IT Act 2000 & Cyber Offenses
Relevant to Policing
A complete study note covering the legislative background, key definitions, offenses, punishments, and amendments — for JKPSI Telecommunication aspirants.
By the late 1990s, India's digital economy was expanding rapidly — e-commerce, online banking, and digital communications were becoming mainstream. But Indian law had a critical gap: no legislation recognized digital records, electronic contracts, or cybercrimes. The Indian Penal Code 1860 used words like "property" and "document" in a strictly physical sense — a hacker who broke into a bank's server could not be punished.
Bill Introduced in Lok Sabha
The Information Technology Bill 1999 was introduced during the winter session by the Ministry of Commerce & Industry under IT Minister Pramod Mahajan.
Passed by Both Houses
Passed by Lok Sabha on 17 May 2000 and Rajya Sabha on 19 May 2000. Presidential assent received on 9 June 2000. Enforced from 17 October 2000.
Structure of the Act
The Act has 94 Sections in 13 Chapters plus 4 Schedules. Covers: legal recognition of e-records, digital signatures, Certifying Authorities, cyber offenses, penalties, adjudication, and the Cyber Appellate Tribunal.
Section 2 contains all definitions. These are directly tested in JKPSI competitive exams.
The following sections are directly relevant to policing and are among the most tested topics in competitive exams. Scroll right on mobile to view the full table.
| Section | Offense / Provision | Punishment |
|---|---|---|
| S. 43 | Unauthorized access / damage to computer system (Civil) | Compensation ≤ ₹1 crore |
| S. 65 | Tampering with computer source code — concealing, destroying, altering | 3 yrs OR ₹2 lakh OR both |
| S. 66 | Computer-related offenses — hacking with intent to cause loss | 3 yrs OR ₹5 lakh OR both |
| S. 66A | Offensive messages — STRUCK DOWN by SC (Shreya Singhal 2015) | Unconstitutional |
| S. 66B | Receiving stolen computer resource or communication device | 3 yrs OR ₹1 lakh OR both |
| S. 66C | Identity theft — fraudulent use of e-signature, password, unique ID | 3 yrs AND ₹1 lakh |
| S. 66D | Cheating by personation using computer resource | 3 yrs AND ₹1 lakh |
| S. 66E | Violation of privacy — capturing/publishing private area images | 3 yrs OR ₹2 lakh OR both |
| S. 66F | Cyber terrorism — threatening unity, integrity, sovereignty of India | Life imprisonment |
| S. 67 | Publishing obscene material in electronic form | 3 yrs (1st) / 5 yrs (2nd) + fine |
| S. 67A | Publishing sexually explicit acts in electronic form | 5 yrs (1st) / 7 yrs (2nd) + fine |
| S. 67B | Child sexual abuse material (CSAM) — even browsing/downloading | 5 yrs (1st) / 7 yrs (2nd) + ₹10L |
| S. 69 | Govt power to intercept/monitor/decrypt — non-compliance by ISP | 7 yrs imprisonment |
| S. 69A | Power to block public access via intermediary — non-compliance | 7 yrs imprisonment |
| S. 69B | Power to collect traffic data for cyber security — non-compliance | 3 yrs imprisonment |
| S. 70 | Unauthorized access to protected/critical infrastructure system | 10 yrs AND fine |
| S. 72 | Breach of confidentiality and privacy by licensed persons | 2 yrs OR ₹1 lakh OR both |
| S. 75 | Extra-territorial jurisdiction — applies to offenses outside India if computer is in India | — |
IT (Amendment) Act 2008 — Major Revision
Triggered by the 26/11 Mumbai attacks (terrorists used digital communication extensively). Added: S.66A–66F, S.69 (interception), S.69A (blocking), S.69B (traffic data), Cyber Appellate Tribunal, wider intermediary definition. Passed in 2008, enforced from 27 October 2009.
IT (Amendment) Rules 2013
Strengthened intermediary rules regarding takedown of unlawful content, handling user data, and mandatory response time to law enforcement requests from ISPs and social media platforms.
IT (Intermediary Guidelines) Rules 2021
Large social media platforms (>50 lakh users) required to appoint Grievance Officer, Nodal Officer, and Chief Compliance Officer in India. OTT platforms regulated. Messaging apps required to reveal "first originator" of messages on court order.
Digital Personal Data Protection Act (DPDPA) 2023
Standalone data protection law. Establishes Data Protection Board. Imposes obligations on "Data Fiduciaries." Penalties up to ₹250 crore for data breaches. Partially replaces IT Act privacy provisions.
For a JKPSI Sub-Inspector candidate, understanding how these offenses are investigated, which sections apply, and what police powers exist is essential.
When a person gains unauthorized access to a computer and damages, deletes, or alters data. Police must collect digital evidence — server logs, IP addresses, access records. S.66 is a cognizable offense (police can arrest without warrant). Maximum punishment: 3 years or ₹5 lakh fine.
Creating fake websites or emails to steal passwords, PAN numbers, Aadhaar details. S.66C covers identity theft; S.66D covers cheating by personation online. Both are cognizable and non-bailable. Punishment: 3 years AND fine up to ₹1 lakh.
The most serious cyber offense. Includes denial-of-access attacks on critical infrastructure, spreading malware to affect essential services, and acts threatening national security using computer resources. Punishment: Life imprisonment. The National Investigation Agency (NIA) has jurisdiction over such cases.
S.67 covers general obscenity online. S.67A covers sexually explicit content. S.67B specifically targets child sexual abuse material (CSAM) — even browsing or downloading CSAM is an offense. Cyber cells coordinate with INTERPOL and NCMEC for CSAM investigations.
Covered through IPC S.354D (inserted by Criminal Law Amendment Act 2013), S.66E (privacy violation), and S.67 if obscene messages are sent. Victims can file an FIR at any cyber cell or local police station.
In the interest of national security, sovereignty, or public order, Central or State Government can order interception/monitoring of any information through any computer resource. The order must be in writing and reviewed. Unauthorized surveillance by police is itself a punishable offense.
For civil claims (S.43, compensation up to ₹1 crore), an Adjudicating Officer appointed by Central Government hears the case. Appeals go to the Cyber Appellate Tribunal (CAT). Further appeals from CAT go to the High Court. Criminal cases go to Court of Session or above as per CrPC.
Section 07MCQ Practice
15 Questions · Medium & Hard · IT Act 2000 · JKPSI Pattern