IT Act 2000 and Cybercrimes in India: Key Provisions, Offences and Amendments

Act 2000 and Cybercrimes explained: this guide covers what Act 2000 and Cybercrimes means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.

The Information Technology Act 2000 (IT Act), amended significantly in 2008, is India's primary legislation governing electronic commerce and cybercrimes. As digital transactions dominate, understanding the IT Act is essential for businesses, individuals, and legal professionals.

Key Provisions of IT Act 2000

• Section 2: Definitions including electronic records, digital signatures, computer, cybercafe
• Sections 3-10: Digital signatures and electronic contracts — legal recognition
• Section 43: Civil penalty for unauthorized access, hacking, virus infection — up to Rs. 1 crore compensation
• Section 66: Computer-related offences (hacking) — imprisonment up to 3 years + fine Rs. 5 lakh
• Section 66A (struck down): Was used to arrest for offensive messages — struck down by SC in Shreya Singhal case 2015
• Section 66B: Receiving stolen computer resource — up to 3 years
• Section 66C: Identity theft (using another's digital signature/password) — up to 3 years
• Section 66D: Cheating using computer — up to 3 years
• Section 66E: Privacy violation (publishing private images) — up to 3 years
• Section 66F: Cyber terrorism — up to life imprisonment
• Section 67: Publishing obscene material online — up to 5 years
• Section 69: Government power to intercept/decrypt electronic communications
• Section 72: Breach of confidentiality by intermediaries — up to 2 years

Intermediary Liability

Under Section 66A(2) (now Rules under IT Act), intermediaries (ISPs, social media platforms, app stores) enjoy safe harbour if they: act as passive conduit, don't initiate transmission, don't select recipients, and act expeditiously on takedown notices. The IT Rules 2021 (Intermediary Guidelines) now require: grievance redressal officers, monthly compliance reports for large platforms, and take-down within 24-36 hours.

Adjudication Under IT Act

Civil disputes for Section 43 claims (unauthorized access, damages) go to Adjudicating Officers (state IT secretaries) for claims up to Rs. 5 crore. Higher value claims go to civil courts.

Cyber Appellate Tribunal (CYTAT)

Appeals from Adjudicating Officers go to the Cyber Appellate Tribunal. Further appeal to High Court.