With the evaluation of e-governance and society moving towards digitization, the Information Technology has penetrated in every sphere of life and the profession of law, is no exception, is immensely impacted by it. The proliferation comprises of e-Business, Digital Communication, Digital Evidence, hacking, DDoS attacks, online frauds Blue Whale Games and includes everything in the digital realm which has to be handled in court litigations. Further, the internet lacks boundary and as such cyber laws have been structured in a manner to have universal applications. With the dynamically changing technologies, the challenges for the cyber lawyers are growing as there is a continuous need to update the technical knowledge. The main change is the movement of the data from the hard disk/static data analysis to different storage areas, from the cloud to browser-based and to points such as mobile phones.
A law governing the Cyber Space is known as Cyber Law, which governs various components like Computers, Networks, Software, Data Storage Devices, the Internet, websites, emails and even electronic devices such as cell phones, ATM machines etc. It is a law which provides protection or reduces the damages from the cyber criminal activities.
Scope of Cyber Arena
The domains requiring an application of cyber laws are even much wider than the legal domain itself. Its application is not limited to the existing civil & criminal litigations. Due to the unique nature of the internet, a large number of compliances have emerged involving a combination of technology and law. The internet, being a public medium, has brought various inherent risks which have resulted in exponential expansion of the domains of privacy, freedom of speech or expressions, cybersecurity and thus, created wider scope for the legal professionals into this arena.
In pursuance to recent Privacy Judgment of Supreme Court of India, the opportunities in this arena are going to increase exponentially. The opportunities in the cyber domain emerge as a cyber lawyer, specializing into litigations involving information technology, cyber consultant in the companies- particularly in every IT company and almost every government department. The tremendous growth of the information technology is pervasive in every domain of life and business which is responsible for expanding and opening–up of the opportunities for legal professionals in the cyber field.
Studying cyber law can help IT and other professionals like CIO, CISO, CISA, CISSP, CA, CS etc. to provide better services to their clients by providing them with know how about the legal aspect of the issues relating to e-businesses. The integration of processes in every domain with the information technology have resulted into all the processes exposed to cyber risks and as such the compliances and information system audit has become mandatory for all medium or big organizations.
In US and Europe, the cyber law field is dominated by technology lawyers and most of them enter into this arena at the bachelor stage itself by acquiring B.Tech, BCA or B.Sc Computer Sciences along with the legal degree i.e. L.L.B. Further, the specialized courses such as CFCE, CCFP, CEH, CISSP etc with specialized training in the field are also available into the various Cyber Forensics Disciplines and Cyber Securities Arena. This allows these techno lawyers to hone their skills into cyber domain which are required in these litigations.
In India, the scenario is quite dismal and the concept of techno lawyer is completely misunderstood. The judiciary as well as investigating agencies are not trained to meet these challenges and alarming situation being that it is not a priority even now. The half hearted efforts are being made to bridge these gaps by way of training but due to huge demand, potential and kind of skill required, the gap is ever widening with each passing day creating a large vacuum for techno-legal professionals in this digital arena.
The legal world identifies two broad domains, criminal law and civil law, which infact are procedural laws either Criminal Procedure Code or Civil Procedure Code and this scenario is prevalent throughout the world. Every case which is filed in the court of law falls in these two domains including the cases involving cyber technologies. Most of the information technology laws including Information Technology Act 2000, Privacy Regulation throughout the world are substantive law and there are few procedures which have been added to the existing procedural laws to amend the provision for the collection, preservation and admissibility of digital evidence. The role of lawyers in the case of information technology is to apply the substantive law which may include other Primary Law to present the case in criminal or civil before the court of law.
The entry to the cyber law domain can be as early as with the passing of secondary education. The aspirants can join five years integrated course such as B.Tech, LLB or B.Sc LLB and even the aspirants who have joined BA or BBA LLB course can also develop their technical skills along with their graduation. With the LLB, the young aspirants can develop their skills into Networking, OSI models, TCP, different operating system i.e. Windows, Mac, Linux, Mobiles etc. The best way is, that along with the law degree, the individual can do the certifications in networking also, acquiring skill in the hacking methodologies and the courses like CCNA, CEH etc. This would not only refine the skills but would also give an abstract view of the movement of data and risks of the real world.
After the LLB, the individual needs to go for training in the court to develop its skills in the procedural laws i.e. Cr.P.C, CPC, Interpretation of Statutes and join specialized courses like PG Diploma or LLM in Cyber Law. The development of legal skills in the interpretation is more important in the field of cyber as the cyber law is still emerging and only a lawyer with an expert knowledge of the legal principles, principles of interpretations of statutes would be in a position to apply the law to the constantly emerging and developing technology.
The lawyers who are already in the practice can also play a dominant role by entering into this specialized field as these advocates have already gone expert into legal domain and are in much better position to apply legal skills to the cyber cases provided they acquire specialized knowledge of networking and other computer technologies. It is pertinent to mentioned that the arena of computer, which is connected to the law, is a different segment which even a person doing B.Tech or B.Sc may not be fully exposed to, but these technocrats, because of their understanding of technical concepts, are in a better position to acquire these skills as compared to the other lawyers. However, a technocrat, who-so-ever may be an expert, but if he does not have the legal skills to conduct criminal or civil proceedings, would have very dim chances of being a successful lawyer.
In order to further augment the skills and to make it compatible with international domain, one can learn Computer Forensic, Advanced Network Technologies, Mobile Technologies and for this purpose, one can go through various courses such as CFCE, CCFP, CHFI and other domain oriented courses. As for a single individual, it may not be possible to acquire all these skills simultaneously, the best course of action will be to choose a particular segment first, such as computer forensic or network forensic, and after acquiring expertise in one field and combining it with an available exposure into the IT cases, the individual can move ahead slowly after consolidating the positions at each level with a blending mixture of theoretical and practical knowledge of the legal and IT domain.
The technocrat moving into the legal field needs to undergo training into criminal or civil trials and to acquire the skill of cross-examination, arguments, interpretation, otherwise, they may be ornamental lawyers who may be a good consultant on cyber technologies or compliances but may not develop dominion into litigation or even cyber consultancies.
What Should One Do
If you are a new aspirant, you can go with B.Tech/B.Sc/BCA LLB or can do CCNA, CEH, CHFI along with your LLB degree. Thereafter, you need to develop your skill into civil/criminal law and along with you need to update on the technology as well. In order to further hone your skill, you can do LLM in Cyber, if you want to go towards litigation or you can do CISA or CISM, if you want to go for consultancies.
If you are a practicing advocate and do not have the knowledge of technology, you can develop your skills technology by undergoing courses on networking, hacking and short-term courses on computer forensics i.e. CCNA, CEH, CFCE and CHFI etc. Thereafter, with a balanced exposure to cyber cases and emerging technologies, one can become an expert over a period of time.
Again for the sake of repetition, I would repeatedly insist that developing the legal skills and spending the time in civil/criminal litigations is even more important than acquiring the technical knowledge. Both the categories of cyber lawyers, technocrat termed lawyer and the lawyer acquiring technical know-how needs to remember that for practicing cyber law domain, the knowledge of legal skills will pre-dominant the technical knowledge. Doing small courses, either into computer or cyber law, would not make you competent to handle these cases of data breach or hacking or cases involving cyber forensics. The skills in the field of information technology, as well as law, have to be developed in parallel through a consistent study, practice and exposure.
The popularity, of cyberlaw as a career, was predominant in the past as well as in present and would broom and groom in future also. The key to excel as a cyber lawyer is to become a perpetual student of law & technology for which one needs to have a passion for the subject. The cyber lawyers will find the society, investigating agencies, legal fraternity, judiciary watching them explain the hidden layers in order to explore the truth and aiding in the delivery of justice.