The Information Technology Act, 2000
An Act to provide legal recognition for transactions carried out by means of electronic data interchange and other means of electronic communication, commonly referred to as
Administered by. Ministry of Electronics and Information Technology · Other Acts of 2000
Preamble
THE INFORMATION TECHNOLOGY ACT, 2000
ACT NO. 21 OF 2000
[9th June, 2000.] An Act to provide legal recognition for transactions carried out by means of electronic data interchange and other means of electronic communication, commonly referred to as "electronic commerce‖", which involve the use of alternatives to paper-based methods of communication and storage of information, to facilitate electronic filing of documents with the Government agencies and further to amend the Indian Penal Code, the Indian Evidence Act, 1872, the Banker’s Books Evidence Act, 1891 and the Reserve Bank of India Act, 1934 and for matters connected therewith or incidental thereto.
WHEREAS the General Assembly of the United Nations by resolution A/RES/51/162, dated the 30th January, 1997 has adopted the Model Law on Electronic Commerce adopted by the United Nations Commission on International Trade Law;
AND WHEREAS the said resolution recommends inter alia, that all States give favourable consideration to the said Model Law when they enact or revise their laws, in view of the need for uniformity of the law applicable to alternatives to paper-based methods of communication and storage of information;
AND WHEREAS it is considered necessary to give effect to the said resolution and to promote efficient delivery of Government services by means of reliable electronic records.
BE it enacted by Parliament in the Fifty-first Year of the Republic of India as follows:--
What this Act covers
Summary of the Information Technology Act, 2000
Key Provisions
1. Digital Signatures & Electronic Records
• Sections 3, 3A, 4, 5: Authentication of electronic records, electronic signatures, and their legal recognition.
2. Electronic Governance
• Sections 6, 7, 8: Use of electronic records and signatures in Government.
3. Offences and Penalties (Broadly Relevant)
• Sections 65-77B: Various cyber offences with penalties (e.g., tampering, identity theft, cyber terrorism).
• Section 69A: Power to Block Public Access to Information - Relevant in preventing the dissemination of terrorist content or communications.
• Section 69B: Power to Monitor and Collect Traffic Data - Useful for surveillance on suspected terrorist communications, balancing national security with privacy concerns.
• Section 84: Protection of Action Taken in Good Faith - Applies to actions taken against non-State actors/terrorists in the cyber domain.
Sections
Type to filter. 125 sections.
- 1Short title, extent, commencement and application
- 2Definitions
- 3Authentication of electronic records
- 3AElectronic signature
- 4Legal recognition of electronic records
- 5Legal recognition of electronic signatures
- 6Use of electronic records and electronic signatures in Government and its agencies
- 6ADelivery of services by service provider
- 7Retention of electronic records
- 7AAudit of documents, etc., maintained in electronic form
- 8Publication of rule, regulation, etc., in Electronic Gazette
- 9Sections 6, 7 and 8 not to confer right to insist document should be accepted in electronic form
- 10Power to make rules by Central Government in respect of electronic signature
- 10AValidity of contracts formed through electronic means
- 11Attribution of electronic records
- 12Acknowledgment of receipt
- 13Time and place of despatch and receipt of electronic record
- 14Secure electronic record
- 15Secure electronic signature
- 16Security procedures and practices
- 17Appointment of Controller and other officers
- 18Functions of Controller
- 19Recognition of foreign Certifying Authorities
- 20[Omitted.]
- 21Licence to issue electronic signature Certificates
- 22Application for licence
- 23Renewal of licence
- 24Procedure for grant or rejection of licence
- 25Suspension of licence
- 26Notice of suspension or revocation of licence
- 27Power to delegate
- 28Power to investigate contraventions
- 29Access to computers and data
- 30Certifying Authority to follow certain procedures
- 31Certifying Authority to ensure compliance of the Act, etc
- 32Display of licence
- 33Surrender of licence
- 34Disclosure
- 35Certifying authority to issue electronic signature Certificate
- 36Representations upon issuance of Digital signature Certificate
- 37Suspension of Digital Signature Certificate
- 38Revocation of Digital Signature Certificate
- 39Notice of suspension or revocation
- 40Generating key pair
- 40ADuties of subscriber of Electronic Signature Certificate
- 41Acceptance of Digital Signature Certificate
- 42Control of private key
- 43Penalty and compensation for damage to computer, computer system, etc
- 43ACompensation for failure to protect data
- 44Penalty for failure to furnish information, return, etc
- 45Residuary penalty
- 46Power to adjudicate
- 47Factors to be taken into account by the adjudicating officer
- 48Appellate Tribunal
- 49[Omitted.]
- 50[Omitted.]
- 51[Omitted.]
- 52[Omitted.]
- 52A[Omitted.]
- 52B[Omitted.]
- 52C[Omitted.]
- 52DDecision by majority
- 53[Omitted.]
- 54[Omitted.]
- 55Orders constituting Appellate Tribunal to be final and not to invalidate its proceedings
- 56[Omitted.]
- 57Appeal to Appellate Tribunal
- 58Procedure and powers of the Appellate Tribunal
- 59Right to legal representation
- 60Limitation
- 61Civil court not to have jurisdiction
- 62Appeal to High Court
- 63Compounding of contraventions
- 64Recovery of penalty or compensation
- 65Tampering with computer source documents
- 66Computer related offences
- 66AOmitted
- 66BPunishment for dishonestly receiving stolen computer resource or communication device
- 66CPunishment for identity theft
- 66DPunishment for cheating by personation by using computer resource
- 66EPunishment for violation of privacy
- 66FPunishment for cyber terrorism
- 67Punishment for publishing or transmitting obscene material in electronic form
- 67APunishment for publishing or transmitting of material containing sexually explicit act, etc., in electronic form
- 67BPunishment for publishing or transmitting of material depicting children in sexually explicit act, etc., in electronic form
- 67CPreservation and retention of information by intermediaries
- 68Power of Controller to give directions
- 69Power to issue directions for interception or monitoring or decryption of any information through any computer resource
- 69APower to issue directions for blocking for public access of any information through any computer resource
- 69BPower to authorise to monitor and collect traffic data or information through any computer resource for cyber security
- 70Protected system
- 70ANational nodal agency
- 70BIndian Computer Emergency Response Team to serve as national agency for incident response
- 71Penalty for misrepresentation
- 72Penalty for Breach of confidentiality and privacy
- 72APunishment for disclosure of information in breach of lawful contract
- 73Penalty for publishing electronic signature Certificate false in certain particulars
- 74Publication for fraudulent purpose
- 75Act to apply for offence or contravention committed outside India
- 76Confiscation
- 77Compensation, penalties or confiscation not to interfere with other punishment
- 77ACompounding of offences
- 77BOffences with three years imprisonment to be bailable
- 78Power to investigate offences
- 79Exemption from liability of intermediary in certain cases
- 79ACentral Government to notify Examiner of Electronic Evidence
- 80Power of police officer and other officers to enter, search, etc
- 81Act to have overriding effect
- 81AApplication of the Act to electronic cheque and truncated cheque
- 82Controller, Deputy Controller and Assistant Controller to be public servants
- 83Power to give directions
- 84Protection of action taken in good faith
- 84AModes or methods for encryption
- 84BPunishment for abetment of offences
- 84CPunishment for attempt to commit offences
- 85Offences by companies
- 86Removal of difficulties
- 87Power of Central Government to make rules
- 88Constitution of Advisory Committee
- 89Power of Controller to make regulations
- 90Power of State Government to make rules
- 91[Omitted.]
- 92[Omitted.]
- 93[Omitted.]
- 94[Omitted.]
Legislative history
Legislative Summary: The Information Technology Act, 2000 Act Title - The Information Technology Act, 2000Act Number - Act No. 21 of 2000Enactment Date - June 9, 2000Enforcement Date - October 17, 2000 (vide G.S.R. 788(E))Ministry - Ministry of Electronics and Information Technology (MeitY)Core Statutory Objectives• Legal Recognition for E-Commerce: Provides statutory validity to transactions executed via Electronic Data Interchange (EDI) and other paperless electronic communication methods. • E-Governance Support: Facilitates electronic filing of documents, digital issuance of licenses/permits, and secure retention of records with Government departments. • Cybercrime & Data Protection: Establishes a legal mechanism to penalize unauthorized access, data theft, cyber crimes, and online fraud. • Consequential Amendments: Amends the Indian Penal Code (1860), the Indian Evidence Act (1872), the Bankers' Books Evidence Act (1891), and the Reserve Bank of India Act (1934) to accommodate electronic evidence. Source: India Code (Ministry of Electronics and Information Technology - MeitY, Government of India)
Schedules
This Act has 4 schedules. A schedule is published as a document of its own; the text is reproduced on its page where it has been read, and the document is mirrored here either way.
- THE FIRST SCHEDULE274 words
- THE SECOND SCHEDULE738 words
- THE THIRD SCHEDULE19 words
- THE FOURTH SCHEDULE19 words
Rules made under this Act
40 sets of Rules. India Code publishes Rules as a record and a document rather than as text, so these are indexed here and not reproduced. All Rules.
- Declaring certain computer resources of Central Registry of Securitisation Asset Reconstruction and Security Interest(CERSAI) and its associated dependencies as protected system2024
- Declaring certain computer resources of Computer Age Management Services Limited and its associated dependencies as protected system2024
- Declaring certain computer resources of Kfin Technologies Private Limited and its associated dependencies as protected system2024
- Declaring certain computer resources of National Investigation Agency and its associated dependencies as protected system2024
- The Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Amendment Rules, 20242024
- Declares the computer resources relating to the email infrastructure of the National Informatics Centre, being Critical Information Infrastructure of the National Informatics Centre, and the computer resources of its associated dependencies, to be protected systems for the purpose of the said Act2023
- Declaring certain computer resources of Airports Authority of India and its associated dependencies as protected systems2023
- Declaring certain computer resources of All India Institute of Medical Sciences, New Delhi and its associated dependencies as protected systems2023
- Declaring certain computer resources of Bank of India and its associated dependencies as protected systems2023
- Declaring certain computer resources of Central Bank of India and its associated dependencies as protected system2023
- Declaring certain computer resources of HDFC Bank and its associated dependencies as protected system2023
- Declaring certain computer resources of ICICI Bank and its associated dependencies as protected system 28th April, 20232023
- Declaring certain computer resources of IDBI Bank Ltd and its associated dependencies as protected system2023
- Declaring certain computer resources of Indian Bank and its associated dependencies as protected system2023
- Declaring certain computer resources of National Crime Records Bureau and its associated dependencies as protected system2023
- Declaring certain computer resources of Paytm Payments Bank Ltd and its associated dependencies as protected system2023
- Declaring certain computer resources of YES Bank and its associated dependencies as protected system2023
- Declaring certain resources of AXIS Bank and its associated dependencies as protected system2023
- Declaring certain resources of Canara Bank and its associated dependencies as protected system2023
- Declaring certain resources of Kotak Mahindra Bank and its associated dependencies as protected system2023
- Designated link officer under section 69A of the IT Act2023
- Establish three GAC and appoints persons thereto in the GAC under Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021,2023
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 updated as on 6.4.20232023
- Amendment to the First Schedule of the Information Technology Act, 2000 (“IT Act”)2022
- Declaring certain computer resources of Bank of Baroda and its associated dependencies as protected system2022
- Declaring certain computer resources of HDFC Bank and its associated dependencies as protected system2022
- Declaring certain computer resources of ICICI Bank and its associated dependencies as protected system 16th June, 20222022
- Declaring certain computer resources of Licensed Telecom service providers and their associated dependencies as protected system2022
- Declaring certain computer resources of Life Insurance Corporation of India and its associated dependencies as protected system2022
- Declaring certain computer resources of National Payments Corporation of India and its associated dependencies as protected system2022
- Declaring certain computer resources of Punjab National Bank and its associated dependencies as protected system2022
- Declaring certain computer resources of Union Bank of india and its associated dependencies as protected system2022
- Declaring certain resources of State Bank of India and its associated dependencies as protected system2022
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2022.2022
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 - comprehensive rules updated on 28th Oct 2022,2022
- Cyber Forensic Division, State Forensics Science Laboratory, Vellayambalam, Thiruvananthapuram Kerala, as Examiner of Electronic Evidence within India,2021
- Cyber Forensic Laboratory, Air Force Cyber Group,New Delhi, as Examiner of Electronic Evidence within India,2021
- Designated officer under 69A of the Act2021
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.2021
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.2021
Related Acts
Source and method. Compiled from the enactments of Parliament and of the State legislatures as published on India Code, and republished together with commentary and other original matter under section 52(1)(q)(ii) of the Copyright Act, 1957. Structured, cross-referenced and maintained by eCourtsIndia. Every one of the 125 sections of this Act has its own page. This page is not a substitute for legal advice.