Chapter7:InformationTechnologyRegulatoryIssues

DigitalSignatureandElectronicSignature
re

ER
Section3:AuthenticationofElectronicRecords
Records

IY
K
Canbeverifiedbyaperson
Can

TI
ElectronicRecords areConvertedinto #function
MessageDigest#functionhavingcorresponding

publickey

R
MathematicalAlgorithm
Mathematical Algorithm

KA
ByattachingPrivateKey
Key

CA
Section3A:ElectronicSignature

by
Information
SCD/ linked only
linkedonlyto
A Signatory
ISC
CG May:
Authentication 1. Prescribe procedure for
Data ascertaining whether ES
ES
AL

alteration
alterationͲ detectable is of person purposed to
have affixed it through
FIN

the official gazette

2. CG can notify in OG to
add/omit any ES &
alterationͲ detectable procedure to affix it.
CA
 ER
Section4:LegalRecognitionofElectronicRecords(diagram)

IY
Printed/Typewrittenformrequired form
Giveninelectronicform Law
Lawisdeemedtobe

K
satisfied

R TI
KA
Section5:LegalRecognitionofElectronicSignature
Signature
AuthenticationrequiredbyAuthenticationdonebyaffixingDS
DS Reqmt.ofaffixingsignatureshallbe
Reqmt.

CA
deemedtohavebeensatisfied

by
Section6:UseofElectronicrecordsandElectronicSignaturesinGovernmentand
records and Electronic
itsAgencies A
ISC
in
may Prescribemanner/formatof
AppropriateGovnt.may Prescribe manner/format Electronicform
AL

1)Fillinganyform&otherdocuments
2)Grantofanylicense/permit
FIN

3)Receipts/PaymentsinGovernmentOffice
CA
Section6A:DeliveryofservicesbyServicesProvided
AppropriateGovernmentmay:
1) authorizeserviceproviderto 2)Mayauthorizeserviceproviderto charges
3)Shallspecifyscaleofservicecharges

ER
collect,retainandappropriate chargebyelectronicmeans
servicecharges

IY
Section7:RetentionofElectronicRecords

K
Documents, Deemedtobe subsequent
1)Informationshouldbeaccessible forsubsequentusers

TI
Records& retaininelectronic format or in a
2)Erecordshouldbeinoriginalformatorinaformatthataccuratelyrepresents
Information if theinformation

R
3) Details of D3 ORT (Date, Destination, Dispatch
Dispatch, Origin, Receipt, Time) of ER

KA
should be available.

CA
Section7A:AuditofDocuments,etc.maintainedinElectronicform
in Electronic

by
Section8:Publicationofrules,regulation,etc
regulation, etc inElectronicGazette
in Electronic
form
NotificationinOGinelectronicform A Valid
ISC

Section9:Section6,7and8nottoconferanypersontherighttoinsistthatdocumentshould
not to confer
form
beacceptedinelectronicform
AL
FIN
CA
Section10:PowertomakerulesbyCGinrespectofElectronicSignature
1.TypeofDS

ER
2.Manner&FormatofFixingDS
3.MannerofprocedureforidentifyingpersonforaffixingDS

IY
4.ControlProcesstoensureCIA

K
5.Anyothermatter

R TI
KA
Section10A:Validityofcontractsformedthroughelectronicmeans
means
Anycontractinelectronicformisenforceable

CA
Section14:SecureElectronicRecord

by
After securityprocedure appliedto El. Record
El.Record=SecureEl.record

Section15:AnESisdeemedtobesecuredESif:
secured ES if
A
ISC
control
1. SCD,atthetimeofaffixing,wasinexclusivecontrolofsignatory+
exclusive manner
2. SCDwasstored&affixedinanexclusivemannerasmaybeprescribed
AL
FIN

Section16:SecurityProceduresandPractices
Procedures and
empowered to provide
CGisempoweredtoprovideprescribedsecurityprocedure.
CA
 PenaltyandAdjudication
Adjudication

ER
{Mr.PAAdju’ssaddaystory}

IY
Accesses, downloads, computer
• Sec43– CompensationforDamage virus, disrupts, denies access,

K
tocomputer/computersystem {DAD} destroys-alters-deletes

TI
information in computer
{Mr.Blackcapaccessingcomputerstory} resource, diminishes value,

R
{SCAlD} Steals-conceals-alters-

KA
destroys computer source code

CA
given to body
• Sec43A– Compensationforfailuretoprotectdatagiventobodycorporate
{Mr PAAdju goestohiscompanyfordatarecovery}

by
• Sec44– Penaltyforfailureto{FuFiMa}
•
A
report) to Controller
Furnishinformation(returnorreport)toControllerorCertifyingAuthority– (Rs 1.5Lacs)
ISC
• within
Filereturn/Furnishinformationwithintimespecified(Rs 5,000/daytillfailurecontinues)
• accounts or records
Maintainbooksofaccountsorrecords(Rs 10,000/daytillfailurecontinues)
AL
FIN

Sec45Ͳ WhoevercontravenesanyrulesorregulationsmadeunderthisAct,forthecontraventionofwhich
contravenes any
nopenaltyhasbeenseparatelyprovided,shallbeliabletopayacompensationnotexceedingRs
separately 25,000to
thepersonaffectedbysuchcontravention.
by such
CA
 OFFENCES

ER
Sec Regarding Impr. Fine

IY
(inyrs) (inlacs)
65 TamperingwithComputerSourceDocuments 3 2L

K
TI
66 ComputerRelatedOffencesͲ Ifanyperson,dishonestly,orfraudulently,doesanyact
fraudulently, does 3 5L

R
referredtoinsection43

KA
66A Sendingoffensivemessages(GOMC)….{Arre I’mgoingtokillyou…} 3 Ͳ
Grossly offensive or
menacing character

CA
66B Dishonestly receivingstolencomputerorcommunicationdevice{Bittu’s
communication device mobile} 3 1L

by
66C Makeuseofelectronic signature,password,uniqueidentity{Chasebook profile 3 1L
access} A
66D Dawood sends
Cheatingbypersonation {fakeDawood sendsmessage} 3 1L
ISC
66E Captures, publishesortransmitsimageaffectingprivacyofaperson{Elevendirty 3 2L
pictures}
AL

66F Threatensunity,integrity orsovereigntyofIndia{Fawad,theterroristspeaking}

integrity or sovereignty Life Ͳ
FIN

67 Obscenematerial 3/5 5/10

CA

67A Sexuallyexplicitmaterial
explicit material 5/ 7 10/10

67B Sexuallyexplicitmaterialdepictingchildren 5/7 10/10

Sec Regarding Impr. Fine
(inyrs) (inlacs)
67C Preservation&RetentionofInformationby intermediariesshallbedoneasprescribedby
prescribed by 3 Fine

ER
CG.Anyintermediarywhointentionallyorknowinglycontravenestheprovisionsofsub
sub
section(1)shallbepunished.

IY
K
68 PoweroftheControllertogivedirections to CertifyingAuthorityoranemployee
employee Ͳ Any 2 1

TI
personwhointentionallyorknowinglyfailstocomply

R
69 decryption of
Powerstoissuedirections forinterceptionormonitoringordecryptionofanyinformation 7 Fine

KA
thenͲ
throughanycomputerresource.IfanypersoncontravenesthenͲ

69A Powertoissuedirectionsforblockingforpublicaccessofanyinformation throughany

of any information through 7 Fine

CA
computersource.IfanypersoncontravenesthenͲ
69B data or information
Powertoauthorize tomonitor&collecttrafficdataorinformationthroughanycomputer 3 Fine

by
contravenes then
resourceforCyberSecurity.IfanypersoncontravenesthenͲ
70 AppropriateGovt.maydeclare inOGthat that any
A computer
anycomputerresourcewhichdirectlyor 10 Fine
Information
indirectlyaffectsthefacilityofCriticalInformationInfrastructure,tobeaProtectedSystem.
ISC
attempts to
AnypersonwhosecuresaccessorattemptstosecureaccesstoaprotectedsystemͲ

70A NationalNodalAgencyͲ shallberesponsibleforallmeasuresincludingResearchand

be responsible Ͳ Ͳ
AL

protection
DevelopmentrelatingtoprotectionofCriticalInformationInfrastructure
FIN

70B IndianComputerEmergencyResponseTeamtoserveasnationalagencyforincident
Emergency 1 1
response.DG otherofficersshallbeappointed.Functionintheareaofcybersecurity.SP,
DG + other officers
CA

intermediaries, data centers,

intermediaries,datacenters,bodycorporateoranyotherpersonshouldprovide
informationtoICERT.Iftheyfailtodosopenaltywillbeapplicable.
ICERT.
Sec Regarding Impr. Fine
(inyrs) (inlacs)
71 Penaltyformisrepresentation orsuppressesanymaterialfactfrom,theControllerorthe
the 2 1

ER
CertifyingAuthorityforobtaininganylicenseorESC

IY
72 under the terms
Penaltyforbreachofconfidentialityandprivacy. Whileprovidingservicesundertheterms 2 1
containing personal
oflawfulcontract,thedefaulterhassecuredaccesstoanymaterialcontainingpersonal

K
informationaboutanotherperson,withtheintenttocauseorknowingthatheislikelyto
that he is likely

TI
cause,wrongfullossorwrongfulgain,discloses,withouttheconsentoftheperson
of the person
concerned,orinbreachofalawfulcontract

R
KA
72A PunishmentofDisclosureof Informationinbreachoflawfulcontract
contract 3 5
73 PenaltyforpublishingESCfalse incertainparticulars 2 1

CA
Forwrongfulloss/gain
ApersonhasECSwithKnowledgethatͲ
• CertifyingAuthorityhasnotissuedit

by
accepted it
• Subsidiarylistedincertificatehasnotacceptedit
• Certificatehasbeenrevoked/suspended
74
A
or otherwise
Whoeverknowinglycreates,publishesorotherwisemakesavailableanESCforany 2 1
ISC
fraudulentorunlawfulpurpose
75 contraventions
Acttoapply foroffencesorcontraventionscommittedoutsideIndia Ͳ Ͳ
AL

76 Confiscation ofAnycomputer,computersystem,floppies,compactdisks,tapedrivesor
computer, computer Ͳ Ͳ
anyotheraccessories
FIN

79 Liability of Intermediary
ExemptionfromLiabilityofIntermediaryincertaincases Ͳ Ͳ
shall be exempt
Anintermediaryshallbeexemptfromliabilityifhe– {O2} i.e.Onlyprovidesaccessand
Observesduediligence.Anintermediaryshouldnot–
diligence. {InSe2}Ͳ Initiatethetransaction,
CA

receiver of
Selectthereceiverofthetransmission,Select/modifyinformationcontainedin
transmission.