Digital Footprints: How OTPs and Food Orders Aid Police Investigations Explained

Answer: B

Statement 1 is incorrect. While police can request CDRs and IP addresses, it typically requires authorization from a senior police officer (e.g., Superintendent of Police level) or a court order, depending on the nature of the data and the specific legal provision (e.g., Section 91 CrPC, Section 69 IT Act, or Telegraph Act). Access is not automatic based on an FIR alone without further checks. Statement 2 is correct. These rules, along with Section 69 of the IT Act, 2000, and Section 5(2) of the Indian Telegraph Act, 1885, provide the legal basis and procedure for lawful interception and monitoring of digital information by authorized agencies. Statement 3 is incorrect. The K.S. Puttaswamy judgment declared the Right to Privacy as a fundamental right under Article 21 but also clarified that it is not an absolute right. It can be subject to reasonable restrictions based on legality, legitimate state aim, proportionality, and procedural safeguards, especially in matters of national security and public order, including crime investigation.

Answer: B

Metadata is 'data about data'. In the context of digital communications, it includes information like the source and destination of a communication, the time and duration of a call, the size of a file, or the IP address from which an activity originated. It does not include the actual content of the communication (e.g., the words spoken in a call or the text of a message). While metadata can reveal significant patterns of association and activity, it is distinct from content. Options A, C, and D are incorrect as they either misdefine metadata, impose absolute restrictions, or limit its scope too narrowly.

Answer: B

Section 69 of the Information Technology Act, 2000, empowers the Central or State Government to direct any agency of the Government to intercept, monitor, or decrypt any information generated, transmitted, received, or stored in any computer resource. It also mandates intermediaries to provide all facilities and technical assistance to enable such interception or monitoring. This is the primary provision for compelling intermediaries to assist law enforcement in accessing digital information. Section 124A IPC deals with sedition. Section 377 IPC deals with unnatural offences. Section 144 CrPC deals with the power to issue orders in urgent cases of nuisance or apprehended danger.

Answer: D

All three statements are correct regarding the Digital Personal Data Protection Act, 2023. 1. The Act is built on the principle of consent, requiring data fiduciaries (entities processing personal data) to obtain clear and affirmative consent from data principals (individuals whose data is being processed). However, it also outlines 'legitimate uses' where consent is not required, such as for enforcing legal rights, responding to medical emergencies, or for certain state functions. 2. The Act includes provisions allowing the Central Government to exempt government agencies from its application in specific circumstances, particularly in the interest of national security, public order, or preventing/investigating offenses. This provision has been a point of debate regarding its potential impact on privacy. 3. The Act establishes the Data Protection Board of India as an independent body responsible for enforcing the provisions of the Act, inquiring into breaches, and imposing penalties on non-compliant entities.