Jurisdiction is the authority of a court to hear and determine a case. In cyber space, traditional jurisdictional rules based on territorial presence fail because digital acts transcend geographical boundaries. Cyber jurisdiction addresses which court, which law, and which sovereign has authority over conduct occurring online.
Legal Framework
| Provision | Subject |
|---|---|
| IT Act 2000, S.1(2) | Extent: applies to whole of India |
| IT Act 2000, S.75 | Extra-territorial jurisdiction: Act applies to offences committed outside India if computer system located in India is involved |
| IT Act 2000, S.46 | Adjudicating officer jurisdiction (S.43 contraventions) |
| IT Act 2000, S.48 | Cyber Appellate Tribunal (appeal from S.46 orders) |
| CPC 1908, S.16-20 | Territorial jurisdiction (civil suits) |
| BNSS 2023, S.196 | Territorial jurisdiction in criminal matters (place of offence) |
Traditional Jurisdiction vs. Cyber Jurisdiction
| Parameter | Traditional | Cyber |
|---|---|---|
| Basis | Physical presence, territory, domicile | Location of server, access point, target, effect |
| Connecting factor | Place of act or domicile of party | Where computer resource is located, where damage is felt |
| Certainty | High (one territory usually clear) | Low (multiple territories simultaneously) |
| Enforcement | Within sovereign territory | Requires international cooperation |
| Statute | CPC S.16-20 (civil), BNSS S.196 (criminal) | IT Act S.75, bilateral treaties, MLATs |
Types of Jurisdiction in Cyber Space
1. Prescriptive Jurisdiction
Authority of a state to make laws applicable to cyber conduct. India exercises this through the IT Act 2000, which extends to all persons irrespective of nationality if a computer system in India is involved (S.75).
2. Adjudicative Jurisdiction
Authority to subject persons to court process. Determined by:
| Test | Application |
|---|---|
| Place of commission | Where the offending act was initiated |
| Place of effect | Where the harmful consequence was felt |
| Targeting test | Whether the website/act was directed at users in a specific jurisdiction |
| Minimum contacts | Whether sufficient connection exists with the forum (US origin, adopted in India) |
3. Enforcement Jurisdiction
Authority to compel compliance with legal orders. In cyber space, enforcement requires:
- Mutual Legal Assistance Treaties (MLATs)
- Letters Rogatory
- Budapest Convention on Cybercrime (India is not a signatory but cooperates bilaterally)
Why: Without enforcement jurisdiction, a court's order against a foreign entity hosting content remains unexecuted. This gap drives international cooperation frameworks.
Illustration: Targeting Test in Practice
Consider two websites selling sarees:
- Website A (passive): Based in UK, displays prices in GBP, ships only within UK, mentions no Indian delivery. A Delhi consumer can access it, but the site does NOT target India. Under Banyan Tree, Delhi court has NO jurisdiction.
- Website B (targeting India): Based in UK, displays prices in INR, offers "Free shipping to India," advertises during Diwali, accepts UPI payments. This site purposefully avails itself of the Indian market. Under Banyan Tree + WWE v. Reshma, a Delhi court HAS jurisdiction because the site targets Indian consumers.
The test is not "can Indians see it?" but "did the website deliberately aim at Indian customers?"
Section 75 IT Act: Extra-Territorial Application
Any person of any nationality who commits an offence or contravention under this Act outside India shall also be liable if the act or conduct constituting the offence or contravention involves a computer, computer system or computer network located in India.
Why: Parliament enacted S.75 to ensure that merely operating from outside India does not immunize a person from liability when Indian computer resources are targeted or used.
Jurisdiction Determination Flow
%%{init: {"theme": "base", "themeVariables": {"primaryColor": "#fef9c3", "primaryBorderColor": "#1a1a1a", "primaryTextColor": "#1a1a1a", "secondaryColor": "#fde047", "secondaryBorderColor": "#1a1a1a", "lineColor": "#1a1a1a", "textColor": "#1a1a1a", "fontSize": "14px", "fontFamily": "Space Grotesk, DM Sans, system-ui, sans-serif", "nodeBorder": "2px", "mainBkg": "#fef9c3", "edgeLabelBackground": "#FFFDF7"}}}%%
flowchart TD
A(["fa:fa-globe Cyber Act Committed"]):::start --> B{"fa:fa-question Computer in India involved?"}:::decision
B -->|Yes| C{"fa:fa-question Offender in India?"}:::decision
B -->|No| D(("fa:fa-times Indian courts lack jurisdiction")):::failure
C -->|Yes| E["fa:fa-gavel Normal territorial rules apply"]:::process
C -->|No| F["fa:fa-shield S.75 extra-territorial jurisdiction"]:::process
F --> G{"fa:fa-question Enforceable?"}:::decision
G -->|MLAT exists| H["fa:fa-check Cooperation route"]:::success
G -->|No treaty| I["fa:fa-exclamation-triangle Enforcement gap"]:::warning
classDef start fill:#d1fae5,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
classDef process fill:#fef9c3,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
classDef decision fill:#fde047,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
classDef success fill:#86efac,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
classDef failure fill:#fecaca,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
classDef warning fill:#fed7aa,stroke:#1a1a1a,stroke-width:2px,color:#1a1a1a
Recall Check
- What is the connecting factor for cyber jurisdiction under S.75 IT Act?
- How does the "targeting test" differ from the "place of commission" test?
- Why is enforcement jurisdiction the weakest link in cyber law?
Key Cases
Banyan Tree Holding v. A. Murali Krishna Reddy (2010) Banyan-Tree-Holding-v-Murali-Krishna-Reddy-2010 Issue: Whether a Delhi court has jurisdiction over a trademark infringement claim based on an interactive website accessible from Delhi. Rule: Mere accessibility of a website from a jurisdiction does not confer jurisdiction; the website must specifically target that jurisdiction (purposeful availment / effects doctrine). Held: Delhi HC rejected the "mere accessibility" test; adopted the "purposeful availment" or "targeting" test for determining internet jurisdiction in India.
World Wrestling Entertainment v. Reshma Collection (2014) World-Wrestling-Entertainment-v-Reshma-Collection-2014 Issue: Whether hosting a website selling infringing goods accessible in India gives Indian courts jurisdiction. Rule: Where the defendant's website targets Indian consumers and causes commercial harm in India, Indian courts have jurisdiction based on the effects doctrine. Held: Delhi HC held that jurisdiction exists where the defendant's online activity targets and affects the plaintiff's goodwill in the forum territory.
Zippo Manufacturing v. Zippo Dot Com (1997) Zippo-Manufacturing-v-Zippo-Dot-Com-1997 Issue: Whether a passive website confers personal jurisdiction in the forum state (US). Rule: The "sliding scale" test: passive websites (information only) do not confer jurisdiction; interactive websites (commercial transactions with forum residents) do; the middle ground depends on level and nature of interactivity. Held: US District Court established the Zippo sliding scale, widely referenced in Indian courts including Banyan Tree.
Distinctions
| Aspect | Place of Commission Test | Effects / Targeting Test |
|---|---|---|
| Focus | Where the act originated | Where the harm is felt or directed |
| Problem in cyber space | Offender may be anywhere globally | Applies even if offender is abroad |
| Indian adoption | Traditional CPC/BNSS approach | Banyan Tree (2010), WWE (2014) |
| Limitation | Fails when server is in third country | May overreach (universal jurisdiction risk) |
| Best suited for | Clear single-country offences | Cross-border trademark, defamation, cybercrime |
Flashcards
Q: What does S.75 of the IT Act provide? A: Extra-territorial jurisdiction: the Act applies to any person of any nationality committing an offence outside India if a computer system or network located in India is involved.
Q: What test did the Delhi HC adopt in Banyan Tree Holding (2010)? A: The "purposeful availment" or "targeting" test; mere accessibility of a website does not confer jurisdiction.
Q: What is the Zippo sliding scale? A: A US-origin test classifying websites as passive (no jurisdiction), interactive (jurisdiction exists), or middle-ground (depends on level of commercial interactivity with forum residents).
Q: Name three bases for determining cyber jurisdiction. A: Place of commission, place of effect (effects doctrine), and targeting/purposeful availment.
Q: What is the enforcement gap in cyber jurisdiction? A: Courts may have adjudicative jurisdiction but lack enforcement power over foreign entities without cooperation mechanisms (MLATs, treaties).
Q: Which Indian provision governs territorial jurisdiction in criminal cyber matters? A: BNSS 2023, S.196 (place of offence) read with IT Act S.75 (extra-territorial application).
Q: What is prescriptive jurisdiction? A: The authority of a sovereign state to enact laws that apply to certain conduct, irrespective of where it occurs.
Exam Scenario
A hacker operating from Country X penetrates the server of an Indian banking company located in Mumbai, stealing customer data. The hacker has no physical presence in India and Country X has no MLAT with India. Discuss whether Indian courts have jurisdiction and the challenges of enforcement.
Indian courts have jurisdiction under S.75 IT Act because the offence involves a computer system located in India (Mumbai server). The adjudicating officer under S.46 or criminal court under BNSS S.196 can take cognizance. However, enforcement faces obstacles: without an MLAT with Country X, India cannot compel extradition or evidence sharing. Options include: (1) requesting cooperation through diplomatic channels, (2) proceeding in absentia if permitted, (3) seeking Interpol Red Notice, (4) blocking the perpetrator's access to Indian networks under S.69A. The case illustrates the enforcement gap that persists despite prescriptive and adjudicative jurisdiction being established.