This Article is written by Halata Zehra of 7th Semester of Aligarh Muslim University, An Intern under Legal Vidhiya
ABSTRACT
The exponential growth of digital technologies has created unprecedented opportunities but also new vulnerabilities in cyberspace. Cybercrime, ranging from hacking and identity theft to online fraud and cyber terrorism, poses significant threats to individuals, businesses, and governments. To combat these challenges, various national and international legal frameworks have been enacted. In India, the Information Technology Act, 2000, supplemented by the 2008 amendment, provides the primary statutory basis for regulating cybercrime, addressing issues such as unauthorized access, data protection, and electronic evidence. Globally, instruments like the Budapest Convention on Cybercrime (2001) and regional directives in the European Union establish cooperative mechanisms for investigation and prosecution across jurisdictions. This paper explores the scope, objectives, and limitations of these acts, emphasizing the need for harmonization and continuous adaptation to evolving technological threats.
Keywords
cybercrime legislation, Information Technology Act, Budapest Convention, cyber security law, data protection, hacking, cyber terrorism, digital governance
INTRODUCTION
Defining Cybercrime in the Digital Age
Cybercrime encompasses a broad spectrum of illegal activities conducted using computers, networks, or the internet as either the target, tool, or medium of offense. Unlike traditional crimes that occur in physical spaces, cybercrimes transcend geographical boundaries, exploit technological vulnerabilities, and evolve rapidly alongside digital innovation. The category includes diverse offenses: unauthorized access to computer systems (hacking), identity theft, financial fraud through phishing or online scams, distribution of malicious software, cyber stalking and harassment, child pornography, intellectual property theft, and increasingly sophisticated forms of cyber terrorism and state-sponsored cyber warfare.
The defining characteristics of cybercrime present unique challenges for legal systems designed primarily for physical-world offenses. Cybercrimes can be committed anonymously from anywhere in the world, targeting victims in multiple jurisdictions simultaneously. Digital evidence is volatile and easily destroyed or altered. Perpetrators often operate through complex technical mechanisms that obscure their identity and location. The pace of technological change means new attack vectors emerge constantly, while the technical expertise required to investigate and prosecute such crimes exceeds the capacity of many law enforcement agencies.
The Imperative for Regulation
The need for robust legal frameworks to combat cybercrime has become increasingly urgent as societies become more dependent on digital infrastructure. Financial systems, healthcare networks, government services, critical infrastructure, and personal communications all rely on interconnected computer systems vulnerable to attack. Cybercrime threatens not only individual privacy and financial security but also national security, economic stability, and public trust in digital systems.
Without adequate legal regulation, victims of cybercrime face barriers to justice, perpetrators operate with impunity, and the digital ecosystem becomes increasingly hostile and untrustworthy. Effective regulation must accomplish several objectives: clearly defining what constitutes criminal conduct in cyberspace, providing law enforcement with necessary investigative powers while protecting civil liberties, establishing mechanisms for cross-border cooperation, creating accountability for intermediaries and service providers, and ensuring that legal frameworks remain flexible enough to address emerging threats.
The challenge lies in crafting legislation that is technologically neutral enough to remain relevant as technologies evolve, precise enough to provide clear guidance on prohibited conduct, respectful of fundamental rights to privacy and expression, and enforceable across jurisdictional boundaries. This has led to the development of both national statutes tailored to specific legal systems and international instruments aimed at harmonizing approaches and facilitating cooperation.
INTERNATIONAL FRAMEWORKS
The Budapest Convention on Cybercrime (2001)
The Council of Europe’s Convention on Cybercrime, commonly known as the Budapest Convention, represents the first and most influential international treaty specifically addressing cybercrime. Opened for signature in 2001 and entering into force in 2004, the Convention has been ratified or acceded to by over 65 countries spanning Europe, the Americas, Asia, and Africa, making it effectively a global instrument despite its European origins.
The Budapest Convention pursues a comprehensive approach to cybercrime regulation through three main pillars. First, it requires parties to establish domestic criminal offenses covering four categories of conduct: offenses against the confidentiality, integrity, and availability of computer data and systems (including illegal access, illegal interception, data interference, and system interference); computer-related offenses (such as computer-related forgery and fraud); content-related offenses (particularly child pornography); and offenses related to copyright and related rights infringement.
Second, the Convention mandates procedural powers for investigating cybercrimes, including expedited preservation of stored computer data, production orders for subscriber information and traffic data, search and seizure of computer data, real-time collection of traffic data, and interception of content data. These provisions recognize that traditional investigative techniques often prove inadequate for digital evidence that can be destroyed instantly or located in multiple jurisdictions.
Third, and perhaps most significantly, the Convention establishes mechanisms for international cooperation including mutual assistance in investigations and prosecutions, extradition, and a 24/7 network of contact points to facilitate rapid responses to cybercrime incidents. This addresses the fundamental challenge that cybercrimes routinely cross borders while law enforcement authority remains territorially bounded.
The Budapest Convention has faced criticism on several grounds. Privacy advocates argue that its surveillance provisions inadequately protect civil liberties. Some developing nations have criticized it as reflecting primarily Western legal traditions and priorities. The Convention’s focus on traditional cybercrimes has been questioned as technological threats have evolved toward state-sponsored attacks and sophisticated ransomware operations. Nevertheless, it remains the most widely adopted international framework for cybercrime regulation and continues to serve as a model for national legislation worldwide.
European Union Directives and Regulations
The European Union has developed a comprehensive suite of legal instruments addressing cybercrime and cybersecurity, reflecting both the seriousness with which the bloc views these threats and the EU’s capacity for harmonized regulation across member states. The Network and Information Security (NIS) Directive, adopted in 2016 and replaced by the NIS2 Directive in 2022, establishes security and incident notification requirements for operators of essential services and digital service providers. This represents a shift from purely reactive criminal law to proactive security obligations.
The General Data Protection Regulation (GDPR), which came into effect in 2018, while primarily a privacy and data protection instrument, has significant implications for cybercrime prevention and response. Its mandatory breach notification requirements, substantial penalties for security failures, and principles of data minimization and security by design create strong incentives for organizations to implement robust cybersecurity measures. The GDPR’s extraterritorial reach means it effectively sets global standards for any organization processing data of EU residents.
The EU has also adopted specific criminal law instruments, including the Directive on Attacks against Information Systems (2013), which harmonizes definitions of criminal offenses related to illegal access, system interference, and data interference across member states, and establishes minimum penalties and jurisdictional rules. The proposed Cyber Resilience Act represents the EU’s most recent initiative, aiming to impose cybersecurity requirements on hardware and software products placed on the EU market.
United States Federal Legislation
The United States has approached cybercrime regulation through a combination of federal statutes, state laws, and regulatory frameworks developed by agencies like the Federal Trade Commission and the Securities and Exchange Commission. The Computer Fraud and Abuse Act (CFAA), originally enacted in 1984 and amended multiple times, serves as the primary federal statute criminalizing unauthorized access to computer systems. The CFAA prohibits accessing computers without authorization or exceeding authorized access to obtain information, and establishes criminal penalties ranging from misdemeanors to felonies depending on the nature and consequences of the violation.
The CFAA has generated significant controversy and calls for reform. Critics argue its language is overly broad, potentially criminalizing ordinary behavior like violating website terms of service. High-profile prosecutions, including that of internet activist Aaron Swartz, have sparked debates about proportionality and prosecutorial discretion. Courts have struggled with fundamental questions about what constitutes “authorization” and when access “exceeds authorization,” producing inconsistent jurisprudence across circuits.
Beyond the CFAA, federal law includes numerous sector-specific statutes addressing particular cybercrime threats. The Identity Theft and Assumption Deterrence Act criminalizes identity theft and aggravated identity theft. The CAN-SPAM Act regulates commercial email and prohibits fraudulent email practices. The Economic Espionage Act addresses theft of trade secrets, including through cyber means. The USA PATRIOT Act and subsequent legislation expanded law enforcement surveillance authorities in the context of terrorism investigations, though with controversial implications for privacy.
The fragmented nature of US cybercrime law, combined with the federal system in which states retain substantial criminal law authority, creates complexity for both enforcement and compliance. Some states, particularly California, have adopted comprehensive cybersecurity and privacy legislation that in practice sets national standards. The lack of a comprehensive federal privacy law comparable to GDPR represents a significant gap in the US regulatory framework.
Other National and Regional Initiatives
Beyond these major frameworks, numerous countries and regions have developed their own cybercrime legislation, often drawing on the Budapest Convention as a model while adapting provisions to local legal traditions and priorities. China’s Cybersecurity Law, implemented in 2017, establishes broad security obligations for network operators, data localization requirements, and expansive governmental authority to control information flows—reflecting the Chinese government’s emphasis on cyber sovereignty and information control alongside cybercrime prevention.
The African Union adopted the African Union Convention on Cyber Security and Personal Data Protection in 2014, though ratification has been slow. The convention addresses cybercrime, electronic transactions, and data protection in a unified framework tailored to African contexts. Similarly, the Commonwealth Model Law on Computer and Computer-Related Crime provides guidance for member states in developing cybercrime legislation consistent with common law traditions.
These diverse national and regional approaches reflect different balances between security and liberty, varying levels of technical capacity, and divergent priorities regarding which cyber threats demand greatest attention. While international instruments like the Budapest Convention promote harmonization, significant variations persist in definitions of offenses, procedural powers, penalties, and enforcement mechanisms.
LAW OF CYBERCRIME IN INDIA
The Information Technology Act, 2000
India’s primary cybercrime legislation, the Information Technology Act of 2000, was enacted to provide legal recognition for electronic transactions and digital signatures, facilitate electronic governance, and prevent computer-related crimes. The Act was India’s response to the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce and represented a significant step in modernizing Indian law for the digital age.
The IT Act 2000 established a comprehensive framework across several dimensions. It granted legal recognition to electronic records and digital signatures, making them admissible as evidence in court and valid for official purposes. This was essential for the growth of e-commerce and digital governance initiatives. The Act established the office of the Controller of Certifying Authorities to regulate the issuance of digital certificates and ensure the security of electronic authentication mechanisms.
Critically, the Act criminalized various forms of cybercrime through specific offenses outlined in Chapter XI. Section 43 addressed unauthorized access to computer systems, downloading or extracting data without permission, introducing viruses or malicious code, damaging computer systems or networks, and denial of service attacks. These provisions created civil liability with penalties up to one crore rupees for damages caused by such conduct.
Section 66 elevated unauthorized access to a criminal offense punishable by imprisonment up to three years and fines up to five lakh rupees. Section 67 addressed the publication or transmission of obscene material in electronic form, while Section 70 protected critical information infrastructure against unauthorized access. The Act also established adjudication mechanisms through adjudicating officers and appellate tribunals to resolve disputes and impose penalties.
However, the original 2000 Act soon revealed limitations. Its provisions were drafted when internet penetration in India remained relatively low, social media platforms had not yet emerged, and many contemporary cyber threats were unanticipated. The Act lacked provisions addressing specific modern cybercrimes like identity theft, phishing, and cyber terrorism. Its penalties were considered inadequate to deter serious offenses. Procedural provisions for investigation and evidence collection required strengthening. These deficiencies necessitated comprehensive amendment.
The Information Technology (Amendment) Act, 2008
The IT Amendment Act of 2008 substantially revised and expanded India’s cybercrime framework, introducing new offenses, strengthening penalties, and addressing issues that had emerged during the first eight years of the original Act’s operation. The amendment was enacted in response to growing concerns about cyber terrorism following the 2008 Mumbai attacks, increasing incidence of cybercrimes, and the need to align Indian law with international standards.
The 2008 amendment introduced several new criminal offenses. Section 66A (later struck down by the Supreme Court in 2015) criminalized sending offensive messages through communication services, though it was widely criticized for being overly broad and threatening free speech. Section 66B addressed dishonest reception of stolen computer resources or communication devices. Section 66C specifically criminalized identity theft, defining it as fraudulently using another person’s electronic signature, password, or unique identification feature. Section 66D prohibited cheating by personation using computer resources.
Perhaps most significantly, Section 66F introduced the offense of cyber terrorism, defined as acts committed with intent to threaten the unity, integrity, security, or sovereignty of India through denial of access to computer resources, unauthorized access to protected systems, or introduction of contamination or computer viruses. This provision carries severe penalties including imprisonment that may extend to life.
The amendment substantially increased penalties for many offenses, reflecting the growing seriousness with which cybercrime was viewed. It also introduced provisions addressing corporate liability and intermediary responsibility. Section 79 established a safe harbor for intermediaries (platforms, service providers, hosts) from liability for third-party content, provided they exercised due diligence, did not conspire or abet unlawful acts, and expeditiously removed access to unlawful content upon receiving actual knowledge or being notified by the government.
The amendment introduced provisions for compensation to victims affected by data breaches or failures to maintain reasonable security practices. Section 43A made corporate bodies handling sensitive personal data liable for compensation if they failed to implement reasonable security practices, causing wrongful loss or gain. This represented an important step toward accountability for data protection, though subsequent rules under this section faced criticism for being insufficiently robust.
Integration with the Indian Penal Code
While the IT Act provides specialized provisions for cybercrimes, many computer-related offenses also fall within the ambit of traditional criminal law under the Indian Penal Code, 1860. Courts and law enforcement have increasingly recognized that cybercrimes are often simply new methods of committing traditional offenses and should be prosecuted under relevant IPC provisions either independently or in conjunction with IT Act charges.
Sections of the IPC commonly applied to cybercrimes include Section 292 (obscene content), Section 354D (stalking, applicable to cyber stalking), Section 384 (extortion), Section 403 and 406 (criminal breach of trust), Section 415 (cheating), Section 419 (cheating by impersonation), Section 420 (cheating and dishonestly inducing delivery of property), Section 463 (forgery), Section 465 (punishment for forgery), Section 468 (forgery for purpose of cheating), and Section 469 (forgery for harming reputation).
The advantage of applying IPC provisions is that they carry established jurisprudence, clearer procedural frameworks, and often more severe penalties than corresponding IT Act offenses. For instance, cheating under Section 420 IPC carries imprisonment up to seven years, while similar conduct under IT Act provisions may carry lesser sentences. Courts have held that cyber offenses can constitute predicate offenses for charges like criminal conspiracy under Section 120B IPC.
The integration of IT Act and IPC provisions allows prosecutors flexibility in charging strategies and ensures comprehensive coverage of criminal conduct. However, it also creates complexity, as investigators and prosecutors must navigate overlapping jurisdictions and determine the most appropriate legal framework for particular conduct. This has led to calls for clearer guidance on when IT Act provisions should take precedence over traditional criminal law.
Procedural and Evidentiary Provisions
The IT Act contains important provisions governing investigation, evidence, and procedure for cybercrimes. Section 65B addresses the admissibility of electronic evidence, requiring certification that computer output is properly authenticated and reliable. This section has generated extensive litigation regarding when and how electronic evidence must be certified, with courts initially taking strict approaches but subsequently relaxing requirements to avoid excluding relevant evidence on technicalities.
Section 69 grants the central and state governments power to intercept, monitor, or decrypt information transmitted through computer resources for purposes of sovereignty and integrity of India, defense, security, friendly relations with foreign states, public order, or preventing incitement to cognizable offenses. This provision, along with associated rules, has raised significant privacy concerns and has been challenged as granting excessive surveillance authority without adequate safeguards.
Section 78 grants police officers not below the rank of Deputy Superintendent of Police power to investigate offenses under the Act, though Section 80 requires central government notification before a court can take cognizance of offenses under certain sections. These provisions reflect an attempt to ensure specialized handling of cybercrimes by adequately ranked officers while preventing frivolous prosecutions.
The Act also established Cyber Appellate Tribunals to hear appeals from orders of adjudicating officers, though these have been subsequently merged into other appellate bodies. Jurisdictional provisions specify that offenses can be tried where the offense was committed, where the accused resides, or where the computer or network used in the offense is located—recognizing the distributed nature of cybercrimes.
CHALLENGES IN CYBERCRIME REGULATION
Jurisdictional Complexity and Cross-Border Crimes
One of the biggest challenges in tackling cybercrime is the clash between the borderless nature of the internet and the territorial limits of law. A hacker in one country can target victims across dozens of others, while storing evidence on servers somewhere else entirely. Traditional legal principles—like territoriality, nationality, or protecting national interests—struggle to keep up. Sometimes multiple countries claim jurisdiction, while in other cases no one effectively takes responsibility. Even when jurisdiction is clear, gathering evidence or extraditing suspects across borders is slow and complicated.
International cooperation tools such as mutual legal assistance treaties (MLATs) and the Budapest Convention help, but they are often too slow for investigations where digital evidence can vanish in seconds. Not all countries participate, and political tensions or differences in legal standards—especially around privacy and evidence—make coordination difficult.
Safe havens also exist where weak governance or limited enforcement capacity allow cybercriminals to operate freely. In more complex cases, state‑sponsored actors or governments tolerating cybercrime raise thorny questions about sovereignty and international law. The result is widespread impunity: cross‑border cybercriminals often escape justice, leaving victims and law enforcement frustrated. Addressing this requires faster cooperation, stronger frameworks, and recognition of cybercrime’s uniquely global character.
Technological Evolution Outpacing Legislation
Cybercrime law struggles to keep pace with technology. While legislation moves slowly—drafted, debated, and enacted over years—technology evolves exponentially. By the time a statute is implemented, the digital landscape may have changed dramatically. Laws that use specific technical language risk becoming outdated, while overly broad language can leave loopholes or fail to provide clear guidance.
Emerging technologies constantly create new opportunities for crime. Artificial intelligence enables advanced social engineering and automated attacks. Cryptocurrency allows anonymous transactions that complicate financial investigations. Billions of insecure Internet of Things devices expand the attack surface. Cloud computing scatters data across jurisdictions, complicating evidence collection. Deepfakes introduce new forms of identity fraud and manipulation.
Legislators and regulators often lack the technical expertise to anticipate these threats, leaving law enforcement to investigate crimes with outdated statutes. Some jurisdictions attempt to use technologically neutral language, focusing on conduct and harm rather than specific tools. The Budapest Convention, for example, defines offenses broadly as unauthorized access or interference. Yet even neutral laws require interpretation, and courts take time to establish precedent, perpetuating the lag between technological reality and legal frameworks.
Enforcement Capacity and Resource Constraints
Even well-designed cybercrime legislation proves ineffective without adequate enforcement capacity. Investigating cybercrimes requires specialized technical skills that many law enforcement agencies lack. Digital forensics, network analysis, malware reverse engineering, and cryptocurrency tracing demand expertise far beyond traditional investigative capabilities. Many police forces, particularly in developing countries or smaller jurisdictions, have minimal cybercrime units with limited training and resources.
Cybercrime investigations are often resource-intensive, requiring significant time from specialized personnel and expensive technical tools. When agencies face competing demands for limited resources, cybercrime may receive lower priority than violent crimes or other visible threats. Private victims of financial fraud or intellectual property theft may find law enforcement reluctant to investigate cases below certain monetary thresholds, leaving many cybercrimes effectively unprosecuted.
The volume of cybercrime vastly exceeds enforcement capacity. Millions of phishing attempts, malware infections, and fraud schemes occur daily. Law enforcement can pursue only a small fraction, generally focusing on the most serious incidents or cases with good prospects for prosecution. This creates a risk calculus for criminals where the probability of detection and punishment remains low, undermining deterrence.
Judicial capacity presents another constraint. Judges and magistrates often lack technical background to understand complex cybercrime cases. Trials can be lengthy and expensive when technical evidence must be explained in detail. Backlogged court systems may take years to resolve cases, by which time evidence may have degraded and deterrent effects diminished. Building judicial expertise through specialized cybercrime courts or training programs requires sustained investment.
Balancing Security with Privacy and Civil Liberties
Cybercrime investigations often rely on surveillance powers such as intercepting communications, accessing encrypted data, monitoring online activity, and retaining metadata. While these tools help law enforcement detect and prosecute crimes, they also pose serious risks to privacy, free expression, and protection against arbitrary state power. The tension between security and liberty is especially sharp in this area, since powers designed to fight crime can easily be misused for political surveillance, harassment of dissidents, or mass monitoring. History shows repeated examples of such abuse.
Different societies balance these concerns in different ways. European countries generally impose stricter limits on surveillance and data retention, while the United States allows broader powers. Authoritarian regimes often grant expansive monitoring authority with little oversight. India’s IT Act has been criticized for giving the government interception powers without adequate judicial safeguards.
Technological change makes the challenge harder. End‑to‑end encryption protects privacy but blocks law enforcement access even with warrants. Proposals like backdoors, key escrow, or client‑side scanning raise both technical and civil liberties concerns. The debate remains unresolved: how to preserve the security benefits of encryption while meeting legitimate investigative needs.
Intermediary Liability and Platform Responsibility
Cybercrime increasingly occurs through or on digital platforms and intermediaries, i.e., social media networks, messaging services, hosting providers, payment processors, and other entities that facilitate online activity. Determining the appropriate level of responsibility and liability for these intermediaries represents a complex policy challenge.
Imposing strict liability on intermediaries for user-generated content would incentivize heavy-handed content filtering and potentially chill legitimate expression. It might also make operating platforms economically unfeasible, particularly for smaller services without resources for extensive monitoring. However, providing complete immunity enables platforms to host harmful content without consequence, potentially facilitating cybercrime.
Most frameworks, including India’s IT Act Section 79, adopt a conditional safe harbor approach: intermediaries are not liable for third-party content if they meet certain conditions, such as not actively participating in unlawful activity, expeditiously removing content when notified of its illegal nature, and following due diligence requirements. However, questions persist about what constitutes adequate due diligence, how quickly intermediaries must respond to notices, what standard of proof is required before removal, and who bears responsibility for erroneous removals.
The intermediary liability debate intersects with broader questions about platform power and governance. As platforms exercise increasing control over online discourse and economic activity, purely treating them as neutral conduits seems inadequate. Yet imposing extensive regulatory obligations risks favouring large platforms with compliance resources over smaller competitors, potentially entrenching market concentration.
Awareness, Education, and Prevention
Legal frameworks alone cannot eliminate cybercrime if users lack awareness about threats and protective measures. Phishing succeeds because recipients cannot distinguish legitimate from fraudulent communications. Malware spreads through users clicking malicious links or opening infected attachments. Weak passwords enable unauthorized access. Social engineering exploits human psychology and lack of security consciousness.
Building cyber hygiene through education and awareness campaigns represents an essential complement to enforcement. Users need to understand risks, recognize attack indicators, adopt protective practices like strong authentication and software updates, and know how to report incidents. Businesses require guidance on implementing adequate security controls. Children need age-appropriate education about online safety and responsible behavior.
However, awareness initiatives face challenges. Cyber threats change rapidly, making education a continuous rather than one-time need. Effective security practices often conflict with convenience, and many users prioritize ease of use over protection. Technical complexity makes security challenging even for motivated users. And awareness campaigns require sustained funding and coordination across government, private sector, and civil society.
Some argue that responsibility should shift from individual users to technology providers and system designers through security-by-design approaches, better defaults, and automatic protections that don’t require user expertise. This raises questions about regulatory mandates for security features, liability for insecure products, and balancing security with other design considerations.
CONCLUSION
Cybercrime regulation has advanced significantly over the past two decades, evolving from basic laws against unauthorized access to comprehensive frameworks addressing diverse digital threats. International instruments like the Budapest Convention promote harmonization, while national statutes such as India’s IT Act adapt rules to local contexts. These frameworks provide foundations for accountability, investigation, and deterrence, but challenges remain.
The borderless nature of cyberspace clashes with territorial sovereignty, creating jurisdictional gaps and cooperation barriers. Rapid technological change outpaces legislation, producing new threats faster than laws can respond. Enforcement capacity is limited by resources, and balancing security with privacy and civil liberties remains contentious. Questions of intermediary liability and platform responsibility continue to evolve as digital ecosystems mature.
Effective regulation requires continuous reform that balances clarity with flexibility, empowers law enforcement while ensuring oversight, and fosters international cooperation while respecting sovereignty. Complementary measures—like security‑by‑design, awareness initiatives, and technical innovation—are essential. Moving forward, multi‑stakeholder collaboration is critical: governments must legislate and cooperate internationally, companies must secure systems and share intelligence, experts must develop protective technologies, civil society must defend rights, and international bodies must coordinate standards.
Cybercrime regulation is vital as societies depend on digital infrastructure. Effective frameworks must balance protection, rights, flexibility, and global cooperation. Laws alone are insufficient; sustainable cybersecurity requires integrating legal, technical, and social measures to reduce vulnerabilities, ensure accountability, and preserve digital technologies as tools of empowerment rather than dysfunction.
REFERENCES
- Prof. Gayathri N.M., An Analysis of Cybercrimes Laws in India in comparison with the United States of America and the European Union, 14 Aut A. Rese. Jour., 56 (2024)
- Kritika Kushwaha, Cyber laws in India: Issues and Challenges, 5 IJLR, 361(2025)
- Cybercrime Laws in India: A Comprehensive Guide, Cybersecurity Laws in India: A Comprehensive Guide – Lexology (Last visited on 14th January, 2026)
- International Cybercrime Treaties and Case Laws: An overview, International Cybercrime Treaties and Case Laws: An Overview (Till December 2024) – Cyber Law Consulting | Advocates & Attorneys (Last visited on 14th January, 2026)
- Shreya Singhal v. Union of India, AIR 2015 SC (Cri) 834
- Schrems II, 2020
- Cyberlaw: An Overview of Various Acts and Regulations Governing Cyber Law, Cyberlaw: An Overview of Various Acts and Regulations Governing Cyber Law – Sharma and Sharma Law Chambers (Last visited on 14th January, 2026)
Disclaimer: The materials provided herein are intended solely for informational purposes. Accessing or using the site or materials does not establish an attorney-client relationship. The information presented on this site is not to be construed as legal or professional advice, and it should not be relied upon for such purposes or used as a substitute for advice from a licensed attorney in your state. Additionally, the viewpoint presented by the author is personal.
