Power of Central Government to make rules
Section 87 of the Information Technology Act, 2000 deals with power of Central Government to make rules. The Central Government may, by notification in the Official Gazette and in the Electronic Gazette, make rules to carry out the provisions of this Act. The Act came into force on 17 Oct 2000.
(1) The Central Government may, by notification in the Official Gazette and in the Electronic Gazette, make rules to carry out the provisions of this Act.
(2) In particular, and without prejudice to the generality of the foregoing power, such rules may provide for all or any of the following matters, namely:--
1 [(a) the conditions for considering reliability of electronic signature or electronic authentication technique under sub-section (2) of section 3A;
(aa) the procedure for ascertaining electronic signature or authentication under sub-section (3) of section 3A;
(ab) the manner in which any information or matter may be authenticated by means of electronic signature under section 5;]
(b) the electronic form in which filing, issue, grant or payment shall be effected under sub-section (1) of section 6;
(c) the manner and format in which electronic records shall be filed, or issued and the method of payment under sub-section (2) of section 6;
2 [(ca) the manner in which the authorised service provider may collect, retain and appropriate service charges under sub-section (2) of section 6A;]
(d) the matters relating to the type of 3 [electronic signature], manner and format in which it may be affixed under section 10;
4 [(e) the manner of storing and affixing electronic signature creation data under section 15;
(ea) the security procedures and practices under section 16;]
(f) the qualifications, experience and terms and conditions of service of Controller, Deputy Controllers 5 [, Assistant Controllers, other officers and employees] under section 17;
6 * * * * *
(h) the requirements which an applicant must fulfil under sub-section (2) of section 21;
(i) the period of validity of licence granted under clause (a) of sub-section (3) of section 21;
(j) the form in which an application for licence may be made under sub-section (1) of section 22;
(k) the amount of fees payable under clause (c) of sub-section (2) of section 22;
(l) such other documents which shall accompany an application for licence under clause (d) of subsection (2) of section 22;
(m) the form and the fee for renewal of a licence and the fee payable thereof under section 23;
7 [(ma) the form of application and fee for issue of Electronic Signature Certificate under section 35;]
(n) the form in which application for issue of a 3 [electronic signature] Certificate may be made under sub-section (1) of section 35;
(o) the fee to be paid to the Certifying Authority for issue of a 3 [electronic signature] Certificate under sub-section (2) of section 35;
2 [(oa) the duties of subscribers under section 40A;
(ob) the reasonable security practices and procedures and sensitive personal data or information under section 43A;]
(p) the manner in which the adjudicating officer shall hold inquiry under sub-section (1) of section 46;
(q) the qualification and experience which the adjudicating officer shall possess under sub-section (3) of section 46;
8 * * * *
(u) the form in which appeal may be filed and the fee thereof under sub-section (3) of section 57;
(v) any other power of a civil court required to be prescribed under clause (g) of sub-section (2) of section 58; and
9 [(w) the powers and functions of the Chairperson of the 10 [Appellate Tribunal] under section 52A;
(x) the information, duration, manner and form of such information to be retained and preserved under section 67C;
(y) the procedures and safeguards for interception, monitoring or decryption under sub-section (2) of section 69;
(z) the procedures and safeguards for blocking for access by the public under sub-section (3) of section 69 A;
(za) the procedure and safeguards for monitoring and collecting traffic data or information under sub-section (3) of section 69B;
(zb) the information security practices and procedures for protected system under section 70;
(zc) manner of performing functions and duties of the agency under sub-section (3) of section 70A;
(zd) the officers and employees under sub-section (2) of section 70B;
(ze) salaries and allowances and terms and conditions of service of the Director General and other officers and employees under sub-section (3) of section 70B;
(zf) the manner in which the functions and duties of agency shall be performed under sub-section (5) of section 70B;
(zg) the guidelines to be observed by the intermediaries under sub-section (2) of section 79;
(zh) the modes or methods for encryption under section 84A.]
(3) 11 [Every notification made by the Central Government under sub-section (1) of section 70A and every rule made by it] shall be laid, as soon as may be after it is made, before each House of Parliament, while it is in session, for a total period of thirty days which may be comprised in one session or in two or more successive sessions, and if, before the expiry of the session immediately following the session or the successive sessions aforesaid, both Houses agree in making any modification in 12 *** the rule or both Houses agree that 12 *** the rule should not be made, 12 *** the rule shall thereafter have effect only in such modified form or be of no effect, as the case may be; so, however, that any such modification or annulment shall be without prejudice to the validity of anything previously done under that notification or rule.
Section 87, The Information Technology Act, 2000 (Act 21 of 2000).
Cross-references
Extracted from the operative text of the enactments themselves. Every destination below exists in our corpus.
This section refers to
- s. 3A Electronic signature
- s. 5 Legal recognition of electronic signatures
- s. 6 Use of electronic records and electronic signatures in Government and its agencies
- s. 6A Delivery of services by service provider
- s. 10 Power to make rules by Central Government in respect of electronic signature
- s. 15 Secure electronic signature
- s. 16 Security procedures and practices
- s. 17 Appointment of Controller and other officers
- s. 21 Licence to issue electronic signature Certificates
- s. 22 Application for licence
- s. 23 Renewal of licence
- s. 35 Certifying authority to issue electronic signature Certificate
- s. 40A Duties of subscriber of Electronic Signature Certificate
- s. 43A Compensation for failure to protect data
- s. 46 Power to adjudicate
- s. 52A [Omitted.]
- s. 57 Appeal to Appellate Tribunal
- s. 58 Procedure and powers of the Appellate Tribunal
- s. 67C Preservation and retention of information by intermediaries
- s. 69 Power to issue directions for interception or monitoring or decryption of any information through any computer resource
- s. 69B Power to authorise to monitor and collect traffic data or information through any computer resource for cyber security
- s. 70 Protected system
- s. 70A National nodal agency
- s. 70B Indian Computer Emergency Response Team to serve as national agency for incident response
- s. 79 Exemption from liability of intermediary in certain cases
- s. 84A Modes or methods for encryption
Related judgements & precedents
These are some judgments that construed this section, and hold precedence value. They hold authority on how to read, interpret and use this section.
-
Shreya Singhal v. Union of India
Court's Decision & Legal Precedent
Section 66A of the Information Technology Act, 2000 is unconstitutionally vague and overbroad and chills protected speech under Article 19(1)(a); it is struck down in its entirety. Section 69A blocking procedure and the intermediary safe-harbour in section 79 (read with the 2011 Rules, read down to require an actual court or government order) were upheld.
On this section: It is the controlling authority on subordinate legislation made under the Act's rule-making power: rules framed under it survive only if they stay within the parent Act and within the Article 19(2) grounds, and are read down to that extent rather than allowed a wider operation.
-
Association of Indian Magazines Registerd Office Thr. President vs Union of India Thr. Secretary
Court's Decision & Legal Precedent
Following the third-Judge opinion of Chandurkar J. on a difference of opinion, the Court held that the 6 April 2023 amendment to Rule 3(1)(b)(v) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, setting up a Fact Check Unit for 'the business of the Central Government', is violative of Articles 14, 19(1)(a) and 19(1)(g) and is ultra vires the Act of 2000, the expression 'fake or false or misleading' being vague and overbroad.
On this section: It shows the limit on the rule-making power conferred by this section: a rule notified under the Act is struck down where it travels beyond what the parent Act authorises, quite apart from its constitutional invalidity.
-
PhonePe Private Limited v. State of Karnataka
Court's Decision & Legal Precedent
PSS Act confidentiality (ss.15/20/22) and Bankers' Books Evidence Act do not confer absolute immunity from CrPC s.91 summons by a statutory investigating officer; disclosure exceptions apply to police investigating cyber-fraud. DATE VERIFIED Final Order 2025-04-29 (order-1.pdf).
On this section: Court expressly treats s.87 as the statutory rule-making power under which Intermediary Guidelines Rule 3 was notified, and applies that Rule 3 LE-cooperation duty as part of the holding that PhonePe must answer the investigatory summons.
The holding above is the ratio decidendi as extracted from the judgment by eCourts India, reproduced unaltered — it is a rendering of the court's reasoning, not a substitute for its words. Read the order itself before relying on it.
Made under this section, and citing it
32 instruments state that it was made under this provision — the power to make it comes from here, so a change to any of them changes what this section requires in practice. Newest first.
- The Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Amendment Rules, 2024Rule 2024
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 updated as on 6.4.2023Rule 2023
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2022.Rule 2022
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 - comprehensive rules updated on 28th Oct 2022,Rule 2022
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.Rule 2021
- Information Technology (Preservation and Retention of Information by Intermediaries Providing Digital Locker Facilities) Amendment Rules, 2017Rule 2017
- Recruitment Rules for Group A and Group B posts of CERT-In, MeitYRule 2017
- Cyber Appellate Tribunal (Powers and Functions of the Chairperson) Rules, 2016.Rule 2016
- Information Technology (Preservation and Retention of Information by Intermediaries Providing Digital Locker Facilities) Rules, 2016Rule 2016
- Powers and Functions of Chairperson, CyATNotification 2016
- Digital Signature (End Entity) Rules, 2015Rule 2015
- Information Technology (Certifying Authorities) Amendment Rules, 2015Rule 2015
- Information Technology (Security Procedures) Amendment Rules, 2015Rule 2015
- Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013.Rule 2014
- Cyber Appellate Tribunal (Salary, Allowances and Other Terms and Conditions of Service of Chairperson and Members) Amendment Rules, 2012Rule 2013
- The salary, allowances and the other terms and conditions of service of the Director General, CERT In, Rules 2012Rule 2013
- (Certifying Authorities) Amendment Rules, 2011 -Rules 4,5A and 6Rule 2011
- Information Technology (Electronic Service Delivery) Rules 2011Rule 2011
- Information Technology (Intermediaries Guidelines) Rules, 2011.Rule 2011
- Information Technology(Guidelines for Cyber Cafe Rules) Rules, 2011Rule 2011
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.Rule 2011
- Cyber Appellate Tribunal (Procedure for Investigation of Misbehaviour or Incapacity of Chairperson and Members) Rules, 2009Rule 2009
- Information Technology (Use of Electronic Records and Digital Signature) Rules, 2004Rule 2004
- The Information Technology (Certifying Authorities) (Amendment) Rules, 2004Rule 2004
- (Certifying Authorities) Amendment Rules, 2003 - Rules 8, 14Rule 2003
- Cyber Regulations Appellate Tribunal (Procedure for Investigation of misbehaviour or Incapacity of Presiding Officer) Rules, 2003.Rule 2003
- Cyber Regulations Appellate Tribunal (Salary, Allowances and other terms and conditions of service of Presiding Officer) Rules, 2003.Rule 2003
- Information Technology (Other Standards) Rules, 2003Rule 2003
- Information Technology (Qualification and Experience of Adjudicating Officers and Manner of Holding Enquiry) Rules, 2003.Rule 2003
- The Information Technology (Other Powers of Civil Court vested in cyber appellate tribunal) Rules, 2003Rule 2003
- The Cyber Regulations Appellate Tribunal (Salaries, Allowances and other condition of Service of other Officers and Employees) Rules, 2002.Rule 2002
- Information Technology (Certifying Authorities) Rules, 2000.Rule 2000
Another 8 instruments name this provision in its title or its text without being made under it.
- The Information Security Practices and Procedures for Protected System Rules, 2018 under section 70 of the IT Act 2000Rule 2018
- Electronic Signature or Electronic Authentication Technique and Procedure Rules, 2016.Rule 2016
- Certifying Authorities) Amendment Rules, 2009 -Rule 6Rule 2009
- Controller of Certifying Authorities Gazetted & Non-Gazetted posts Recruitment Rules, 2009Rule 2009
- Cyber Appellate Tribunal (Salary, Allowances and Other Terms and Conditions of Service of Chairperson and Members) Rules, 2009Rule 2009
- Information Technology (Procedure and Safeguards for Blocking for Access of Information by Public) Rules, 2009Rule 2009
- Information Technology (Procedure and Safeguards for Monitoring and Collecting Traffic Data or Information) Rules, 2009Rule 2009
- Information Technology (Procedures and Safeguards for Interception, Monitoring or Decryption of Information) Rules, 2009.Rule 2009
Questions about Section 87
What have the courts held on Section 87 of the Information Technology Act?
Shreya Singhal v. Union of India (24 Mar 2015) is the leading judgment on this section among those set out below: It is the controlling authority on subordinate legislation made under the Act's rule-making power: rules framed under it survive only if they stay within the parent Act and within the Article 19(2) grounds, and are read down to that extent rather than allowed a wider operation. Another 2 judgments on this section are set out below, 1 of them from the Supreme Court. They run from 2015 to 2025.
How do I find court cases under Section 87 of the Information Technology Act?
In judgments and charge sheets this section is written several ways, and each form finds a different set of orders. These search the full text of every order eCourtsIndia holds, best matches first: IT Act 87, section 87 IT Act, section 87 of the Information Technology Act. People searching for it also type it act 87a and income tax act 87 1. Each opens the full list of orders on eCourtsIndia, where it can be narrowed by court, year and outcome. 3 reported judgments on this section are set out on this page, beginning with Shreya Singhal v. Union of India (24 Mar 2015).
What should I read with Section 87 of the Information Technology Act, and has it changed?
Its own text turns on section 3A (Electronic signature), section 5 (Legal recognition of electronic signatures), section 6 (Use of electronic records and electronic signatures in Government and its agencies), section 6A (Delivery of services by service provider), and on 22 further provisions, so none of them can safely be read on its own. The rules and notifications made under it are where it actually bites, and there are 32: most recently The Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Amendment Rules, 2024 (2024), then Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 updated as on 6.4.2023 (2023), and 30 more.
When did Section 87 of the Information Technology Act come into force?
Section 87 of the Information Technology Act, cited as IT Act 87, came into force on 17 Oct 2000, having been enacted on 09 Jun 2000. It is in force as at the date shown on this page.
Other sections of this Act
- 2. Definitions1304 words
- 43. Penalty and compensation for damage to computer, computer system, etc506 words
- 46. Power to adjudicate370 words
- 89. Power of Controller to make regulations345 words
- 70B. Indian Computer Emergency Response Team to serve as national agency for incident response326 words
- 13. Time and place of despatch and receipt of electronic record315 words
Source and method. Compiled from the enactments of Parliament and of the State legislatures as published on India Code, and republished together with commentary and other original matter under section 52(1)(q)(ii) of the Copyright Act, 1957. Structured, cross-referenced and maintained by eCourtsIndia. Text as in force on 15 Oct 2026. This page is not a substitute for legal advice.