SPAM: IS IT TIME TO LEGISLATE?

Unsolicited Electronic Mail also called "spam" is a growing concern among corporations and individuals. Spamming, once viewed as a mere nuisance, is now posing some alarming problems. In the year 2002 alone, losses to US Corporations due to spamming were a staggering $8.9 billion. In 2003, spam costs to all Non-corporation Internet users were an estimated $255 million . With the increasing number of Internet users in India, the absence of any legislation prohibiting spamming and the dearth of other spam-control measures, it is time the Government took note of this menace.

What exactly is Spam?
Spam may be defined as Unsolicited Bulk E-Mail (UBE) or Unsolicited Commercial E-Mail (UCE). In either case, it is important to note that Spam is "Unsolicited" which means that there is no prior relationship between the parties concerned and the recipient has not explicitly consented to receive the communication.

Why is Spam harmful?
1. Content
Many of the objections to spam relate to its content. Objections to commercial messages, which promote dubious ventures and messages that contain sexually explicit material, are commonplace. However, the single most important objection is as far as messages containing contain harmful embedded code and hostile file attachments.

2. Consumption of Internet Resources
Spam represents a significant proportion of all e-mail traffic, consuming massive amounts of network bandwidth, memory, storage space, and other resources. Internet users and system administrators spend a great deal of time reading, deleting, filtering, and blocking spam, as a result of which they pay more for Internet access.

3. Threat to Internet Security
Spammers frequently tap into Simple Mail Transfer Protocol (SMTP) Servers and direct them to send copies of a message to a long list of recipients. Third-party relaying usually represents theft of service because it is an unauthorized appropriation of computing resources. A company?s reputation may be damaged if it is associated with spam because of third party relaying.

What are the methods of dealing with Spam?
I. Technical Methods
The first line of defense against spam normally consists of self-help and other technical mechanisms. These mechanisms can be implemented by individual Internet users, ISPs and other destination operators, as well as by various third parties, some of which specialize in battling spam.

A. Filtering and Blocking
i. End User Filtering and Collaborative Filtering
End User filtering entails the recipient simply ignoring unwanted messages while collaborative filtering consists of filtering done by Internet Service Providers (ISP) and proxy filtering services like Brightmail.

ii. Blocking
Blocking involves enabling destination operators to refuse delivery of spam. Many databases sometimes referred to as blacklists or "blackhole lists," list Internet hosts frequented by spammers. Destination operators can use these databases to identify and refuse delivery of selected incoming messages.

B. Hiding from Spammers
This process involves concealing e-mail addresses by the recipients thus making harder for the spammers.

C. Opting Out
This procedure involves requesting the spammer to remove the recipient from the mailing list. Of all the measures stated above this is the most ineffective as spammers almost never remove a mail address from their mailing lists.

Problems with Technical Approach:
The Technical Approach has several fallacies especially in India:

* Technical approaches are unlikely ever to eradicate spam, partly because of the time and resources that spammers devote to their activities (and the economies of scale from which they benefit) and partly because of the inherent openness of the Internet and e-mail protocols.

* Technical approaches have deleterious effects that they can have on legitimate communications. Blocking e-mail traffic from a spam-friendly site often means blocking a great deal of legitimate email, for example.

*  Mordern Anti-spam technology is expensive and it further burdens the netizen

*  There is lack of transparency and accountability consequently spammers continue to act with impunity

II. Legal Methods
In the absence of adequate technological protection, stringent legislation is essential to deal with the problem of spam. Several spam-related Bills have been introduced in the United States Congress , of which only CAN-SPAM Act of 2003 has come into force.

The European Union and other countries have also enacted anti-spam legislation. Australia which contributes to about 16% of the total spam in the world has the most stringent spam laws under which spammers may be fined up to $1.1 million a day. Although anti-spam legislations are found all over the world, the methods of combating spam are virtually similar as is evident from the following:

1) Prohibition:
The state of Delaware in the United States has stringent anti-spam legislation , which imposes a virtual ban on Unsolicited Bulk Commercial E-mail messages The European Union does not prohibit unsolicited commercial email, but permits individual member states to do so. Finland , Germany , and Italy all have laws prohibiting UCE, while Austria prohibits both UCE and UBE.

2) Enforcement of Anti-Spam policies:
ISPs and other destination operators generally have policies that govern the use of their facilities for various purposes, and nearly all of them prohibit spamming in particular. Consequently in some legislations emphasis is laid on following these policies.

3) Opt-out clause
Several Legislations including the US CAN -SPAM Act provide for an Opt-out procedure wherein senders may communicate with anyone except those who have explicitly opted out.

4) Other Statutory Provisions
Data protection laws in some States regulate the collection, use, and transfer of personal information that may include e-mail addresses, and legislation has been proposed in the United States Congress to restrict the ability of spammers to harvest e-mail addresses from domain name registration records.

5) Enforcement Mechanisms
Several jurisdictions provide for criminal penalties or other governmental enforcement mechanisms in addition to or in place of private actions.

The large number of Anti-spam legislations passed and the severe punishments meted out to spammers are indicative of the fact that the International Community has recognized the spam menace and is taking steps to combat it effectively. It is time that India too joined the bandwagon.

India And The Spam Menace:
Spam legislation is non-existent in India. The much-touted Information Technology Act of 2000 does not discuss the issue of spamming at all. It only refers to punishment meted out to a person, who after having secured access to any electronic material without the consent of the person concerned, discloses such electronic material to any other person. It does not have any bearing on violation of individual's privacy in Cyberspace. The illegality of spamming is not considered

Other cogent reasons for introducing comprehensive legislation to curb, control and penalize spammers are:
? The Delhi High Court acknowledged the absence of appropriate legislation concerning spam in a recent case wherein Tata Sons Ltd and its subsidiary Panatone Finwest Ltd filed a suit against McCoy Infosystems Pvt Ltd for transmission of spam. It was held that in the absence of statutory protection to check spam mails on Internet, the traditional tort law principles of trespass to goods as well as law of nuisance would have to be used.

? With the growing number of Internet users every day and the increasing proportion of junk e-mail, it is essential that measures be taken to curb spam before it assumes gargantuan proportions like in the United States.

With the establishment of the Indian arm of the Coalition Against Unsolicited Commercial E-Mails (an International Organization against spam) some efforts are being made to combat the spam menace. However, in the absence of stringent laws and technical advancements, the proliferation of spam seems inevitable.