SC appoints cyber expert panel to probe Pegasus snooping allegations

The Supreme Court Wednesday appointed a three-member panel of cyber experts to probe the alleged use of Israeli spyware Pegasus for surveillance of various people in India including politicians, court staff, journalists and social activists.

Stating that "justice must not only be done, but also be seen to be done," the apex court rejected the Centre's plea to allow it to appoint an expert committee to investigate the allegations on the grounds that such a course of action would violate the settled judicial principle against bias.

The top court urged its former judge Justice R V Raveendran to oversee the functioning of the three member panel and sought a report expeditiously from the committee.

A bench headed by Chief Justice N V Ramana said it was inclined to pass an order appointing the Expert Committee whose functioning will be overseen by a retired Judge of the Supreme Court.

"Such a course of action has been adopted by this Court in various other circumstances when the Court found it fit in the facts and circumstances of the case to probe the truth or falsity of certain allegations, taking

into account the public importance and the alleged scope and nature of the large scale violation of the fundamental rights of the citizens of the country," the bench said

The apex court said Justice Raveendran will oversee functioning of the three-member panel of cyber security, digital forensics, networks and hardware.

The apex court said that former IPS officer Alok Joshi and Sundeep Oberoi -- Chairman, Sub Committee in (International Organisation of Standardisation/ International Electro-Technical Commission/Joint Technical Committee) -- will assist Justice Raveendran to oversee the task to the committee.

The apex court said it is appointing the committee in view of the six compelling circumstances: Right to privacy and freedom of speech are alleged to be impacted, which needs to be examined; entire citizenry is affected by such allegations due to the potential chilling effect, no clear stand taken by the Union of India regarding actions taken by it; seriousness accorded to the allegations by foreign countries and involvement of foreign parties.

Further, the possibility that some foreign authority, agency or private entity is involved in placing citizens of this country under surveillance; allegations that the Union or state governments are party to the rights' deprivations of the citizens, and limitation under writ jurisdiction to delve into factual aspects.

The first member of the technical committee is Naveen Kumar Chaudhary, Professor (Cyber Security and Digital

Forensics) and Dean, National Forensic Sciences University, Gandhinagar, Gujarat.

Chaudhary has over two decades of experience as an academician, cyber security enabler and cyber security expert and specialises in cyber security policy, network

vulnerability assessment and penetration testing, the apex court said.

The second member of the technical committee is Prabaharan P, Professor (School of Engineering), Amrita Vishwa Vidyapeetham, Amritapuri, Kerala.

"He has two decades of experience in computer science and security areas. His areas of interest are malware detection, critical infrastructural security, complex binary analysis, Artificial intelligence and machine learning. He has many publications in reputed journals," the bench said.

The third member of the technical committee is Ashwin Anil Gumaste, Institute Chair Associate Professor (Computer Science and Engineering), Indian Institute of Technology, Bombay, Maharashtra.

"He has been granted 20 US patents and has published over 150 papers and authored 3 books in his field. He has received several National awards including the Vikram Sarabhai Research Award (2012) and Shanti Swarup Bhatnagar Prize for Science and Technology (2018). He has also held the position of Visiting Scientist at the Massachusetts Institute of Technology, USA," the top court said.

The terms of reference of the committee are to enquire, investigate and determine whether the Pegasus spyware was used on phones or other devices of the citizens of India to access stored data, eavesdrop on conversations, intercept information and/or for any other purposes and the details of the victims and/or persons affected by such a spyware attack.

The committee would also enquire and investigate what steps/actions have been taken by the Centre after reports were published in the year 2019 about hacking of WhatsApp accounts of Indian citizens, using the Pegasus suite of spyware, whether any Pegasus suite of spyware was acquired by the Union of India, or any state government, or any central or state agency for use against the citizens of India.

"If any governmental agency has used the Pegasus suite of spyware on the citizens of this country, under what law, rule, guideline, protocol or lawful procedure was such deployment made? If any domestic entity/person has used the spyware on the citizens of this country, then is such a use authorised? Any other matter or aspect which may be connected, ancillary or incidental to the above terms of reference, which

the

Committee may deem fit and proper to investigate," the bench asked the panel to enquire and investigate.

The top court also directed the expert panel to make recommendations regarding enactment or amendment to existing law and procedures surrounding surveillance and for securing improved right to privacy, enhancing and improving the cyber security of the nation and its assets.

The other recommendations which the expert panel has been asked to submit are to ensure prevention of invasion of citizens' right to privacy, otherwise than in accordance with law, by State and/or non State entities through such spywares, regarding the establishment of a mechanism for citizens to raise grievances on suspicion of illegal surveillance of their devices.

"Regarding the setting up of a well equipped independent premier agency to investigate cyber security vulnerabilities, for threat assessment relating to

cyber attacks and to investigate instances of cyber attacks in the country. Regarding any ad hoc arrangement that may be made by this Court as an interim measure for the protection of citizen's rights, pending filling up of lacunae by the Parliament,'' the other recommendations said.

The top court said the committee constituted is authorised to devise its own procedure to effectively implement and answer the Terms of Reference, hold such enquiry or investigation as it deems fit;and take statements of any person in connection with the enquiry and call for the records of any authority or individual.

Justice Raveendran would be at liberty to take the assistance of any serving or retired officer(s), legal expert(s) or technical expert(s) in discharge of his functions, it said.

"We request the overseeing Judge to fix the honorarium of the members of the committee in consultation with them, which shall be paid by the Respondent Union of India immediately.

"The Union of India and all the State Governments, as well as agencies/authorities under them, are directed to extend full facilities, including

providing support with respect to infrastructure needs, manpower, finances, or any other matter as may be required by the Committee or the overseeing former Judge to effectively and expeditiously carry out the task assigned to them by this Court," the bench said.

The top court directed V K Bansal, Officer on Special Duty/Registrar, Supreme Court, is directed to coordinate between the committee, the overseeing Judge and the Central/State Governments to facilitate communication and ensure smooth functioning.

The committee is requested to prepare the report after a thorough inquiry and place it expeditiously before the court, it said.

The matter would be heard after eight weeks.

The apex court was hearing a batch of pleas seeking independent probe into the alleged Pegasus snooping matter.

The pleas seeking independent probe are related to reports of alleged snooping by government agencies on eminent citizens, politicians and scribes by using Israeli firm NSO's spyware Pegasus.