Sipna College of Engineering & Technology, Amravati
Department of Computer Science and Engineering
Session 2022-2023
Subject: Security Policy & Governance Subject Code:6KS01
Year/Sem: III/VI Section: A/B/C
Content Beyond Syllabus
IT Act 2000
IT Act 2000 (Information Technology Act, 2000)
1. Introduction
Enforced in 2000 by the Government of India.
Primary law in India dealing with cybercrime, electronic commerce, and digital
communication.
Based on the UNCITRAL Model Law on E-Commerce (1996).
2. Objectives of IT Act 2000
Provide legal recognition to electronic records and digital signatures.
Facilitate e-commerce and online transactions.
Prevent and punish cybercafes.
Define rules for data protection and privacy.
Enable establishment of Certifying Authorities for digital signatures.
3. Key Features
Legal recognition of digital signatures.
Electronic governance: filing of forms, applications, and documents online.
Certifying Authorities (CAs) issue Digital Signature Certificates (DSCs).
Cybercrime offenses defined (hacking, identity theft, cyber terrorism, publishing obscene
content, etc.).
Adjudication mechanism: Cyber Appellate Tribunal (later merged with TDSAT).
4. Major Sections
Sec. 43: Penalty for damage to computer, system, or network.
Sec. 66: Computer-related offenses (hacking, identity theft, phishing).
Sec. 67: Publishing or transmitting obscene material in electronic form.
Sec. 69: Power to intercept, monitor, decrypt information.
Sec. 72: Breach of confidentiality and privacy.
5. Amendments
IT (Amendment) Act 2008:
Introduced cyber terrorism (Sec. 66F).
Stronger data protection & privacy measures.
Recognition of electronic signatures beyond digital signatures.
Introduction of Intermediary Liability (social media, ISPs accountable).
6. Benefits
Growth of e-commerce and digital economy.
Stronger cyber law framework.
Recognition of electronic contracts.
Consumer protection in online transactions.
7. Limitations
Still weak on data protection compared to global standards (like GDPR).
Enforcement challenges due to jurisdictional issues.
Increasing cybercrime sophistication needs frequent updates.
Summary:
The IT Act 2000 is India’s cornerstone legislation for regulating digital communication, e-
commerce, and cybercrime. With amendments, it continues to evolve to meet challenges in
cyberspace.
Course Teacher: