India runs on data today. Banks, for instance, move money online, while hospitals store patient records on servers. Startups, meanwhile, sign contracts over email. None of this works without a legal backbone, and that backbone is the Information Technology Act 2000. This law gives digital transactions the same weight as paper transactions. It also punishes people who misuse technology to harm others.
This guide breaks down the Information Technology Act 2000 in plain language. You will learn its objectives, structure, and key features, along with its penalties. In addition, you will learn where the law falls short and how businesses can stay compliant. Because every section below answers a real question that readers type into Google, you can use this article as a complete reference on the Information Technology Act 2000.
What Is the Information Technology Act 2000?
The Information Technology Act 2000 is India’s primary law for electronic governance, digital transactions, and cybercrime. Parliament passed it on 17 May 2000, and the law came into force on 17 October 2000 as a result. Because of this early move, India became one of the earliest nations in Asia to legislate specifically for cyberspace.
The IT Act 2000 draws its roots from the UNCITRAL Model Law on Electronic Commerce, which the United Nations General Assembly adopted in 1996. Rather than copying the model wholesale, India adapted it to fit its own legal and commercial needs. As a result, the IT Act 2000 recognizes electronic records, digital signatures, and online contracts as legally valid documents.
Before this law existed, Indian courts had no clear framework for email evidence, online contracts, or hacking cases. Businesses hesitated to trust digital transactions because no statute protected them. The IT Act 2000 changed that reality. It gave electronic commerce a legal foundation and gave law enforcement the power to act against cybercriminals.
Why India Needed the Information Technology Act 2000
Internet use in India grew quickly during the late 1990s. As a result, companies wanted to sign contracts electronically, while government departments wanted to move records online. However, existing laws like the Indian Penal Code and the Indian Evidence Act did not address digital acts directly. Consequently, courts struggled to treat an email or a digital signature as valid proof.
The IT Act 2000 solved this gap. It amended the Indian Penal Code, the Indian Evidence Act, the Banker’s Books Evidence Act, and the Reserve Bank of India Act. These amendments allowed electronic evidence to stand alongside paper evidence in court. Consequently, banks could process electronic fund transfers with legal confidence, and businesses could rely on digital contracts.
Objectives of the Information Technology Act 2000
The IT Act 2000 pursues several clear goals. Because each provision serves a specific purpose, understanding these objectives helps you grasp why the law reads the way it does.
- Legal recognition for electronic records. The law treats digital documents as equivalent to paper documents.
- Legal recognition for digital signatures. It validates digital signatures as a substitute for handwritten signatures.
- Facilitation of e-governance. Government departments can accept applications, licenses, and payments online.
- Facilitation of e-commerce. Businesses can complete transactions digitally without fearing legal invalidity.
- Prevention of cybercrime. The Act defines offences like hacking, identity theft, and data theft, and it prescribes punishment.
- Protection of sensitive data. Later amendments added provisions for data protection and privacy in commercial settings.
Ultimately, these objectives work together, positioning the IT Act 2000 as both a facilitator of digital growth and a shield against digital abuse.
Key Features of the Information Technology Act 2000
The features of the IT Act 2000 explain how the law achieves its objectives in practice. Below are the core features every reader should know.
1. Legal Status of Electronic Records
One of the most important features of the IT Act 2000 is Section 4. Specifically, this section gives electronic records the same legal status as paper records, provided the record remains accessible for future reference. Because of this single provision, digital contracts, e-invoices, and online agreements became possible across India.
2. Legal Recognition of Digital Signatures
Section 5 of the IT Act 2000 recognizes digital signatures as valid substitutes for physical signatures. Technically, a digital signature uses asymmetric cryptography and a hash function to verify the identity of the signer. As a result, banks, government portals, and corporate filings now depend on this feature daily.
3. Regulation of Certifying Authorities
The Act creates a system of Certifying Authorities that issue Digital Signature Certificates, while the Controller of Certifying Authorities supervises these bodies. Consequently, this structure ensures that digital signatures remain trustworthy and traceable.
4. Cybercrime Provisions
The IT Act 2000 defines multiple cyber offences, penalizing hacking, unauthorized access, virus attacks, data theft, and identity fraud. Because of this breadth, the Act became India’s primary cybercrime statute, alongside the Indian Penal Code.
5. Establishment of Adjudicating Officers and Cyber Appellate Tribunal
The Act empowers Adjudicating Officers to decide compensation claims arising from data breaches or unauthorized access. It created a Cyber Appellate Tribunal to hear appeals, though this tribunal’s functions later merged into the Telecom Disputes Settlement and Appellate Tribunal.
6. Intermediary Liability and Safe Harbour
Section 79 protects intermediaries such as internet service providers and social media platforms from liability for third-party content, as long as they follow due diligence rules. This safe harbour provision remains central to how platforms operate in India today.
7. Data Protection Provisions
Section 43A requires companies handling sensitive personal data to maintain reasonable security practices. If a company fails to do so and causes wrongful loss, it must pay compensation. This feature pushed Indian businesses toward better data governance long before a dedicated data protection law existed.
8. Extraterritorial Jurisdiction
Section 75 gives the IT Act 2000 extraterritorial reach. Therefore, if a person outside India commits an offence involving a computer or network located in India, Indian law can still prosecute that person. Because of this reach, the feature matters greatly in cross-border cybercrime cases.
These features of the IT Act 2000 show why the law remains relevant even after two decades. It anticipated many challenges that digital India now faces daily.
Structure of the Information Technology Act 2000
The IT Act 2000 originally contained 94 sections, organized across 13 chapters and 4 schedules. Amendments have modified this structure over time, but the framework remains largely intact.
- Chapter I covers preliminary matters, including short title, extent, and definitions.
- Chapter II addresses digital signatures and electronic signatures.
- Chapter III deals with electronic governance and electronic records.
- Chapter IV covers the attribution, acknowledgment, and dispatch of electronic records.
- Chapter V discusses secure electronic records and secure digital signatures.
- Chapter VI establishes the Controller of Certifying Authorities and related regulations.
- Chapter VII governs Digital Signature Certificates.
- Chapter VIII lists the duties of subscribers.
- Chapter IX defines penalties, compensation, and adjudication for offences like data theft and hacking.
- Chapter X originally established the Cyber Appellate Tribunal.
- Chapter XI lists cyber offences and their punishments.
- Chapter XII addresses intermediary liability.
- Chapter XIII contains miscellaneous provisions.
This structured layout allows lawyers, businesses, and law enforcement to locate relevant provisions quickly. Therefore, anyone researching the IT Act 2000 should start with this chapter map before diving into specific sections.
Important Definitions Under the IT Act 2000
Clear definitions form the backbone of any statute. The IT Act 2000 defines several terms that readers must understand.
- Computer: Any electronic, magnetic, or optical device that performs logical, arithmetic, or memory functions.
- Computer network: The interconnection of computers through communication links.
- Data: Any representation of information, knowledge, facts, or concepts in a formalized manner.
- Electronic record: Data, record, or data generated, stored, or transmitted in electronic form.
- Digital signature: Authentication of an electronic record through an electronic method as defined in Section 3.
- Intermediary: Any person who receives, stores, or transmits electronic records on behalf of another person.
- Cybersecurity: Protecting information, equipment, devices, and computer resources from unauthorized access or damage.
These definitions matter because courts interpret the IT Act 2000 strictly according to its stated terms. A clear grasp of these definitions helps businesses draft compliant policies and helps individuals understand their rights.
Digital Signatures and Electronic Records Under the IT Act 2000
Digital signatures sit at the heart of the IT Act 2000. Specifically, Section 3 explains how a digital signature works: the subscriber applies an asymmetric cryptosystem and a hash function to convert an electronic record into another electronic record. As a result, this process verifies both the identity of the sender and the integrity of the document.
Electronic records also receive strong legal footing under this law. Section 4 confirms that any information required to be in writing satisfies that requirement if it exists in electronic form and remains accessible for future use. Section 5 extends the same logic to signatures. Therefore, a digitally signed loan agreement or an e-filed tax return carries the same legal weight as a signed paper document.
The 2008 Amendment expanded this framework further. It introduced the term “electronic signature,” which covers a broader range of authentication methods beyond digital signatures alone, such as biometric authentication and Aadhaar-based e-signatures.
Cybercrimes and Offences Under the Information Technology Act 2000
The IT Act 2000 lists specific cyber offences under Chapter XI. Understanding these offences helps individuals recognize when a crime has occurred and helps businesses build stronger defenses.
Hacking and Unauthorized Access
Section 43 penalizes unauthorized access to a computer, computer system, or network. This includes downloading data without permission, introducing viruses, and disrupting a computer’s normal function. Section 66 criminalizes hacking with dishonest or fraudulent intent, and it prescribes imprisonment up to three years along with a fine.
Identity Theft and Cheating by Personation
Identity theft draws specific attention under Section 66C, which penalizes the fraudulent use of another person’s password, digital signature, or unique identification feature. Cheating by personation using computer resources falls under Section 66D instead, a common tactic in online scams and phishing attacks.
Violation of Privacy
Under Section 66E, capturing, publishing, or transmitting images of a person’s private area without consent becomes a punishable offence. This provision protects individuals from voyeurism and image-based abuse.
Cyberterrorism
Section 66F addresses cyberterrorism, covering acts that threaten the unity, integrity, security, or sovereignty of India through computer resources. Courts can impose life imprisonment for this offence.
Publishing Obscene Material
Publishing or transmitting obscene material in electronic form draws punishment under Section 67. Section 67A extends this provision further to sexually explicit material, while Section 67B specifically protects children from exploitation in electronic form.
Data Theft and Breach of Confidentiality
Together, Section 43 and Section 72 address data theft and breach of confidentiality. Consequently, any person who accesses electronic records without permission and discloses them without consent faces both civil compensation claims and criminal liability.
Each of these offences shows how the Information Technology Act 2000 attempts to cover the full spectrum of cyber misconduct, from financial fraud to national security threats.
Penalties and Punishments Under the IT Act 2000
Penalties under the Information Technology Act 2000 vary depending on the severity of the offence. The table below simplifies the most common provisions.
| Section | Offence | Punishment |
|---|---|---|
| Section 43 | Unauthorized access, data theft | Compensation, no imprisonment (civil liability) |
| Section 66 | Hacking with dishonest intent | Up to 3 years imprisonment, fine up to Rs 5 lakh |
| Section 66C | Identity theft | Up to 3 years imprisonment, fine up to Rs 1 lakh |
| Section 66D | Cheating by personation | Up to 3 years imprisonment, fine up to Rs 1 lakh |
| Section 66E | Violation of privacy | Up to 3 years imprisonment, fine up to Rs 2 lakh |
| Section 66F | Cyberterrorism | Life imprisonment |
| Section 67 | Publishing obscene material | Up to 5 years imprisonment for first conviction |
| Section 67A | Sexually explicit material | Up to 7 years imprisonment |
| Section 67B | Child sexual abuse material | Up to 7 years imprisonment |
| Section 72 | Breach of confidentiality | Up to 2 years imprisonment, fine up to Rs 1 lakh |
This structure allows the Information Technology Act 2000 to distinguish between civil wrongs, which require compensation, and criminal offences, which require imprisonment or fines. Businesses should note that Section 43 imposes strict liability, meaning intent does not always matter in civil compensation claims.
The 2008 Amendment to the Information Technology Act 2000
Parliament amended the Information Technology Act 2000 in 2008 following the rapid growth of internet usage and the 26/11 Mumbai terror attacks, which exposed gaps in cybersecurity law. This amendment introduced several major changes.
It added Section 66A, which criminalized sending offensive messages through communication services. However, the Supreme Court struck down this section in the landmark case of Shreya Singhal v. Union of India (2015), ruling that it violated the freedom of speech guaranteed under Article 19(1)(a) of the Constitution.
The 2008 Amendment also introduced Section 69, granting the government power to intercept, monitor, or decrypt information for reasons of national security. It added Section 43A, which created civil liability for companies that fail to protect sensitive personal data. Additionally, it introduced provisions on cyberterrorism, child pornography, and video voyeurism.
Overall, these changes made the Information Technology Act 2000 far more comprehensive. In effect, the amendment shifted the law’s focus from merely enabling e-commerce to actively protecting citizens from emerging digital threats.
Role of Certifying Authorities and the Controller
The Information Technology Act 2000 establishes a Controller of Certifying Authorities under Chapter VI. In turn, this Controller licenses and regulates Certifying Authorities, which issue Digital Signature Certificates to individuals and organizations.
A Certifying Authority must follow strict standards before issuing a certificate. Specifically, it verifies the applicant’s identity, maintains security procedures, and ensures the confidentiality of private keys. However, if a Certifying Authority fails to meet these standards, the Controller can suspend or revoke its license.
This system builds trust in digital transactions. Anyone relying on a digital signature can verify its authenticity through the certifying infrastructure that the Information Technology Act 2000 created.
Adjudicating Officers and the Cyber Appellate Tribunal
The Act empowers Adjudicating Officers, typically senior government officials, to hear complaints involving compensation claims of up to Rs 5 crore under Section 43. In this sense, these officers function like specialized judges for cyber contraventions.
The Information Technology Act 2000 originally established a Cyber Appellate Tribunal to hear appeals against orders passed by Adjudicating Officers or the Controller. The Finance Act 2017 later merged this tribunal’s powers into the Telecom Disputes Settlement and Appellate Tribunal. Today, appeals from Adjudicating Officer decisions go to this merged tribunal, and further appeals proceed to the High Court.
Intermediary Liability Under the Information Technology Act 2000
Section 79 of the Information Technology Act 2000 offers a safe harbour to intermediaries. As a result, platforms like social media networks, e-commerce websites, and internet service providers do not face liability for user-generated content, provided they act as neutral conduits and follow due diligence requirements.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 expanded these due diligence obligations. Intermediaries must now appoint grievance officers, remove unlawful content within specified timelines, and, for significant social media intermediaries, appoint compliance officers based in India.
This framework balances two competing interests. It protects freedom of expression on digital platforms, and it also gives victims of online harm a mechanism to seek redress.
Landmark Cases Under the IT Act 2000
Because statutes rarely explain themselves fully, several court decisions have shaped how the Information Technology Act 2000 operates in practice.
Shreya Singhal v. Union of India (2015): The Supreme Court struck down Section 66A for being vague and overly broad, protecting online free speech.
State of Tamil Nadu v. Suhas Katti (2004): This was one of India’s first cybercrime convictions under the Information Technology Act 2000, involving obscene messages posted about a woman in an online forum.
Avnish Bajaj v. State (2005): This case examined intermediary liability when an e-commerce platform hosted an objectionable video listing, shaping early interpretations of Section 79.
Anvar P.V. v. P.K. Basheer (2014): The Supreme Court clarified the admissibility of electronic evidence under Section 65B of the Indian Evidence Act, a provision closely tied to the Act.
These cases demonstrate how courts continue to interpret and refine the Information Technology Act 2000, ensuring it adapts to new technological realities.
Criticism and Limitations of the IT Act 2000
No law remains perfect, and consequently, the Information Technology Act 2000 faces genuine criticism from legal experts and civil society.
First, the Act lacks a comprehensive framework for data privacy comparable to global standards like the GDPR. The Digital Personal Data Protection Act 2023 now fills some of this gap, but overlaps and inconsistencies remain between the two laws.
Second, enforcement remains inconsistent across states. Many police stations lack trained cybercrime units, which delays investigations and reduces conviction rates.
Third, the vague language in certain provisions, such as the now-struck-down Section 66A, previously allowed misuse against legitimate speech. Even after its removal, some law enforcement agencies reportedly continued invoking it due to poor awareness at the ground level.
Fourth, cross-border enforcement remains difficult. Although Section 75 grants extraterritorial jurisdiction, practical challenges like international cooperation and evidence-sharing slow down prosecutions against offenders based outside India.
These limitations do not diminish the overall importance of this law, but they highlight areas where future amendments must focus.
Compliance Checklist for Businesses Under the IT Act 2000
Businesses operating in India must align their practices with the Information Technology Act 2000. Accordingly, use this checklist to assess compliance.
- Implement reasonable security practices for sensitive personal data, as required under Section 43A.
- Appoint a grievance officer if your platform qualifies as an intermediary.
- Maintain audit trails and access logs for computer systems and networks.
- Draft a clear privacy policy that discloses data collection and usage practices.
- Train employees to recognize phishing attempts and prevent unauthorized access.
- Use valid digital signatures for contracts and regulatory filings where required.
- Report data breaches promptly to avoid compounding civil liability.
- Review contracts with vendors and cloud service providers for data protection clauses.
Following this checklist reduces legal risk and demonstrates good faith compliance with this law, which matters greatly if a dispute or investigation arises later.
Why the Features of the Information Technology Act 2000 Matter for Startups
Founders often overlook cyber law until a crisis forces their hand. However, the features of Information Technology Act 2000 directly shape how a startup collects data, signs contracts, and handles customer disputes. A startup that ignores Section 43A, for instance, risks compensation claims the moment a data breach exposes customer records.
Investors also look closely at compliance during due diligence. Because a founder who can explain the features of Information Technology Act 2000 relevant to their business, such as intermediary safe harbour or digital signature validity, signals legal maturity, this awareness reduces friction during funding rounds and protects the company from avoidable litigation later.
Understanding the Features of the IT Act 2000 in Everyday Digital Life
Most citizens interact with this law without realizing it. For example, every time you sign a loan document through an OTP-based e-signature, you rely on provisions this Act created. Similarly, every time a bank blocks a suspicious transaction and cites unauthorized access, it invokes protections this Act built.
The features of the IT Act 2000 also touch smaller, everyday moments. A parent reporting a fake social media profile impersonating their child relies on identity theft provisions. A freelancer signing a client contract over email relies on the legal validity that electronic records now carry. These small, routine interactions show how deeply this law shapes daily life in digital India, even when nobody mentions its name directly.
Rules and Regulations Framed Under the Act
Parliament designed this statute as a framework law, meaning the government fills in operational detail through subordinate rules. As a result, several important rules now support the parent legislation. For instance, the Information Technology (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 define what “reasonable security practices” actually require from companies handling personal data.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 impose due diligence duties on social media platforms, streaming services, and digital news publishers. These rules require grievance redressal mechanisms, content takedown timelines, and, for larger platforms, a local compliance team based in India.
The Information Technology (Certifying Authorities) Rules, 2000 govern how Certifying Authorities issue and manage Digital Signature Certificates. Together, these subordinate rules translate the broad principles of the parent statute into specific, enforceable obligations that businesses and platforms must follow every day.
How the IT Act 2000 Interacts With Other Indian Laws
The Information Technology Act 2000 does not operate in isolation. Instead, it works alongside the Indian Penal Code, particularly for offences like cheating, forgery, and defamation committed through digital means. In addition, it intersects with the Indian Evidence Act, especially Section 65B, which governs the admissibility of electronic evidence in Indian courts.
More recently, the Digital Personal Data Protection Act 2023 has introduced a dedicated framework for personal data processing, supplementing the data protection provisions already present in the Information Technology Act 2000. Businesses must now read both statutes together to achieve full compliance. Similarly, the Bharatiya Nyaya Sanhita, which replaced the Indian Penal Code, retains cross-references to cyber offences that align with the Act.
This layered legal structure means that a single cyber incident, such as a data breach, could trigger obligations under multiple statutes simultaneously. Legal teams must map out these overlapping requirements carefully.
Practical Steps to Take If You Face a Cybercrime
If you become a victim of a cyber offence under the Information Technology Act 2000, act quickly. First, preserve all evidence, including screenshots, emails, and transaction records. Second, file a complaint with your local cybercrime cell or through the national cybercrime reporting portal. Third, notify your bank immediately if the incident involves financial fraud, since prompt reporting can limit your liability under RBI guidelines.
Fourth, consult a lawyer who specializes in cyber law to understand whether you should pursue a civil claim under Section 43, a criminal complaint under Chapter XI, or both. Finally, follow up with the Adjudicating Officer if your claim involves compensation, because these officers handle cases faster than regular civil courts in many instances.
Taking these steps early strengthens your legal position and improves the chances of a favorable outcome under the Information Technology Act 2000.
The Future of the Information Technology Act 2000
Technology keeps evolving, and so must the law. For example, artificial intelligence, cryptocurrency, and cloud computing raise questions that the original drafters of the Information Technology Act 2000 could not have anticipated. Consequently, lawmakers now debate whether India needs a fresh digital law to replace the existing framework entirely.
The Digital India Act, still under discussion, may eventually replace parts of the Information Technology Act 2000. This proposed law aims to address emerging concerns like deepfakes, algorithmic accountability, and platform regulation more comprehensively. Until that transition happens, the Information Technology Act 2000 remains the primary statute governing India’s digital ecosystem.
Sector-Specific Impact of the Act
Different industries feel the weight of this legislation in different ways. Banks, for example, rely on it to validate electronic fund transfers and net banking authentication. Without legal recognition for electronic records, after all, a disputed online transaction would have no solid evidentiary footing in court.
Healthcare providers face similar stakes. Hospitals store patient records digitally, and a breach of that data can trigger compensation claims under Section 43A. Telemedicine platforms, which grew rapidly after 2020, must also build consent mechanisms that satisfy this statute’s data protection expectations.
E-commerce platforms depend heavily on the safe harbour granted to intermediaries. Without this protection, a marketplace could face liability for every seller’s misconduct, which would make the current scale of online retail in India commercially unworkable. Logistics companies, payment gateways, and cloud storage providers all structure their contracts around obligations this law imposes.
Educational institutions increasingly rely on this framework too. Online exams, digital certificates, and e-learning platforms all depend on the legal validity of electronic records. A university that issues a digital degree certificate relies on the same legal logic that protects a bank’s electronic transaction record. This cross-sector reach explains why legal teams across industries, not just IT companies, must stay familiar with this legislation’s core provisions.
Conclusion
The Information Technology Act 2000 changed how India conducts business, governs itself, and fights cybercrime. Electronic records and digital signatures gained real legal power because of this statute. Certifying Authorities now build trust in digital transactions as a direct result. Cyber offences carry clear penalties too, since the law defines them precisely. Consequently, intermediary liability rules continue to shape how online platforms operate today.
Despite its limitations, the Information Technology Act 2000 remains foundational to India’s digital economy. Businesses, legal professionals, and individuals must understand its provisions to navigate the digital world safely and lawfully. As technology advances, this law will likely evolve further, but its core purpose will remain the same: giving digital India a legal foundation it can trust.
References
- Ministry of Electronics and Information Technology, Government of India – https://www.meity.gov.in/content/information-technology-act-2000-0
- Information Technology Act 2000, Bare Act – https://www.indiacode.nic.in/handle/123456789/1999
- Reserve Bank of India, Cyber Security Framework – https://www.rbi.org.in
- Supreme Court of India, Shreya Singhal v. Union of India Judgment – https://main.sci.gov.in
- National Crime Records Bureau, Cyber Crime Statistics – https://ncrb.gov.in
- Ministry of Home Affairs, Indian Cyber Crime Coordination Centre – https://www.mha.gov.in
- National Cybercrime Reporting Portal – https://cybercrime.gov.in
- Digital Personal Data Protection Act 2023, Government of India – https://www.meity.gov.in
- UNCITRAL Model Law on Electronic Commerce, United Nations – https://uncitral.un.org
- Telecom Disputes Settlement and Appellate Tribunal – https://tdsat.gov.in
- Press Information Bureau, Government of India – https://pib.gov.in
- Controller of Certifying Authorities, India – https://www.cca.gov.in
- Indian Computer Emergency Response Team (CERT-In) – https://www.cert-in.org.in
- Live Law, Legal News and Case Analysis – https://www.livelaw.in
- Bar and Bench, Legal News India – https://www.barandbench.com
- Legal Service India, IT Act Resources – https://www.legalserviceindia.com
- World Intellectual Property Organization, India Legal Texts – https://www.wipo.int
- Department of Justice, Government of India – https://doj.gov.in
- National Informatics Centre, Government of India – https://www.nic.in
- Legal-Veda, Indian Legal Insights – https://legal-veda.com
FAQs About the Information Technology Act 2000
- 1. What is the Information Technology Act 2000?
The Information Technology Act 2000 is India’s primary legislation dealing with electronic records, electronic signatures, cyber offences, and several aspects of digital activity. It provides legal recognition to electronic records and electronic transactions while establishing penalties for specified cyber-related offences. The Act also covers areas such as identity theft, online cheating, unauthorised access, cyber terrorism, unlawful electronic content and intermediary liability. The Information Technology Act 2000 continues to play an important role in India’s digital legal framework, although it now operates alongside newer laws and regulations.
- 2. What are the main features of Information Technology Act 2000?
The key features of the Information Technology Act 2000 include legal recognition of electronic records and electronic signatures, support for e-governance, regulation of Certifying Authorities, and provisions addressing cyber offences. The Act also establishes mechanisms relating to protected systems, critical information infrastructure, and cyber incident response. Sections dealing with identity theft, cheating by personation, privacy violations and unlawful electronic content are particularly important. Understanding these features of the Information Technology Act 2000 helps individuals and businesses identify their legal responsibilities in the digital environment.
- 3. What cyber crimes are covered under the IT Act 2000?
The IT Act 2000 covers several forms of cyber-related unlawful conduct. These include unauthorised access, computer-related offences, identity theft, cheating by personation, violation of privacy, and certain forms of publishing or transmitting prohibited electronic material. Sections 66C and 66D are particularly relevant to identity theft and online impersonation-based cheating. However, cybercrime cases may also involve other criminal laws. Therefore, the IT Act 2000 should not always be considered in isolation.
- 4. Is Section 66A still valid under the Information Technology Act 2000?
No. Section 66A was struck down by the Supreme Court in Shreya Singhal v. Union of India in 2015. The Court held that the provision violated freedom of speech and expression because it was vague and overbroad. Therefore, Section 66A cannot be treated as a valid offence under the Information Technology Act 2000. This is an important point when relying on older articles or legal resources discussing the Act.
- 5. How does the IT Act 2000 differ from the DPDP Act 2023?
The IT Act 2000 primarily addresses electronic transactions, cyber offences, computer resources, intermediary liability, and cybersecurity. The Digital Personal Data Protection Act, 2023 focuses specifically on processing digital personal data and protecting individual privacy. In simple terms, the IT Act 2000 is strongly concerned with digital systems and cyber-related conduct, while the DPDP framework focuses on personal data. Depending on the circumstances, both legal frameworks may become relevant to the same incident.
