Draft bill on IT and cyber security seeks transparent, accountable use of AI

KATHMANDU: A draft bill designed to manage IT and cyber security has underlined the use of innovative technology.

It has stated that artificial intelligence, machine learning, block chain, and IoT should be used in a transparent, accountable, safe and respected manner.

Such provision has been incorporated in the draft bill the Ministry of Communications and Information Technology released on Sunday. The Ministry has sought feedback on it within two weeks.

In the bill, Nepal government has been asked to set up a centre for excellence for research and development of the new technologies such as AI, machine learning and block chain.

Similarly, structure for IT and cyber security has been provisioned in it, under which, establishment of directors’ committee having Minister for Communications and Information Technology as its head is stated.

The document has incorporated a coordination committee under the coordination of Joint Secretary at ministry. The committee is to be established aiming at rapid response on cyber security and provide immediate assistance.

Electronic records, data, originator of records, invocation of law of contract for electronic transaction, digital signature, public service delivery via electronic medium, technical audit of IT, vetting, operation, regulation and management of domain name, registration of IT industry and business, information/data safety and privacy, digital harassment, collection of personal details, establishment of cyber security centre, of data centre and cloud, are included in the bill.

Critical IT infrastructures, cyber monitoring of critical IT infrastructures, cyber security audit and auditor for it, activities banned on cyber space, crime and punishment, use of digital forensic, and establishment of IT tribunal are other topics in the draft bill.

Under the data safety, none is allowed to disrupt harmonious relations among federal units, nationality or national unity, dignity, national security, sovereignty, territorial integrity by means of electronic system.

Cyber bulling, cyber harassment, production and distribution of indecent content, and cyber scam are banned on cyber space. Theft of data and code is punishable.

The government would not collect personal data except as required by law. In case of the need to collect personal information, he/she would be informed mandatorily before it.

As per bill, every government body and public corporation is asked to run its own website to provide service and share information.

The development/design of website to be operated by these bodies would be similar and meet standard set by the Ministry of Communications and Information Technology.

Similarly, any individual or office willing to register np domain needs to get it registered at the department, submitting necessary fee. The domain name needs to be renewed every two years.

Those- individual or company- willing to provide cyber security service is also required to get license.

The draft bill is available at https://api.giwms.gov.np/storage/22/posts/1710050856_14.pdf.