Legal & Ethical Issues in E-Commerce: Laws, Privacy, Contracts & Compliance

Core Concepts: Why Legal & Ethical Issues Matter in E-Commerce

E-commerce operates in a digital jurisdiction—where laws from multiple countries (e.g., Nepal’s Electronic Transactions Act 2063, India’s IT Act 2000, or the EU’s GDPR) may apply simultaneously. Ethical issues (e.g., data misuse, fake reviews) can destroy trust faster than legal penalties. This unit covers:

1. Legal frameworks (contracts, intellectual property, consumer protection).
2. Ethical dilemmas (privacy, transparency, digital rights).
3. Compliance mechanisms (audits, certifications, dispute resolution).
4. Real-world cases (Nepal’s Nepal Rastra Bank regulations vs. global giants like Google/Facebook).

1. Legal Frameworks in E-Commerce

A. Contract Law in Digital Transactions

Definition: A legally binding agreement formed electronically (e.g., clicking "I Agree" on Daraz or eSewa). Key elements:

• Offer & Acceptance: Must be clear (e.g., Daraz’s "Buy Now" button = offer; seller’s confirmation = acceptance).
• Consideration: Payment (cash, digital wallet, or credit) must exchange for goods/services.
• Intent: Both parties must understand terms (e.g., refund policies on Pathao’s food delivery).

How It Works:

flowchart TD
    A["Customer Clicks 'Buy' on Daraz"] -->|"Offer"| B["Seller Confirms Order"]
    B -->|"Acceptance"| C["Payment via Khalti"]
    C -->|"Consideration"| D["Delivery of Product"]
    D -->|"Fulfillment"| E["Contract Enforced by Nepal Rastra Bank"]

Worked Example: Case: A customer orders a laptop from Daraz but receives a damaged item. The Electronic Transactions Act 2063 (Section 12) allows the customer to demand a refund or replacement within 14 days of delivery. If the seller refuses, the dispute can be escalated to Consumer Protection Act 2075 or Daraz’s internal grievance cell.

B. Intellectual Property (IP) Rights

E-commerce relies on digital assets (software, images, music). Nepal’s Copyright Act 2076 protects:

Real-World Example:

• Google vs. Nepali Bloggers: Google’s Terms of Service prohibits scraping its search results. In 2021, a Nepali blogger copied Google’s local business listings without permission and faced a ₹300,000 fine under copyright law.
• Daraz’s Counterfeit Crackdown: Daraz uses AI-powered image matching to detect fake products (e.g., replica Rolex watches). Sellers violating IP rights are banned permanently and reported to Nepal Police’s Cyber Crime Unit.

C. Consumer Protection Laws

Nepal’s Consumer Protection Act 2075 applies to e-commerce:

• Right to Information: Sellers must disclose:
  • Product specifications (e.g., battery life on a smartphone).
  • Pricing (including taxes; e.g., Daraz must show 13% VAT).
  • Return/refund policies (e.g., eSewa’s 7-day refund window).
• Right to Safety: Products must meet Nepal Standard (NS) certifications (e.g., NS 200 for electronics).
• Right to Redress: Complaints can be filed with:
  1. Company’s Grievance Cell (e.g., Daraz’s "Help Center").
  2. District Consumer Forum (₹1,000–₹50,000 claims).
  3. National Consumer Rights Commission (NCRC) (₹50,000+ claims).

Worked Example: Case: A customer buys a ₹50,000 smartphone from an uncertified seller on Daraz. The phone explodes due to a fake battery. Under Section 18 of the Consumer Protection Act, the customer can:

1. Demand a full refund + ₹20,000 compensation (for mental distress).
2. File a complaint with the Kathmandu District Consumer Forum.
3. Report the seller to Nepal Police (Cyber Crime Unit) for fraudulent transactions.

2. Ethical Issues in E-Commerce

A. Privacy and Data Protection

Key Laws:

• Nepal’s Data Privacy and Protection Act 2075: Mandates explicit consent for data collection (e.g., Khalti asking for phone number + address).
• GDPR (EU): Applies to global companies (e.g., Google, Facebook) if they process data of EU citizens.

Ethical Dilemmas:

Real-World Example:

• Khalti’s Data Leak (2022): A third-party vendor exposed 10 million user records (names, phone numbers, transaction history). Khalti was fined ₹5 million by Nepal Rastra Bank (NRB) and had to re-verify all users.
• Pathao’s Driver Surveillance: Pathao uses GPS + driver ratings to monitor performance. Ethical concern: No transparency on how ratings are calculated or shared with employers.

B. Transparency and Fair Practices

What Constitutes Transparency?

Case Study: NEPSE’s Transparency Violations

• Issue: NEPSE’s website did not disclose brokerage fees clearly until 2023.
• Outcome: Investors filed complaints with Securities Board of Nepal (SEBON), leading to a ₹1 million fine and mandatory fee disclosures.

3. Compliance and Dispute Resolution

A. Certifications and Audits

How Audits Work:

1. Third-Party Audit: Companies like Deloitte Nepal verify compliance (e.g., Ncell’s data security).
2. Self-Assessment: Smaller businesses (e.g., local e-commerce stores) use checklists from NRB.
3. Government Inspections: NRB can shut down non-compliant payment gateways (e.g., banned 50+ unlicensed wallets in 2021).

B. Dispute Resolution Mechanisms

Worked Example: Case: A seller on Daraz refuses a refund for a defective product. The buyer files a complaint:

1. Step 1: Daraz’s automated chatbot offers a ₹2,000 discount as compensation.
2. Step 2: Buyer rejects and escalates to Daraz’s Human Review Team (3-day response).
3. Step 3: If unresolved, the buyer files with the Kathmandu District Consumer Forum (₹10,000 claim).

In the Real World

1. Nepal Rastra Bank (NRB) vs. Unlicensed Wallets:

   • Idea Used: Legal compliance for payment systems.
   • How: NRB banned 50+ unlicensed digital wallets in 2021 for violating Section 18 of the Electronic Transactions Act. Only Khalti, eSewa, and IME Pay remain licensed, ensuring PCI DSS compliance for all transactions.

2. Daraz’s "Verified Seller" Program:

   • Idea Used: Consumer protection through certification.
   • How: Daraz partners with Nepal Standard (NS) to verify sellers. Only NS-certified sellers can use the "Verified" badge, reducing fake products by 40% (Daraz’s 2023 report).

3. Google Ads’ Ethical Controversy in Nepal:

   • Idea Used: Transparency in ad targeting.
   • How: Google’s Ad Transparency Center allows users to see which companies are running ads on their data. In Nepal, this exposed political parties buying ads during elections without disclosing sponsors, leading to SECN’s investigation.

Exam Tip

How This Unit is Tested:

1. Short Questions (2–5 marks):

   • Define electronic contract or copyright infringement.
   • List 3 rights under Nepal’s Consumer Protection Act.
   • Example Question:

     "Explain how the Electronic Transactions Act 2063 protects consumers in e-commerce. Give one case study from Nepal."

2. Long Questions (10–15 marks):

   • Case Analysis: Given a scenario (e.g., a fake review on Daraz), explain:
     • Which law is violated?
     • Steps for resolution.
     • Ethical implications.
   • Comparison: Compare Nepal’s data privacy laws with GDPR in a table.
   • Example Question:

     "A seller on eSewa sells a counterfeit smartphone. Analyze the legal and ethical issues involved, and suggest a step-by-step resolution process."

3. Application-Based (5–10 marks):

   • Role-Play: "You are the CEO of a Nepali e-commerce startup. How would you ensure compliance with NRB’s payment regulations?"
   • Policy Design: "Draft a 5-point ethical code for a social media marketing agency in Nepal."

Topics to Master for Full Marks:

• Memorize: Key sections of Electronic Transactions Act 2063, Consumer Protection Act 2075, and Data Privacy Act 2075.
• Diagrams: Be ready to draw:
  • Flowchart of dispute resolution (e.g., Daraz → Consumer Forum → Court).
  • Comparison table (e.g., PCI DSS vs. Nepal Standard for payments).
• Cases: Know 3 real Nepali cases (e.g., Khalti leak, NEPSE transparency issue, Daraz counterfeit crackdown).

Final Visual Summary: