Information Technology Act, 2000 (IT Act) (original) (raw)
Last Updated : 26 Mar, 2026
The Information Technology Act, 2000 (IT Act) is India’s primary cyber law that provides a legal framework for electronic transactions, digital governance, and the prevention of cyber crimes.
- Establishes legal recognition for electronic records and digital signatures
- Promotes secure online transactions and e-governance
- Defines cyber offences and prescribes penalties
- Protects individuals and organisations from cyber threats
- Regulates intermediaries and digital platforms
Understanding the IT Act, 2000
The Information Technology Act, 2000, is a law created by the Indian government to support the safe use of the internet, digital communication, and online business in India. It was officially passed on 17 October 2000.
- It gives legal recognition to online transactions, meaning digital agreements and payments are considered valid just like paper-based ones.
- The Act helps prevent and punish cybercrimes such as hacking, identity theft, and online fraud.
This law is based on the UNCITRAL Model Law (1996), which means it follows international standards for electronic commerce and digital systems.
- The Act contains 94 sections divided into 13 chapters, covering different aspects of cybersecurity and digital laws.
- It also made changes to existing laws like the Indian Penal Code (IPC), 1860, to include cyber-related offences.
Key Features of the IT Act
1. Digital Signatures
- Provides legal recognition to electronic signatures in digital transactions.
- Ensures the authenticity and integrity of online contracts and documents.
2. Cybercrime Regulation
- Defines and penalizes offenses like hacking, identity theft, cyber terrorism, and cyber stalking.
- Provides legal protection and remedies for victims of cybercrimes.
3. Cyber Cafes
- Defines cyber cafes as public places offering internet access for a fee.
- Requires proper user identity records and compliance with security guidelines.
4. Overriding Provisions
- IT Act provisions take precedence over conflicting laws in cyber matters.
- Ensures harmony without affecting rights under other acts like the Copyright Act, 1957.
5. Regulation of Digital Media
- Introduces rules for regulating social media and digital content platforms.
- Focuses on user safety, grievance redressal, and data privacy compliance.
Important Sections and Their Penalties
The IT Act has different sections that deal with different cyber offenses. Here's an overview of some important ones:
| Section | Offense | Penalty |
|---|---|---|
| Section 43 | Unauthorized access or damage to computer systems | Compensation for damages to the system owner |
| Section 66 | Hacking a computer system | Up to 3 years in prison or ₹5 lakh fine or both |
| Section 66B, C, D | Fraud and identity theft | Up to 3 years in prison or ₹1 lakh fine or both |
| Section 66E | Violation of privacy by transmitting private images | Up to 3 years in prison or ₹2 lakh fine or both |
| Section 66F | Cyber terrorism threatening India’s sovereignty, integrity, or security | Life imprisonment |
| Section 67 | Publication of obscene content online | Up to 5 years in prison or ₹10 lakh fine or both |
**Note: These are the maximum penalties prescribed under the Act. The actual penalty is determined by the courts, depending on the specifics of the case.
Amendments and Updates to the IT Act
The IT Act has undergone multiple amendments to address emerging technologies and new forms of cybercrimes. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 were introduced as a significant addition to the Act, making online platforms more accountable for the content published by users.
Important Updates:
- Section 66A (dealing with offensive online content) was struck down by the Supreme Court of India in the case of Shreya Singhal v. Union of India (2015), as it was deemed unconstitutional.
- Intermediary Guidelines and Digital Media Ethics Code: These rules now hold social media platforms, news portals, and digital platforms accountable for offensive or harmful content shared by users. They also provide users with greater control over their personal data.