Cybersecurity Laws in India and Beyond: A Comparative Legal Perspective

Abstract

In an increasingly Digitalized world, cybersecurity has emerged as a crucial pillar of national security, economic stability, and individual privacy. With the rise in cyber threats, including data breaches, ransomware attacks, and state-sponsored cyber warfare, governments worldwide have enacted comprehensive cybersecurity laws to safeguard essential systems, businesses, and individuals. The comparative analysis of cybersecurity laws in India and other major jurisdictions, such as the United States, the European Union, and China, to assess their effectiveness, enforcement mechanisms, and adaptability to emerging threats. India’s cybersecurity legal framework is primarily governed by “The Information Technology Act, 2000, alongside the recently implemented “Digital Personal Data Protection Act, 2023”. It examines the scope and limitations of these laws, particularly in addressing modern cyber risks and ensuring compliance with global standards. Comparatively, the paper delves into the cybersecurity policies of the United States, including the Cybersecurity Information Sharing Act and Executive Orders on critical infrastructure protection; “The European Union’s GDPR” and the “Network and Information Systems” (NIS) Directive; and also mandates strict government control over cyber operations and data governance. The study concludes with recommendations for strengthening India’s cybersecurity legal framework by integrating global best practices, enhancing enforcement capabilities, and fostering international collaboration.