Electronic Transactions Act 2063 — digital signatures and cyber offences
Exam Snapshot
The Electronic Transactions Act, 2063 (2006) is Nepal's primary legislation governing cyber activities, e-commerce, and digital forensics. For the LLB entrance and judicial exams, focus on the legal status of electronic records, digital signatures, the structure of the Information Technology Tribunal, and the specific penal provisions in Chapter 9 (especially Section 47).
Core Concept
- Legal Recognition of Electronic Records: Under Section 3, any information, document, or record generated, sent, received, or stored in electronic form has the same legal validity as its paper counterpart.
- Digital Signature: A security mechanism where an asymmetric cryptosystem and hash function are used to secure electronic records. A digital signature is verified via a public key and generated using a private key.
- Controller of Certifying Authorities (CCA): The government-appointed regulatory officer (Section 13) who licenses and regulates Certifying Authorities (CAs) that issue Digital Signature Certificates.
- Certifying Authority (CA): The licensed entity (Section 18) authorized to issue Digital Signature Certificates to subscribers.
- Information Technology Tribunal: A three-member judicial body constituted under Section 60 to hear offenses under the Act, comprising Law, Information Technology, and Commerce members.
Nepal Law Anchors
- Section 3: Legal recognition of electronic records.
- Section 13: Appointment and powers of the Controller of Certifying Authorities.
- Section 44: Punishment for hacking or altering computer source code (Fine up to 2 Lakhs, imprisonment up to 3 years, or both).
- Section 47: Publication of illegal/indecent material on computers or internet (Fine up to 1 Lakh, imprisonment up to 5 years, or both).
- Section 57: Criminal liability of corporate bodies.
- Section 60: Constitution of the Information Technology Tribunal.
Confusable Terms
| Term | Private Key | Public Key |
|---|---|---|
| Function | Used to create/affix a digital signature. | Used to verify the digital signature. |
| Secrecy | Must be kept strictly confidential by the subscriber. | Available publicly to any verifier. |
| Cryptosystem | Asymmetric (the sender's secret key). | Asymmetric (the matching open key). |
MCQ Traps
- Trap: Believing that appeals from the Information Technology Tribunal go to the Supreme Court.
Correct Framing: Under Section 66, appeals against the decisions of the Tribunal lie with the High Court (formerly the Appellate Court). - Trap: Confusing the maximum penalty of Section 44 (Hacking) with Section 47 (Illegal publication).
Correct Framing: Section 44 (Hacking) has a higher fine limit (NPR 200,000) but lower jail term (3 years). Section 47 has a lower fine limit (NPR 100,000) but a higher jail term (5 years). - Trap: Assuming anyone can issue a Digital Signature Certificate.
Correct Framing: Only a licensed Certifying Authority (CA) approved by the Controller (CCA) can issue these certificates.
Example
If a person accesses an unauthorized database and alters the grade sheet of a university, they commit computer hacking under Section 44 of the Act. Conversely, if that person posts defaming statements and doctored obscene photographs of a classmate on Facebook, the prosecution will be initiated under Section 47 of the Act.
Memory Hook
44 alters code, 47 posts code — Hacking (altering source) is Section 44 (3 years/2 Lakhs), while publishing indecent content online is Section 47 (5 years/1 Lakh).
Quick Revision
- Enactment Date: 2063.08.22 (December 8, 2006).
- Tribunal Structure: 3 Members (Law, IT, Commerce).
- Tribunal Term: Members serve a term of 5 years (Section 61).
- Limitation Period: For filing complaints, it is six months from the date of knowledge of the offense (Section 74).
- Evidentiary Value: Governed in tandem with Section 10A of the Evidence Act, 2031, certifying the admissibility of electronic evidence.