INFORMATION TECHNOLOGY (AMENDMENT) ACT, 2008
(1) This Act may be called the Information Technology (Amendment) Act, 2008.
(2) It shall come into force on 1[such date as the Central Government may, by notification in the Official Gazette, appoint :]
Provided that different dates may be appointed for different provisions of this Act and any reference in any such provision to the commencement of this Act shall be construed as a reference to the coming into force of that provision.
____________________________
1. The Information Technology (Amendment) Act, 2008 is effective from 27.10.2009 vide Notification No. SO2690(E) dated 27.10.2009.
In the Information Technology Act, 2000 (hereinafter in this Part referred to as the 21 of 2000. principal Act), for the words "digital signature" occurring in the Chapter, section, subsection and clause referred to in the Table below, the words "electronic signature" shall be substituted.
Table
S. No. Chapter/section/sub-section/clause
(1) clauses (d), (g), (h) and (zg) of section 2;
(2) section 5 and its marginal heading;
(3)/ marginal heading of section 6;
(4) clauses (a), (b), (c) and (e) of section 10 and its marginal heading;
&nb
In section 1 of the principal Act, for sub-section (4), the following sub-sections shall be substituted, namely:--
"(4) Nothing in this Act shall apply to documents or transactions specified in the First Schedule:
Provided that the Central Government may, by notification in the Official Gazette, amend the First Schedule by way of addition or deletion of entries thereto.
(5) Every notification issued under sub-section (4) shall be laid before each House of Parliament.".
In section 2 of the principal Act,--
(A) after clause (h), the following clause shall be inserted, namely:--
'(ha) "communication device" means cell phones, personal digital assistance or combination of both or any other device used to communicate, send or transmit any text, video, audio or image;';
(B) for clause (j), the following clause shall be substituted, namely:--
'(j) "computer network" means the inter-connection of one or more computers or computer systems or communication device through--
(i) the use of satellite, microwave, terrestrial line, wire, wireless or other communication media; and
(ii) terminals or a complex consisting of two or more inter-c
In Chapter II of the principal Act, for the heading, the heading "Digital signature and electronic signature" shall be substituted.
After section 3 of the principal Act, the following section shall be inserted, namely:--
"3A. Electronic signature.--(1) Notwithstanding anything contained in section 3, but subject to the provisions of sub-section (2), a subscriber may authenticate any electronic record by such electronic signature or electronic authentication technique which--
(a) is considered reliable; and
(b) may be specified in the Second Schedule.
(2) For the purposes of this section any electronic signature or electronic authentication technique shall be considered reliable if--
(a) the signature creation data or the authentication data are, within the context in which they are used, linked to the signatory or, as the case may be,
After section 7 of the principal Act, the following section shall be inserted, namely:--
"7A. Audit of documents, etc., maintained in electronic form.-- Where in any law for the time being in force, there is a provision for audit of documents, records or information, that provision shall also be applicable for audit of documents, records or information processed and maintained in the electronic form.".
After section 10 of the principal Act, the following section shall be inserted, namely:--
"10A. Validity of contracts formed through electronic means - Where in a contract formation, the communication of proposals, the acceptance of proposals, the revocation of proposals and acceptances, as the case may be, are expressed in electronic form or by means of an electronic record, such contract shall not be deemed to be unenforceable solely on the ground that such electronic form or means was used for that purpose.".
In section 12 of the principal Act, in sub-section (1), for the words "agreed with the addressee", the word "stipulated" shall be substituted.
For sections 15 and 16 of the principal Act, the following sections shall be substituted, namely:--
15. Secure electronic signature.- An electronic signature shall be deemed to be a secure electronic signature if--
(i) the signature creation data, at the time of affixing signature, was under the exclusive control of signatory and no other person; and
(ii) the signature creation data was stored and affixed in such exclusive manner as may be prescribed.
Explanation.--In case of digital signature, the "signature creation data" means the private key of the subscriber.
16. Security procedures and practices.- The Central Government may, for the purposes of sections 14 and 15, prescribe the security procedures a
In section 17 of the principal Act,--
(a) in sub-section (1), for the words "and Assistant Controllers", the words ", Assistant Controllers, other officers and employees" shall be substituted; and
(b) in sub-section (4), for the words "and Assistant Controllers", the words ", Assistant Controllers, other officers and employees" shall be substituted.".
Section 20 of the principal Act shall be omitted.
In section 29 of the principal Act, in sub-section (1), for the words "any contravention of the provisions of this Act, rules or regulations made thereunder", the words "any contravention of the provisions of this Chapter" shall be substituted.
In section 30 of the principal Act,--
(i) in clause (c), after the word "assured", the word "and" shall be omitted;
(ii) after clause (c), the following clauses shall be inserted, namely:--
"(ca) be the repository of all Electronic Signature Certificates issued under this Act;
(cb) publish information regarding its practices, Electronic Signature Certificates and current status of such certificates; and".
In section 34 of the principal Act, in sub-section (1), in clause (a), the words "which contains the public key corresponding to the private key used by that Certifying Authority to digitally sign another Digital Signature Certificate" shall be omitted.
In section 35 of the principal Act, in sub-section (4), --
(a) the first proviso shall be omitted;
(b) in the second proviso, for the words "Provided further", the word "Provided" shall be substituted.
In section 36 of the principal Act, after clause (c), the following clauses shall be inserted, namely:--
"(ca) the subscriber holds a private key which is capable of creating a digital signature;
(cb) the public key to be listed in the certificate can be used to verify a digital signature affixed by the private key held by the subscriber;".
After section 40 of the principal Act, the following section shall be inserted, namely:--
"40A. Duties of subscriber of Electronic Signature Certificate.- In respect of Electronic Signature Certificate the subscriber shall perform such duties as may be prescribed.".
In Chapter IX of the principal Act, in the heading, for the words "Penalties and adjudication ", the words "Penalties, compensation and adjudication" shall be substituted.
In section 43 of the principal Act,--
(a) in the marginal heading, for the word "Penalty", the words "Penalty and Compensation" shall be substituted;
(b) in clause (a), after the words "computer network", the words "or computer resource" shall be inserted;
(c) after clause (h), the following clauses shall be inserted, namely:--
"(i) destroys, deletes or alters any information residing in a computer resource or diminishes its value or utility or affects it injuriously by any means;
(j) steal, conceals, destroys or alters or causes any person to steal, conceal, destroy or alter any computer source code used for a computer resource with an intention to cause damage;";
&
After section 43 of the principal Act, the following section shall be inserted, namely:--
'43A. Compensation for failure to protect data.- Where a body corporate, possessing, dealing or handling any sensitive personal data or information in a computer resource which it owns, controls or operates, is negligent in implementing and maintaining reasonable security practices and procedures and thereby causes wrongful loss or wrongful gain to any person, such body corporate shall be liable to pay damages by way of compensation to the person so affected.
Explanation.--For the purposes of this section,--
(i) "body corporate" means any company and includes a firm, sole proprietorship or other association of individuals engaged in commercial or professional activities;
&
In section 46 of the principal Act,--
(a) in sub-section (1), for the words "direction or order made thereunder", the words "direction or order made thereunder which renders him liable to pay penalty or compensation," shall be substituted;
(b) after sub-section (1), the following sub-section shall be inserted, namely:--
"(1A) The adjudicating officer appointed under sub-section (1) shall exercise jurisdiction to adjudicate matters in which the claim for injury or damage does not exceed rupees five crore:
Provided that the jurisdiction in respect of the claim for injury or damage exceeding rupees five crore shall vest with the competent court.";
(c) in sub-section (5), after clause (b), the following claus
In Chapter X of the principal Act, in the heading, the word "Regulations" shall be omitted.
In section 48 of the principal Act, in sub-section (1), the word "Regulations" shall be omitted.
For sections 49 to 52 of the principal Act, the following sections shall be substituted, namely:--
"49. Composition of Cyber Appellate Tribunal.-- (1) The Cyber Appellate Tribunal shall consist of a Chairperson and such number of other Members, as the Central Government may, by notification in the Official Gazette, appoint:
Provided that the person appointed as the Presiding Officer of the Cyber Appellate Tribunal under the provisions of this Act immediately before the commencement of the Information Technology (Amendment) Act, 2008 shall be deemed to have been appointed as the Chairperson of the said Cyber Appellate Tribunal under the provisions of this Act as amended by the Information Technology (Amendment) Act, 2008.
(2) The selection of Chairperson and Members of the Cyber Appellate Tribu
In section 53 of the principal Act, for the words "Presiding Officer", the words "Chairperson or Member, as the case may be," shall be substituted.
In section 54 of the principal Act, for the words "Presiding Officer" wherever they occur, the words "Chairperson or the Member" shall be substituted.
In section 55 of the principal Act, for the words "Presiding Officer", the words "Chairperson or the Member" shall be substituted.
In section 56 of the principal Act, for the words "Presiding Officer", the word "Chairperson" shall be substituted.
In section 64 of the principal Act,--
(i) for the words "penalty imposed", the words "penalty imposed or compensation awarded" shall be substituted;
(ii) in the marginal heading, for the word "penalty", the words "penalty or compensation" shall be substituted.
For sections 66 and 67 of the principal Act, the following sections shall be substituted, namely:--
'66. Computer related offences.- If any person, dishonestly or fraudulently, does any act referred to in section 43, he shall be punishable with imprisonment for a term which may extend to three years or with fine which may extend to five lakh rupees or with both.
Explanation.--For the purposes of this section,--
(a) the word "dishonestly" shall have the meaning assigned to it in section 24 of the Indian Penal Code[45 of 1860];
(b) the word "fraudulently" shall have the meaning assigned to it in section 25 of the Indian Penal Code[45 of 1860].
66A. Punishment for sending offensive messages through communica
In section 68 of the principal Act, for sub-section (2), the following sub-section shall be substituted, namely:--
"(2) Any person who intentionally or knowingly fails to comply with any order under sub-section (1) shall be guilty of an offence and shall be liable on conviction to imprisonment for a term not exceeding two years or a fine not exceeding one lakh rupees or with both.".
For section 69 of the principal Act, the following sections shall be substituted, namely:--
'69. Power to issue directions for interception or monitoring or decryption of any information through any computer resource - (1) Where the Central Government or a State Government or any of its officers specially authorised by the Central Government or the State Government, as the case may be, in this behalf may, if satisfied that it is necessary or expedient so to do, in the interest of the sovereignty or integrity of India, defence of India, security of the State, friendly relations with foreign States or public order or for preventing incitement to the commission of any cognizable offence relating to above or for investigation of any offence, it may subject to the provisions of sub-section (2), for reasons to be recorded in writing, by order, direct any agency of the appropriate Governm
In section 70 of the principal Act,--
(a) for sub-section (1), the following sub-section shall be substituted, namely:--
'(1) The appropriate Government may, by notification in the Official Gazette, declare any computer resource which directly or indirectly affects the facility of Critical Information Infrastructure, to be a protected system.
Explanation.--For the purposes of this section, "Critical Information Infrastructure" means the computer resource, the incapacitation or destruction of which, shall have debilitating impact on national security, economy, public health or safety.';
(b) after sub-section (3), the following sub-section shall be inserted, namely:--
"(4) The Central Government shall presc
After section 70 of the principal Act, the following sections shall be inserted, namely:--
"70A. National nodal agency.-- (1) The Central Government may, by notification published in the Official Gazette, designate any organisation of the Government as the national nodal agency in respect of Critical Information Infrastructure Protection.
(2) The national nodal agency designated under sub-section (1) shall be responsible for all measures including Research and Development relating to protection of Critical Information Infrastructure.
(3) The manner of performing functions and duties of the agency referred to in sub-section (1) shall be such as may be prescribed.
70B. Indian Computer Emergency Response Team to serve as national agency for incident re
After section 72 of the principal Act, the following section shall be inserted, namely:--
"72 A. Punishment for disclosure of information in breach of lawful contract.-- Save as otherwise provided in this Act or any other law for the time being in force, any person including an intermediary who, while providing services under the terms of lawful contract, has secured access to any material containing personal information about another person, with the intent to cause or knowing that he is likely to cause wrongful loss or wrongful gain discloses, without the consent of the person concerned, or in breach of a lawful contract, such material to any other person, shall be punished with imprisonment for a term which may extend to three years, or with fine which may extend to five lakh rupees, or with both.".
For section 77 of the principal Act, the following sections shall be substituted, namely:--
"77. Compensation, penalties or confiscation not to interfere with other punishment.-- No compensation awarded, penalty imposed or confiscation made under this Act shall prevent the award of compensation or imposition of any other penalty or punishment under any other law for the time being in force.
77A. Compounding of offences.-- A court of competent jurisdiction may compound offences, other than offences for which the punishment for life or imprisonment for a term exceeding three years has been provided, under this Act:
Provided that the court shall not compound such offence where the accused is, by reason of his previous conviction, liable to either enhanced punishment or to a punishment of a differ
In section 78 of the principal Act, for the words "Deputy Superintendent of Police" the word "Inspector" shall be substituted.
Section 39 of the IT Act, 2008, primarily deals with the legal recognition and enforceability of electronic records and signatures, facilitating electronic commerce and digital transactions within the legal framework of India. It aims to promote the use of electronic means for contractual and legal purposes, aligning with the broader objectives of the Act to facilitate electronic governance and commerce.
Section 39 states that unless otherwise agreed, an acceptance of a contract may be expressed through electronic means of communication, and such acceptance shall have the same legal validity as a written or spoken acceptance. This provision underscores the recognition of electronic communication as a valid mode of forming contractual agreements.
Section 39 itself does not prescribe specific punishments; rather, it provides a legal recognition framework. Penalties related to violations, such as forgery or fraudulent electronic signatures, are covered under other sections like Sections 66, 66A, and 66C of the Act.
This legal commentary synthesizes the available sources to provide a comprehensive analysis of Section 39 of the IT Act, 2008.
For Chapter XII of the principal Act, the following Chapters shall be substituted, namely:--
'CHAPTER XII
Intermediaries not to be liable in certain cases
79. Exemption from liability of intermediary in certain cases.-- (1) Notwithstanding anything contained in any law for the time being in force but subject to the provisions of sub-sections (2) and (3), an intermediary shall not be liable for any third party information, data, or communication link made available or hosted by him.
(2) The provisions of sub-section (1) shall apply if--
(a) the function of the intermediary is limited to providing access to a communication system over which information made available by third parties is transmitted or tempo
In section 80 of the principal Act, in sub-section (1), for the words "Deputy Superintendent of Police", the word "Inspector" shall be substituted.
In section 81 of the principal Act, the following proviso shall be inserted at the end, namely:--
"Provided that nothing contained in this Act shall restrict any person from exercising any right conferred under the Copyright Act, 1957((14 of 1957)) or the Patents Act, 1970(39 of 1970).".
In section 82 of the principal Act,--
(a) for the marginal heading, the following marginal heading shall be substituted, namely:--
"Chairperson, Members, officers and employees to be public servants.";
(b) for the words "Presiding Officer", the words "Chairperson, Members" shall be substituted.
In section 84 of the principal Act, for the words "Presiding Officer", the words "Chairperson, Members" shall be substituted.
After section 84 of the principal Act, the following sections shall be inserted, namely:--
"84A. Modes or methods for encryption.-- The Central Government may, for secure use of the electronic medium and for promotion of e-governance and e-commerce, prescribe the modes or methods for encryption.
84B. Punishment for abetment of offences.- Whoever abets any offence shall, if the act abetted is committed in consequence of the abetment, and no express provision is made by this Act for the punishment of such abetment, be punished with the punishment provided for the offence under this Act.
Explanation.--An act or offence is said to be committed in consequence of abetment, when it is committed in consequence of the instigation, or in pursuance of the conspiracy, or with the aid which constitutes the
In section 87 of the principal Act,--
(A) in sub-section (2),--
(i) for clause (a), the following clauses shall be substituted, namely:--
"(a) the conditions for considering reliability of electronic signature or electronic authentication technique under sub-section (2) of section 3A;
(aa) the procedure for ascertaining electronic signature or authentication under sub-section (3) of section 3 A;
(ab) the manner in which any information or matter may be authenticated by means of electronic signature under section 5;";
(ii') after clause (c), the following clause shall be inserted, namely:--
"(ca) the manner in which t
In section 90 of the principal Act, in sub-section (2), clause (c) shall be omitted.
Sections 91, 92, 93 and 94 of the principal Act shall be omitted.
For the First Schedule and the Second Schedule to the principal Act, the following Schedules shall be substituted, namely:--
"FIRST SCHEDULE
[See sub-section (4) of section 1]
Documents or transactions to which the Act shall not apply
Sl. No. Description of documents or transactions
1. A negotiable instrument (other than a cheque) as defined in section 13 of the Negotiable Instruments Act, 1881(26 of 1881).
2. A power-of-attorney as defined in section 1A of the Powers-of-Attorney Act, 1882(7 of 1882).
3. A trust as defined in section 3 of the Indian Trusts Act, 1882(2 of 1882).
The Third Schedule and the Fourth Schedule to the principal Act shall be omitted.
In the Indian Penal Code(45 of 1860)--
(a) Amendment of section 4.- in section 4,--
(i) after clause (2), the following clause shall be inserted, namely:--
"(3) any person in any place without and beyond India committing offence targeting a computer resource located in India.";
(ii) for the Explanation, the following Explanation shall be substituted, namely:--
'Explanation--In this section--
(a) the word "offence" includes every act committed outside India which, if committed in India, would be punishable under this Code;
(b) the expression "computer resource" shall have the meaning assigned to it in clause (k) of su
The Information Technology (Amendment) Act, 2008, was enacted to address the evolving landscape of cybercrime and to enhance the legal framework governing electronic transactions in India. Section 51 specifically pertains to the term of office and conditions of service for the Chairperson and Members of the Cyber Appellate Tribunal.
Section 51 outlines the tenure and conditions under which the Chairperson and Members of the Cyber Appellate Tribunal shall operate. It specifies that they will hold office for a term of five years from the date they assume their position.
The scope of Section 51 is limited to the administrative framework of the Cyber Appellate Tribunal, which is crucial for adjudicating disputes arising from the application of the Information Technology Act. It ensures stability and continuity in the tribunal's functioning.
Section 51 does not prescribe any punishment as it primarily deals with the administrative aspects of the Cyber Appellate Tribunal rather than criminal offenses.
In the Indian Evidence Act, 1872(1 of 1872),--
(a) Amendment of section 3.- in section 3 relating to interpretation clause, in the paragraph appearing at the end, for the words "digital signature" and "Digital Signature Certificate", the words "electronic signature" and "Electronic Signature Certificate" shall respectively be substituted;
(b) Insertion of new section 45A -after section 45, the following section shall be inserted, namely:--
"45A. Opinion of Examiner of Electronic Evidence.-When in a proceeding, the court has to form an opinion on any matter relating to any information transmitted or stored in any computer resource or any other electronic or digital form, the opinion of the Examiner of Electronic Evidence referred to in section 79A of the Information Technology Act, 2000(21 of 2
The Information Technology (Amendment) Act, 2008, was enacted to address the growing concerns surrounding cybercrime and to enhance the legal framework governing electronic transactions in India. Section 52 specifically deals with the provisions related to the salary, allowances, and other terms and conditions of service for the Chairperson and Members of the authorities established under the Act.
Section 52 outlines the remuneration and service conditions for the Chairperson and Members of the authorities created under the Information Technology Act. It provides the framework for their compensation and operational guidelines.
The scope of Section 52 is limited to the administrative and financial aspects concerning the Chairperson and Members of the authorities under the IT Act. It does not extend to the substantive provisions of the Act concerning cybercrimes or electronic transactions.
Section 52 does not prescribe any punishment as it primarily deals with administrative provisions rather than criminal offenses.
Elevate your legal practice with advanced AI-driven research and drafting solutions. Experience unmatched efficiency, precision, and security, tailored exclusively for legal professionals.