Indian Cyber Laws & IT Act — IT Act, Amendments & Legal Provisions

Table of Contents

• 2.1 Introduction
• 2.2 Why Was the IT Act Needed?
• 2.3 Key Features of the IT Act, 2000
• 2.4 The IT (Amendment) Act, 2008
• 2.5 Section 79 — Safe Harbour for Intermediaries
• 2.6 Adjudication & Appeals under IT Act
• 2.7 Other Important Laws Related to Cyber Crime in India
• 2.8 National Critical Information Infrastructure Protection Centre (NCIIPC)
• 2.9 CERT-In
• 2.10 Recent Developments (Post-2020)
• 2.11 How to File a Cyber Crime Complaint in India
• 2.12 Summary

2.1 Introduction

Before India had cyber-specific laws, crimes committed using computers were prosecuted under traditional laws like the Indian Penal Code (IPC), 1860. However, these were inadequate for the digital age.

The Information Technology Act, 2000 (IT Act, 2000) was enacted by the Indian Parliament to provide a legal framework for electronic transactions, digital signatures, and cyber crimes.

It came into effect on October 17, 2000.

2.2 Why Was the IT Act Needed?

2.3 Key Features of the IT Act, 2000

The Act has 13 chapters and 90+ sections. Key highlights:

A. Legal Recognition of Electronic Documents (Sections 3–9)

• Electronic records are legally valid
• Digital signatures are legally recognised
• Electronic contracts are enforceable

B. Digital Signatures & Certificates (Sections 35–42)

• Controller of Certifying Authorities (CCA) regulates digital signature issuance
• Certifying Authorities (CAs) issue Digital Signature Certificates
• Auditing and security standards for CAs

C. Offences & Penalties (Sections 43–47) — Civil Offences

These are civil (not criminal) offences — punishable by compensation rather than imprisonment.

Section 43A is especially important — it was the first data protection provision in Indian law, holding companies liable for mishandling "sensitive personal data."

D. Cyber Crimes & Punishments (Sections 65–74) — Criminal Offences

These are criminal offences — punishable by imprisonment + fine.

2.4 The IT (Amendment) Act, 2008

The original 2000 Act was amended in 2008 with major changes taking effect on October 27, 2009.

Key Changes:

Notable: Section 66A Struck Down

• Shreya Singhal v. Union of India (2015) — Supreme Court declared Section 66A void (violates Article 19(1)(a) — Freedom of Speech)
• What Section 66A said: "Punishment for sending offensive messages through communication service"
• What the Court said: The language was too vague and arbitrary

2.5 Section 79 — Safe Harbour for Intermediaries

One of the most important provisions of the IT Act:

Section 79 — Intermediaries (ISPs, social media platforms, e-commerce sites) are not liable for third-party content posted on their platform IF they:

1. Merely provide access to a communication system (passive role)
2. Do not initiate the transmission, select the receiver, or modify the content
3. Upon receiving actual knowledge of infringement, remove or disable access expeditiously

This is similar to Section 230 of the US Communications Decency Act — the legal foundation that protects platforms like YouTube, Facebook, and Twitter from being sued for user-generated content.

IT Rules, 2021 imposed additional due diligence:

• Appoint a Grievance Officer, Nodal Officer, and Chief Compliance Officer
• All three must be resident in India
• Remove unlawful content within 36 hours of notice
• Monthly compliance reports

2.6 Adjudication & Appeals under IT Act

The IT Act establishes a tiered dispute resolution system:

For criminal offences (Sections 65–74), cases go directly to the regular criminal courts under the CrPC / BNSS.

2.7 Other Important Laws Related to Cyber Crime in India

Indian Penal Code (IPC) — Related Sections

Section 67 IT Act vs IPC 292

• Both cover obscene content
• IT Act specifically covers electronic form

Indian Evidence Act, 1872

• Sections 65A & 65B: Admissibility of electronic records as evidence

2.8 National Critical Information Infrastructure Protection Centre (NCIIPC)

• Created under Section 70 of IT Act
• Protects Critical Information Infrastructure (CII) — systems whose destruction would impact national security, economy, or public health
• Sectors covered: Power, Banking, Telecom, Transport, Defence, Space, Government

2.9 CERT-In (Indian Computer Emergency Response Team)

(Covered in detail in Tutorial 3)

CERT-In is the national nodal agency for:

• Responding to cyber incidents
• Issuing advisories and guidelines
• Coordinating cyber security efforts across India

It functions under the Ministry of Electronics & Information Technology (MeitY).

2.10 Recent Developments (Post-2020)

2.11 How to File a Cyber Crime Complaint in India

Online (National Cyber Crime Reporting Portal)

• Website: cybercrime.gov.in
• Helpline: 1930 (Toll-free, for financial frauds)

Steps:

1. Visit the portal
2. Click "File a complaint" or "Report anonymously"
3. Choose category: Financial fraud or Other cyber crimes
4. Fill in complainant details
5. Fill in incident details (date, type, description)
6. Upload supporting documents (screenshots, emails, transaction records)
7. Submit — you get an acknowledgement / complaint ID

Offline

• Approach the nearest Police Station
• In many states, approach the Cyber Crime Police Station directly
• The FIR will be registered under IT Act / IPC