TU BCA Cyber Law & Professional Ethics Master Guide: Electronic Transactions Act 2063 & IT Penalties in Nepal
Author: Bhuban Subedi | Subject: Cyber Law and Professional Ethics (CACS401) | Semester: Seventh Semester
As software engineers developing critical financial, healthcare, and governmental portals, understanding the legal framework governing cyber activities and professional ethics is mandatory. In the Tribhuvan University BCA seventh semester, Cyber Law and Professional Ethics (CACS401) provides students with deep knowledge of intellectual property rights, digital signatures, cyber jurisdictions, and Nepal’s primary IT legislation—the Electronic Transactions Act 2063 (ETA 2008).
In the final 60-mark TU board examination, examiners consistently formulate questions on Legal Validity of Digital Signatures, The Role of the Controller of Certifying Authorities (CCA), Sections 44–55 Cyber Crimes & Penalties, and the ACM/IEEE Code of Professional Ethics.
In this guide, I will present a structured breakdown of Nepal’s cyber legal framework.
1. Overview of Nepal’s Electronic Transactions Act (ETA) 2063
Promulgated in 2063 B.S. (2008 A.D.), the Electronic Transactions Act 2063 is the principal cyber legislation in Nepal.
Core Objectives of ETA 2063:
- To make legal provisions for authentication and regularisation of electronic records and transactions.
- To grant official legal recognition to electronic signatures and digital communications.
- To define, prevent, and penalize computer-related offences, fraud, and cybercrimes in Nepal.
+-------------------------------------------------------------------------------+
| ETA 2063 REGULATORY HIERARCHY IN NEPAL |
| |
| 1. MINISTRY OF COMMUNICATION & INFORMATION TECHNOLOGY (MoCIT) |
| - Policy formation and overarching regulatory oversight. |
| |
| 2. CONTROLLER OF CERTIFYING AUTHORITIES (CCA / NITC) |
| - Licenses Certifying Authorities (CAs) and audits PKI standards. |
| |
| 3. CERTIFYING AUTHORITIES (e.g., Nepal Certifying Company - NCC) |
| - Issues Digital Signature Certificates (DSC) to citizens and businesses. |
| |
| 4. SUBSCRIBERS / CITIZENS |
| - Uses DSCs for secure electronic filing and authentication. |
+-------------------------------------------------------------------------------+
2. Cyber Crimes & Penalties under ETA 2063 (Chapter 9)
In TU examinations, citing exact section numbers and their statutory fines/imprisonment terms is the secret to scoring maximum marks:
+-----------+-----------------------------------+---------------------------------------+
| Section | Offence Description | Statutory Penalty in Nepal |
+-----------+-----------------------------------+---------------------------------------+
| **Sec 44**| **Piracy / Tampering with** | Imprisonment up to **3 years** OR |
| | **Computer Source Code** | Fine up to **NPR 200,000** (or both). |
+-----------+-----------------------------------+---------------------------------------+
| **Sec 45**| **Unauthorized Access / Hacking** | Imprisonment up to **3 years** OR |
| | into computer systems | Fine up to **NPR 200,000** (or both). |
+-----------+-----------------------------------+---------------------------------------+
| **Sec 46**| **Damage / Deletion of Data** | Imprisonment up to **3 years** OR |
| | via virus/malware injection | Fine up to **NPR 200,000** (or both). |
+-----------+-----------------------------------+---------------------------------------+
| **Sec 47**| **Publishing Illegal / Obscene / | Imprisonment up to **5 years** OR |
| | Defamatory Content online** | Fine up to **NPR 100,000** (or both). |
+-----------+-----------------------------------+---------------------------------------+
| **Sec 51**| **Computer Fraud / Financial Scam**| Compensation of damage amount PLUS |
| | using electronic media | Fine up to **NPR 100,000** / 2 years. |
+-----------+-----------------------------------+---------------------------------------+
| **Sec 52**| **Abetment / Accomplice** | Half of the penalty prescribed for |
| | to commit a cybercrime | the principal offender. |
+-----------+-----------------------------------+---------------------------------------+
3. Professional IT Ethics (ACM / IEEE Code)
Software developers hold significant power over society’s infrastructure and privacy. The ACM/IEEE Code of Ethics defines 8 core principles:
- Public Interest: Software engineers shall act consistently with the public interest.
- Client and Employer: Engineers shall act in the best interests of their client, consistent with the public interest.
- Product Integrity: Ensure high software quality, rigorous testing, and safety standards.
- Judgment: Maintain integrity and independence in professional judgment.
- Management: Promotes ethical management of software development and maintenance.
- Profession: Advance the integrity and reputation of the computing profession.
- Colleagues: Be fair and supportive of colleagues and peer developers.
- Self: Participate in lifelong learning and promote ethical software practices.
Frequently Asked Questions (FAQ)
Q1: Is an electronic document legally admissible in Nepali courts?
Yes. Under Section 3 and 4 of ETA 2063, electronic records and transactions authenticated with valid digital signatures carry the same evidentiary weight as physical paper documents.
Q2: What is the IT Tribunal under ETA 2063?
The Information Technology Tribunal is a specialized judicial body established by the Government of Nepal to adjudicate civil and criminal cases arising from offences under the Electronic Transactions Act.
