Intermediary Regulation: This theme invites analysis on liabilities, duties and due diligence obligations of digital intermediaries. Participants can explore safe harbour protection, transparency norms and obligations to prevent unlawful content ensuring that such regulation safeguards users’ right to freedom of expression.

 

Cybercrimes Against Individuals: Focus can be directed on digital offences targeting individuals, including but not limited to identity theft, cyber-stalking, financial fraud, online harassment, deepfakes, phishing and related privacy intrusions. Attention may be given to victim-protection frameworks, investigatory powers and cyber forensics, aligning with global best practices and evolving risks.

​

Artificial Intelligence Regulation: This theme deliberates legal approach to AI development and deployment. Participants are encouraged to draft algorithmic transparency, explainability and accountability mechanisms for harm caused by AI. The draft must balance innovation with ethical, human rights considerations and its applicability in critical sectors like health, finance and crimes.

 

Non-Personal Data Regulation: Participants may examine regulation of data that is not personal, such as anonymized datasets or public sector information. Key considerations include–sharing and re-use ensuring data security and encouraging secure data-driven developments while safeguarding public interest.

 

Online Safety & Consumer Trust: This theme can discuss rules to protect users, especially children and vulnerable sections of society, from online harms including misinformation, deceptive practices and unfair commercialization. The allaying provisions can include content moderation standards, disclosure requirement, age-appropriate design codes, and consumer redressal forums to ensure users’ online well-being.

 

Internet of Things (IoT) Regulation: Participants may propose frameworks to regulate the security, interoperability, and privacy of connected devices. Issues include protection against cyber-attacks, mandatory security standards, data governance, certification mechanisms, and obligations on manufacturers and service providers to inform consumers of risks and ensure compliance in the IoT ecosystem.