Security and Privacy Issues for Businesses in India

1
Security and Privacy Issues for Businesses in
India

• Nandkumar Saravade

2
Key Issues

• Awareness of implications of inadequate security
• Focus on growth, rather than consolidation
• Absence of frameworks
• Creation of an industry ecosystem
• Lack of enough human resources
• Defining the rights of the customer
• Privacy as a subset of security
• Need for regulation
• Government or Self-Regulation
• NASSCOM experience
• National Skills Registry
• Privacy and Data Protection Standards Board

3
Enforcement Issues

• Better reporting
• Collaboration between enforcement and industry
• Cost of enforcement
• Threshold for triggering investigation
• Who pays for storage, computing and analysis?
• Criminal Investigations and Intelligence
  Gathering
• What should law enforcement be entitled to?
• Specific queries v. data mining
• Reactive v. proactive
• Procedures and Interfaces
• Need for specific laws and judicial oversight
• Warrants v. Administrative Requests

4
Illustrative Scenario Cyber Cafés

• Bridging the Digital Divide
• 70 of Indias internet access
• 105 thousand to 262 thousand in 2010
• 100 million users by 2007
• E-commerce infrastructure
• Rs 5.7 billion in 2004-05 to Rs 23 billion in
  2006-07
• Branches of Internet Banks
• ICICI Bank 14 million customers 20 use
  Internet Banking
• Identity Management
• History of use of cyber cafes as the weak link in
  committing crimes
• Karnataka, Gujarat have made rules under IT Act
• Wide variations in approach
• Onerous responsibility unrealistic expectations
• Mumbai Police have issued orders under CrPC
• Administrative orders in several places
• Regulation as fait accompli