Ransomware and Malware — Legal Reforms

Entry	Year	Description	Impact
Information Technology (Amendment) Act, 2008	2008	This significant amendment broadened the scope of cybercrimes, introduced new sections, and enhanced penalties. It specifically addressed issues like data protection, identity theft, and cyber terrorism. It also introduced Section 66A (later struck down) and strengthened provisions related to hacking and data theft, making the IT Act more robust in addressing evolving cyber threats.	Strengthened India's legal framework against cybercrime, aligning it more closely with international standards. It provided clearer definitions for various cyber offenses and increased the punitive measures, thereby enhancing the deterrent effect. For ransomware and malware, it provided more specific legal grounds for prosecution under expanded definitions of 'computer contaminant' and 'damage'.
Proposed Amendments/New Legislation (e.g., Digital India Act, Data Protection Bill)	Ongoing/Future	While not yet enacted, India is actively working on new legislation, such as the Digital India Act (to replace IT Act 2000) and the Digital Personal Data Protection Bill, 2022. These aim to modernize India's digital laws, address contemporary challenges like data privacy, cross-border data flows, and emerging cyber threats more comprehensively, including specific provisions for data breaches and incident reporting.	These future legislative changes are expected to significantly overhaul India's cyber legal landscape. They will likely introduce stricter data protection norms, clearer responsibilities for data fiduciaries, and potentially more agile mechanisms for addressing sophisticated cybercrimes like ransomware, thereby enhancing citizen protection and national cyber resilience. This is a crucial area for UPSC aspirants to track for current affairs.