Draft bill on IT and cyber security seeks transparent, accountable use of AI

KATHMANDU, MARCH 12: The draft bill aimed at managing IT and cyber security emphasizes the use of innovative technologies such as artificial intelligence (AI), machine learning, blockchain, and the Internet of Things (IoT) in a transparent, accountable and safe manner. This provision is included in the draft bill released lately by the Ministry of Communications and Information Technology, which seeks feedback within two weeks.

The bill proposes the establishment of a centre for excellence for research and development in new technologies like AI, machine learning, and blockchain. Additionally, it outlines a structure for IT and cyber security, including the formation of a directors’ committee chaired by the Minister for Communications and Information Technology.

Furthermore, the document includes provisions for a coordination committee under the supervision of a Joint Secretary at the ministry to ensure rapid response to cyber security issues and provide immediate assistance.

Various aspects related to IT and cyber security are covered in the bill, including electronic records, data protection, digital signatures, public service delivery through electronic mediums, technical audits of IT, regulation of domain names, registration of IT industries and businesses, information/data safety and privacy, digital harassment, and the establishment of cyber security centers and data centers.

Additionally, the bill addresses issues such as cyberbullying, cyber harassment, production and distribution of indecent content, cyber scams, and theft of data and code, all of which are punishable offences.

The government is prohibited from collecting personal data except as required by law, and individuals must be informed before their personal information is collected.

Government bodies and public corporations are required to operate their own websites to provide services and share information, with the development and design of these websites meeting standards set by the Ministry of Communications and Information Technology.

Individuals or offices wishing to register a “.np” domain must do so through the designated department, submitting the necessary fee, with domain names requiring renewal every two years.

Furthermore, individuals or companies wishing to provide cyber security services must obtain a license. The draft bill can be accessed at the following link: Draft Bill.