Learning Objectives
By the end of this chapter, you will be able to:
- Define cyber law and explain why specialized digital legislation is necessary.
- Outline key provisions of Nepal’s Electronic Transactions Act, 2063 (2008).
- Differentiate between copyright, patents, trademarks, and industrial designs.
- Explain the role of digital literacy as a primary defense against cyber threats.
Why Cyber Law is Needed
Traditional legal frameworks were drafted for tangible physical goods, paper contracts, and jurisdictional physical borders. Computer networks introduce challenges:
- Intangibility of Evidence: Data packets, server logs, and digital files can be altered or erased instantly.
- Cross-Border Jurisdiction: An attacker operating in one country can compromise banking servers in another within milliseconds.
- Speed and Automation: Automated botnets and unauthorized financial transfers execute at machine speeds without human paperwork.
Cyber law provides the statutory framework governing electronic commerce, digital contracts, information security, and cybercrime prosecution.
Nepal: Electronic Transactions Act, 2063 (ETA 2008)
The cornerstone legislation in Nepal for computer law is the Electronic Transactions Act, 2063 (ETA). Passed in 2063 B.S. (formalized in 2008), the Act addresses three primary domains critical to business:
flowchart TD
ETA["Electronic Transactions Act, 2063 (ETA)"]
ETA --> L["Legal Recognition of Electronic Records & Digital Signatures"]
ETA --> C["Computer Crime & Offences (Hacking, Tampering, Fraud)"]
ETA --> E["Institutional Infrastructure (Controller of Certifying Authorities)"]
1. Legal Validity of Electronic Records & Digital Signatures
- Confers full legal recognition upon digital contracts, emails, and electronic receipts.
- Establishes that an electronic document or digital signature cannot be denied legal validity solely because it is in electronic format.
- Creates the regulatory framework for Certifying Authorities (CAs) to issue trusted digital certificates for banking, e-tax filings (Inland Revenue Department), and company administration (Office of the Company Registrar).
2. Offences and Penalties
The Act criminalizes key computer abuses:
- Unauthorized Access (Hacking): Entering or attempting to enter computer systems without authority.
- Data Tampering & Destruction: Altering, deleting, or damaging source code, databases, or program files.
- Identity Theft & Digital Fraud: Misrepresenting credentials or committing financial fraud electronically.
- Publishing Illegal or Obscene Content: Transmitting prohibited material across electronic media.
3. Complementary Regulatory Frameworks in Nepal
Alongside ETA 2063, businesses must adhere to:
- Nepal Rastra Bank (NRB) IT Guidelines: Mandating strict cybersecurity audits, two-factor authentication, and disaster recovery sites for all commercial banks and payment service operators (eSewa, Khalti, Fonepay).
- Consumer Protection Act: Regulating online merchant obligations and return policies in digital commerce.
Digital Literacy
Digital literacy goes beyond technical proficiency (typing or using software). It is the critical ability to:
- Evaluate whether online information is authentic or fraudulent.
- Recognize social engineering, phishing emails, and fake banking URLs.
- Safely manage corporate credentials, enforce multi-factor authentication (MFA), and protect customer data.
In corporate environments, employee digital literacy represents the organization’s first line of cybersecurity defense.
Intellectual Property (IP) in Information Technology
Intellectual property protects creations of the human mind. The IT domain primarily interacts with four categories:
| IP Type | What it Protects | Business & IT Example | Nepal Governing Law |
|---|---|---|---|
| Copyright | Original expression of ideas (not the idea itself) | Source code, software documentation, web page copy, graphics | Copyright Act, 2059 |
| Patent | Novel, inventive inventions or technical processes | Proprietary compression algorithm, hardware mechanism | Patent, Design and Trademark Act, 2022 |
| Trademark | Distinctive names, logos, and brand symbols | Brand names (e.g., Apple, Gurkha Tech), domain names | Patent, Design and Trademark Act, 2022 |
| Industrial Design | Ornamental visual aesthetic or physical shape | Unique casing or ergonomic design of a smartphone | Patent, Design and Trademark Act, 2022 |
Software as a Literary Work
Under Nepal’s Copyright Act, 2059, computer programs and software source code are legally protected as literary works. Copying, distributing, modifying, or deploying unlicensed commercial software constitutes a criminal copyright violation with civil liability for damages.
Summary
Cyber law bridges technical controls and the justice system. In Nepal, the Electronic Transactions Act, 2063 provides legal validity to digital business, while penalizing unauthorized system access and tampering. Paired with intellectual property laws like the Copyright Act, 2059, it establishes the operational rules for Nepal’s growing digital economy.
Key Takeaways
- ETA 2063 legalizes electronic records, digital signatures, and e-commerce transactions in Nepal.
- ETA penalizes hacking, data tampering, and electronic fraud.
- Software is protected under copyright law as an original literary expression.
- Digital literacy among employees is the most effective safeguard against organizational cybercrime.
Review Questions
- Why are traditional paper-based contract laws insufficient for modern e-commerce?
- List three major provisions enabled by Nepal’s Electronic Transactions Act, 2063.
- How does copyright protect software differently from a patent?
- What is the role of digital signatures in business-to-government (B2G) transactions in Nepal?
