Bombay High Court Facilitates Expert Intervention in Cyber-Security PIL against Maharashtra Government - 2025-02-12

A Digital Shield for the State: High Court Facilitates Expert Intervention in Cyber-Security

In a progressive move toward strengthening the digital defenses of the Maharashtra government, the High Court of Bombay has disposed of a Public Interest Litigation (PIL) that sought to bolster protection for government-run websites against malicious cyber-attacks. The court’s order encourages a collaborative synergy between technological experts and state authorities to mitigate risks to state-held data and public portals.

The Petitioner’s Academic Edge

The petitioner, Ruzbeh Dossabhoy Raja, brought the matter before the bench of Chief Justice Alok Aradhe and Justice Bharati Dangre, positioning himself as both a concerned citizen and a domain expert. Holding a Master’s degree in Law with a specialization in Information Technology and Intellectual Property Rights, Raja argued that his background as a Visiting Professor of Law and a technical consultant granted him the unique perspective needed to address vulnerabilities in government domain infrastructure.

The core of the litigation focused on the rising threat of cyber-attacks targeting Maharashtra’s digital infrastructure. Raja sought a judicial mandate for a comprehensive report on these threats and requested the court to compel the state to take drastic preventive measures, including the registration of FIRs against perpetrators of such breaches.

A Collaborative Approach to Cyber Hygiene

During the proceedings, the petitioner offered his professional expertise, expressing his willingness to provide actionable suggestions to authorities—specifically Maharashtra Cyber and the Mumbai Police—to fortify the existing web security framework.

Recognizing the technical nature of these demands, the state, represented by the Additional Government Pleader, adopted a pragmatic stance. The state assured the court that should the petitioner submit his formal proposal to the relevant authorities, they would evaluate the suggestions. The court stipulated that these measures should be implemented, provided they are deemed technologically and operationally feasible.

Key Observations

The High Court emphasized the importance of securing government platforms without necessitating prolonged litigation, focusing instead on practical outcomes.

• "Undoubtedly, there is need to prevent the government websites from the cyber-attacks."
• "The petitioner, who claims to be an expert is willing to give suggestions to the competent authority to prevent such cyber-attacks."
• "Needless to state that on receipt of such proposal/suggestions made by the petitioner, respondent nos.4 and 6 shall take effective steps to implement the same subject to feasibility of the proposal/suggestions."

The Path Forward

The court’s decision is notable for its refusal to micro-manage the technical specifications of cybersecurity. Instead, it empowered the administrative bodies to act as curators of expert advice. By disposing of the petition with the liberty for the petitioner to engage directly with the Office of the Special Inspector General and the Deputy Commissioner of Police (Cyber Crime), the High Court has created a streamlined pipeline for security improvements.

This ruling underscores a shift in legal discourse: rather than mandating rigid judicial oversight on technical matters, the court acts as a facilitator, encouraging state departments to integrate external domain expertise to safeguard public-facing infrastructure. As government reliance on digital portals grows, this collaborative model may serve as a template for other high-stakes cybersecurity disputes.