Cyber Law in India in the Digital Age: Emerging Challenges, Legal Responses and The Need for A Rights-Base Cybersecurity Framework

Abstract

Abstract The rapid expansion of digital technology has transformed the social, economic and administrative life of India. Online banking, digital payments, e-governance, social networking, cloud computing, artificial intelligence and electronic commerce have created substantial opportunities for development, but they have simultaneously generated new forms of vulnerability. Cybercrime has consequently become a multidimensional legal and public-policy challenge involving individuals, businesses, financial institutions and the State. India’s principal statutory response has been the Information Technology Act, 2000, supplemented by rules, regulations and other laws dealing with criminal conduct, electronic evidence, privacy and data protection. This paper examines the development and contemporary structure of cyber law in India and analyses the capacity of the existing legal framework to respond to emerging digital threats. Particular attention is given to unauthorised access, identity theft, online financial fraud, cyberstalking, intermediary responsibility, privacy, electronic evidence, artificial intelligence-generated content and cross-border cyber offences. The paper also considers the relationship between the Information Technology Act, the Bharatiya Nyaya Sanhita, 2023, the Bharatiya Nagarik Suraksha Sanhita, 2023, the Bharatiya Sakshya Adhiniyam, 2023 and the Digital Personal Data Protection Act, 2023. The study adopts a doctrinal and analytical methodology based primarily on legislation, governmental materials, judicial decisions and secondary legal literature. It argues that Indian cyber law has developed considerably since 2000 but remains fragmented across different legal instruments. The paper proposes stronger institutional coordination, specialised cyber-investigation capacity, improved digital-evidence procedures, privacy safeguards, greater public awareness and technology-neutral legislative drafting. A rights-based approach is necessary so that cybersecurity and digital governance do not develop at the expense of constitutional freedoms.