The digital revolution has transformed our world. Consequently, it created new avenues for crime. The Information Technology Act, 2000 (IT Act) is India’s primary legislation dealing with cybercrime and e-commerce. It provides a legal framework for electronic transactions and aims to create a secure digital environment. For law students, understanding the core aspects of this Act is crucial. This article breaks down the object, application, and relevant definitions of the IT Act, 2000 in simple, student-friendly language.
The Primary Object of the Information Technology Act, 2000
Every law has a purpose. The IT Act, 2000, was enacted to address specific goals in the growing digital landscape. Its preamble clearly outlines its primary objectives.
Facilitating E-Commerce and E-Governance
The main goal of the Act is to provide legal recognition for electronic transactions. Before this Act, most legal requirements presumed paper-based documents and handwritten signatures. The IT Act changed this by validating electronic records and digital signatures. This move was essential to promote “electronic commerce” and facilitate the electronic filing of documents with government agencies, paving the way for e-governance.
Adopting the UNCITRAL Model Law
India’s IT Act is based on the Model Law on Electronic Commerce. The United Nations Commission on International Trade Law (UNCITRAL) adopted this Model Law in 1996. The UN General Assembly recommended that all states consider this model when creating their laws. This was to ensure uniformity in laws related to e-commerce globally. Therefore, the IT Act aligns India’s digital laws with international standards, promoting foreign trade and investment.
Scope and Application of the IT Act, 2000
Understanding where and to whom the law applies is fundamental. Section 1 of the IT Act details its jurisdiction and scope, clarifying the object, application, and definitions of the IT Act, 2000.
Territorial and Extra-Territorial Jurisdiction
Extent Within India
The Act extends to the whole of India. It applies uniformly across all states and union territories, ensuring a consistent legal framework for cyber activities nationwide.
Application Beyond India’s Borders (Section 75)
Interestingly, the Act has extra-territorial jurisdiction. It applies to any offence or contravention committed outside India by any person, irrespective of their nationality. The only condition is that the act must involve a computer, computer system, or computer network located in India. For example, if a hacker in another country attacks a computer network in India, they can be prosecuted under the IT Act, 2000.
Documents Excluded from the Act’s Ambit (The First Schedule)
The IT Act does not apply to all documents and transactions. Section 1(4) specifies certain exceptions, which are listed in the First Schedule. These include:
- A negotiable instrument (like a promissory note or bill of exchange), other than a cheque.
- A power of attorney.
- A trust.
- A will or any other testamentary disposition.
- Any contract for the sale or conveyance of immovable property.
The Central Government can amend this list by notifying changes.
Key Definitions Under the IT Act, 2000: A Digital Glossary
Section 2 of the Act provides definitions for various technical terms. These definitions are the building blocks for understanding the law’s provisions. Let’s explore the most important ones.

Core Technological Concepts
- Computer: It is not just a desktop or laptop. The Act defines it as any electronic, magnetic, optical, or other high-speed data processing device. It includes all input, output, processing, and storage facilities connected to it.
- Computer System: This refers to a device or a collection of devices, including input and output support devices, that perform various functions like logic, data storage, and communication control.
- Computer Network: This means the interconnection of one or more computers or communication devices through various media like satellite, wire, or wireless technology.
- Computer Resource: This is a broad term that includes a computer, computer system, computer network, data, computer database, or software.
Information and Data
- Data: It means a representation of information, knowledge, or facts prepared in a formalised manner. It can be in any form, including computer printouts or storage media.
- Electronic Record: This is data, a record, or data generated, image or sound stored, received, or sent in an electronic form. Examples include emails, Word documents, and digital photographs.
- Information: This is an inclusive term covering data, messages, text, images, sound, software, and databases.
Key Actors and Roles
- Intermediary: An intermediary, regarding any electronic record, is any person who receives, stores, or transmits that record on behalf of another person. This includes telecom service providers, internet service providers (ISPs), search engines, online marketplaces, and cyber cafes.
- Originator: An originator is a person who sends, generates, stores, or transmits an electronic message. This does not include an intermediary.
- Addressee: This is the person who is intended by the originator to receive the electronic record.
Security and Authentication
- Digital Signature: It is a specific type of electronic signature used to authenticate an electronic record. It uses an asymmetric crypto system and a hash function for security.
- Electronic Signature: This is a broader term that includes a digital signature. It refers to any electronic authentication of a record by a subscriber using techniques specified in the Second Schedule.
- Cyber Security: It means protecting information, equipment, devices, and computer resources from unauthorised access, use, disclosure, disruption, or destruction.
Exam Point of View Notes ๐
- Object: The primary goal is to legalise e-commerce and e-governance by recognizing electronic records and signatures.
- Basis: The Act is based on the UNCITRAL Model Law on Electronic Commerce, 1996.
- Application: It applies to the whole of India and has extra-territorial jurisdiction (Section 75).
- Exceptions: The Act does not apply to documents like wills, trusts, PoA, and contracts for the sale of immovable property (First Schedule).
- Key Definitions: Be thorough with the definitions in Section 2, especially ‘computer’, ‘computer system’, ‘intermediary’, ‘electronic record’, and ‘cyber security’. Understanding these is crucial for interpreting the penalty and offence sections.
- Note on New Laws: When the IT Act refers to the Indian Penal Code (IPC) or the Code of Criminal Procedure (CrPC), remember to mention their new counterparts, the Bharatiya Nyaya Sanhita (BNS) and the Bharatiya Nagarik Suraksha Sanhita (BNSS), respectively.
Relevant Case Laws โ๏ธ
1. Shreya Singhal v. Union of India, AIR 2015 SC 1523
- Facts: A Public Interest Litigation (PIL) was filed challenging the constitutional validity of Section 66A of the IT Act, which penalised sending “offensive” messages through communication services.
- Judgment: The Supreme Court struck down Section 66A in its entirety, calling it vague and a violation of the freedom of speech and expression. This case is a landmark in interpreting the IT Act’s provisions in light of fundamental rights.
2. Avnish Bajaj v. State (NCT of Delhi), (2005) 3 CompLJ 364 Del
- Facts: An obscene MMS clip was listed for sale on an auction site, baazee.com (now eBay India). The CEO, Avnish Bajaj, was arrested. The case revolved around whether the CEO, as an intermediary, was liable for the third-party content.
- Judgment: The court ruled that an intermediary would be liable if they had actual knowledge of the unlawful content and failed to remove it. This case was pivotal in shaping the understanding of intermediary liability under Section 79, long before the 2008 amendments.
3. State of Tamil Nadu v. Suhas Katti
- Facts: This was one of the first cases where a conviction was secured under the IT Act, 2000. The accused was charged with posting obscene and defamatory messages about a woman on a Yahoo message group. He also forwarded her personal details, causing her harassment.
- Judgment: The court found the accused guilty of offences under Section 67 of the IT Act, 2000, and sections of the IPC. The conviction was swift, demonstrating the Act’s applicability in cases of online harassment and obscenity. It established a precedent for the prosecution of cybercrimes in India.
Conclusion
The Information Technology Act, 2000, is the cornerstone of India’s cyber law. Its objectives are to foster a secure and reliable digital environment for commerce and governance. A clear grasp of its object, application, and the definitions of its key terms is the first and most crucial step for any law student venturing into the domain of cyber law. These foundational concepts are essential for correctly interpreting the substantive provisions concerning offences, penalties, and intermediary liability.

