Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

India proposes new e-commerce regulations with focus on data rules

reuters.com

Post reply on HN
Print view View original

11–20 of 21 posts

Re: India proposes new e-commerce regulations with focus on data rules

#11

Post by aaomidi »

webmobdev wrote: post #9
bubblethink wrote: post #6

Earlier quoted context omitted.

>this highlights one of the obvious dangers of using a "cloud service" This is more a basic result of just not having control of the server side stack. No amount of regulation is going to fix that. You have any number of laws, which can be undermined with a change of a bool by the vendor, and you can't do anything about it. If a government needs basic infrastructure like email, just do it in house. It isn't that hard…

> This is more a basic result of just not having control of the server side stack. That's software-as-a-service in a nutshell for you. Even if you opt to setup your own server, and develop a custom solution, the US government has the right to ask you to install black boxes on your network and or data centers (read about Lavabit shutting down because of this), if you are on US soil (or operating from the US?). > No am…

Yeah I agree with you. Make it financially expensive for them to mess around.

Re: India proposes new e-commerce regulations with focus on data rules

#12

Post by bubblethink »

webmobdev wrote: post #9
bubblethink wrote: post #6

Earlier quoted context omitted.

>this highlights one of the obvious dangers of using a "cloud service" This is more a basic result of just not having control of the server side stack. No amount of regulation is going to fix that. You have any number of laws, which can be undermined with a change of a bool by the vendor, and you can't do anything about it. If a government needs basic infrastructure like email, just do it in house. It isn't that hard…

> This is more a basic result of just not having control of the server side stack. That's software-as-a-service in a nutshell for you. Even if you opt to setup your own server, and develop a custom solution, the US government has the right to ask you to install black boxes on your network and or data centers (read about Lavabit shutting down because of this), if you are on US soil (or operating from the US?). > No am…

>if you are on US soil (or operating from the US?)

Exactly. Email and nextcloud exist. With a government or a bank's budget, it's not that hard to set these things up locally (i.e., within your jurisdiction). Look at France and Matrix for example. If someone tries to subvert your security measures, that can be taken up as a criminal offence. At least you are not relying on legalese and other agreements to safeguard your interests.

Re: India proposes new e-commerce regulations with focus on data rules

#13

Post by vinay427 »

wrong_variable wrote: post #8
mallocfree wrote: post #7

Earlier quoted context omitted.

>India mostly allowed free access to US tech companies for a while. Tech companies allowed it as well because they wanted to capture Indian mindshare which would eventually become their largest customer base.

The Brits used to (and still do) capture indian mindshare and had them as their largest customer base - it didn't turn out well for indian national interest though.

Are you saying Indians chose to be "customers" of the British? I've heard a lot of interesting characterizations of the colonization and subsequent exploitation that was the bedrock of British India, but this one's new.

Re: India proposes new e-commerce regulations with focus on data rules

#14

Post by webmobdev »

bubblethink wrote: post #12
webmobdev wrote: post #9

Earlier quoted context omitted.

> This is more a basic result of just not having control of the server side stack. That's software-as-a-service in a nutshell for you. Even if you opt to setup your own server, and develop a custom solution, the US government has the right to ask you to install black boxes on your network and or data centers (read about Lavabit shutting down because of this), if you are on US soil (or operating from the US?). > No am…

>if you are on US soil (or operating from the US?) Exactly. Email and nextcloud exist. With a government or a bank's budget, it's not that hard to set these things up locally (i.e., within your jurisdiction). Look at France and Matrix for example. If someone tries to subvert your security measures, that can be taken up as a criminal offence. At least you are not relying on legalese and other agreements to safeguard y…

> At least you are not relying on legalese and other agreements to safeguard your interests.

In a democracy, our rights are protected by the legal system. So your argument that it is all about "setting up your own system" is specious.

Re: India proposes new e-commerce regulations with focus on data rules

#15

Post by wrong_variable »

vinay427 wrote: post #13
wrong_variable wrote: post #8

Earlier quoted context omitted.

The Brits used to (and still do) capture indian mindshare and had them as their largest customer base - it didn't turn out well for indian national interest though.

Are you saying Indians chose to be "customers" of the British? I've heard a lot of interesting characterizations of the colonization and subsequent exploitation that was the bedrock of British India, but this one's new.

> Are you saying Indians chose to be "customers" of the British?

No.

India has a large domestic demand but it would be awful to allow non rupee denominated assets to supply that demand.

Imagine tomorrow India got rid of its strong tariff regime.

India's inflation is under control through making it punitive to buy foreign goods which India has a strong demand for.

The idea ever since Gandhi is to use domestic capabilities to provide services India demands. Domestic tariffs are also a form of coercion - but in this case it serves India's national interest.

With the Brits the main source of oppression was through preferential trade that tilted everything in their favour - either through hard power of soft ( like they still do today ).

Re: India proposes new e-commerce regulations with focus on data rules

#16

Post by pm90 »

wrong_variable wrote: post #4

There might be deeper trade concerns underlying the change in Delhi's stance, I do not think bureaucrats in the Indian government ever really created about privacy - its a convenient Casus Belli. India mostly allowed free access to US tech companies for a while. In exchange tech companies created a lot of middle class jobs in many indian cities. But more importantly there seemed to an unwritten trade deal involving i…

You make some good points but alas many bad ones. The most glaring one is your hypothesis about Immigration: this has nothing to do with Trump whatsoever. Even if HRC was president and liberalized the immigration system, this would still happen. You haven't been following events in India closely enough; there are genuine concerns with services that most Indians use being owned/regulated by a non-Indian company, thus leading to a lack of the desired controls.

You can argue that it might be a bad idea to do that. However, as a Sovereign Nation, they do reserve the right to do whatever they want in their country.

Re: India proposes new e-commerce regulations with focus on data rules

#17

Post by bubblethink »

webmobdev wrote: post #14
bubblethink wrote: post #12

Earlier quoted context omitted.

>if you are on US soil (or operating from the US?) Exactly. Email and nextcloud exist. With a government or a bank's budget, it's not that hard to set these things up locally (i.e., within your jurisdiction). Look at France and Matrix for example. If someone tries to subvert your security measures, that can be taken up as a criminal offence. At least you are not relying on legalese and other agreements to safeguard y…

> At least you are not relying on legalese and other agreements to safeguard your interests. In a democracy, our rights are protected by the legal system. So your argument that it is all about "setting up your own system" is specious.

Protected, yes, enforceable, not really. You are talking about a reactive stance where regulation will protect black box systems that you have no control over. That's just not possible. You can, and should, have regulation to protect the weaker classes, but hoping that it is really enough is naive. The whole point of open and federated protocols like email is to avoid lock-in. So if a large government or a bank cannot host email, that's a deficiency that they should remedy first.

Re: India proposes new e-commerce regulations with focus on data rules

#19

Post by [deleted] »

aaomidi wrote: post #11
webmobdev wrote: post #9

Earlier quoted context omitted.

> This is more a basic result of just not having control of the server side stack. That's software-as-a-service in a nutshell for you. Even if you opt to setup your own server, and develop a custom solution, the US government has the right to ask you to install black boxes on your network and or data centers (read about Lavabit shutting down because of this), if you are on US soil (or operating from the US?). > No am…

Yeah I agree with you. Make it financially expensive for them to mess around.

[deleted]

Re: India proposes new e-commerce regulations with focus on data rules

#20

Post by thisisit »

This is the 2nd data localisation law in past one year. The last one was for finance related data. And this one seems to be for eCommerce related data. So, I am confused on how do Google/Facebook figure in that discussion?

One of things I have noticed is that in India there is an increasing awareness about data. Indian government, like most of other government, is now getting over zealous with their data requests. But, if the data is not locally stored having companies comply is proving difficult. So, having companies store data locally is becoming increasingly necessary.

On the other hand, companies are stepping up their data collection measures. 7 out of 10 places ask for mobile numbers so that they can give you "free offers". Lot of mobile wallet companies give you "cash-back" in exchange for collecting data about your habits.

So, I doubt this is a net positive measure.

Post reply on HN