Crimes Against Computers
1. Introduction:
Computers and information systems now support banking, education, communication, business and public services. When an offender attacks the system itself its security, operation, or availability — the conduct may be classified as a crime against a computer. Here, the computer is the target of the offence, rather than merely a tool used to commit another crime.
2. Meaning and Scope:
A crime against a computer is an unlawful act directed at a computer, network or information system, intended to gain access without permission, disrupt its normal operation or damage its functioning. The attack may target a personal device, a business network or a system supporting essential services. This category can overlap with crimes against data. For example, an offender may break into a system to copy its records: the unauthorized entry targets the system, while the copying compromises the data.
3. Main Forms:
i. Unauthorized access:
Unauthorized access occurs when a person enters an information system without permission, or accesses it in breach of the conditions of their authorization. For example, deliberately breaking into another person’s email account or a company’s server may fall within this category.
ii. Interference with or damage to a system:
An offender may disrupt or damage a system so that it cannot operate normally. Examples include deliberately disabling a website, interfering with a network or introducing malicious code that disrupts a device. The harm may involve lost access, interrupted services or impaired system performance; physical destruction of the computer is not necessary.
iii. Attacks on critical infrastructure:
Some attacks target systems connected with essential services or national functions. An attack on such a system may affect far more than its owner: it may interrupt services relied upon by the public or create risks to public safety. PECA therefore makes separate provision for offences involving critical infrastructure systems and data.
4. Relevant Provisions Under PECA:
The Prevention of Electronic Crimes Act, 2016 (PECA) addresses several forms of conduct directed at information systems:
- Section 3 deals with unauthorized access to an information system or data.
- Section 5 deals with interference with or damage to an information system or data.
- Sections 6 to 8 address unauthorized access, copying or transmission, and interference involving critical infrastructure systems or data.
- Section 23 deals with malicious code.
The precise provision depends on what the accused did, the system involved and the required intention. PECA’s definition of interference includes an unauthorized act that may disturb a system’s normal working, whether or not it causes actual damage.
5. Effects and Significance:
Crimes against computers can interrupt personal, commercial and public services. A business may lose access to its network; users may be unable to reach an online service; and an attack on a critical system may affect essential operations. These offences also undermine confidence in digital services and can expose connected data or systems to further misuse.
6. Conclusion:
Crimes against computers are distinguished by their target: the computer or information system itself. PECA criminalizes unauthorized access, interference and specified attacks on critical infrastructure, recognizing that the disruption of a digital system can cause serious harm even where the device is not physically damaged.
Crimes Against Data and Information
1. Introduction:
Computers store and transmit personal, financial, commercial and official information. This information can be valuable even when no physical object is taken. A person may unlawfully obtain, copy, alter, delete, intercept or disclose data, causing harm to its owner or to others who rely on it. Such conduct is commonly described as a crime against data and information.
2. Meaning and Scope:
A crime against data or information is an unlawful act directed at digital material stored, processed or transmitted through an information system. The data may be a message, photograph, account record, database, software program or electronic document. The principal target is the information itself: its confidentiality, accuracy or availability. For example, an offender who secretly copies a company’s customer database targets the data, even if the company’s computer continues to work normally.
3. Main Forms:
i. Unauthorized access to data:
A person may access private or restricted data without permission, or exceed the limits of their authorized access. This may expose confidential communications, financial details or personal records.
ii. Unauthorized copying or transmission:
Digital information can be copied or sent elsewhere without removing the original. An employee who secretly transfers confidential files to a personal account, for example, may compromise the owner’s control over that information.
iii. Alteration, deletion or suppression:
An offender may change, erase or suppress data to mislead others or prevent access to accurate records. Altering an electronic document so that it appears genuine may also amount to electronic forgery.
iv. Unauthorized interception or disclosure:
Private communications may be intercepted while being transmitted, or personal information may be disclosed without proper authority. Such conduct can violate privacy and expose the affected person to financial, personal or reputational harm.
4. Relevant Provisions Under PECA:
The Prevention of Electronic Crimes Act, 2016 (PECA) criminalizes several forms of interference with data:
- Section 3 covers unauthorized access to an information system or data.
- Section 4 covers unauthorized copying or transmission of data.
- Section 5 covers interference with or damage to an information system or data.
- Sections 6 and 7 address unauthorized access to, or copying and transmission of, critical infrastructure data.
- Section 13 deals with electronic forgery, including creating unauthentic data intended to be treated as genuine for legal purposes.
- Section 19 addresses unauthorized interception of specified communications.
The Act’s definition of interference includes an unauthorized act that may disturb the normal working or form of a system or data, whether or not actual damage is caused.
5. Effects and Significance:
Data-related offences can cause serious harm without any physical property being removed. A victim may lose privacy, face financial loss, have their identity misused or be unable to rely on accurate records. A business may suffer the exposure of confidential information; interference with critical infrastructure data may also disrupt important services. These offences are often difficult to detect because the original data may remain in place even after it has been copied or secretly viewed.
6. Conclusion:
Crimes against data and information target the content stored or transmitted through digital systems. They may involve unauthorized access, copying, alteration, deletion, interception or disclosure. PECA addresses these acts because the misuse or compromise of digital information can cause substantial personal, financial and public harm—even when the computer itself continues to function.
Crimes Against Persons
1. Introduction:
Digital technology has created new ways to target individuals. A phone or social media account may be used to threaten, humiliate, stalk, exploit or manipulate another person. In these offences, the person is the target, while the computer or information system is the means through which the harm is caused.
2. Meaning and Scope:
Crimes against persons are unlawful acts committed through digital devices or networks that harm or threaten an individual’s dignity, reputation, privacy, modesty, safety or well-being. Some involve conduct that also exists offline, such as stalking or harassment. Digital technology can increase the harm by allowing abuse to reach a wider audience, continue over time and follow the victim across different settings.
3. Main Forms:
i. Cyberstalking and persistent harassment:
This may involve repeatedly contacting someone despite clear indications that the contact is unwanted, monitoring their electronic communications, or watching or spying on them in a way that causes fear or serious distress.
ii. Online humiliation and reputational harm:
A person may be targeted through false or damaging material, impersonation, or the publication of private information intended to intimidate or harm their reputation or privacy.
iii. Sexual abuse and exploitation:
Digital platforms may be used to threaten someone with sexual material, circulate intimate images without consent, manipulate a person into sexual conduct, or groom a minor for sexual abuse. The harm may continue even after the original communication ends if material has been copied or shared.
iv. Cyberbullying:
Cyberbullying involves using electronic messages, images or videos to harass, threaten or target a person. It may take place through social media, messaging services, blogs or chat rooms.
4. Relevant Provisions Under PECA:
The Prevention of Electronic Crimes Act, 2016 (PECA) addresses several offences against individuals:
- Section 20 concerns specified forms of knowingly transmitting false information that intimidates or harms a natural person’s reputation or privacy.
- Section 21 addresses specified offences involving sexually explicit images or videos, sexual threats and related conduct.
- Sections 22 and 22A address child sexual-abuse material and online grooming, solicitation and cyber enticement.
- Section 24 deals with specified forms of cyberstalking.
- Section 24A addresses cyberbullying through electronic messages, including pictures or videos.
5. Effects and Significance:
These offences may cause fear, anxiety, humiliation, reputational damage, social isolation or loss of privacy. Sexual exploitation and stalking may also create serious concerns for a victim’s safety. Minors can be particularly vulnerable to grooming and coercion. Because digital content may be copied and redistributed, the harm can persist and reach people beyond the original audience.
6. Conclusion:
Crimes against persons use digital systems to attack an individual’s rights and well-being. PECA addresses particular forms of online harm, including cyberstalking, cyberbullying, offences involving sexual material and online grooming of minors. Their significance lies in the fact that digital abuse can cause lasting personal harm without physical contact.
Crimes Against Property
1. Introduction:
Digital technology has created new ways to obtain money, deceive property owners and misuse assets held or transferred online. In these offences, a computer or information system may be used to deceive a victim, alter records or gain control over property. The property affected may be physical, financial or digital.
2. Meaning and Scope:
Crimes against property are unlawful acts that cause a person to lose, surrender or be deprived of the use or control of property. In cyberspace, an offender may manipulate electronic transactions, create false digital records, steal financial credentials, or misuse an online identity to obtain property. The idea of property may also extend to virtual property: assets that exist or have value in a digital environment, such as domain names, digital accounts or in-game items. Whether a particular digital asset is legally recognized as property, and which law applies to its misuse, depends on the facts and the relevant legal rules.
3. Main Forms:
i. Electronic fraud:
An offender may use an information system or deceive a person to obtain wrongful gain or cause financial harm. Examples include fake investment offers, fraudulent online sales and deceptive payment requests.
ii. Electronic forgery:
An offender may alter, delete or suppress electronic data to create an unauthentic record intended to be treated as genuine. A forged electronic document may be used to support a false claim, induce a contract or cause someone to part with property.
iii. Misuse of identity information:
Stolen identity details or account credentials may be used to impersonate a victim, access accounts or facilitate fraudulent transactions. Identity misuse is itself addressed by PECA and may also serve as a means of committing property related fraud.
iv. Misappropriation of digital assets:
An offender may unlawfully take control of, transfer or interfere with an asset held in a digital environment. Such conduct can raise questions about ownership, value and the legal character of the asset, particularly where it exists only online.
4. Relevant Provisions Under PECA:
The Prevention of Electronic Crimes Act, 2016 (PECA) contains provisions relevant to property related cybercrime:
- Section 13 deals with electronic forgery, including creating unauthentic data intended to be treated as genuine for legal purposes.
- Section 14 deals with electronic fraud involving intent for wrongful gain and conduct likely to cause damage or harm.
- Section 16 addresses unauthorized use of another person’s identity information.
- Section 26 deals with spoofing, including the use of a counterfeit source intended to appear authentic.
- Section 27 provides that, for laws creating offences concerning property, references to property include information systems and data.
5. Effects and Significance:
Property related cybercrime can cause direct financial loss, disrupt business transactions and undermine confidence in online banking and commerce. A victim may also face practical difficulties recovering money, restoring access to accounts or correcting forged records. Digital assets can be particularly difficult to trace when they are transferred quickly or held across different platforms.
6. Conclusion:
Crimes against property in cyberspace involve using digital systems to obtain, deceive, transfer or interfere with property and economic interests. PECA addresses conduct such as electronic fraud, forgery, identity misuse and spoofing, while section 27 recognises information systems and data within the law’s references to property.