Draft bill on IT and cyber security seeks transparent, accountable use of AI

KATHMANDU: A draft bill designed to manage IT and cyber security has underlined the use of innovative technology. It has stated that artificial intelligence, machine learning, blockchain, and the internet of things (IoT) should be used in a transparent, accountable, safe, and respectful manner.

Such provisions have been incorporated in the draft bill the Ministry of Communications and Information Technology released on Sunday. The ministry has sought feedback on the draft law within two weeks.

In the bill, the Nepal government has been asked to set up a center for excellence for research and development of new technologies such as AI, machine learning, and blockchain.

Similarly, a structure for IT and cyber security has been provisioned in it, under which, the establishment of a directors’ committee having the Minister for Communications and Information Technology as its head is stated.

The document has incorporated a coordination committee under the coordination of a joint secretary at the ministry. The committee is to be established aiming at rapid response on cyber security and provide immediate assistance.

Electronic records, data, originator of records, invocation of law of contract for an electronic transaction, digital signature, public service delivery via electronic medium, technical audit of IT, vetting, operation, regulation and management of domain name, registration of IT industry and business, information/data safety and privacy, digital harassment, collection of personal details, establishment of cyber security center, of data center and cloud, are included in the bill.

Critical IT infrastructures, cyber monitoring of critical IT infrastructures, cyber security audit, and auditor for it, activities banned on cyberspace, crime and punishment, use of digital forensics, and establishment of IT tribunal are other topics in the draft bill.

Under data safety, none is allowed to disrupt harmonious relations among federal units, nationality or national unity, dignity, national security, sovereignty, and territorial integrity by the means of the electronic system.

Cyber bullying, cyber harassment, production and distribution of indecent content, and cyber scams are banned on cyberspace. Theft of data and code is punishable.

The government will not collect personal data except as required by the law. In case of the need to collect personal information, he/she would be informed mandatorily before it is done.

According to the bill, every government body and public corporation has been asked to run their own website to provide service and share information. The development/design of the websites to be operated by these bodies will be similar and meet the standards set by the Ministry of Communications and Information Technology.

Similarly, any individual or office willing to register an np domain needs to get it registered at the department, submitting the necessary fee. The domain name needs to be renewed every two years.

Those- individual or companies- willing to provide cyber security services are also required to get a license. RSS