IT Act 2000 and explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
The Information Technology Act 2000 (IT Act), amended significantly in 2008, is India's primary legislation governing electronic commerce and cybercrimes. As digital transactions dominate, understanding the IT Act is essential for businesses, individuals, and legal professionals.
Key Provisions of IT Act 2000
- Section 2: Definitions including electronic records, digital signatures, computer, cybercafe
- Sections 3-10: Digital signatures and electronic contracts — legal recognition
- Section 43: Civil penalty for unauthorized access, hacking, virus infection — up to Rs. 1 crore compensation
- Section 66: Computer-related offences (hacking) — imprisonment up to 3 years + fine Rs. 5 lakh
- Section 66A (struck down): Was used to arrest for offensive messages — struck down by SC in Shreya Singhal case 2015
- Section 66B: Receiving stolen computer resource — up to 3 years
- Section 66C: Identity theft (using another's digital signature/password) — up to 3 years
- Section 66D: Cheating using computer — up to 3 years
- Section 66E: Privacy violation (publishing private images) — up to 3 years
- Section 66F: Cyber terrorism — up to life imprisonment
- Section 67: Publishing obscene material online — up to 5 years
- Section 69: Government power to intercept/decrypt electronic communications
- Section 72: Breach of confidentiality by intermediaries — up to 2 years
Intermediary Liability
Under Section 66A(2) (now Rules under IT Act), intermediaries (ISPs, social media platforms, app stores) enjoy safe harbour if they: act as passive conduit, don't initiate transmission, don't select recipients, and act expeditiously on takedown notices. The IT Rules 2021 (Intermediary Guidelines) now require: grievance redressal officers, monthly compliance reports for large platforms, and take-down within 24-36 hours.
Adjudication Under IT Act
Civil disputes for Section 43 claims (unauthorized access, damages) go to Adjudicating Officers (state IT secretaries) for claims up to Rs. 5 crore. Higher value claims go to civil courts.
Cyber Appellate Tribunal (CYTAT)
Appeals from Adjudicating Officers go to the Cyber Appellate Tribunal. Further appeal to High Court.
Need Expert Help?
TaxClue's CA and legal team can assist you. Contact us or see our services.
Key Facts About IT Act 2000 and
- Applies in: All states across India, under the relevant central law.
- Mode: Mostly online via the official government portal.
- Typical timeline: Ranges from a few days to a few weeks depending on the case.
- Non-compliance: May attract penalties, interest or late fees.
- Expert help: TaxClue completes the entire process end to end for you.
What is Section 66 of the IT Act?
Computer-related offences including hacking (unauthorized access with intent to cause damage) — punishable with up to 3 years imprisonment and fine up to Rs. 5 lakh.
Is Section 66A of IT Act still in force?
No. The Supreme Court struck down Section 66A (offensive messages) in Shreya Singhal v Union of India (2015) as unconstitutional for violating freedom of speech.
Over 90% of compliance penalties in India arise from missed due dates — timely handling can save businesses thousands of rupees each year.
IT Act 2000 and: a key compliance topic in Indian tax and corporate law that businesses and individuals must understand to remain compliant.
Related Services & Guides
Why This Matters
Staying compliant with Indian regulations protects your business from penalties, interest and unnecessary legal trouble. It is always wise to maintain proper records and documentation so that any future scrutiny can be handled smoothly. Rules and thresholds in cyber data protection are revised periodically, so it helps to review your obligations at the start of each financial year. Professional guidance from a qualified CA, CS or advocate ensures that filings are accurate and submitted well before the due date.
Small businesses and startups especially benefit from setting up a simple compliance calendar to track recurring deadlines. Government portals now allow most applications and filings to be completed online, reducing paperwork and turnaround time. Keeping your PAN, registration certificates and board resolutions organised makes every subsequent filing faster. When in doubt, it is better to seek clarification early rather than risk a notice or a late-filing penalty later.
A clear understanding of the applicable law helps you make confident, well-informed business decisions. TaxClue's experts regularly assist businesses across India with end-to-end cyber data protection support at transparent, affordable pricing. Timely compliance also improves your credibility with banks, investors and government authorities.
Getting IT Act 2000 and right the first time saves both time and money. Many businesses seek expert help for IT Act 2000 and to stay fully compliant.