy or other specified reasons.
Appeal to Central Government
1. If an application for authorization is refused or a system provider's authorization is
revoked, they can appeal to the Central Government within 30 days.
2. The Central Government aims to resolve the appeal within three months.
3. The Central Government's decision on the appeal is final.
Regulation and Supervision by the Reserve Bank:
1. The Reserve Bank can set standards for:
o The format and size of payment instructions.
o The timings for payment systems.
o How funds are transferred within the payment system (paper, electronic,
etc.).
o Other general standards for payment systems.
o Membership criteria for payment systems (joining, continuing, or leaving).
o Conditions for participation in fund transfers and the rights and obligations
of participants.
2. The Reserve Bank can also issue guidelines for the proper and efficient
management of payment systems.
3. A system provider cannot change the payment system's structure or operation
without:
o Getting prior approval from the Reserve Bank.
o Giving at least 30 days' notice to participants after approval.
The Reserve Bank can allow changes without notice if it's in the country's
monetary or public interest.
4. If the Reserve Bank objects to the change, it must inform the system provider
within two weeks.
5. The system provider must respond to the objections within two weeks, and
changes can only be made after receiving approval from the Reserve Bank.
Settlement of Disputes
1. The system provider must create a panel of at least three participants
(excluding those in the dispute) to resolve disputes related to the payment
system.
2. Disputes between system participants must be referred to this panel.
3. If a dispute involves a system participant and the system provider, or if someone
is unhappy with the panel's decision, the dispute goes to the Reserve Bank.
4. An authorized officer of the Reserve Bank will resolve these disputes, and their
decision is final.
5. If the Reserve Bank is involved in a dispute as a system provider or participant, it
goes to the Central Government, which will appoint an officer to settle it. The
officer's decision is final.
Dishonour of Electronic Funds Transfer:
 If an electronic funds transfer cannot be executed due to insufficient funds
or exceeding the agreed amount, the person initiating the transfer

Page 43 of 68
 commits an offense. They can be punished with up to two years of
imprisonment, a fine up to twice the transfer amount, or both.
 The provisions of Chapter XVII of the Negotiable Instruments Act, 1881
(26 of 1881) shall apply to the dishonour of electronic funds transfer to the
extent the circumstances admit.

Cognizance of offences: A court can only handle an offense under this Act if a
written complaint is made by an authorized Reserve Bank officer. Only a
Metropolitan Magistrate or a Judicial Magistrate First Class can try such offenses.

RBI Payment Aggregators and Payment Gateways

 RBI Circular (March 17, 2020): Governs payment aggregators (PAs) and payment
gateways (PGs).
 Definitions:
o Payment Aggregators (PAs): Entities that facilitate e-commerce sites and
merchants to accept various payment instruments from customers without
the need for merchants to create a separate payment integration system. They
handle funds.
o Payment Gateways (PGs): Provide technology infrastructure to route and
facilitate processing of online payment transactions without handling
funds.
Applicability
 Mandatory for PAs: Must adopt technology-related recommendations.
 Optional for PGs: May adhere to baseline technology-related
recommendations.
Key Guidelines
1. Definitions:
 Payment Aggregators (PAs): Facilitate e-commerce sites and merchants
to accept various payment instruments from customers, pool
payments, and transfer them to merchants after a time period.
 Payment Gateways (PGs): Provide technology infrastructure to route
and facilitate processing of online payment transactions without
handling funds.
2. Applicability: Guidelines are mandatory for PAs and optional for PGs.

3. Capital Requirements: Minimum net worth of ₹25 crore for PAs.

4. KYC Requirements: PAs must follow Know Your Customer norms.
5. Grievance Redressal: PAs must have a publicly disclosed customer grievance
redressal and dispute management framework.
6. Technology Standards: Baseline technology recommendations must be
followed by PAs.
7. Reporting Mechanism: Periodic reports must be sent to the RBI.

Examples
 Payment Aggregators: Mobikwik, Razorpay.
 Payment Gateways: BillDesk, CC Avenue.
Case Laws
 Lotus Pay Solutions Private Limited vs. Union of India:
o The court upheld the validity of the challenged clauses of the RBI's
guidelines on the regulation of payment aggregators and payment
gateways.
o The court supported the requirement for non-banking entities offering
payment aggregation services to obtain authorization from the RBI.

Page 44 of 68
 o The court upheld the net worth criteria set by the RBI, which required
payment aggregators to achieve a net worth of ₹15 crores by March 31,
2021, and ₹25 crores by March 31, 2023.

--------------------------------------------------------------------------------------------------------------------------

Introduction to Cryptocurrency and RBI Regulations

Overview
 Cryptocurrency: A digital or virtual currency that uses cryptography for
security. It operates independently of a central bank.
 RBI Regulations: The Reserve Bank of India (RBI) regulates financial systems in
India, including aspects related to digital currencies.

Key Concepts
1. Payment Systems and RBI Regulations
Payment Systems: Types of payment systems are:
o Closed System: Vouchers like Sodexo, which can only be used at specific
merchants and cannot be converted to cash.
o Semi-Closed System: Instruments like Amazon or Flipkart vouchers, which
can be used at multiple merchants but not converted to cash.
o Open System: Debit cards, which can be used for various transactions,
including cash withdrawals.
2. Digital and Virtual Currencies
 Digital Currency: A representation of value in digital form, often pegged to a fiat
currency.
 Virtual Currency: A subset of digital currency, not necessarily pegged to fiat
currency, used within specific systems (e.g., game tokens).
3. Cryptocurrency:
 Definition: A type of virtual currency that uses cryptographic techniques
for secure transactions.
 Blockchain Technology: The underlying technology for cryptocurrencies, a
distributed ledger that records all transactions across a network of computers.

Legal and Regulatory Aspects

1. RBI's Stance on Cryptocurrency
 Initial Warnings: RBI issued warnings in 2013 about the risks associated with
cryptocurrencies, including fraud and volatility.
 2018 Circular: RBI prohibited entities regulated by it from dealing in or
providing services for facilitating any person or entity in dealing with or
settling virtual currencies.
2. Supreme Court Judgment
 Challenge to RBI Circular: The Internet and Mobile Association of India (IAMAI)
challenged the RBI circular.
 Court's Decision: The Supreme Court struck down the RBI circular, stating it
was disproportionate and that RBI had not shown any damage caused by
cryptocurrency exchanges.

Detailed RBI Regulations

1. RBI's Regulatory Framework

 Banking Regulation Act, 1949: Provides RBI with the authority to regulate
the banking sector.
o Section 35A: Empowers RBI to issue directions to banks in the
public interest or to prevent the affairs of any banking company from
being conducted in a manner detrimental to the interests of the

Page 45 of 68
 depositors or in a manner prejudicial to the interests of the banking
company.
o Section 36(1): Allows RBI to give directions to banking companies
generally or to any banking company in particular, in the public interest
or in the interest of banking policy.

 Reserve Bank of India Act, 1934: Grants RBI the power to regulate the
monetary policy of India.
o Section 45JA: Empowers RBI to determine policy and issue directions
to all or any of the non-banking financial companies (NBFCs) relating
to income recognition, accounting standards, provisioning for bad and
doubtful debts, capital adequacy, deployment of funds, etc.
o Section 45L: Allows RBI to call for information from financial
institutions and give directions to regulate the credit system of the
country to its advantage.

 Payment and Settlement Systems Act, 2007: Provides a legal basis for the
regulation and supervision of payment systems in India.
o Section 18: Empowers RBI to issue directions to a payment system
or system participant to ensure the smooth operation of the
payment system or to prevent any act that may be detrimental to the
interests of the system participants or the public.

2. Key RBI Circulars and Reports

 2013 Press Release: RBI issued a press release cautioning users, holders,
and traders of virtual currencies about the potential financial, operational,
legal, customer protection, and security-related risks.
 2017 Warnings: RBI reiterated its concerns and cautioned users about the
risks associated with virtual currencies.
 2018 Circular: RBI prohibited entities regulated by it from dealing in or
providing services for facilitating any person or entity in dealing with or settling
virtual currencies.
3. Supreme Court Judgment Analysis
 Proportionality Test: The Supreme Court applied the proportionality test to
assess whether the RBI's action of prohibiting regulated entities from dealing with
virtual currencies was justified.
 Findings: The Court found that RBI had not demonstrated any actual harm
or adverse impact on regulated entities due to virtual currencies. The Court
held that the RBI's action was disproportionate and struck down the circular.

Types of Cryptocurrency Regulation

1. Permissive Regulation: Some countries have adopted a permissive approach,

allowing cryptocurrencies with certain regulations. Ex: Japan, Switzerland,
Singapore, etc

2. Cautious Approach: Some countries have not explicitly sanctioned

cryptocurrencies but have not banned them either. Ex: Canada, Germany,
UK

3. Outright Ban: Countries like China and Thailand have banned cryptocurrencies.

Global Perspectives
1. United States
 State Laws: Different states have different regulations. Some treat
cryptocurrencies as securities, others as commodities or property.

Page 46 of 68
  Howey Test: Used to determine if an instrument qualifies as a security.
2. European Union
 Regulations: The EU has recognized Bitcoin as a virtual currency and has
regulations in place for its use.
Cryptocurrency in India
1. Financial Stability Reports: RBI Reports: Highlighted the potential risks and benefits
of cryptocurrencies.
2. Government's Stance: Budget Speech 2018: The government stated that
cryptocurrencies are not legal tender in India.
3. Legal Framework: Proposed Bills: Various bills have been proposed to regulate
cryptocurrencies, but none have been passed into law.

Envisioning the Indian Model

 Classification of Cryptocurrency Activities:
o Currency: Cryptocurrencies can act as a medium of exchange but are
unstable due to value fluctuations.
o Commodity: Cryptocurrencies can be traded like commodities, with value
determined by supply and demand.
o Securities: Cryptocurrencies can be regulated as securities, especially when
used in ICOs.
 Potential Regulatory Challenges:
o Taxation: The classification of cryptocurrencies will impact their
taxation. As goods/property, they fall under 'Profit and Gains from Business
and Profession' or 'Income from Capital Gains'. As currency, they are not
taxed.
o Prevention of Crime: Cryptocurrencies can be used for money
laundering and terrorism financing due to their anonymity. The Draft Bill
includes provisions to address this by bringing cryptocurrency activities under
the Prevention of Money Laundering Act (PMLA).
o Technological Barriers: Blockchain transactions are slower than existing
digital financial services. Solutions like the Lightning Network can address
scalability issues.

--------------------------------------------------------------------------------------------------------------------------

Non-Fungible Tokens (NFT)

Introduction to NFTs
 Definition: NFTs (Non-Fungible Tokens) are unique digital tokens that
represent ownership of a specific digital asset. Unlike cryptocurrencies such
as Bitcoin, which are fungible and can be exchanged on a one-to-one basis, NFTs
are unique and cannot be exchanged on a like-for-like basis.
 Digital Assets: Digital assets can be purely digital (e.g., digital art, music,
videos) or have a physical counterpart (e.g., a digital representation of a
physical painting). The duality of digital assets means they can exist in both
physical and digital forms or solely in digital form.
Creation and Ownership
 Blockchain Technology: NFTs utilize blockchain technology to ensure secure
ownership and transfer. Each NFT is associated with a unique identifier on the
blockchain, making it tamper-proof and verifiable.
 Smart Contracts: NFTs are often sold via smart contracts, which are self-
executing contracts with the terms of the agreement directly written into code.
These contracts govern the transfer of ownership and the rights associated with
the NFT.

Legal Questions and Issues

Page 47 of 68
  Rights Associated with NFTs: The primary legal question is what rights
are conferred by owning an NFT. This includes whether the owner has
copyright, property rights, or merely a token of ownership. The law has not yet
crystallized on this issue, and courts are still grappling with these questions.
 Copyright Issues: Ownership of an NFT does not necessarily confer copyright.
The rights depend on the terms of the smart contract and the agreement
between the creator and the buyer. For example, if the smart contract
includes the transfer of copyright, the buyer may have the right to reproduce,
distribute, and display the digital asset.
Case Studies and Examples
1. Digital Art Example:
o Scenario: An artist creates a digital version of the Mona Lisa and sells it as
an NFT.
o Legal Question: Does the buyer have the right to reproduce the image,
sell merchandise, or use it commercially?
o Answer: It depends on the contract terms. If the smart contract includes
the transfer of copyright, the buyer may have these rights. Otherwise, the
buyer only owns the token, not the copyright.
2. Photograph Example:
o Scenario: A photograph of MS Dhoni lifting the World Cup is turned into an
NFT.
o Legal Question: Does the NFT owner have exclusive rights to use the
photograph?
o Answer: This is complex and depends on the copyright status of the
photograph and the terms of the NFT sale. The courts are still
grappling with these issues, and there is no one-size-fits-all
answer.
3. Delhi High Court Case:
o Case: A gaming company claimed exclusive rights to create NFTs related
to cricket tours.
o Outcome: The court denied the injunction, indicating that the company
did not have exclusive rights. The case is pending appeal before a division
bench of the Delhi High Court.
4. International Cases:
o US and UK Cases: There are ongoing cases in the US and UK dealing with
similar issues of NFT ownership and rights. These cases are crucial for
understanding how different jurisdictions handle NFT-related disputes.

Speculative Nature and Value

 Speculative Asset: NFTs are often seen as speculative investments. Their value
is determined by market demand and perceived worth, similar to art or
collectibles. The speculative nature of NFTs means their value can fluctuate
significantly.
 Fractional Ownership: NFTs can be divided into parts, allowing multiple
people to own a fraction of the asset. This fractional ownership can increase
the asset's value as more people invest in it.
Regulatory and Legal Framework
 Lack of Clear Regulation: There is no clear legal framework governing
NFTs. Courts and lawmakers are still grappling with how to classify and regulate
NFTs. This lack of regulation creates uncertainty for buyers and sellers.
 Potential for Money Laundering: NFTs can be used for money laundering due
to their speculative nature and the ease of transferring digital assets. There are
concerns that NFTs could be used to evade taxes and facilitate illegal transactions.
Future Considerations
 Evolving Legal Landscape: As NFTs become more popular, legal frameworks
will likely evolve to address the unique challenges they present. This

Page 48 of 68
 includes clarifying the rights associated with NFTs and establishing regulations to
prevent misuse.
 Privacy and Security: Issues related to privacy and security in the context of
NFTs and blockchain technology will also need to be addressed. Ensuring the
security of digital assets and protecting the privacy of NFT owners will be crucial
as the market grows.

NFT, Copyright, and Intellectual Property Commercialization

Introduction
 NFTs' Rise: NFTs gained significant attention when Twitter CEO Jack Dorsey sold
his first tweet as an NFT for $2.9 million. Other notable sales include DJ 3LAU's
album NFTs generating over $11 million and Beeple's digital artwork selling for
$69 million.
 Disruptive Potential: NFTs offer a new way to sell and commercialize
digital assets, raising questions about their impact on copyright law.
Explication of NFT
 Definition: NFTs are unique digital assets stored on a blockchain, providing
proof of ownership and authenticity. They are non-interchangeable, unlike
cryptocurrencies like Bitcoin.
 Functionality: NFTs do not contain the actual digital asset but act as a
certificate of ownership. They can be used for various purposes, including
digital tickets to events and representing ownership of both tangible and
intangible assets.
Copyright and NFTs
 Copyright Basics: Copyright protects literary, musical, artistic works, etc., and
grants exclusive rights to the creator. These rights include reproduction,
distribution, and public performance.
 NFTs and Copyright: NFTs themselves are not copyrightable but can be used
to commercialize copyrighted works. The document discusses the potential
issues of originality and authorship verification in the NFT space.
Issues Arising
 Value of NFTs: The value of NFTs is tied to their originality and the
reputation of the creator. However, the ease of claiming authorship online
poses challenges.
 Verification: There is a need for legal regulations to verify the ownership
of NFTs to prevent copyright infringement. The document highlights the
importance of establishing a process to verify the authorship or ownership rights
of NFT creators.
Liability of NFT Platforms
 Copyright Infringement: NFT platforms could be liable for copyright
infringement if they facilitate the sale of unauthorized works. The
document discusses the legal defenses and liabilities of NFT platforms, including
the concept of innocent infringement (individual unknowingly engages in
activities that infringe on copyrighted material) and the need for platforms to
implement measures to verify ownership.
 Legal Defenses: The document explains that NFT platforms may argue they are
merely vehicles for transactions, similar to e-commerce platforms like Amazon.
However, they must take steps to avoid liability, such as implementing standard
terms and conditions and ensuring transparency.
Evergreening and Copyright Expiration
 Evergreening: The document explains how NFTs do not extend the copyright
term but allow the sale of original works even after copyright expiration.

Page 49 of 68
 It discusses the concept of evergreening, where IP owners try to extend the
commercial life of their works.
 Moral Rights: Authors retain moral rights to be credited for their work, even if
the copyright has expired. The document emphasizes the importance of
respecting these rights in the context of NFTs.
Recommendations
 Regulations: The document suggests creating administrative mechanisms to
verify NFT ownership and align NFT activities with copyright laws. It recommends
that copyright commissions work with NFT platforms to ensure proper
verification and protection of IP rights.
 Collaboration: It recommends collaboration between copyright commissions and
NFT platforms to safeguard the verification process and protect the general
populace in trading or bidding copyrights under the platform. The document also
suggests that copyright commissions should lead the regulation of NFT activities,
with support from other relevant bodies.
Conclusion
NFTs are not IP rights themselves but tools for commercializing IP. They
complement copyright law and offer new opportunities for IP holders. Proper regulations
and verification mechanisms are essential to address the challenges posed by NFTs. The
document calls for timely action by copyright commissions to leverage the opportunities
presented by NFTs.

--------------------------------------------------------------------------------------------------------------

Metaverse

Overview
Definition: The metaverse is a collective virtual space that combines aspects of digital
environments, augmented reality (AR), virtual reality (VR), and the internet to
create immersive, interactive experiences. It’s often described as the next evolution of
the internet — a 3D version where users can interact with each other and digital
objects in real time.

Key Concepts
1. Virtual World: A digital environment where users can interact with each
other and the environment itself through avatars.
2. Blockchain Technology: Often used to support transactions and ownership
within the Metaverse, including the use of digital currencies and non-fungible
tokens (NFTs).
3. Decentralization: The Metaverse is not controlled by a single entity but is a
decentralized network of virtual spaces.
Uses and Applications

Page 50 of 68
 1. Exposure Therapy: Treating phobias through VR by gradually exposing
patients to their fears in a controlled virtual environment.
2. Gaming: Creating immersive gaming experiences where players can interact
in a virtual world.
3. Virtual Events: Hosting concerts, conferences, and other events online,
allowing participants to attend from anywhere in the world.
4. E-commerce: Virtual marketplaces where users can buy and sell digital and
physical goods.
5. Education: Virtual classrooms and training environments that provide
interactive learning experiences.

1. Jurisdictional Issues
 Transcending National Boundaries: The Metaverse operates across multiple
jurisdictions, making it difficult to determine which country's laws apply.
This can lead to conflicts of law and challenges in enforcement.
 Traditional Jurisdiction Concepts: Jurisdiction is generally based on physical
presence. In civil law, cases are typically filed where the defendant is located or
where the cause of action arises.
 Example: If defamatory content is published in a local newspaper with circulation
in another country, the affected party may face challenges in determining
where to file a lawsuit.

Case Studies and Examples

1. Equustek Solutions Inc. v. Google Inc.: A Canadian court issued a global
blocking order, raising questions about jurisdiction and the extraterritorial
application of national laws.
2. Naruto Monkey Selfie Case: Highlighted issues around copyright ownership in
digital spaces.
3. Swami Ramdev v. Facebook Inc.: The Delhi High Court considered global
blocking orders for content uploaded from within its jurisdiction.

Legal Personality
 Separate Legal Entity: Treating the Metaverse as a separate legal entity
could provide a clear point of reference for legal accountability. This is
similar to how companies are treated as separate legal entities from their
members.
 Examples of Legal Personality:
 Companies: Companies are treated as distinct entities with their own
legal personality.
 Non-Human Entities: In some cases, non-human entities like idols in
temples or entire ecosystems have been granted legal personality to
facilitate governance and accountability.

Page 51 of 68
Governance Models
 Centralized Model: One suggested model is a centralized mechanism where a
single corporate entity controls the Metaverse. However, this is generally
seen as a bad idea because it can lead to monopolization and other issues.
 Decentralized Model: Another model is a heavily decentralized blockchain
model, where everyone has access to everything on the Metaverse, and
decisions require common consent. This could lead to delays and
inefficiencies.
 Hybrid Model: The most accepted model by many authors is a hybrid
approach, combining some amount of governance with decentralized
elements. This model aims to balance control and autonomy.

4. Regulatory Frameworks
 Internet Governance: The current model of governing the internet has been
relatively successful, with countries operating within their own geographical
boundaries to the extent possible. A similar approach could be applied to the
Metaverse.
 New Laws: There is a debate on whether new laws specifically tailored to the
Metaverse are needed or if existing internet governance models can be adapted.
5. Practical Considerations
 Human Oversight: Even if the Metaverse is treated as a separate legal entity,
there will still need to be human oversight and accountability. This is because, at
the end of the day, human beings are behind the creation and operation of the
Metaverse.
 Technological Evolution: As the Metaverse evolves, it may develop capabilities
that require new legal frameworks and governance models.

Artificial Intelligence

1. Frankenstein Analogy

Page 52 of 68
  Concept: The idea that humans may create something with its own personality
and capabilities, which could potentially act independently of its creator.
 Relevance: This analogy is used to highlight the potential risks and ethical
considerations of AI, as it may develop capabilities beyond human control.
2. Asimov's Laws of Robotics
 Three Laws:
1. A robot may not injure a human being or, through inaction, allow a
human being to come to harm.
2. A robot must obey the orders given by human beings, except where
such orders would conflict with the First Law.
3. A robot must protect its own existence as long as such protection does
not conflict with the First or Second Law.
 Example: The movie "Robo" (Rajinikanth) illustrates these laws, where a
humanoid robot is tested for its obedience and potential harm to humans.

3. Legal Considerations
 Human Safety: Legal frameworks increasingly mandate that AI systems must
not pose unreasonable risks to human life or well-being, aligning with
product safety and liability laws.
 Health & Security: AI used in healthcare or critical infrastructure must
comply with sector-specific regulations to ensure safety, reliability, and
protection from cyber threats.
 Freedom: AI must respect fundamental freedoms such as freedom of
expression and association, as protected under international human rights law
 Privacy and Integrity: Data protection laws like the GDPR legally require AI
systems to uphold individuals' rights to privacy and data accuracy.
 Non-Discrimination: Anti-discrimination laws prohibit AI systems from
producing biased outcomes that unfairly disadvantage individuals based
on protected characteristics.
 Self-Determination: Legal norms support individuals' rights to make
autonomous decisions, requiring transparency and explainability in AI-
driven processes

Page 53 of 68
Nature of Liability of AI systems
1. Strict Liability
 Definition: Under strict liability, a party is held responsible for damages or
harm caused by their actions or products, regardless of fault or intent.
 Application to AI: This model suggests that AI creators or operators should
be held liable for any harm caused by their AI systems, even if they took all
possible precautions.
 Rationale: The inherent risks associated with AI, such as unpredictable
behavior or errors justify holding creators or operators strictly liable to ensure
accountability and protection for those harmed.
 Example: If an autonomous vehicle causes an accident, the manufacturer could
be held liable under strict liability, regardless of whether the vehicle was properly
maintained or operated.
2. Blame Theory
 Definition: Blame theory focuses on attributing fault or negligence to a
specific party responsible for the harm caused.
 Application to AI: This model requires identifying the human operators,
developers, or companies responsible for the AI system and determining if
their actions or inactions contributed to the harm.
 Rationale: By pinpointing fault, this model aims to hold the appropriate
parties accountable and encourage responsible behavior in the
development and deployment of AI systems.
 Example: If an AI system makes a biased decision, the blame theory would
investigate whether the developers failed to address known biases in the training
data or algorithms.
Examples and Case Studies
 South Korea Vacuum Cleaner Case: An automatic vacuum cleaner caused
harm by sucking in the owner's hair while she was sleeping. The question of
liability was raised.
 Self-Driving Cars: Determining liability in case of accidents involving
autonomous vehicles.
 Naruto Monkey Selfie Case: Highlighted issues around copyright ownership
when a monkey took a photograph, raising questions about authorship and
ownership in digital spaces.

Page 54 of 68
3. Civil vs. Criminal Liability
 Civil Liability:
 Focus: Compensation for damages or harm caused by AI systems.
 Application: Victims can seek monetary compensation from the
responsible parties.
 Example: A person injured by a malfunctioning AI-powered device could
file a civil lawsuit for damages.
 Criminal Liability:
 Focus: Punishment for actions that constitute a crime.
 Application: Requires proving mens rea (intent to commit a crime),
which is challenging to attribute to AI systems.
 Example: If an AI system is used to commit fraud, the individuals who
programmed or deployed the AI with criminal intent could face criminal
charges.
4. Attribution of Liability
 Human Oversight: Ensuring that there is always a human in the loop who
can be held accountable for the actions of the AI system.
 Challenges: Determining the extent of human control and responsibility,
especially for autonomous or self-learning AI systems.
 Example: In the case of an autonomous vehicle accident, liability could be
attributed to the manufacturer, the software developer, or the operator,
depending on the circumstances.
5. Proposed Solutions
 Insurance: Requiring companies that develop or deploy AI systems to have
liability insurance to cover potential damages.
 Legal Personality: Granting AI systems a separate legal personality to
facilitate governance and accountability.
 Precautionary Model: Prohibiting the use of AI in high-risk areas where the
potential for harm is too great.
 Permissive Model: Allowing market forces to regulate AI with minimal
government intervention.
 Strict Liability Model: Ensuring compensation for harm caused by AI, accepting
the inherent risks.

Page 55 of 68
1. Concept of Separate Legal Personality
 Definition: The theory of separate legal personality refers to the legal
recognition of an entity as having its own distinct identity, separate from
its members or creators.
 Examples:
 Companies: A company is treated as a separate legal entity from its
shareholders and directors. This means the company can own property,
enter into contracts, and be sued in its own name.
 Non-Human Entities: In some cases, non-human entities like idols in
temples or entire ecosystems have been granted legal personality to
facilitate governance and accountability.
2. Legal Personality for AI
 Granting Legal Personality to AI: There is a discussion on whether AI should
be granted a separate legal personality to facilitate governance and
accountability.
 Examples:
 Saudi Arabia: In 2017, Saudi Arabia granted citizenship to a humanoid
robot named Sophia. This raised questions about the rights and
responsibilities associated with such a status.
 Tokyo: An online system in Tokyo was granted legal personality,
highlighting the evolving nature of legal recognition for non-human
entities.
3. Arguments for Legal Personality
 Governance and Accountability: Granting legal personality to AI can provide
a clear point of reference for legal accountability, similar to how companies
are treated.
 Facilitating Regulation: It can make it easier to regulate and govern AI
systems by providing a legal framework for their actions and responsibilities.

Page 56 of 68
Intellectual Property (IP) in the Context of AI
1. Copyright Ownership
 Naruto Monkey Selfie Case: Highlighted issues around copyright ownership
when a monkey took a photograph. The US Copyright Office stated that
copyright could only be granted to a human being.
 Algorithm-Generated Content: In 2019, a Chinese court recognized the
copyright of an article written by an algorithm called Dreamwriter, ruling
in favor of Shanghai Xingune Technology.
2. Patents
 AI Patent Applications: In 2019, an attempt to register a patent in the name of
an AI system called DABUS in Britain was rejected. The patent office did not
grant patents to non-human entities, emphasizing that patents protect
human creativity.
3. Legal Personality and IP Rights
 Debate on Legal Personality: There is a debate on whether AI should be
granted legal personality to own copyrights and patents. If AI is to be held liable,
it should also have certain rights.
 Human Oversight: Even with legal personality, human oversight is necessary to
ensure accountability.
4. Ethical and Legal Considerations
 Technological Evolution: As AI evolves, new legal frameworks and governance
models will be needed to address IP issues.
5. Examples and Case Studies
 Naruto Monkey Selfie Case: Showed limitations of current copyright laws.
 Dreamwriter Case (China): Demonstrated the possibility of copyright protection
for algorithm-generated content.
 DABUS Patent Application: Highlighted challenges in recognizing AI as an inventor
under current patent laws.

1. Precautionary Model
 Definition: This model advocates for prohibiting the use of AI in certain
high-risk areas where the potential for harm is too great.

Page 57 of 68
  Application: AI is completely banned in areas such as defense, nuclear
weaponry, and other sectors where the risk of injury or environmental damage is
significant.
 Rationale: The precautionary model aims to prevent potential harm by
avoiding the use of AI in scenarios where the consequences of failure or misuse
could be catastrophic.
 Example: Prohibiting the use of AI in autonomous weapons systems to prevent
unintended escalation of conflicts.
2. Permissive Model
 Definition: This model allows market forces to regulate AI with minimal
government intervention.
 Application: AI development and deployment are largely left to the
discretion of private companies and market dynamics.
 Rationale: The permissive model encourages innovation and rapid
development by reducing regulatory barriers.
 Disadvantages: This approach can lead to a lack of oversight, potential
misuse, and insufficient protection for individuals and society.
 Example: Allowing companies to develop and deploy AI applications without
stringent regulatory requirements, relying on market competition to ensure
quality and safety.

3. Strict Liability Model

 Definition: This model holds AI creators and operators strictly liable for any
harm caused by their AI systems, regardless of fault or intent.
 Application: Companies and individuals responsible for AI systems must
ensure that they are safe and reliable, as they will be held accountable for
any damages.
 Rationale: The strict liability model provides a strong incentive for developers to
prioritize safety and reliability in their AI systems.
 Example: Holding an autonomous vehicle manufacturer liable for accidents
caused by the vehicle, even if all safety protocols were followed.
4. Hybrid Model
 Definition: Combines elements of precautionary, permissive, and strict liability
models to create a balanced approach to AI governance.
 Application: Certain high-risk areas may be subject to strict regulations
or prohibitions, while other areas may have more flexible guidelines with
strict liability provisions.
 Rationale: The hybrid model aims to balance innovation with safety and
accountability, ensuring that AI development can proceed while minimizing
risks.
 Example: Implementing strict regulations for AI in healthcare and transportation,
while allowing more flexibility in entertainment and consumer applications, with
strict liability for any harm caused.

Digital Personal Data Protection Act, 2023

Key Definitions
1. Data Principal: The individual to whom the personal data relates. This
includes children and persons with disabilities, where the parent or legal guardian
acts on their behalf.
2. Data Fiduciary: The entity (individual, company, or organization) that
determines the purpose and means of processing personal data.
3. Data Processor: An entity that processes personal data on behalf of the
data fiduciary.

Page 58 of 68
 4. Personal Data: Any data about an individual who is identifiable by or in relation
to such data.
5. Significant data fiduciary is a special class of data fiduciary that will be
notified by the central government based on certain specific criteria. These
criteria include:
a) Volume of Data Processed: The amount of personal data processed by
the data fiduciary.
b) Sensitivity of Personal Data: The nature and sensitivity of the personal
data being processed.
c) Risks to Data Principals: The potential risks to the rights of data
principals.
d) Impact on Electoral Democracy and Security: The potential impact on
electoral democracy, security of the state, and public order.
Entities that operate in areas with large user bases, such as social media
intermediaries, are likely candidates to be designated as significant data
fiduciaries. These entities will have several additional obligations under the
DPDP Act, which are detailed in the draft data protection rules.
6. Sensitive Personal Data: Categories of personal data that require higher
protection, such as financial data, health data, biometric data, etc.
Applicability of the DPDP Act
1. Territorial Scope:
 The DPDP Act applies to the processing of digital, personal data within
the territory of India. This includes data that is collected in digital
form or data that is collected offline and subsequently digitized
2. Extraterritorial Scope:
 The Act also applies to entities outside India if they process personal
data in connection with offering goods or services to individuals in
India. This means that foreign companies providing services or products to
Indian residents must comply with the DPDP Act.
3. Types of Data Covered:
 The Act covers digital personal data, which includes any data about an
individual who is identifiable by or in relation to such data. This
encompasses data collected online as well as data collected offline
and later digitized
4. Exemptions:
 Non-Digital Records: The Act does not apply to non-digital records.
 Personal or Domestic Purposes: Processing of personal data for
personal or domestic purposes (personal email communication, family
photo storage, etc) is exempt.
 Publicly Available Data: Data made publicly available by the data
principal or by someone under a legal obligation to do so is exempt
Principles of Data Processing
1. Lawfulness, Fairness, and Transparency:
o Lawfulness: Data processing must be based on a legal basis, such as
consent, legal obligation, or voluntary provision of data.
o Fairness: Data processing should be conducted in a fair manner, ensuring
that data principals are not misled or harmed.
o Transparency: Data principals should be informed about how their
data is being processed, typically through a privacy notice or policy.
2. Purpose Limitation:
o Personal data should be collected for specified, explicit, and
legitimate purposes. It should not be further processed in a manner
that is incompatible with those purposes.
3. Data Minimization:
o Only the data that is necessary for the specified purpose should be
collected and processed. This principle aims to reduce the risk of
unnecessary data collection.
4. Accuracy:

Page 59 of 68
 o Data fiduciaries must ensure that personal data is accurate and kept
up to date. Data principals have the right to request corrections to
their data.
5. Storage Limitation:
o Personal data should not be retained for longer than necessary to
fulfill the specified purpose. Once the purpose is achieved, the data
should be deleted.
6. Security Safeguards:
o Data fiduciaries must implement appropriate technical and
organizational measures to protect personal data from unauthorized
access, disclosure, alteration, or destruction.
7. Accountability:
o Data fiduciaries are accountable for complying with the DPDP Act and must
demonstrate their compliance through proper documentation and
practices.

Lawful Basis for Processing Personal Data

1. Consent:
o The primary basis for processing personal data is obtaining explicit
consent from the data principal. Consent must be freely given,
specific, informed, and unambiguous, with a clear affirmative action.
2. Voluntary Provision of Data:
o If the data principal voluntarily provides their personal data for a
specified purpose and does not withhold consent for processing,
this can be considered a lawful basis for processing.
3. Legal Obligation:
o Processing is lawful if it is necessary to comply with any legal
obligation to which the data fiduciary is subject. This includes obligations
to disclose information to the state or its instrumentalities.
4. State Functions:
o Personal data can be processed for the performance of any function
by the state or its instrumentalities under any law. This includes
functions related to the provision of subsidies, benefits, services,
certificates, licenses, or permits.
5. Judicial Orders:
o Processing is lawful if it is necessary to comply with any
judgment, decree, or order issued under any law for the time being in
force in India.

6. Emergencies:
o Personal data can be processed without consent in emergencies to
protect the life or safety of the data principal or any other individual.
Rights of Data Principals
1. Right to Information:
o Data principals have the right to know how their data is being
processed, including the purposes of processing, the categories of
data being processed, and the recipients of their data.
2. Right to Correction and Erasure:
o Data principals can request the correction of inaccurate data and the
erasure of data that is no longer necessary for the specified purpose.
3. Right to Data Portability:
o Data principals can request a copy of their data in a structured,
commonly used, and machine-readable format.
4. Right to Withdraw Consent:
o Data principals can withdraw their consent at any time, and data
fiduciaries must stop processing their data upon withdrawal.
5. Right to Grievance Redressal:

Page 60 of 68
 o Data principals can file complaints with the Data Protection Board of
India if they believe their rights have been violated.

Obligations of Data Fiduciaries

1. Privacy Notice:
o Data fiduciaries must provide a clear and concise privacy notice to
data principals, detailing the purposes of data processing, the legal
basis for processing, and the rights of data principals.
2. Data Security Measures:
o Implementing robust security measures to protect personal data,
including encryption, access controls, and regular security audits.

3. Data Breach Notification:

o Data fiduciaries must notify the Data Protection Board and affected
data principals in the event of a data breach.
4. Appointment of Data Protection Officer:
o Significant data fiduciaries must appoint a Data Protection Officer to
oversee compliance with the DPDP Act.
Data Security Safeguards
1. Access Control Measures:
o Implementing access control measures to ensure that only authorized
personnel have access to personal data. This includes role-based access
controls and ensuring that access is granted on a need-to-know basis.
2. Log Maintenance:
o Maintaining logs of data access and processing activities. These logs
should be regularly monitored and reviewed to detect any unauthorized
access or data breaches.
3. Encryption:
o Using encryption to protect personal data both in transit and at rest.
Encryption ensures that even if data is intercepted or accessed without
authorization, it remains unreadable and secure.
4. Regular Security Audits:
o Conducting regular security audits to assess the effectiveness of
security measures and identify any vulnerabilities. These audits help
ensure that data security practices are up to date and compliant with the
DPDP Act.
5. Contractual Measures with Data Processors:
o Ensuring that data processors (entities processing data on behalf of data
fiduciaries) implement appropriate security measures. This can be
achieved through contractual agreements that specify the security
obligations of data processors.
6. Technical and Organizational Measures:
o Implementing appropriate technical and organizational measures to
protect personal data. This includes measures such as firewalls,
intrusion detection systems, and secure data storage solutions.

7. Incident Response Plan:

o Developing and maintaining an incident response plan to address data
breaches and security incidents. This plan should outline the steps to
be taken in the event of a data breach, including notification
procedures and mitigation measures.
8. Employee Training and Awareness:
o Providing regular training and awareness programs for employees to
ensure they understand their responsibilities regarding data
protection and security. This includes training on data handling
practices, recognizing phishing attempts, and reporting security incidents.

Page 61 of 68
Child Personal Data under the DPDP Act
1. Definition of Child:
o A child is defined as an individual below the age of 18 years.
2. Parental Consent:
o For processing the personal data of children, data fiduciaries must obtain
verifiable parental consent. This means that the consent of the parent
or legal guardian is required before processing a child's personal data.
3. Verification of Parental Consent:
o Data fiduciaries must ensure that they have reliable details of the
identity and age of the parent or guardian providing consent. This can
be done through digital verification methods or other reliable means.
4. Obligations of Data Fiduciaries:
o Data fiduciaries must take extra care when processing the personal data of
children. This includes implementing appropriate safeguards to
protect the privacy and security of children's data.
o They must also ensure that the processing of children's data is done in a
manner that protects the rights and interests of the child.
5. Unique Approach in India:
o The DPDP Act takes a unique approach by including the parent or legal
guardian in the definition of the data principal for children. This means that
parents or guardians can exercise all rights on behalf of the child,
including the right to access, correct, and delete the child's personal data.
6. Implications:
o This approach has significant implications, as it allows parents or
guardians to have full control over the child's personal data. For
example, a parent can request to see all messages sent by their child on a
social media platform.

Penalties for Non-Compliance

The DPDP Act imposes significant penalties for non-compliance, including:
 Failure to Implement Security Safeguards: Fines up to ₹250 crores.
 Failure to Notify Data Breaches: Fines up to ₹200 crores.
 Other Violations: Various fines depending on the nature and severity of the
violation.

Data Protection Board of India

The DPDP Act establishes the Data Protection Board of India, which is responsible for:
 Adjudicating Complaints: Handling complaints from data principals regarding
violations of their rights.
 Enforcement: Ensuring compliance with the DPDP Act and imposing penalties for
non-compliance.
 Guidance and Awareness: Providing guidance to data fiduciaries and raising
awareness about data protection rights and obligations.

Sections 75 and 81

1. Section 81 - Overriding Effect:

Purpose: Section 81 of the Information Technology (IT) Act, 2000, ensures that the
provisions of the IT Act take precedence over any other inconsistent laws. This
means that if there is any conflict between the IT Act and other laws, the IT Act will
prevail.
Exceptions: The overriding effect does not apply to the Copyright Act, Patents Act,
and Digital Personal Data Protection Act

Page 62 of 68
Case Reference: The Myspace case by the Delhi High Court is an example where this
provision was considered in relation to the Copyright Act. The court held that the IT Act's
provisions would override other laws except where specifically exempted
Implications: This section is crucial for ensuring the primacy of the IT Act in regulating
electronic transactions and cybersecurity, providing a clear legal framework that
supersedes conflicting laws

2. CERT-IN (Section 70B):

Section 70B of the Information Technology Act, 2000 (IT Act) pertains to the
establishment of the Indian Computer Emergency Response Team (CERT-IN).
This section outlines the responsibilities and powers of CERT-IN, which include:
 Incident Response: CERT-IN is responsible for responding to cybersecurity
incidents and coordinating activities during such events.
 Cybersecurity Measures: It is tasked with implementing measures to
enhance the cybersecurity posture of the country.
 Advisory Role: CERT-IN provides advisories and guidelines to various
stakeholders on cybersecurity issues.
 Coordination: It coordinates with other national and international
agencies on cybersecurity matters.
 Training and Awareness: CERT-IN conducts training programs and
awareness campaigns to educate stakeholders about cybersecurity.
The establishment of CERT-IN under Section 70B is crucial for maintaining the
integrity, security, and resilience of India's cyberspace

3. Extraterritoriality (Section 75):

 The IT Act applies to offenses committed outside India if they involve a computer
system or network located in India. Typically, laws apply within a country's
borders, but Section 75 is an exception[3].
 Conditions: The act or conduct must have a connection to India, such as
affecting a computer network in India.
 Practical Application: Relevant in cases like contempt of court and cyber
terrorism. For example, extradition proceedings have been initiated based on this
provision.

4. Rule-Making Powers (Section 87):

 Authority: The central government can make rules for various aspects of the IT
Act.
 Areas Covered: Includes electronic signatures, security procedures,
qualifications for appointments, duties of subscribers, and procedures for data
interception and monitoring[5].
 Existing Rules: Several rules have been established, such as blocking rules, IT
rules, traffic data rules, and reasonable security practices and procedures rules.

--------------------------------------------------------------------------------------------------------------------------

Right to Privacy

Historical Context and Early Cases

 Entick v. Carrington (1765): This English case is considered one of the earliest
recognitions of privacy rights. The plaintiff's home was unlawfully searched by
the government, leading to a ruling that individuals have the right to safeguard
their secrets from unlawful searches.
 MP Sharma v. Satish Chandra (1954): In India, this case involved the search and
seizure of documents from the Dalmia group. The Supreme Court held that

Page 63 of 68
 search and seizure do not violate fundamental rights, emphasizing the need
for adequate safeguards in criminal investigations.
 Kharak Singh v. State of UP (1963): This case dealt with police surveillance
and domiciliary visits at night. The Supreme Court struck down the provision
allowing such visits, recognizing the right to personal liberty.
Evolution of Privacy Rights in India
 Rajagopal v. State of Tamil Nadu (1994): Known as the Auto Shankar case, it
involved the publication of a prisoner's autobiography implicating high-profile
individuals. The court allowed the publication, stating that matters of public
record cannot be prevented from being published.
 Mr. X v. Hospital Z (1998): This case involved the disclosure of a patient's HIV
status. The Supreme Court held that the hospital did not violate privacy as the
disclosure was in the interest of the person getting married to the patient.
 Sujeta Srivastava v. Chandigarh Administration (2009): The court recognized a
woman's right to privacy and choice regarding her pregnancy, quashing a mandatory
order for termination.
 Selvi v. State of Karnataka (2010): The Supreme Court recognized the right to
privacy of thoughts, ruling that polygraph and brain mapping tests cannot be
administered without consent.
 NALSA v. Union of India (2014): The court recognized the right to privacy for
the LGBTQIA+ community, including the right to choose sexual orientation
and partners.
Landmark Judgment: Puttaswamy Case (2017)
The Supreme Court in a 9-judge bench decision held that the right to privacy is
a fundamental right protected under Article 21 of the Constitution. The judgment
emphasized the need to protect individual liberty in a digital world
The case was brought by Justice K.S. Puttaswamy (Retired) against the Union of India,
challenging the Aadhaar scheme on the grounds that it violated the right to privacy. The
primary contention was that the Aadhaar card scheme imposed arbitrary and unfair
restrictions on the right to privacy, which needed to be just and fair and must satisfy the
requirements of Articles 14 and 19 of the Indian Constitution.
The Supreme Court's verdict was based on the following key points:
 Historical Context: The court revisited previous judgments such as MP Sharma
v. Satish Chandra and Kharak Singh v. State of UP, which had held that the
Constitution did not recognize the right to privacy. The court noted that these
rulings were no longer applicable in today's context.
 Constitutional Provisions: The court examined whether the "Freedom to
Privacy" was a legally guaranteed right and whether it derived from existing
provisions of protected rights such as existence and personal liberty.
 Aadhaar Scheme: The petitioners argued that the Aadhaar scheme violated the
fundamental right to life by bringing citizens under constant state surveillance
and making it compulsory, which could result in people being deprived of other
beneficial schemes.
The court's decision emphasized the following aspects:
 Informational Privacy: The collection of personal information by the state
and the possibility of profiling individuals was deemed unconstitutional.
 Proportionality Test: The restriction on the right to privacy needs to be
carefully scrutinized and justified, thereby protecting individuals from
arbitrary or excessive intrusions by the state.
 Positive and Negative Obligations: The state has both positive and
negative obligations to protect the privacy of individuals. Positive
obligations include enacting data protection laws, while negative obligations
involve refraining from intruding on privacy.
Positive Obligations
Positive obligations require the state to take proactive measures to protect the
privacy of individuals. This includes:
 Legislation: Enacting laws that safeguard privacy, such as data protection
laws that prevent unauthorized access and misuse of personal information

Page 64 of 68
  Regulation: Implementing regulations that ensure non-state actors, such as
social media companies and other data processors, adhere to privacy
standards and protect user data
 Enforcement: Establishing mechanisms to enforce privacy laws and regulations,
including penalties for violations and remedies for affected individuals
Negative Obligations
Negative obligations require the state to refrain from actions that infringe upon the
privacy of individuals. This includes:
 Non-Intrusion: Ensuring that state actions do not unlawfully intrude into
the private lives of individuals, such as unwarranted surveillance or searches
 Protection from Non-State Actors: Preventing non-state actors from
violating privacy rights, which may involve regulating the activities of private
entities that handle personal data

Privacy Against Non-State Actors

 While privacy rights are primarily enforceable against the state, there is growing
recognition of the need to protect these rights against non-state actors
through legislative measures, common law remedies, and judicial recognition

 Legislative Measures: The state must protect individuals' privacy rights

against non-state actors by enacting legislation and regulations that ensure
private entities adhere to privacy standards.

 Common Law: Individuals can seek remedies under common law for privacy
violations by non-state actors, typically through civil courts and tort law.

 Judicial Intervention: The Supreme Court has recognized the need for a robust
data protection regime to address privacy violations by non-state actors,
acknowledging that privacy threats can come from private entities.

 The Kaushal Kishore v. Union of India case recognized that privacy rights can
be enforced against non-state actors, though the exact mechanism for
enforcement was not specified.

 Enforcing privacy rights in a digital world where non-state actors have significant
access to personal data is challenging. Comprehensive data protection laws and
regulations are needed to address these challenges.

Right to be Forgotten

 The right to be forgotten enables individuals to demand organizations delete

their personal information from the internet under certain circumstances.
This right is based on the idea that each person must have the power to
control their data. It first came to light through the 2014 landmark judgment of
the European Court of Justice in the Google Spain SL, Google Inc. v. Agencia
Española de Protección de Datos, Mario Costeja González case.

 The right to be forgotten, often known as the right to be left alone, stems
from the right to privacy. It essentially means that a person has the right to
request that their personal information be deleted from public
resources.

 The digital age has witnessed an explosion in personal data collection, raising
concerns about individual privacy. The Right to be Forgotten (RTBF) empowers
individuals to request the deletion of their personal data

Page 65 of 68
Riley v. California (2014) is a landmark Supreme Court case that determined the
police cannot search digital information on a cell phone seized during an arrest
without a warrant. The Court highlighted that digital data is more private than
physical items, so searching it requires a warrant. This decision underscored the
importance of privacy in the digital age and set a precedent for how digital information is
treated under the Fourth Amendment.
-----------------------------------------------------------------------------------------------------------------------------

Online Defamation

Introduction
 Definition and Importance: Online defamation is a significant issue for social
media companies, celebrities, and individuals. It involves ensuring that online
content is favorable or controlling bad content.
 Legal Framework: The general law of defamation has been imported into
cyberspace, posing new challenges and questions.
Civil and Criminal Defamation
Civil Defamation
 Nature: Civil defamation in India is not codified, meaning there is no specific
statute that defines it. Instead, it relies on common law, judgments, and
precedents. Unlike countries like the UK, which has a Defamation Act, India does
not have a specific statute for civil defamation.
 Elements: Essential elements of civil defamation include:
o Defamatory Statement: A statement that harms the reputation of the
plaintiff [1].
o Harm to Reputation: The statement must cause harm to the plaintiff's
reputation [1].
o Publication: The defamatory statement must be published or
communicated to a third party [1].
 Types:
o Libel: Written defamation, which is easier to prove as it involves tangible
evidence [1].
o Slander: Oral defamation, which is harder to prove due to the lack of
tangible evidence [1].
 Class Defamation: Defamation of a class of people is generally not actionable
unless specific reference is made [1]. For example, saying "all Bollywood actors
are corrupt" does not allow individual actors to sue unless they are specifically
named.
Criminal Defamation
 Legal Provisions: Governed by IPC sections 499 and 500 [1]. Criminal
defamation requires proving intent to harm, making it harder to establish
than civil defamation. For example, if someone intentionally publishes a false
statement to harm another person's reputation, it can be considered criminal
defamation.
 Elements:
o Defamatory Statement: The statement must be defamatory and harm
the reputation of the plaintiff [1].
o Intent to Harm: There must be an intent to harm the plaintiff's reputation
[1].
o Publication: The defamatory statement must be published or
communicated to a third party [1].
 Examples and Case Laws:
o Example: If someone intentionally publishes a false statement to harm
another person's reputation, it can be considered criminal defamation [1].
o Case Law: Arvind Kejriwal vs. State: The court held that retweeting a
defamatory tweet increased its reach and therefore amounted to
defamation. The principle applied here is the multiple publication rule,

Page 66 of 68
 where each retweet is considered a new publication of the defamatory
content.
Additional Points
 Defamation of Public Figures: Public figures must have thicker skin and are
subject to a higher standard to prove defamation. Courts have held that public
figures, by virtue of their position, must be open to criticism and
therefore have a higher threshold to prove defamation.
 Judicial Members: Judges have contempt as a tool rather than defamation. For
example, if someone criticizes a judge's decision, the judge can use contempt
proceedings rather than defamation.
Strategic Lawsuit Against Public Participation (SLAPP)
 SLAPP suits are filed by powerful entities or individuals to stifle public discussion
and criticism. These lawsuits are often used to silence critics by burdening them
with the cost and effort of legal defence, even if the case lacks merit.
 Courts must be circumspect in granting interim orders in SLAPP suits. The
Supreme Court of India, in the case of Bloomberg vs. Telefilms, emphasized
that courts should be cautious in granting interim orders that could stifle public
debate.

Key Points and Case Laws

 Interim Orders: When a civil suit is filed, a significant portion of litigation
involves obtaining interim orders, such as temporary injunctions. These orders
can provide immediate relief by preventing the publication or continuation of the
alleged defamatory content until the case is resolved [1].
 Bloomberg vs. Telefilms: In this case, the Supreme Court reversed an interim
order that had been granted to Telefilms, which sought to prevent
Bloomberg from reporting on certain criminal proceedings against
Telefilms. The court held that at a pre-trial stage, before evidence is laid out,
courts should be very cautious in granting interim orders that could effectively
silence public discussion.
 Bonafide Principle: The standard applied is that an injunction should not be
granted unless the court is convinced that the defendant will fail at trial.
This means that if the court believes there is a strong likelihood that the plaintiff
will win the case, only then should an interim order be granted [1].
 Tata Sons vs. Greenpeace: In this case, Greenpeace had developed a web
game to highlight certain activities by Tata Sons that were allegedly damaging to
the environment. Tata Sons filed a suit for an injunction, which was denied by the
court. The court held that there was nothing defamatory about Greenpeace's
actions and that granting an injunction would stifle public debate [1].
 Crop Care Federation vs. Rajasthan Patrika: Rajasthan Patrika had published
an article about fertilizers or insecticides, and Crop Care Federation, a government
company, filed an injunction suit. The court denied the injunction, stating that it
was a SLAPP suit intended to prevent public discussion on the issue [1].
Online Content and Defamation
 Retweeting and Defamation: Retweeting a defamatory tweet can amount to
defamation. For example, in the case of Arvind Kejriwal vs. State, the court
held that retweeting a defamatory tweet increased its reach and therefore
amounted to defamation [1]. The principle applied here is the multiple publication
rule, where each retweet is considered a new publication of the defamatory
content.
 Influencers and Disparagement: Influencers can be held liable for
disparagement if they cannot back up their claims with facts. For instance, in
Marico vs. Abhijit Batali, the court held that influencers must be careful about
their statements and back them up with facts. Disparagement is a type of
defamation usually used in the context of competitive advertising. For example, if
an influencer claims that a product is harmful without evidence, they can be sued
for disparagement.

Page 67 of 68
  Single vs. Multiple Publication Rule: The document discusses the difference
between the single publication rule and the multiple publication rule. In India, the
Delhi High Court in **Khawar **** vs. Asif Naseem** adopted the single
publication rule, which means that the cause of action arises from the first
publication, even if there are multiple publications thereafter [1]. However, the
Supreme Court's decision in Arvind Kejriwal vs. State seems to apply the
multiple publication rule, at least in the context of criminal defamation [1].
 Freedom of Speech Online: Content critical of the government often gets
booted to offenses under IPC sections 153A, 295A, and 292 [1]. For example, if
someone posts content that is critical of the government, they may be charged
under these sections. In the recent case of Imran Pratapgarh vs. State of
Gujarat, the Supreme Court held that a poem did not incite animosity or hatred
and therefore did not violate IPC section 153A [1].
Online Freedom of Speech
 Legal Standards: Content critical of the government often gets booted to
offenses under IPC sections 153A, 295A, and 292. These sections cover promoting
enmity between different groups, deliberate and malicious acts intended to
outrage religious feelings, and obscenity, respectively. For example, if someone
posts content that is critical of the government, they may be charged under these
sections.
 Recent Case: Imran Pratapgarh vs. State of Gujarat. In this case, Imran
Pratapgarh posted a poem that led to an FIR being filed against him under IPC
section 153A, which deals with promoting enmity between different groups on
grounds of religion, race, place of birth, residence, language, etc.
 Judicial Observations:
 The Supreme Court held that the poem did not refer to any religion, caste, or
race and therefore did not violate IPC section 153A.
 The court emphasized that the standard applied should be that of a
person of strong mind and courageous character, not those of weak and
vacillating minds.
 The court laid down guidelines for preliminary inquiry before
registering an FIR in cases involving online content. The court stated that
charging someone with a criminal offense is a serious matter, and a
preliminary inquiry must be conducted to determine if the content actually
violates any laws.
 The court observed that freedom of expression is fundamental to a free
society and that legitimate expressions of view in the public domain should
not be stifled. The court stated that 75 years into India's independence, the
country cannot be seen to be so shaky on its fundamentals that it gets
agitated over a poem or any form of art or entertainment.

Page 68 of 68