ICT & Cyber Security

📱 Overview

Information and Communication Technology (ICT) and cyber security form a fast-growing, current-affairs-heavy segment of the Science & Technology syllabus, spanning both India's digital transformation initiatives and the legal framework governing data, privacy and cyber threats.

📱 Digital India & Digital Public Infrastructure

Digital India (launched 2015) is the umbrella programme for India's digital transformation, built around the vision of Digital Infrastructure as a Utility, Governance and Services on Demand, and Digital Empowerment of Citizens. India's Digital Public Infrastructure (DPI) stack — often cited internationally as a model — includes:

Aadhaar — biometric-linked unique identity, the foundation layer.
Unified Payments Interface (UPI) — real-time interbank payment system, now among the world's largest digital payment rails by transaction volume.
DigiLocker — cloud-based document storage/verification.
CoWIN, ONDC (Open Network for Digital Commerce), Account Aggregator framework — sector-specific DPI extensions in health, e-commerce and finance.

🔐 Data Protection Law

The Digital Personal Data Protection Act, 2023 is India's first comprehensive data protection legislation, establishing rights for "Data Principals" (individuals), obligations for "Data Fiduciaries" (entities processing data), consent-based processing requirements, and a Data Protection Board of India for enforcement. This followed the Supreme Court's landmark recognition of the Right to Privacy as a Fundamental Right under Article 21 in the Justice K.S. Puttaswamy v. Union of India (2017) case, which had made comprehensive data protection legislation a constitutional necessity.

🔐 Cyber Security Architecture

CERT-In (Indian Computer Emergency Response Team) — the national nodal agency for responding to cyber security incidents, operating under the Ministry of Electronics and IT (MeitY).
National Critical Information Infrastructure Protection Centre (NCIIPC) — protects critical sectors (power, banking, telecom, defence, etc.) from cyber threats.
National Cyber Security Policy and the Indian Cyber Crime Coordination Centre (I4C) — coordinate cyber crime response, including the National Cybercrime Reporting Portal.
Information Technology Act, 2000 (amended 2008) — the primary legislation criminalising cyber offences (hacking, identity theft, data breaches) and providing legal recognition to electronic records/digital signatures.

⚠️ Emerging Concerns

Current policy debates include regulation of artificial intelligence (India's approach has so far favoured a light-touch, principle-based framework over binding AI-specific legislation), cross-border data flow restrictions (data localisation debates), ransomware and critical infrastructure attacks, and the challenge of platform/intermediary liability under the IT Rules, 2021.

🎯 Exam Angle

Prelims frequently tests the functions of CERT-In/NCIIPC and key provisions of the DPDP Act 2023. Mains rewards discussing the balance between digital innovation (DPI-led inclusion) and data privacy/security risk — a recurring GS Paper III theme.