Introduction The Pegasus spyware controversy of 2021 exposed, with unusual clarity, the structural inadequacies of India’s surveillance oversight framework. When the Forbidden Stories consortium and Amnesty International’s Security Lab published
Introduction Security research is a public good. The identification and disclosure of software vulnerabilities before malicious actors exploit them protects individuals, organisations, and governments from harm. Ethical hackers, penetration testers,
Introduction The architecture of digital commerce is not neutral. Every element of an online shopping experience, from the colour of a “buy now” button to the prominence of a subscription
Introduction Jurisdiction is the foundational question of any legal system: which authority has the power to make law, adjudicate disputes, and enforce decisions in a given situation? In physical space,
Introduction The proliferation of digital financial services in India has been one of the defining economic achievements of the past decade. The Unified Payments Interface, launched in 2016, processed over
Introduction The right to erasure, sometimes called the right to be forgotten, has occupied a central position in data protection discourse since the Court of Justice of the European Union
Introduction The regulation of social media intermediaries has been one of the most contentious legal developments in Indian cyberlaw in the present decade. The Information Technology (Intermediary Guidelines and Digital
Introduction Ransomware has emerged as the defining cybercrime challenge of the 2020s. Unlike earlier forms of cybercrime that targeted individual financial accounts or stole data for immediate monetisation, ransomware attacks
Introduction The governance of cybersecurity for critical information infrastructure (CII) sits at the uncomfortable intersection of national security imperatives, regulatory fragmentation, operational feasibility, and fundamental rights. India’s approach to this
Introduction The Digital Personal Data Protection Act, 2023 (DPDP Act) represents India’s most consequential legislative intervention in data governance since the Information Technology Act of 2000. Receiving Presidential assent on