Emotional Intelligence in the practice of the Law

Emotional intelligence (A.K.A. “EI” or “EQ” for emotional quotient) is the ability to perceive, interpret, demonstrate, control, evaluate, and use emotions to communicate with and relate to others effectively and constructively. EQ is one of the most important skills that you should possess in (and outside) the workplace and, in my opinion, arguably more essential than IQ. Lawyers with high emotional intelligence are more likely to stay calm under pressure, resolve conflict effectively, and respond to colleagues with empathy. Consequently, a lack of emotional intelligence skills often results in workplace conflicts and misunderstandings. Unlike IQ, which is largely genetic – it changes little from childhood, the skills of emotional intelligence can be learnt at any age. While this is not easy, and growing your EQ takes practice and commitment, the payoffs are well worth the investment. Some examples and signs of EQ are: An ability to identify and describe what people are feeling, i.e. your ability to read the room and be perceptive about the other person’s emotions. An awareness of personal strengths and limitations. A strong sense of curiosity, particularly about other people. Feelings of empathy and concern for others and showing sensitivity Be proactive rather than reactive and pre-empting how a situation may unfold. Emotional intelligence is a basic requirement no matter where you are in your legal career – especially if you occupy a leadership position. The technical skills that helped secure your promotion might not guarantee your next. In my opinion, using one’s emotional intelligence is closely linked to be an all-round successful lawyer. As a legal practitioner, one has to deal with numerous individuals and stakeholders as part of work – i.e. if you are an in-house counsel, you have to work with numerous stakeholders within the organization, outside the organization, within your legal team, etc. Similarly, if you are an advocate practicing in litigation, you have opposing counsel, your seniors, juniors, clients and last but not the least, the judge! These are all human beings at the end of the day and each one is fighting a battle that you know nothing of. Having an overall perception of what could affect the counterparty’s behavior and even pre-empting certain things will immensely benefit a lawyer with good EQ – circumstances and emotions are big driving factors. A colleague that just lost their parent, a reporting manager who just delivered a baby, a stressed-out client who has a lot to lose if the case does not go in his favour, an overworked and under slept junior associate, are all cases that would warrant a different response from a lawyer working with any of these individuals. The intuition of a lawyer would aid him / her greatly by sensing when something is not favorable – i.e. if your client seems upset about something, you may want to tweak your tone or try and address why they are upset. It has been more than a decade since research first linked aspects of emotional intelligence to business results. The late David McClelland, a noted Harvard university psychologist, found that leaders with strengths in a critical mass of six or more emotional intelligence competencies were far more effective than peers who lacked such strengths. For instance, when he analyzed the performance of division heads at a global food and beverage company, he found that among leaders with this critical mass of competence, 87% placed in the top third for annual salary bonuses based on their business performance. More telling, their divisions on average outperformed yearly revenue targets by 15% to 20%. Those executives who lacked emotional intelligence were rarely rated as outstanding in their annual performance reviews, and their divisions underperformed by an average of almost 2%. How does a lawyer motivate direct reports? Manage change initiatives? Handle crises? How does a lawyer rate in terms of self-control and social skills? Does a lawyer show high or low levels of empathy? It is pertinent to note that each lawyer’s immediate sphere of influence will determine the “climate” for such lawyer. You have the power and you set the tone. Your EQ will influence your law firm / legal department’s working environment: its flexibility – that is, how free other lawyers feel to innovate unencumbered by red tape; their sense of responsibility to your law firm / legal department; the level of standards that people set; the sense of accuracy about performance feedback and aptness of rewards; the clarity people have about mission and values; and finally, the level of commitment to a common purpose. Emotional intelligence is the ability to manage ourselves and our relationships effectively. The legal profession is a very multifaceted one – in view of the technical knowledge that one is required to possess and apply as well as all the complexities involved in the practice of the law. In conclusion, while emotional intelligence is not a new concept, I believe it is more helpful and interesting to consider how crucial it is for effective performance as a lawyer. A person’s ability to perceive, identify and manage emotion provides the basis for the kinds of social and emotional competencies that are important for success in the legal field. Additionally, as the pace of change increases and the legal world makes even greater demands on a lawyer’s cognitive, emotional and physical resources, this particular set of abilities will become increasingly important.
The Analogy of the Company Brain

Today there is no doubt that a company’s operational and financial performance are significantly optimized by the efficacy of its Board of Directors. This has been consistently validated through my 20+ years working with and advising boards and is supported by numerous studies published in peer-reviewed journals. The concept of a Board of Directors, which first emerged in the early 20th century, was founded to represent the shareholders of the company in carrying the compass to direct the company in its business journey. The board carries the responsibility for its decisions to all stakeholders, playing a critical role in promoting corporate governance and the resilience of the company. For this to occur, the board must be conscious of its obligations. Unfortunately, few directors have the awareness and the willingness to grasp this notion. In this article, I illustrate the analogy of the company brain. In the wake of the global financial crisis, there has been a substantial proliferation in the corporate governance dialogue around the world. This has become a central focus following the crisis, particularly due to the financial upheavals that affected developed economies and the corporate ruins that underscored serious governance flaws. The significance of good governance was accentuated by events such as the collapse of Lehman Brothers and scandals involving major corporations like Enron. A notable issue has been ill boards that led to lack of transparency and manipulation of financial statements, glitches that were not widely anticipated in developed economies until recent years. Experts argue that strengthening corporate governance boosts shareholder confidence in the oversight exercised by company boards. Even prior to the crisis, scholars acknowledged the impact of good governance and the paramount role of the Board of Directors in enhancing the company’s value and enriching shareholder wealth. First, let’s agree on what corporate governance truly means. It is defined in various ways, but one of the simplest, yet most powerful, and widely accepted definitions was introduced by Sir Adrian Cadbury, who described it as “the system by which companies are directed and controlled”. So, three words; system, direction, and control. The OECD later provided a complementary definition, describing governance as the relationship and interaction between three-line segments of a triangle; the shareholders, the board, and the management of a company. Corporate governance is regarded as indispensable in the modern business landscape, as it enables the realization of corporate objectives, safeguards shareholder rights, and ensures compliance with internal company policies and regulatory requirements. Strong governance frameworks are widely believed to boost investor confidence, providing shareholders with assurance that their investments are protected through sound governance systems, I often call it the investor seatbelt. In any organizational setting, be it medium or large in size, family-owned or corporate, effective governance is seen as a key driver of sustainability, growth, and profitability. The growing prominence of governance, both nationally and internationally, is driven by the evolving competitive landscape of global business. A robust corporate governance framework is essential to ensure that management, under the board oversight, acts in the best interests of the company and its shareholders. When suitably implemented, such a framework can improve access to capital and lead to optimized decision-making processes. This framework follows a methodology that is internationally recognized and adopted globally by institutional investors and major development financial institutions. It is designed to ensure a company’s sustainability and long-term success by fostering transparency, accountability, and effectual oversight. It underlines six parameters. A strong ‘commitment to governance’, with clear policies that address the pledge from the shareholders, board of directors, and management to instill good governance practices. The ‘board of directors’ plays the pivotal role in this framework and is comprised of competent directors with a diversity of skills and adequately structured to oversee the strategy, management, and performance of the company. The ‘internal controls’ where internal audit, risk, and compliance functions are robust to ensure the effectiveness of operations, accuracy in reporting, and compliance with policies, procedures, laws, and regulations. ‘Disclosure and transparency’ are integral, ensuring both financial and non-financial information are relevant, faithful, and timely represent material events to shareholders. ‘Equitable shareholder practices’ where all shareholders are treated evenly, minority shareholders’ rights are not abused, and in the case of a family-owned business, family policies are followed to safeguard the sustainability of the business for future generations. ‘Stakeholder engagement’ mechanisms are in place to address inquiries and grievances, fostering open communication and reinforcing trust within impacted communities. Together, these parameters construct a governance system that promotes sustainability, growth, and shareholder confidence. Now let’s dive into the analogy of the brain. The human brain sits at the top of the human body and functions by receiving input from the five senses – sight, sound, touch, taste, and smell. It processes this information and then makes a decision, sending signals to the appropriate body part for action. Simple decisions, such as standing, sitting, or breathing, are processed in nanoseconds, while more complex decisions, like changing jobs or buying a new house, require extended processing time, often taking days, weeks, or months to reach a decision. The brain does not directly execute actions; instead, it monitors the performance of the body’s organs. If an organ encounters issues, such as impaired vision, the brain does not intervene directly and performs the eyes’ job but instead determines that the body should seek professional help, such as visiting an optometrist. In a business context, the board serves as the brain of the company, positioned at the top of the hierarchy to receive information, directors meet together to deliberate and scrutinize, and then make decisions that are to be executed by the company organs. Like the human brain, the company brain (the board) holds ultimate authority, with the power to request and access any data or information needed. The board is responsible for directing the company, setting its strategy, providing stewardship, oversight, and control, ensuring proper transparency and disclosure, and safeguarding shareholder rights. Hence the board is fundamental in overseeing the other five attributes of governance mentioned above, it plays a principal role in governing the company and impacting
Generative and Legal AI and Legal Implications: A Global and Indian Perspective

Generative AI, a subset of artificial intelligence capable of producing new content, poses unique legal challenges that are compelling lawmakers worldwide to rethink existing regulations. With AI-generated content rapidly infiltrating industries like art, literature, coding, and decision-making processes, several legal questions arise, particularly concerning authorship, intellectual property, liability, and data privacy. This article explores these implications globally and delves into the specific legal landscape in United States, United Kingdom, European Union & India. Intellectual Property (IP) and Copyright Law One of the most contentious areas of concern is Intellectual property (IP). Since AI-generated works may not involve direct human intervention, many legal systems grapple with whether such content can be copyrighted. Traditional IP laws typically recognize human authorship as the foundation for rights ownership. However, generative AI creates content autonomously, blurring the lines of authorship. United States In the U.S., the Copyright Office currently only grants protection to works created by humans. For instance, in Thaler v. Perlmutter, the court rejected an AI-generated image’s copyright, emphasizing that “authorship requires human involvement.” European Union EU law, especially under the Directive on Copyright in the Digital Single Market (2019), still insists on human creativity as the basis of copyright. However, discussions are underway about how AI could fit into this framework, especially with AI tools becoming more powerful. United Kingdom UK law is more flawless. Under the UK Copyright, Designs and Patents Act of 1988, computer-generated works are eligible for copyright, with authorship attributed to the “person making the arrangements.” This provides a legal precedent for AI-generated content to be protected under specific conditions. India India’s Copyright Act, 1957 and amendments thereon does not explicitly address AI-generated works. Currently, the law requires a human author for copyright protection. However, as AI-generated content becomes more prevalent, there is growing discourse on how to adapt Indian IP laws. Legal experts in India are advocating for amendments that recognize AI as a tool rather than an author, thereby attributing authorship to the individuals or entities that design, train, or deploy the AI systems. Additionally, the Intellectual Property Appellate Board (IPAB) has been monitoring global trends to recommend necessary legal reforms. Data Privacy and Protection With generative AI systems heavily reliant on vast datasets to generate new content, concerns about Data Privacy loom large. This issue has triggered legislative responses worldwide. European Union (GDPR) The General Data Protection Regulation (GDPR) enforces strict rules on how personal data can be processed. Generative AI tools that use sensitive personal data for training can potentially violate GDPR, particularly the rules around consent and the right to be forgotten. Article 22 of the GDPR restricts automated decision-making unless specific conditions are met to ensure that individuals are not subject to AI decisions without human intervention. California (CCPA) In the U.S., the California Consumer Privacy Act (CCPA) provides data protection rights, including the ability to know, delete, or opt out of the sale of personal data. As generative AI expands its data processing capabilities, companies deploying AI systems must comply with CCPA regulations to avoid penalties. India India overhauled its data protection framework by introducing the Personal Data Protection Act 2023 (PDPA), which aims to provide comprehensive data privacy regulations. Under the PDPA, generative AI systems that process personal data needs to comply with stringent data protection standards, including obtaining explicit consent and ensuring data minimization. Additionally, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, govern data protection in India. These rules mandate organizations to implement reasonable security practices to protect sensitive personal data, which would extend to AI systems handling such data. Liability and Accountability in AI Determining liability when generative AI tools produce harmful or erroneous outputs is a significant legal challenge. For instance, if an AI-generated report provides faulty advice or a self-driving AI vehicle malfunctions, the question arises: who is accountable? European Union The AI Liability Directive and Product Liability Directive are set to address AI-generated harm by shifting the burden of proof onto developers, manufacturers, and businesses deploying AI systems. The directive aims to clarify who is responsible for damages caused by AI-based decisions. United States The National Artificial Intelligence Initiative Act mandates agencies to explore liability frameworks for AI-related harm. However, the debate continues over whether liability should rest with the developer, the user, or the AI system itself. India India currently does not have specific legislation addressing AI liability. Instead, existing laws under the Indian Penal Code (IPC) and the Civil Code are applied. However, these laws are often inadequate for addressing the complexities introduced by AI. Legal scholars in India are calling for the introduction of specialized AI liability frameworks that clearly define the responsibilities of AI developers, deployers, and users. There is also a push towards incorporating principles of strict liability for AI-related harms, especially in high-stakes applications like healthcare and autonomous vehicles. Ethical and Human Rights Considerations Ethical concerns around AI decision-making are rising, especially in areas like autonomous vehicles, healthcare, and law enforcement, where human rights violations could occur. United Nations The UNESCO Recommendation on the Ethics of AI (2021) outlines global standards for ethical AI, including non-discrimination and transparency in AI decision-making processes. It encourages states to ensure that AI does not infringe on human rights. European Union AI Act The EU has developed the AI Act which came into force on August 1, 2024, classifies AI systems into risk categories, placing stricter regulatory requirements on high-risk systems that could affect fundamental rights or public safety. The AI Act aims to promote the responsible development and use of artificial intelligence in the EU. India India has been proactive in addressing the ethical implications of AI. The NITI Aayog, India’s policy think tank, released the National Strategy for Artificial Intelligence (NSAI), which emphasizes the ethical use of AI. The strategy highlights principles such as transparency, accountability, and fairness. Additionally, India’s Personal Data Protection Act includes provisions that align with ethical AI use, ensuring that AI systems do not perpetuate biases or
AI Strategy & Governance

How to think strategically and understand how #AI can be used to create fair #algorithms, increase #datasecurity, and help us remain in compliance with related #laws and #regulations. I would like to share some of what I learned to spread #knowledge and #awareness on this topic, and link it with the legal field, since it is a subject still not well understood specially by all workers in this field. AI systems leverage intelligent algorithms that classify, analyze, and make predictions from large amounts of #data. These algorithms are trained using large #datasets (i.e. “training data”) so that they can identify patterns in data, make predictions, and recommend actions. #artificialintelligence and #machinelearning (ML) are common phrases nowadays, and very few people are still unaware of them. However, any time a new idea launches, people are pretty reluctant to accept it. Lawyers and legal professionals are no exception. Having concerns about AI taking your place? Even with widespread adoption of AI, attorneys will still be vitally important. AI can’t make a convincing presentation to a jury. Technology can’t fully weigh the factors that go into the many strategic decisions, large and small, that get made over the course of any litigation matter. It can’t replace the human element of relationships with clients. And a computer can’t play a leadership role in motivating a team of attorneys to produce their best work. In short, it would be a mistake to use the extraordinary advances of AI to minimize the importance of the human element in the practice of law. But it would be just as big a mistake to dismiss the role of AI, which will fundamentally reshape the landscape for both providers and users of legal services. Let’s explore a few impactful ways that law firms, in-house legal teams, and the public sector are using AI and ML: “Smart data management \ Automatic reminders \ Contract review and analysis \ Ease of Legal research \ Elimination of time-consuming tasks \ Accurate result prediction \ Accurate risk assessment \ etc.” Among the #risks that cause anxiety for AI users are #cyberthreats and #privacy. According to recent research conducted by a malpractice insurer, cyberattacks affected 22% of legal firms. All in all, Do you want to develop your legal firm? Start with a change management strategy. What will be the method of presenting technology to lawyers and clients? How will you motivate and encourage adoption both internally and externally? How will AI technology work with the lawyer’s existing systems and processes? What AI will you use to track how technology is used?
The Global Impact of GDPR: Transformation of the Data Privacy Laws Worldwide

The advent of the European Union’s General Data Protection Regulation (GDPR) on May 25, 2018, marked a watershed moment in the realm of data privacy. As one of the most comprehensive and stringent data protection regulations ever conceived, GDPR’s impact has transcended the borders of the European Union, reverberating across the globe and prompting a wave of legislative reforms. Countries worldwide have found themselves compelled to reassess and fortify their own data protection frameworks to align with the high standards set by GDPR. This sweeping influence has established GDPR as the de facto global benchmark for data privacy, significantly shaping the policies and practices of organizations far beyond Europe. The GDPR’s broad scope and extraterritorial application mean that it governs not only EU-based organizations but also any entity that processes the personal data of EU residents, irrespective of geographic location. This comprehensive reach has forced companies around the world to adapt to GDPR’s stringent requirements concerning user consent, data minimization, and robust data protection mechanisms. Consequently, GDPR has redefined the global standards for safeguarding personal information, compelling businesses to prioritize data privacy in unprecedented ways. In the wake of GDPR’s implementation, several high-profile data breaches have underscored the urgent need for robust data protection laws. Incidents such as the Alibaba data breach in China, the Benesse data leak in Japan, the Interpark breach in South Korea, Facebook’s controversial data practices in Australia, the Equifax breach in the United States, and the Desjardins breach in Canada have catalyzed significant legal reforms in these nations. Each of these cases has highlighted critical vulnerabilities in existing data protection frameworks, prompting legislative bodies to adopt GDPR-inspired measures to enhance their data privacy regulations. This article explores the profound impact of GDPR on data privacy laws across China, Japan, South Korea, Australia, the USA, and Canada. It delves into specific articles and clauses from these countries’ laws that have been influenced by GDPR, examines real cases that necessitated these changes, and discusses how companies have been compelled to implement these new legal requirements. Additionally, the article provides insights into what the future holds for data privacy, offering predictions for the next decade as the global landscape continues to evolve under the enduring influence of GDPR. The Global Impact of GDPR on Data Privacy Laws When the European Union’s General Data Protection Regulation (GDPR) came into effect on May 25, 2018, it marked a pivotal moment in the world of data privacy. As one of the most comprehensive and stringent data protection regulations, GDPR didn’t just influence the EU; it sent ripples across the globe, prompting countries to rethink and revamp their own privacy laws. The GDPR’s influence extended far beyond European borders, becoming a global standard in data protection. The GDPR’s broad scope meant that it applied not only to organizations within the EU but also to those outside it that processed the personal data of EU residents. This extraterritorial reach compelled companies worldwide to comply with GDPR if they handled data belonging to EU citizens. The regulation introduced stringent requirements on user consent, data minimization, robust data protection mechanisms, redefining global standards for safeguarding personal information. Real Cases and Their Impact China: PIPL and the Alibaba Fine China’s introduction of the Personal Information Protection Law (PIPL) on November 1, 2021, was heavily influenced by GDPR. The need for such a law became evident after the Alibaba data breach in 2019, where the company faced severe scrutiny for its data handling practices. The breach highlighted significant gaps in China’s data protection framework, prompting the enactment of PIPL. Under this new law, companies like Alibaba had to overhaul their data processing activities, ensuring stricter compliance with consent mechanisms, data minimization practices, and enhanced security measures to protect personal data. Articles such as 13, 14, 45, and 49 of PIPL, which focus on lawful grounds for processing, conditions for consent, the right to deletion, and breach notification obligations, closely mirror GDPR’s stringent requirements. Japan: APPI Amendments and the Benesse Data Leak In Japan, the Act on the Protection of Personal Information (APPI) was amended in 2020 to align more closely with GDPR. This move was partly in response to the Benesse data leak in 2014, where the personal information of millions of customers was compromised. The incident underscored the urgent need for stronger data protection laws. Following the amendments, companies in Japan had to significantly enhance their data handling processes, ensuring compliance with new requirements for data transfers, breach notifications, and individual rights to access and correct their data. Key articles from APPI, such as 15, 16, 18, and 22, now include principles of data processing, conditions for data collection and use, rights to access and correct data, and data breach notification requirements, reflecting GDPR’s comprehensive framework. South Korea: PIPA and the Interpark Breach South Korea’s Personal Information Protection Act (PIPA) was further strengthened following the Interpark data breach in 2016, which exposed the personal information of over 10 million users. This breach demonstrated the need for stricter data protection measures, leading South Korea to align PIPA more closely with GDPR. Organizations were required to adopt stringent data protection measures, including obtaining explicit consent for data processing and implementing robust security protocols. Articles 3, 17 and 36 of PIPA, which address principles of data processing, conditions for obtaining consent, rights to correction and deletion, and breach notification obligations, were enhanced to reflect GDPR’s stringent standards. Australia: Privacy Act Review and Facebook’s Data Practices Australia’s Privacy Act 1988 is currently under review to enhance its alignment with GDPR. This review was influenced by various incidents, including Facebook’s controversial data practices that came to light following the Cambridge Analytica scandal. The Australian government recognized the need for stronger data protection laws. Proposed changes to the Privacy Act include introducing a right to erasure and enhancing penalties for non-compliance. Companies in Australia will need to update their privacy policies, strengthen consent mechanisms, and ensure robust data security measures. Relevant principles from the Privacy Act, such as Australian Privacy Principle
Traversing Latest Developments in Media Law in India

1. In recent years, media law in India has witnessed significant developments, reflecting the evolving landscape of communication, technology, and governance. These developments encompass a wide range of issues from freedom of speech to regulation of digital platforms, impacting both traditional media outlets and new-age digital media. Constitutional Backdrop 2. Freedom of speech and expression is enshrined as a fundamental right guaranteed by the Indian Constitution under Article 19(1)(a). However, this right is not absolute and is subject to restrictions under Article 19(2) such as public order, defamation, morality, and security of the state. Recent judicial pronouncements have continued to balance this right with competing interests, particularly in cases involving hate speech, misinformation, and regulation of content on digital platforms. 3. A landmark case in this regard is the case of Shreya Singhal v. Union of India (2015)[1], where the Supreme Court had the occasion to deal with the constitutional validity of Section 66A of the Information Technology Act, 2000, in a case involving the arrest of two women under the Information Technology Act, 2000 for posting allegedly offensive and objectionable comments on Facebook. The Supreme Court, while striking down Section 66A, held the provision as being vague and overbroad, and noted that Section 66A could limit all forms of internet communications as it made no distinction “between mere discussion or advocacy of a particular point of view, which may be annoying or inconvenient or grossly offensive to some and incitement by which such words lead to an imminent causal connection with public disorder, security of State etc.” Regulation of Digital Platforms 4. The rise of digital media platforms has brought forth new challenges in regulation in the arena of Media law. In 2021, the Government of India introduced the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, (amended later in 2022 and 2023). These Rules seek to regulate digital news media and OTT (Over-the-Top) platforms, and amongst other directives, mandate such platforms to adhere to a code of ethics, appoint grievance officers, and provide mechanisms for self-regulation and oversight by the government. The regulations impose stringent obligations on social media intermediaries, including requirements to remove any news related to the “business of the Central Government” that the Union Government’s fact-checking unit (FCU) deems “fake, false, or misleading.” Failure to comply to such removal requests have far reaching consequences including the loss of safe harbour immunity, which protects intermediaries from legal liability for user-generated content. 5. While the government justifies the Rules as necessary to curb the spread of misinformation and harmful content; the Rules have come under staunch and severe criticism from critics who argue that the rules could lead to overreach and stifle free speech. The Rules are already subject to several legal challenges by entities such as the Press Trust of India, WhatsApp, and other interested parties, before the Delhi High Court[2] the Bombay High Court[3], and the Karnataka High Court[4] and have sparked debates regarding their implications for freedom of speech and expression, as well as concerns about potential government overreach in monitoring digital content. Press Freedom and Journalistic Ethics 6. Press freedom remains a crucial aspect of media law in India. Recent incidents of journalists facing legal action, being targeted under various laws, including sedition and defamation, highlight ongoing concerns about the environment for independent journalism in India, and such acts are often seen as attempts to stifle the press and have underscored the challenge faced by a free and fair press. This is also reflected in the concerning drop in India’s World Press Freedom Index over the years[5]. It is due to such circumstances and instances which highlights the vital role that the judiciary has played and continues to play, in upholding press freedoms through landmark judgments that safeguard journalists’ rights to report fearlessly and protect their sources. Challenges for the Future 7. As India’s media landscape evolves with time, future developments in media law are likely to focus on balancing regulatory frameworks with the protection of fundamental rights. Key areas for reform include enhancing transparency in media ownership, ensuring equitable access to information, while addressing emerging issues such as fake news, digital privacy, especially in the age of artificial intelligence and the potential misuse of deep-fakes. As this landscape evolves, the role of self-regulatory bodies, ethical guidelines for journalists, and the responsibilities of digital platforms in curbing harmful content will continue to be subjects of debate and reform. 8. In conclusion, while India has a robust legal framework for media, recent developments reflect ongoing efforts to adapt to technological advancements and societal changes. The challenge lies in maintaining a balance between freedom of expression and the need for responsible media practices in a rapidly transforming media landscape. As these issues unfold, stakeholders both on the side of policymakers, as also media professionals, the civil society, and most importantly, the judiciary, will play crucial roles in the delicate balance required to balance state interests and the rights to freedom of speech and expression, and it is precisely how this balance is maintained, that will shape the future of media law in India.
SexTech is Booming, will Sticky Legal Issues Clog the Rising Industry? | Cybersecurity, Privacy, Supply-Maintenance Agreements and More!

Taboo or not, the combination of COVID-induced-loneliness and digitized-romance have made SexTech one of the fastest growing areas in tech in 2022. Worth over US$84 Billion in 2020 and forecasted to exceed US$125 Billion by 2026, questions arise as to whether unaddressed sextech legal issues related to the SexTech businesses may clog the multi-billion-dollar industry. Introduction FinTech, LegalTech, HealthTech, RegTech… it seems that anything traditional can be upscaled with ‘tech’ (i.e. fusing technology with traditional products) and revamped into a new booming industry. Being one of the latest beneficiaries of the COVID induced tech-revolution, SexTech is no exception. However, taboo and stigma around the subject have led lawyers to shun away from advising SexTech companies/start-ups. What is SexTech? SexTech is the use of technology to enhance sexual experiences. Accordingly, SexTech products may include both hardware products (e.g., sex toys/enhancement tools) and software products (e.g., education/therapeutic applications). Common products on the market such as ‘device+app’ products (which require attention to cybersecurity) and interactive products (e.g., ‘body response technologies’) all involve legal issues of data collection, retention and privacy that manufacturers must be aware of. Cybersecurity Matters in SexTech! Cybersecurity is one of the biggest challenges companies face when attempting to implement ‘tech’ into value chains. For instance, although lawyers are waking up to the need for tech in delivery of legal services, issues of cybersecurity are often left at the backburner until a breach occurs. This is further evidenced by the fact that risk management courses such as Cybersecurity and the Law Firm have yet to be made mandatory for lawyers as of 2022. The SexTech industry is no different. Whilst adding web elements to a product may potentially increase user satisfaction, failure to take adequate cybersecurity precaution may result in loopholes for cybercriminals to exploit. In 2020, it was reported that a production company for internet connected chastity belts was forced to disclose a vulnerability when it was discovered the chastity cage was vulnerable to ransomware (due to a backdoor in their devices). Physical injury was subsequently reported when the victim of one such ransomware attack, in panic, attempted to free himself with a hammer. Hence, manufacturers may become liable for personal injury and cybersecurity negligence for failure to take the necessary precautions and/or leaving a backdoor open and/or provide users with the necessary warnings. Whilst backdoors are great for developers to patch and upgrade products, vendors may nonetheless find themselves blasted by fines and investigations if left unguarded. Data Collection, Retention & Privacy The maturing of artificial-intelligence (“AI”) technology has resulted in the creation of body response technologies where computers/algorithms are used to implement actions in response to a user’s bodily reaction. These ‘smart’ devices require a vast database as machine-learning and automated decision making cannot be achieved without sufficient data input. As such, manufacturers will compile databases from users’ past activities. Question thus arises as to whether manufacturers have implemented the relevant compliance protocols. In Hong Kong, operators based in Hong Kong have to comply with the Personal Data (Privacy) Ordinance (Cap.486) (“PDPO”) and various Data Protection Principals (“DPP”). On the other hand, the General Data Protection Regulation (“GDPR”) has extraterritorial scope and will apply to operators targeting customers in Europe. As matter of best practices, the principle of data minimisation and consent should be implemented. To this end, it will be useful for operators to have a system in place where users can: Indicate consent for data collection; Make request for access to their data; and Have a channel to request for deletion of their data. Alternatively, Blockchain can serve as a solution for the sextech industry, providing security, empowerment, and protection through decentralized transactions, data privacy, and the ability to transact confidentially, addressing the industry’s unique challenges and creating new opportunities via a tech solution. Supply-Maintenance Agreements Manufacturers that have promised (via advertisements/representations) that a product will function a certain way may have difficulty keeping such promise unless maintenance contracts are put in place. Cybersecurity is a process; continuous patching in response to new threats is a must. Therefore, failure to put maintenance agreements in place may result in runaway costs and disputes under the Consumer Goods Safety Ordinance (Cap.456). Intellectual Property & Consent Back in April 2016, it was reported that a robot ‘enthusiast’ had created a robot in the likeness of Scarlett Johansson. Then in February 2022, Model Yael Cohen Aris claimed a sex doll company had made a doll with her name and in her likeness. This demonstrates how companies in the SexTech industry may be ill-informed of the potential legal repercussions of their actions and thus require proper legal advice. Although a person cannot make a copyright claim for someone copying their appearance (unless the victim was making dolls themselves and brings a claim stating that the manufacturer is making rip-offs of such dolls), to avoid potential law suits (e.g., a claim in tort), consent should always be sought when modelling dolls after celebrities. Conclusion The SexTech industry is booming, and, as with any boom, novel legal issues (e.g. privacy, intellectual property, and cybersecurity) will rise. Whilst many lawyers in the field have hopped onto the blockchain bandwagon during the crypto boom (by calling themselves ‘Blockchain Lawyer’), will you be the one to break social stigma and brand yourself as the next ‘SexTech Lawyer’?
Cyberbullying: A Legal Perspective in Sri Lanka

Cyberbullying, a major issue in the digital era creates significant legal, social, and psychological challenges worldwide, including in Sri Lanka. The unlimited internet access and increasing usage of online platforms have facilitated a new form of harassment that can lead to severe consequences for those who are affected. In this context, it is imperative to understand the legal framework addressing cyberbullying in Sri Lanka, its implications, and the actions needed to address this issue effectively. Definition and Scope Cyberbullying takes place by using digital technologies, on platforms such as social media, emails, instant messaging, and other online services, to harass, threaten, or intimidate individuals. 1 That behavior could be spreading bad information, sharing embarrassing content, messaging threatening messages, impersonating someone and sending mean messages to others on their behalf or through fake accounts or anything of that nature where the victim is being hurt, controlled, or manipulated.2 Cyberbullying is different from traditional bullying as it can happen 24/7 and instantly reach a massive audience, making it harmful and challenging to fight against. Legal Framework in Sri Lanka Various legislative measures have been taken by the Sri Lankan legal system by recognizing the need to address cyberbullying. The Penal Code3 The Penal Code of Sri Lanka does not provide specific provisions to address cyberbullying. However, it contains some provisions that whereby certain aspects of digital harassment can fall under their purview. Sections 3454 and 3465 of the Penal Code criminalize assault and criminal intimidation. In case a cyberbully’ s conduct involves threats or actions that contain assault or intimidation, these sections could apply to them. Computer Crimes Act6 The Act provides specific provisions that cover the acts of cyberbullying. The Act criminalizes unauthorized access to computers, unauthorized use of computer systems, and the causing of computer-related harm. Section 6 particularly addresses the issue of unauthorized access to a computer which can consist in hacking someone’s social media account and posting content that humiliates them.7 Furthermore, Section 8 relates to the unauthorized use of computer systems which can cover sending intimidating messages or emails. ICCPR Act9 The ICCPR Act also provides a framework for dealing with cyberbullying. Article 17 of the Act includes provisions for protecting individuals from arbitrary or unlawful interference with their privacy, family, home as well as from illegal offenses against their reputation or dignity.10 This can be applied in situations where cyberbullies post false stories about another person or interrupt their private life. Challenges in Enforcement Despite having a legislative framework, there are several challenges to enforcing the laws against cyberbullying in Sri Lanka. One of the biggest challenges is that digital platforms offer anonymity to the person behind the screen making it almost impossible to identify and catch them. Additionally, due to the global nature of the internet the cyberbullies can be located outside Sri Lanka, complicating the jurisdictional matters. The lack of awareness among both the public and the law enforcement authorities about available legal remedies for cyberbullying is another critical challenge. Victims may not be aware of their rights or how they can report such crimes, while law enforcement officers lack of training needed to effectively deal with these situations. The Role of Education and Awareness In this digital world, it is imperative to have a comprehensive strategy that addresses the issue of cyberbullying. This strategy should cover not only legal measures but also education and awareness among the general public. Specifically, the primary education syllabus can incorporate cyber safety education into their curricula to make children aware of their responsibilities when using technology, its ethical and social limitations, and the legal consequences of cyberbullying. Social media platforms and mass media can be utilized to educate the broader community about the harms of cyberbullying and the legal protections available to victims. Proposed Legal Reforms Several reforms could be considered to enhance the legal framework and for better dealing with cyberbullying. Enacting a specific legislature which deals with cyberbullying providing clear guidelines to authorities. Which will help to avoid large number of ambiguous cases for the law enforcement authorities and the judiciary. In dealing with cyberbullying, it is crucial to improve the capacity of law enforcement agencies by establishing cybercrime units within police stations and providing specialized training to the officers involved in digital forensics and cybercrime investigation. Finally, considering the cross-border nature of cyberbullying it is essential to work in collaboration with international stakeholders by engaging in international treaties, sharing information and extradition of cyberbullies operating from abroad. Conclusion While Sri Lanka has made an effort to address cyberbullying through its legal framework there is still a long way to go as a country aiming to achieve its economic stability by pursuing more opportunities in IT industry and with the government vision for 2030 to have: a digitally empowered Sri Lanka for innovation, inclusion and sustainable growth.
Insider trading! A scandalous practice

Insider trading, the practice of trading securities based on material non-public information. Insider trading’ in financial markets refers to trading in securities such as equity and bonds by company insiders who have access to exclusive information about the issuer of a particular security before such information is released to the general public. This allows insiders to benefit from buying or selling shares before they fluctuate in price. Insider trading is an extremely complex issue and it is almost impossible to get rid of it because it evolves from a very basic human instinct i.e., greed. One who is having insider information and arrive at a decision of future profit or reduction of loss by discounting such information, it is extremely difficult for him to keep himself abstained from trading based on that information. This articles is an endeavour to understand the magnitude of this problem and regulatory practices that exist to combat it. Insider Trading has a long and complex history worldwide. Here’s an overview of its evolution: Early History: The earliest known case of insider trading dates back to the late 18th century, during the early days of securities trading in the United States. United States: In 1909, the United States Supreme Court addressed insider trading in the case of Strong v. Repide, acknowledging the unfairness of trading on undisclosed information. Securities Act of 1933 and Securities Exchange Act of 1934: These acts laid the foundation for securities regulation in the US and introduced disclosure requirements, but did not specifically address insider trading. 1960s-1980s: Several high-profile cases highlighted the need for specific regulation. The SEC began to enforce rules against insider trading more vigorously. 1984: The landmark case Dirks v. SEC established the concept of a “personal benefit” requirement for insider trading liability. 2. Europe: Insider trading regulations varied widely across European countries, with some adopting stringent rules earlier than others. The European Union harmonized insider trading laws with the Market Abuse Directive in 2003, aiming to create a consistent framework across member states. 3. India: i. Pre-Regulation Era (Before 1992): Insider trading was not specifically regulated. The Securities Contracts (Regulation) Act, 1956 did not address insider trading directly. ii. The Securities and Exchange Board of India (SEBI): The SEBI was established in 1988 as the regulatory body for securities markets in India. Initially, SEBI’s focus was on development and regulation of the securities market. iii. SEBI (Insider Trading) Regulations, 1992: The first comprehensive regulations addressing insider trading were introduced in 1992. These regulations defined who constitutes an insider and prohibited trading based on unpublished price-sensitive information (UPSI). Over the years, SEBI has amended and strengthened the insider trading regulations to enhance transparency and prevent market abuse. iv. SEBI (Prohibition of Insider Trading) Regulations, 2015: Replaced the earlier regulations and further refined the rules. Introduced provisions for: Definition of insiders and related persons. Codes of conduct for prevention of insider trading. Trading Window- Insiders can trade only during specified trading windows when they are not in possession of UPSI. Disclosure requirements for insiders. establishment of a structured reporting mechanism. Penalties for violations include fines, disgorgement of profits, and restrictions on market activities. Overall, insider trading regulations in India have progressed from a basic framework in 1992 to a robust and comprehensive system under the 2015 regulations. The aim is to maintain market integrity, protect investor interests, and ensure a level playing field for all participants in the securities market. Modern Era: Global Harmonization: Countries worldwide have increasingly adopted laws and regulations against insider trading, often influenced by international standards and agreements. Organizations like the International Organization of Securities Commissions (IOSCO) play a role in promoting consistent global standards. 2. Technological Challenges: Advances in technology have posed new challenges for regulating insider trading, such as high-frequency trading and the rapid dissemination of information. 3. Enforcement and Penalties: Enforcement efforts have become more coordinated and robust globally, with significant penalties for violations to deter unethical behavior. Countries vary in the severity of penalties, but many impose fines, disgorgement of profits, and criminal sanctions for serious offenses. Recent Developments: Market Surveillance: Regulators increasingly use advanced surveillance techniques and data analytics to detect and prevent insider trading. 2. International Cooperation: Cooperation among regulators across borders has strengthened, particularly in cases involving multinational corporations and cross-border transactions. 3. Public Awareness and Corporate Governance: There is growing emphasis on corporate governance and ethical behavior to prevent insider trading within organizations. Challenges and Future Directions: Technological Advancements: Continued advancements in technology necessitate ongoing updates to regulations and surveillance methods. 2. Legal Interpretations: Courts around the world continue to interpret and refine insider trading laws, influencing the development of regulatory frameworks. 3. Globalization: As financial markets become increasingly globalized, the need for harmonized international standards remains critical. Judicial Systems: The Courts have played a significant role in interpreting and applying insider trading regulations, contributing to the evolving jurisprudence. Notable judicial activist on insider trading law worldwide can be presented as below: Globally Martha Stewart (United States): Martha Stewart, a well-known American businesswoman and TV personality, was involved in an insider trading case in 2001. She sold shares of ImClone Systems based on non-public information about an impending FDA decision that negatively affected the company’s stock. Stewart was convicted in 2004 of conspiracy, obstruction of justice, and making false statements to investigators. Raj Rajaratnam (United States): Raj Rajaratnam, a billionaire hedge fund manager, was convicted in 2011 for insider trading involving several high-profile companies. The case was notable for its use of extensive wiretaps to gather evidence against Rajaratnam and others involved in the insider trading network. Hollinger International (Canada/United States): Conrad Black, former CEO of Hollinger International, and several associates were accused of diverting funds and engaging in insider trading by selling company assets without proper disclosure. Black was convicted in 2007 on charges of fraud and obstruction of justice, including instances of insider trading. Fujitsu (Japan): In 2018, several executives of Fujitsu Limited, a major Japanese technology company, were found guilty of insider trading. The
Outsourcing Contracts: Benchmarking Exercise

Benchmarking is a sensitive, emotional and, most of the times, a difficult issue for the customer and the outsourcing service provider in the outsourcing process, both during contracting stage as well as when it comes to conducting a benchmarking exercise. Customer’s perspective of benchmarking: Most customers see benchmarking as an important contractual tool that can help them ensure competitive / favourable pricing in long term outsourcing contracts. As competition between the outsourcing service providers in the market is moving northwards, and technology and digital costs south, majority of customers are increasingly seeking benchmark terms, which has teeth and which require outsourcing service providers to automatically reduce prices during the contract term in line with market pricing trends. Outsourcing service provider’s perspective of benchmarking: Unsurprisingly on the other hand, Outsourcing service providers view benchmarking differently. While their general perception of the benchmark process has improved in recent years, outsourcing service providers continue to perceive benchmarking in an orthodox manner, with some suspicion, concerned that the benchmarking process is often poorly constructed and adversely implemented, and that it fails to strike a fair balance between the customer and the outsourcing service provider interests. Through this article, I have attempted to identify the key issues and concerns that should be considered and addressed in the benchmark schedule of the outsourcing contract, and have also recommended approaches that can be taken to achieve a more realistic and balanced benchmarking process. This article covers the following topics in relation to benchmarking: Initial considerations whether benchmarking is necessary at all in view of the term of the outsourcing contract. Appointment of the benchmarker. Agreeing the benchmark target. Selecting the benchmark comparison sample. Agreeing the frequency of the benchmarking exercise. The mechanism to be followed and the parties’ main obligations during the benchmark process. Consequences of benchmarking exercise and benchmarking report (for example, whether the benchmark is binding or non-binding). 1. Initial considerations (i) Duration of the Contract The initial term of the outsourcing contract is one of the foremost important factors for customers to consider in assessing whether to include benchmark provisions in their outsourcing contracts. The average duration of outsourcing contracts has decreased in recent years. Whereas, in the past, a term of ten or more years was not unusual, in the current trend, an initial term of between three and five years is much more common. Consequently, and given the time and effort that is often involved in negotiating and agreeing benchmark provisions, customers should, at the commencement of the outsourcing contract negotiations, consider carefully whether formal benchmark rights are required under their outsourcing contracts or not. Customers will normally have run a detailed competitive bidding process and market tested the down-selected outsourcing service provider’s charges as part of the competitive bidding process and, for many customers, therefore, formal benchmarking is seen as a “nice to have” rather than an essential in contracts with an initial duration of less than five years. For contracts with an initial duration of five years or more (or in some shorter term contracts where the associated costs of moving to a replacement outsourcing service provider are significant), most customers will generally seek to include an ability to benchmark the outsourcing service provider’s charges at regular intervals during the contract duration. (ii) Status of benchmark results Another initial consideration, which will have an important bearing on the parties’ approach to negotiation of the benchmark provisions in an outsourcing contract, is the status of the benchmarker’s report and recommendations. Customers nowadays are increasingly pressing for benchmark provisions in their outsourcing contracts, which require outsourcing service providers to automatically adjust their charges to match the market or benchmarker’s report and recommendations. This has the potential of being one of the most contentious aspects of the negotiation of the benchmark provisions and, particularly where the amount of any automatic reduction is uncapped, this can be a walkaway position for some outsourcing service providers. It is also likely to lead to protracted negotiations on some of the other key commercial issues relating to the benchmark provisions (such as the benchmark target, for example). On the other hand, outsourcing service providers, of course, prefer that the benchmark’s report and recommendations are not automatically binding, and that they simply act as a trigger for price re-negotiation. Although this amounts to nothing more than an unenforceable “agreement to agree” in legal terms, some customers consider it to be of value from a commercial standpoint. Because this approach generally leads to an easier negotiation of the other benchmark provisions (and often a more favourable position on those provisions), some customers are prepared to agree to non-binding benchmarking, especially where the services are highly commoditised, and the costs of moving to a replacement outsourcing service provider, in the event that the price re-negotiations are unsuccessful, are low. (iii) Subject of benchmark A final issue for early consideration is how much flexibility the customer requires in relation to the services to be benchmarked. This is important in contracts involving the outsourcing of more than one related function or service line or service tower. In this scenario, customers will often wish to retain the ability to benchmark individual functions and service lines. This can be problematic for outsourcing service providers, for a number of reasons. Main among these is that in outsourcing contracts involving the outsourcing of multiple service lines or service towers, there may be an element of price cross-subsidisation (where the outsourcing service provider accepts a lower profit margin on some service lines or service towers in return for a higher margin on others), and to allow the customer to “cherry pick” the services that are benchmarked would, therefore, result in an inaccurate and unfair comparison. This is in fact quite a legitimate concern on the outsourcing service provider’s part. Customers who wish to retain the flexibility to benchmark by service line or service tower will need to make the outsourcing service provider aware of this early on in contract negotiations, to allow the outsourcing service provider,