Outcome: Explain how India's cyber-law framework combines the IT Act, criminal law, evidence and procedure, data protection, sector rules, contracts, and platform obligations.

Case: A workplace labels every online dispute a cybercrime and forwards a single section number without checking the facts, the current law, or the required elements.

Tools: Cyber-law framework map, Fact-law-evidence sorting exercise, Legal-status verification drill

Outcome: Recognize common IT Act risks involving unauthorized access, identity misuse, cheating by personation, privacy violations, harmful content, confidentiality, and protected systems.

Case: A social-media post lists obsolete and current section numbers together, causing a victim to file an inaccurate complaint and ignore the more relevant facts and evidence.

Tools: IT Act offence matrix, Authorization and intent checklist, Current-versus-omitted provision exercise

Outcome: Identify how cyber-enabled conduct can also engage the Bharatiya Nyaya Sanhita and why one incident may involve several legal provisions.

Case: An online extortion and impersonation case is treated only as an IT Act matter even though threats, cheating, forged records, stalking, and sexual harm are also alleged.

Tools: BNS overlap map, Conduct-elements worksheet, Victim-centred routing drill

Outcome: Apply awareness-level privacy and personal-data principles under India's DPDP framework while recognizing phased commencement and transitional obligations.

Case: An organization announces that every DPDP obligation became immediately enforceable on the day the Rules were notified and removes all transitional controls before the phased timeline ends.

Tools: DPDP role map, Purpose-and-consent audit, Commencement timeline exercise

Outcome: Explain intermediary due diligence, user grievance routes, safe-harbour conditions, lawful content processes, and the difference between platform rules and criminal liability.

Case: A user assumes a platform must remove any criticized post immediately, while the platform assumes safe harbour protects it regardless of due diligence or lawful notice.

Tools: Platform-role map, Grievance route decision tree, Safe-harbour conditions exercise

Outcome: Preserve electronic evidence lawfully using authenticity, context, chain-of-custody, documentation, and escalation principles under the BSA and BNSS.

Case: A well-meaning employee edits screenshots, logs into a suspect's account using a guessed password, and forwards private evidence through personal messaging before police arrive.

Tools: Evidence-preservation worksheet, Chain-of-custody drill, Lawful-response boundary cards

Outcome: Choose proportionate response and reporting routes, avoid unlawful self-help, and document incidents for platforms, banks, police, CERT-In, legal counsel, or other competent authorities.

Case: A combined incident involves financial loss, account takeover, intimate-image threats, leaked personal data, and a compromised business system, but the victim sends only one informal social-media message.

Tools: First-response legal checklist, India reporting route lab, FACTS capstone incident record