The Information Technology Act, 2000, is a landmark legislation that governs the digital space in India. It was enacted to manage the legal aspects of electronic data, online transactions, and cybercrimes. For any law student, understanding its core characteristics is essential to navigating the complexities of cyber law. This article provides a comprehensive overview of the salient features of the IT Act, 2000, breaking them down into simple, digestible points.
1. Legal Recognition for Digital Information (E-Governance)
One of the most crucial salient features of the IT Act, 2000 is that it grants legal sanctity to the digital world. It aims to make India a digital-first nation by validating electronic processes.
Validating Electronic Records and Contracts
The Act gives legal recognition to electronic records. Section 4 states that if any law requires information to be in writing, that requirement is met if the information is available in an electronic form for future reference. Furthermore, Section 10A explicitly validates contracts formed through electronic means, stating they cannot be deemed unenforceable just because an electronic form was used. This provision is the backbone of India’s e-commerce industry.
Authentication through Electronic Signatures
Moving away from traditional paper-and-ink signatures, the Act legitimizes electronic signatures. Section 5 provides that if any law requires a signature, an electronic signature affixed in the prescribed manner will satisfy that law. The Act details the legal framework for both Digital Signatures (Section 3) and the broader category of Electronic Signatures (Section 3A), providing a secure method for authenticating documents online.
2. Regulatory Framework for Digital Security
To build trust in the digital ecosystem, the Act establishes a robust regulatory mechanism. This ensures that the technologies used for authentication are secure and reliable.
The Role of Certifying Authorities (CAs)
The Act provides for the appointment of a Controller of Certifying Authorities (CCA). The CCA’s primary function is to license and regulate Certifying Authorities. These CAs are responsible for issuing Electronic Signature Certificates to subscribers. This hierarchical structure ensures that the entire process of issuing and verifying digital signatures is standardized and secure. (Chapter VI)
Duties of Subscribers
The Act also places certain responsibilities on the users of electronic signatures, known as subscribers. Chapter VIII outlines these duties. For instance, a subscriber must take reasonable care to protect their private key from being compromised (Section 42). This creates a system of shared responsibility for maintaining digital security.
3. Addressing Cyber Wrongs: Civil and Criminal Liability
A key feature of the Act is its comprehensive approach to punishing digital misconduct. It creates a clear distinction between civil wrongs (contraventions) and criminal offences.
Civil Contraventions under Section 43 & 43A
Chapter IX of the Act deals with penalties and adjudication. Section 43 lists several civil contraventions. These include accessing or downloading data without permission, introducing a virus, or damaging a computer system. A person committing such acts is liable to pay damages as compensation to the affected party.
Additionally, Section 43A holds corporations liable if they are negligent in implementing reasonable security practices to protect sensitive personal data.

Criminal Offences under Chapter XI
Chapter XI of the Act defines and prescribes punishments for various cybercrimes. Some of the major offences include:
- Section 65: Tampering with computer source documents.
- Section 66: Computer-related offences done dishonestly or fraudulently (hacking).
- Section 66C: Identity theft.
- Section 66D: Cheating by personation.
- Section 66E: Violation of privacy.
- Section 66F: Cyber terrorism.
- Section 67, 67A, 67B: Publishing or transmitting obscene or sexually explicit material.
4. Adjudication and Appellate Mechanism
The Act establishes a dedicated mechanism for resolving disputes and hearing appeals, ensuring speedy justice for cyber contraventions.
Power to Adjudicate (Section 46)
For the purpose of deciding on civil contraventions under the Act, the Central Government can appoint an Adjudicating Officer. This officer, not below the rank of a Director to the Government of India, has the power to hold an inquiry and impose penalties or award compensation up to โน5 crore.
The Appellate Tribunal
The Act provides for an appellate mechanism. Initially, it was the Cyber Appellate Tribunal (CAT). However, after the 2017 amendment, the Telecom Disputes Settlement and Appellate Tribunal (TDSAT) now serves as the Appellate Tribunal for the IT Act. Any person aggrieved by the order of the Controller or the Adjudicating Officer can appeal to the TDSAT (Section 57).
5. Unique Jurisdictional and Liability Features
The IT Act includes certain forward-looking provisions that are critical for governing the borderless nature of the internet. These are among the most important salient features of the IT Act, 2000.
Safe Harbour for Intermediaries (Section 79)
Section 79 is a cornerstone of internet law in India. It grants a “safe harbour” to intermediaries (like ISPs, social media platforms, etc.). This means an intermediary is not liable for any third-party data or communication hosted by them, provided they follow certain conditions. These conditions include not initiating or modifying the transmission and observing due diligence. However, this protection is lost if they conspire in the unlawful act or fail to remove unlawful content upon receiving actual knowledge.
Extra-Territorial Jurisdiction (Section 75)
The internet has no borders, and neither does the IT Act. As mentioned earlier, Section 75 gives the Act extra-territorial reach. It applies to any person of any nationality who commits an offence from outside India, as long as the computer or network involved is located within India.
Exam Point of View Notes ๐
- Foundation: The Act legalizes e-records (Sec 4), e-signatures (Sec 5), and e-contracts (Sec 10A).
- Regulatory Body: The Controller of Certifying Authorities (CCA) regulates the CAs who issue digital signatures.
- Two-Tier Justice System: The Act distinguishes between civil wrongs (Sec 43, 43A) decided by an Adjudicating Officer and criminal offences (Chapter XI) tried in courts.
- Intermediary Protection: Section 79 provides a conditional safe harbour for intermediaries, which is crucial for the functioning of the internet.
- Global Reach: Section 75 gives the Act extra-territorial jurisdiction, making it a powerful tool against international cybercrime.
- Note on New Laws: The Act mentions the Indian Penal Code (IPC) and Code of Criminal Procedure (CrPC). Remember their replacements: the Bharatiya Nyaya Sanhita (BNS) and Bharatiya Nagarik Suraksha Sanhita (BNSS). For example, Section 46(5) refers to sections 193 and 228 of the IPC , which correspond to sections 227 and 264 of the BNS, respectively.
Relevant Case Laws โ๏ธ
1. Trimex International FZE Ltd. Dubai v. Vedanta Aluminium Ltd., (2010) 3 SCC 1
- Facts: The parties negotiated and concluded a contract for the supply of goods entirely through email. A dispute arose, and one party argued that there was no valid, signed contract.
- Judgment: The Supreme Court held that a contract formed and concluded through email is valid and enforceable. This judgment strongly reinforces Section 10A and the legal recognition of electronic contracts, a key feature of the IT Act.
2. Google India Pvt Ltd v. Visaka Industries, (2020) 4 SCC 162
- Facts: Visaka Industries filed a defamation complaint against Google India for defamatory content posted against it on a blog hosted on Google’s platform. The question was whether Google India was liable as an intermediary.
- Judgment: The Supreme Court held that intermediaries are entitled to safe harbour protection under Section 79. It clarified that an intermediary’s role must be technical and passive. This case is a leading authority on the scope of intermediary liability in India.
3. Syed Asifuddin and Ors. v. The State of Andhra Pradesh & Anr., 2005 CriLJ 4314
- Facts: Officials of a telecom company were accused of altering the Electronic Serial Number (ESN) of mobile phones to program them for a rival network. This was alleged to be an offence under Section 65 of the IT Act.
- Judgment: The Andhra Pradesh High Court held that altering the ESN, which is a part of the computer source code of the handset, constitutes an offence under Section 65 (Tampering with computer source documents). This case provides a clear judicial interpretation of what constitutes a “computer source code.”
Conclusion
The salient features of the IT Act, 2000 make it a comprehensive and dynamic piece of legislation. From legitimizing digital transactions to creating a framework for punishing cybercrimes, the Act covers a vast spectrum of digital activities. Its provisions for intermediary liability and extra-territorial jurisdiction make it particularly relevant in today’s interconnected world. For students of law, a thorough understanding of these features is the key to mastering the domain of cyber jurisprudence.

