CURRENT CYBER LAW FRAMEWORK IN INDIA AND GAPS WITH REGULATORY FRAMEWORK

Law

India has emerged as one of the world's foremost digital economies, with close to 900 million internet users and an expanding reliance on digital infrastructure for commerce, governance, and civic engagement. This digital growth has been accompanied by a sharp rise in cybercrime, exposing deep-seated weaknesses in the country's legal and institutional architecture. The primary legislative instrument governing cyberspace—the Information Technology Act, 2000 and its 2008 Amendment—was conceived in a technological era vastly different from the present. India's criminal law landscape was further transformed in 2023 through three landmark codifications: the Bharatiya Nyaya Sanhita, 2023 (BNS), replacing the Indian Penal Code, 1860; the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS), replacing the Code of Criminal Procedure, 1973; and the Bharatiya Sakshya Adhiniyam, 2023 (BSA), replacing the Indian Evidence Act, 1872. While these reforms modernise certain procedural and evidentiary dimensions of cybercrime prosecution, significant structural gaps persist: definitional anachronisms that fail to capture emerging threat vectors, the absence of specialised adjudicatory mechanisms, inadequate cross-border enforcement capability, fragmented regulatory oversight, and insufficiently robust privacy safeguards. This assignment critically examines the existing statutory and regulatory architecture governing cyberspace in India, identifies its principal lacunae in light of the new criminal codes, and proposes a reform agenda informed by comparative experience from the European Union, the United States, and Singapore.

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.