×

Information Technology Act

Information technology is everywhere; it is absorbed in the nerves of a human being. Without it, human goes back to their early era, and no work is conducted. It is a dire need of the moment, from filling a single form to doing world-level experiments.

Technology fulfills our personal and private work, including personal talks, health, education, business, etc. We can't imagine Indian trade without adequate technology because it will seem like a stagnant economy without modernization. Without using technology world level trading is impossible; therefore, it has become mandatory for the government to make some rules and regulations to prevent cyber attackers and cybercrime as technology is more used the bad intention of people. The government of India has made a gazette law for IT named as Information Technology Act.  

Let's learn about some of the important features and Objectives of the IT ACT.

Introduction of the IT Act

Name of the Act“Information Technology Act, 2000”, “ITA-2000”, “IT-ACT”.

Signed – 9 May 2000

Commenced – 17 October 2000

Assented to – 9 June 2000

Primary objective – Act designed as primary law dealing with electronic commerce and cyber-crime in India.

History/ Background – The Information Technology Act bill was passed in parliament in the budget session of 2000. It was signed on 9 June 2000 by president K.R Narayanan and finalized by a team of officials headed by Minister of Information Technology Pramod Mahajan.

To attain uniformity within the law in several countries, UNCITRAL- the international organization commission on Indian trade law, adopted a model law on electronic commerce (e-commerce) in 1996.

With innovations, certain amendments are written under various sections in this Act to protect people from digital frauds. 13 chapters and 90 sections in the constitution define this IT Act, while the last four sections (sections 91-94) deal with the revision of the Indian Penal Code 1860. IT Act 2000 acts as a legal section for electronic commerce, electronic transactions, e-governance, and cyber-crime. This Act consists of two schedules:

First Schedule deals with such documents where the Act shall not apply.

Second Schedule – It directly handles the electronic signature or electronic authentication method.

Objectives of the IT Act, 2000

Following are the main objectives of the IT Act, 2000:

  • It facilitates filling the form of documents electronically with different government or private departments and agencies. It also protects and stores electronic data.
  • The main objective is to legally channel e-commerce, including electronic fund transfers between financial institutions and banks, by granting legal recognition to all the transactions.
  • Now electronic communication or e-commerce has taken the place of paper-based communication and transactions with electronic data exchange. So to prevent them from being criminals and frauds need to be legalized with some strict rules and foundations.
  • Under the Evidence Act, 1891, and Reserve bank of India Act, 1934, it becomes mandatory for bankers to keep the books of accounts electronically.
  • Digital signatures have provided legal recognition for the authentication of any information and matter that require authentication.   

Features of the Information Technology Act, 2000

Some of the features of this Act are as follows:-

  • This Act consists of legal recognition for digital signatures as this system uses an uneven cryptosystem and hash function/operator for protecting the data.
  • It legally validates the electronic contracts created through secure electronic channels.
  • Regulates penalties and punishments for various cyber-crimes and digital/ electronic format frauds.
  • This law charged a penalty for any crime related to a computer or network located in India or foreign by establishing a cyber restrictive Appellant judicature under a provision in the Act. Here all the appeals created against the order of the controller/ Adjudicating officer are handled under this judicature. Still, an appeal or complaint against the cyber appellant tribunal is only placed in the high court.
  • It includes the provision of a Cyber Regulations Advisory committee in the constitution that advise the central government and Controller.
  • It also indulges provisions related to offenses and contraventions committed outside India.
  • The Controller is the repository of the digital signature, which is appointed under the appointment of the Controller of certifying authorities to license (CCA) and regulate its working.
  • This Act provides permission and right to the senior and other police officers to enter any public place to detect and search. Even they can arrest someone without a warrant.

List of punishments and offenses defined under IT Act, 2000

  • Penalties on the following:
    • Misrepresentation of data
    • Breach of privacy and confidentiality
    • Interference without other permission
    • Publishing fake digital signature signature
    • Publishing for fraud purposes
  • Confiscation
  • For the protection of the system
  • Hacking of system
  • Tampering with digital documents and data
  • Criminal mind with malicious purpose
  • Power of Controller to give directions
  • Have the power to investigate illegal offenses
  • Publishing of digital information without permission
  • It applies to electronic contravention and offenses committed outside India
  • The offense is done by cybercriminals and attackers
  • The direction was given to Controller for a subscriber to extend facilities to decrypt information.

Section defined under Information Technology Act, 2000  

       Section                                 Offense and  Punishment
Section 43This is a very important section that handles the Act of breaching the information from the computer system. Any act of destroying, stealing, altering, or deleting data from a computer system/ network with malicious intentions and without authorization or permission from the owner. This Act is liable for compensation paid to the owner.
Section 43AAny private firm or corporate body that deals with the user's sensitive information fails to protect the authenticity and confidentiality of the information due to the non-implementation of reasonable security practices. Because of this user suffers and is liable for compensation form the company.
Section 66Under this section, cyber hackers are punished for hacking the computer system with malicious intentions. This Act is punishable with 3year imprisonment or a fine of Rs. 500,000 or both.
Section 66 B, C, DThis section covers all the frauds and dishonesty done on a digital platform (transmitting information or identity theft. These are punishable offenses with 3years imprisonment and Rs. 100,000 fine or both
Section 66EThis section includes privacy violation, which includes sharing personal images or private area. This Act is punishable with a 200,000 fine and 3-year imprisonment.
Section 66 FThis section handles the result of cyber terrorism that affects India's integrity, security of data, and unity & sovereignty via digital platforms. Terrorist is liable for life imprisonment.    
Section 67Regarding pornography, publishing, and transmission of obscene information or content publically. These all crimes are liable for imprisonment of up to 5 years or a fine of Rs. 100,00,00 and can be both.
Section 69 AThis Act is for the government, which empowers them to block internet sites in the nation's interest. Under this Act, government authorities or cyber cells intercept, monitor, or decrypt any information received/stored, transmitted, or generated in any computer resource or network. This can be done in favor of sovereignty or integrity of the nation, security of the state, defense of India, public order or friendly relation with foreign countries/ states, for investigation of any offense, for preventing incitement to the commission of any cognizable offense.  
Section 79 (2) (C)This Act handles online intermediaries who are observed due diligence while discharging their duties (internet service providers (ISPs), social media platforms, and social engines are kept under surveillance). It also observes other guidelines prescribed by the central government.  

Conclusion

The information technology act is necessary for this digital world to protect and preserve the integrity and confidentiality of information for individuals and safeguard the nation. It's a legal framework that defines cyber crimes, designed for electronic governance by giving recognition of digital signatures and electronic records and prescribing penalties for them. According to the needs in cyber security, the government will make new amendments for the public and the nation.


Related Topics

Difference between Information Security and Cyber Security

Cyber security and information security terms are associated with computer security to protect systems from threats, information breaches, and other cyber-attacks. Both the terms are often used interchangeably or as...

3 minutes read.

Difference between Ethical Hacking & Cyber Security

Cyber security and ethical hacking are usually confusing as they are interrelated but different. These terms have the most booming careers in the tech industry. Ethical hacking is the subset,...

5 minutes read.

Cyber Security Identity and Access Management

Identity and access management is a framework of business processes that provide a facility for digital Identity. It is also abbreviated as IAM. Its main work is to provide restricted...

6 minutes read.

NIST- National Institute of Standard and technology

This security standard or framework was founded in 1901 and designed to protect data. It consists of several guidelines that help companies protect government data and establish standards and technology...

4 minutes read.

Penetration Testing Tools

Penetration testing is applied to counterfeit cyber-attacks to assess the network's security, server, or web application to improve and prevent real threats' exploits by repairing vulnerabilities. Ethical hackers test to determine...

7 minutes read.

Botnet in cyber security

Introduction Since people started using computer systems, they have become victims of cyber-attack. The reason and medium of cyber-attack vary from attack to attack like phishing attack uses email, DDOS attack...

14 minutes read.

Vulnerability management

A process of managing the vulnerabilities in the system is called vulnerability management. Vulnerability management is the cyclic process of identifying, evaluating, reporting and treating the system vulnerabilities and IT...

6 minutes read.

Types of cyber security vulnerabilities

The user must know all the vulnerabilities to understand cyber security vulnerabilities and build a vulnerability management program. Here are some of the common types of cyber security vulnerabilities: System misconfigurationsThe...

8 minutes read.

Applications of cyber security

Cyber security terms define the process of safeguard implemented on the device that working in a network (online) is safe and secure. In this digital era, personal and private networks,...

4 minutes read.

Identification of security vulnerability

To remove vulnerabilities and make the business strong, it is necessary to identify the security vulnerabilities because if we know the ways of identification and easily handle the risk of...

4 minutes read.

Difference between Network Security and Cyber Security

Introduction While learning about cyber security, usually terms like information security and network security come to have a familiar ring. Still, they are different from each other on numerous factors.  The technology...

3 minutes read.

ISO - International Standard for Organization

* Abbreviation is ISO of International Standard for Organization derived from the ancient Greek word ísos which means equivalent or equal. ISO develops and publishes a wide of industrial, commercial,...

6 minutes read.

Cyber Security Standards

Top Cyber Security Frameworks/ Standards Experts of cyber security safeguard the internet against different cyber-crimes by making different rules and protocols to follow by the user. Still, these rules and regulations...

10 minutes read.

Importance of cyber security in education sector

Education is the necessity of human beings and the most prominent and growing industry in businesses and commercial establishments everywhere. Educational institutes are increasingly fast, and with the merger of...

6 minutes read.

Eavesdropping attack in cyber security

Introduction Eavesdropping is a technique of finding someone's conversation details for personal benefit. When an ongoing communication between two people is interrupted, or a third person tries to listen to that...

6 minutes read.

Cyber Security Prerequisites

In today's world, the use of the internet and computer is rapidly increasing in day-to-day life. The issues with computer security are also raised with the high use of the...

3 minutes read.

What is Phishing?

Introduction Cyber security always tries to protect organizations or individuals from cyber-attacks by improving itself according to the latest trend and technologies. Still, some easiest and cheapest ways are used by...

11 minutes read.

Cyber Forensics Definition

Cyber forensic is an electronic discovery technique used to reveal and determine the evidence of a criminal offence. The primary goal of computer forensics or cyber forensics is to investigate...

6 minutes read.

Characteristics of cyber security policies

Security policies have the motive to protect the right of employees, customers, partners, vendors, and the integrity of information from being misused, disclosed of information, or national, international, or accidental...

6 minutes read.

Types of penetration testing

Penetration testing is the collection of techniques utilized to resolve the various issues of the system and test, analyses and give a solution. So, understanding penetration testing is incomplete without...

6 minutes read.