What is Doxxing? - Rau's IAS

Context: Issues of Doxxing have become common leading to violation of privacy of citizens.

Doxxing and cyber crime

Doxxing is the act of publicizing someone's private personal information (Personally Identifiable Information or PII) online without their consent, often with malicious intent. PII can include home address, phone number, employment details, financial information, etc.
Doxxing is a serious cyber-crime that can endanger the victim's physical safety, emotional well-being, employment, and reputation. It disproportionately affects vulnerable groups like women, children and LGBTQ+ individuals.
In 2023, India emerged as the primary target for cybercriminals, accounting for 13.7% of all attacks. The most common form of cyber-crime in India is financial fraud, which accounted for 75% of cyber-crime in India between 2020 and 2023.

In India, doxxing victims can file complaints through the National Cyber Crime Reporting Portal. They have a legal right to file an FIR.
Social media companies operating in India are bound by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. These rules require platforms to appoint grievance officers, resolve complaints within fixed time periods, and adhere to a code of ethics.
Relevant laws include the Information Technology Act, 2000 which penalizes cyber crimes, and the Indian Penal Code which has provisions related to criminal intimidation, stalking, defamation, etc.

Role of Technology Companies

Major platforms like Facebook, Instagram, YouTube, Twitter (X) and Reddit have policies prohibiting doxxing and mechanisms to report such content for removal.
However, enforcement is often inconsistent and platforms have faced criticism for not doing enough to protect users, especially marginalized communities.
Meta's Oversight Board has recommended stricter doxxing rules, noting the disproportionate impact on vulnerable groups and potential for serious offline harms.
Discord has updated its community guidelines to treat doxxing and harassment as distinct harms, reflecting an evolving understanding of these issues among platforms.

Use strong, unique passwords and enable two-factor authentication.
Be cautious about posting photos/videos that may reveal identifiable locations or sensitive information.
Consider potential risks before posting controversial content.
If doxxed, document evidence in an incident log, report to platforms and authorities, and lean on support systems.
Secure Personally Identifiable Information (PII) and take steps to remove any compromised data from the internet.
More than 90% of web users are concerned about doxxing today, and 73% have limited what they share online to avoid being doxxed.

Doxxing can be an extremely traumatic experience, inducing fear, anxiety, depression and even PTSD in victims.
The importance of self-care and seeking support from friends, family, and mental health professionals in coping with the aftermath of doxxing.
Building resilience and not succumbing to shame or weakness is crucial, as the fault lies entirely with the perpetrator and not the victim.

In 2024, the Indian government is working on a new set of rules to criminalize deliberate misinformation and doxing as part of legislation to govern the country's digital ecosystem. This legislation, known as the Digital India Act, is set to replace the IT Act, of 2000, which is over two decades old.
The Indian Computer Emergency Response Team (CERT-In) is the national agency that deals with cyber security threats.
However, experts have pointed out the need for a comprehensive data protection law, reforms in the criminal justice system, and more public awareness initiatives.

Doxxing is a global issue, and many countries have taken steps to address it through legislation and policy measures.
In the United States, doxxing can be prosecuted under various federal and state laws, including the Computer Fraud and Abuse Act, the Interstate Communications Statute, and the Cyberstalking Statute.
The European Union's General Data Protection Regulation (GDPR) provides a framework for protecting personal data and can be used to address doxxing incidents.
Comparing India's approach to doxxing with that of other countries can provide valuable insights and ideas for strengthening the legal and policy framework.

Despite the existence of laws and regulations, enforcing them in doxxing cases can be challenging due to the anonymous and borderless nature of the internet.
Investigating doxxing incidents often requires technical expertise and cooperation between multiple stakeholders, including law enforcement agencies, social media platforms, and internet service providers.
The transnational nature of many doxxing cases can create jurisdictional issues and complicate the process of gathering evidence and prosecuting offenders.
Addressing these challenges requires capacity building, international cooperation, and the development of specialized units within law enforcement agencies.

Civil society organizations and media outlets can play a crucial role in raising awareness about doxxing, providing support to victims, and advocating for stronger legal and policy measures.
NGOs and helplines can offer counseling, legal assistance, and other services to individuals who have been doxxed, helping them cope with the psychological and practical consequences.
Media coverage of doxxing incidents can help bring attention to the issue, shape public opinion, and put pressure on policymakers and platforms to take action.
However, media outlets also have a responsibility to report on doxxing cases in an ethical and sensitive manner, avoiding sensationalism and respecting the privacy and dignity of victims.

As technology evolves, new forms of doxxing and online harassment may emerge, posing additional challenges for individuals, platforms, and policymakers.
The increasing use of artificial intelligence and machine learning in content moderation and user profiling may have implications for doxxing prevention and response.
The growing importance of data protection and privacy rights may lead to the development of new legal and regulatory frameworks that could impact the handling of doxxing cases.
Anticipating and responding to these future trends will require ongoing research, innovation, and collaboration among stakeholders.