Cyberbullying and Legal Gaps Under Indian Law

1. Introduction

The digital revolution in India has reshaped how people communicate, express opinions, and construct social identities. Smartphones, low-cost internet, and widespread use of social media platforms have created an environment where individuals remain digitally connected at all times. While this transformation has expanded access to information and empowered free expression, it has also created new forms of harm that the traditional legal system struggles to address. One such harm is cyberbullying, a phenomenon that has become common among adolescents, young adults, women, and vulnerable groups.

Cyberbullying involves the use of digital technologies to harass, intimidate, humiliate, or target a person repeatedly. Unlike traditional bullying, which is limited by time and space, cyberbullying is constant, borderless, anonymous, and amplified by online virality. A single post or message can reach thousands within seconds, and the harmful content may remain online permanently. This persistence intensifies the psychological damage to victims.

Despite the severity of this issue, Indian law does not recognise cyberbullying as a distinct offence. The legal framework is fragmented, outdated, and unable to address the nuances of online abuse. The striking down of Section 66A of the Information Technology Act in Shreya Singhal v. Union of India (2015) widened this gap, leaving victims with limited remedies. This chapter critically examines the concept of cyberbullying, the inadequacies of current laws, enforcement challenges, and the urgent need for a dedicated cyberbullying framework in India.

2. Understanding Cyberbullying: Concept and Forms

Cyberbullying refers to intentional, repeated behaviour carried out using electronic communication tools with the aim of causing emotional, psychological, or reputational harm to another person. Several characteristics distinguish it from traditional forms of bullying.

2.1 Anonymity and Impersonation

Digital platforms allow perpetrators to hide their identity or create fake profiles. Victims often do not know who is behind the harassment, making it harder to seek help or pursue legal action.

2.2 Permanence and Virality

Harmful posts, morphed images, or abusive messages can be shared, saved, and reposted indefinitely. Even if deleted, screenshots and downloads ensure that the content lives on.

2.3 Round-the-Clock Accessibility

Victims are not safe even in private spaces. Cyberbullying follows them home, affecting their ability to feel secure or disconnect.

2.4 Lack of Geographical Boundaries

The perpetrator may be in a different state or country, complicating investigation and enforcement.

2.5 Common Forms of Cyberbullying in India

• Sending abusive or threatening messages
• Posting humiliating content or rumours
• Creating fake profiles
• Impersonation
• Doxxing (sharing private information such as address or phone number)
• Non-consensual sharing of images
• Cyberstalking
• Revenge pornography
• Group targeting and online mobbing

3. Scale of the Problem in India

India has one of the world’s largest populations of young internet users. With this demographic reality, cyberbullying has risen sharply in the past decade. Surveys by UNICEF, IAMAI, and various NGOs indicate that:

• A significant percentage of school and college students report having been bullied online.
• Women are disproportionately targeted, especially through sexualised content.
• LGBTQ+ individuals face harassment, outing, and moral policing.
• Many victims do not report incidents due to fear, stigma, or mistrust of law enforcement.

NCRB data also shows an annual increase in cybercrime, although cyberbullying is not separately categorised. This absence itself indicates the legal system’s failure to recognise and record the offence.

4. Existing Legal Framework and Its Inadequacies

India does not have a specific anti-cyberbullying statute. Instead, authorities rely on a patchwork of laws, none of which truly address the core nature of cyberbullying.

4.1 Information Technology Act, 2000 (IT Act)

The IT Act is India’s primary legislation governing digital offences. However, its provisions are limited and often unsuitable.

4.1.1 Absence of a Clear Definition

The Act does not define harassment, bullying, or online abuse. It primarily focuses on financial fraud, hacking, obscene content, and data breaches.

4.1.2 Section 66A and the Legal Vacuum

Section 66A previously criminalised sending “offensive” or “menacing” messages. In Shreya Singhal v. Union of India (2015), the Supreme Court struck it down as unconstitutional due to vagueness and potential misuse.

While the judgment was correct on free speech grounds, it created a practical gap. Police lost the only provision that directly addressed online harassment. No alternative law has been introduced to fill this void.

4.1.3 Other IT Act Provisions Used

• Section 66D – cheating by impersonation
• Section 67 – obscene electronic content
• Section 67B – child sexual content

These provisions are limited. For instance, Section 67 applies only when there is “lascivious” material. Most cyberbullying involves humiliation, threats, trolling — not necessarily obscene content.

4.2 Indian Penal Code (IPC)

As a workaround, police use the IPC for cyberbullying cases, but the IPC was drafted in 1860 for physical-world crimes.

4.2.1 Sections Commonly Invoked

• Section 354A/D – sexual harassment and stalking
• Section 499/500 – defamation
• Section 503/506 – criminal intimidation
• Section 509 – insulting a woman’s modesty

4.2.2 Limitations of IPC for Cyber Offences

1. Many provisions are gender-specific, leaving male or non-binary victims unprotected.
2. IPC definitions of “publication,” “outraging modesty,” or “public view” do not match digital realities.
3. Cyberbullying usually involves anonymity, but IPC requires identifying the accused.
4. Psychological harm is not adequately recognised under IPC provisions.
5. Some sections apply only when a threat is “real” or imminent, whereas cyberbullying is often indirect.
6. Enforcement Challenges Beyond Statutory Gaps

Even when laws exist, enforcement remains weak due to structural and procedural issues.

5.1 Police Capacity and Digital Literacy

Many police officers lack:

• Training in cyber forensics
• Understanding of platform policies
• Skills to trace IP addresses or metadata
• Knowledge of privacy laws and data request protocols

As a result, victims often receive insensitive or dismissive responses. Cases are routinely closed due to “lack of evidence.”

5.2 Platform Compliance and Data Retrieval Delays

Social media companies receive thousands of requests from India but respond slowly. Several issues arise:

• Some platforms refuse data without an explicit cyberbullying offence.
• Foreign platforms follow US or EU privacy laws, which delay access.
• Data retention periods (often 90–180 days) cause loss of evidence.

5.3 Jurisdictional Problems

A perpetrator may operate from a different state or country. Coordination between state police departments is slow, and international legal assistance is complicated.

5.4 Underreporting

Victims avoid reporting because:

• They fear backlash
• They distrust police
• Institutions (schools, universities) lack proper redress mechanisms
• Emotional impacts such as shame, fear, or anxiety discourage legal action

5.5 Lack of Forensic Infrastructure

India has few cyber forensic labs, and most are overloaded. Digital evidence decays quickly, and delays reduce chances of conviction.

6. Comparative Study: How Other Countries Address Cyberbullying

Several countries have enacted dedicated laws recognising cyberbullying as a specific offence.

6.1 United States

• Many states have anti-bullying statutes mandating school reporting systems.
• Some states criminalise cyberstalking, online harassment, and doxxing.
• Schools must intervene even if bullying occurs off-campus.

6.2 United Kingdom

• The Malicious Communications Act and the Communications Act criminalise threatening or abusive online messages.
• Robust guidelines ensure police training and platform accountability.

6.3 Australia

• One of the strongest frameworks.
• The eSafety Commissioner can order takedowns within 24–48 hours.
• Platforms face penalties for non-compliance.

6.4 South Korea

• Severe penalties for digital harassment due to high suicide rates among youth.
• Platforms must verify real identities under certain conditions.

These frameworks demonstrate that India lags behind global standards.

7. Why India Needs a Dedicated Cyberbullying Law

A specialised statute is essential due to:

7.1 Absence of Clear Definition

Cyberbullying must be explicitly defined to avoid interpretational confusion.

7.2 Protection for All Age Groups

Current IPC provisions focus on women or minors; adults and men lack sufficient legal cover.

7.3 Recognition of Psychological Harm

Cyberbullying often causes mental injury, anxiety, depression, and trauma. Indian law barely acknowledges psychological harm as a legally compensable injury.

7.4 Faster Takedown Mechanisms

A statutory 24–48 hour window for content removal is necessary.

7.5 Platform Accountability

Platforms should be legally required to:

• Retain data longer
• Respond to police requests faster
• Provide reporting tools
• Implement AI-based moderation

7.6 School and Workplace Responsibility

India has no mandatory reporting or prevention mechanism in educational institutions or workplaces. A dedicated law must mandate:

• Complaint officers
• Annual training
• Awareness programmes
• Confidential reporting channels

8. Proposed Legislative Framework:

What a Cyberbullying Prevention Act Should Include

8.1 Comprehensive Definitions
Including:

1. Cyberbullying
   Intentional and repeated conduct carried out through digital communication tools that harasses, humiliates, threatens, or harms another person, resulting in emotional, psychological, or reputational injury.
2. Cyberstalking
   Persistent and unwanted digital surveillance, monitoring, messaging, or tracking of a person through electronic means, causing fear, intimidation, or serious distress.
3. Doxxing
   Unlawful publication, sharing, or dissemination of a person’s private, personal, or identifying information—such as address, phone number, workplace, or family details—without consent, with the intent to harass, threaten, or endanger them.
4. Online Harassment
   Any repeated digital behaviour—such as abusive messages, threats, derogatory comments, or targeted attacks—intended to intimidate, degrade, or emotionally disturb a person.
5. Impersonation
   The creation or use of a fake digital identity, profile, or account that pretends to be another person, with the intention of deceiving others, causing harm, or damaging the victim’s reputation.
6. Non-Consensual Image Sharing
   Distributing or posting another person’s photos, videos, or digital content—especially intimate or private material—without their permission, regardless of whether the content was originally shared voluntarily.
7. Deepfake Abuse
   Creation or use of AI-generated, digitally manipulated images, audio, or videos that falsely depict a person, typically for purposes of harassment, sexual exploitation, political targeting, blackmail, or reputational damage.
8. Group-Based Harassment
   Coordinated or collective digital abuse in which multiple individuals target one person through mass commenting, trolling, threats, defamation, or coordinated online attacks, creating overwhelming psychological pressure and public humiliation.
9. Trolling
   Deliberately posting inflammatory, offensive, or provocative content intended to provoke emotional reactions, disrupt conversations, or degrade the targeted individual.
10. Digital Intimidation
    Use of threats, coercive messages, or implied harm through digital platforms to create fear, compliance, or emotional distress in the victim.

8.2 Graded Penalties

Based on severity, repetition, and intention. For example:

• First-time non-violent offence: fines + counselling
• Serious or repeated offences: imprisonment
• Severe harm or targeting minors: enhanced penalties

8.3 Fast-Track Digital Safety Courts

• 48-hour emergency orders
• Mandatory restraining orders
• Takedown directives for platforms

8.4 Mandatory Duties for Educational Institutions

Institutions must:

• Appoint cyber safety officers
• Conduct regular training
• Provide psychological support
• Report incidents to authorities when necessary

8.5 Platform Obligations

Platforms must:

• Provide robust reporting tools
• Respond within 24 hours in serious cases
• Retain data for at least one year
• Cooperate with law enforcement

8.6 Victim Support Mechanisms

• Free counselling
• Digital safety assistance
• Financial compensation in severe cases

9. Policy and Social Recommendations

Legal reform alone is insufficient. Broader changes are needed:

• Digital Literacy Campaigns: India must invest in educating children, parents, and elders on safe online behaviour.
• School Curriculum Integration: Cyber safety should be part of moral science or civic education.
• Stronger Counselling Support: Schools and colleges need professional counsellors trained in digital behaviour.
• Awareness for Parents: Parents often fail to recognise digital distress signals. Workshops are essential.
• Collaboration with NGOs: Organisations working on mental health and women’s rights can aid implementation.

10. Conclusion

Cyberbullying represents a major challenge in India’s digital era. While technology has evolved rapidly, the law has not kept pace. Existing provisions under the IT Act and IPC are fragmented, outdated, and insufficient to deal with the complex, persistent, and psychological nature of cyberbullying. The absence of a clear statutory definition, coupled with enforcement challenges and slow platform cooperation, leaves victims vulnerable and perpetrators emboldened.

A dedicated Cyberbullying Prevention Act is not merely desirable; it is essential. Such a law must incorporate clear definitions, strong procedural tools, fast redress mechanisms, duties for institutions, and accountability for platforms. India’s digital future cannot be built on a framework that ignores the mental health and safety of its users. Protecting citizens—especially young and vulnerable individuals—from cyberbullying is a critical requirement for a safe and inclusive digital society.

*****

Author: MUSKAN RANA, BA.LLB(Hons) .5^TH YEAR STUDENT, LOVELY PROFESSIONAL UNIVERSITY