Internet Governance, Cyber Laws & Ethics
Press Next → or use ← → arrow keys
Who Runs the Internet?
The internet is exactly that city. Internet governance is the set of shared rules, standards and policies that keep this ownerless network running for everyone.
Internet governance means the development and use of shared principles, norms, rules and procedures that shape how the internet evolves and how it is used.
The Multistakeholder Model
Governments, technical bodies, companies, civil society and researchers all shape internet policy together. This is called the multistakeholder model. No one group can control the whole network alone.
The Organisations You Should Know
| Body | What it does | Easy way to remember |
|---|---|---|
| ICANN | Manages domain names and IP address allocation | The internet's address book keeper |
| IETF | Creates technical standards (TCP/IP, HTTP, TLS) | Writes the internet's rulebook |
| W3C | Sets web standards (HTML, CSS, accessibility) | Keeps the web speaking one language |
| ITU | UN agency for global telecom coordination | The UN's phone-and-signal desk |
| IGF | UN forum where all stakeholders debate policy | The internet's town hall (since 2006) |
| CERT-In | India's national incident response team | India's cyber emergency service |
| NIXI | Manages .in domains and Indian internet exchanges | India's corner of the address book |
ICANN names it, IETF connects it, W3C displays it, ITU coordinates it, IGF debates it — and CERT-In defends it in India.
Why Do We Need Cyber Laws?
Ordinary laws were written for physical borders. Cyber laws extend the law into cyberspace — they define digital crimes, make electronic records and signatures legally valid, and give courts and police the power to act on online offences.
India's IT Act, 2000 — Key Sections
The Information Technology Act, 2000 (amended in 2008) is India's main cyber law. These are the sections you will hear most often.
| Section | Covers | Example |
|---|---|---|
| Sec 43 | Damage to a computer or data without permission — civil penalty | Deleting files on someone's laptop |
| Sec 66 | Computer-related offences done dishonestly — criminal | Hacking an account to steal data |
| Sec 66C | Identity theft | Using another person's password or OTP |
| Sec 66D | Cheating by impersonation online | Fake bank call asking for card details |
| Sec 67 | Publishing obscene material electronically | Sharing obscene content on social media |
| Sec 72 | Breach of confidentiality by officials | Official leaking data accessed on duty |
"I was just testing" is not a defence. Accessing any system without written permission can fall under Sections 43 and 66 — even if you cause no damage.
The DPDP Act, 2023 — India's Privacy Law
The Digital Personal Data Protection Act, 2023 governs how organisations collect and use personal data in India.
Data Principal — the person the data is about (you). Data Fiduciary — the organisation that decides why and how your data is processed (a bank, an app, a university).
Cyber Laws Around the World
Every region repeats the same three ideas: punish unauthorised access, protect personal data, and force organisations to report breaches.
From Cybercrime to Courtroom
In online financial fraud, the first hours matter most. Reporting fast on 1930 (India's cyber fraud helpline) or cybercrime.gov.in lets banks freeze the money before it disappears. The green file in the diagram is the evidence — it must travel with the case at every step.
Same Skills, Different Choices
Permission. A white hat tests systems with written consent and gets paid. A grey hat probes without asking — even good intentions can break Section 43. A black hat attacks for gain and faces prison. The skills are identical; the choice is not.
The Professional's Code of Conduct
Ethics for Every Internet User
You do not need to be a hacker to face ethical choices online. These apply to everyone, every day.
Case Study — The Cosmos Bank Heist
The case shows every theme of this module at once: a borderless crime, Indian police working with international agencies, charges under the IT Act, and years of cross-border legal work to trace the money.
No single country could handle this alone. It needed shared technical standards to trace the transactions, cyber laws in many countries to arrest suspects, and treaties to share the evidence. That is internet governance in action.
Rules Keep the Ownerless City Running
The internet has no owner — it runs on the multistakeholder model. Cyber laws like the IT Act, DPDP Act and GDPR extend justice into cyberspace. And ethics decide what you do with your skills when no one is watching.
Read a summary of the IT Act and the DPDP Act. Explore cybercrime.gov.in to see how reporting works. Follow an IGF session online to watch governance debates live. And before any security test — get it in writing.
🌐 End of tutorial · Press ← to review, or click Restart