1

Information Technology Act, 2000 Notes

1) Define the terms computer, computer system, computer Software,
computer network, Internet.
1. Computer: A computer refers to an electronic device that is capable
of receiving, processing, and storing data. It performs various tasks
using instructions provided by computer software.
2. Computer System: A computer system is a combination of
hardware and software components that work together to perform
computing tasks. It includes the computer itself (hardware) along
with the operating system and other software programs (software).
3. Computer Software: Computer software, also known as just
“software,” refers to a collection of programs, data, and
instructions that enable a computer system to perform specific
tasks or functions. Software can be categorized into system
software (such as the operating system) or application software
(programs designed for specific purposes like word processing or
photo editing).
4. Computer Network: A computer network is a system that connects
two or more computing devices together to facilitate the exchange
of data and resources. It allows users to share information, files,
and hardware devices like printers or scanners. Networks can be
wired (using cables) or wireless (using technologies like Wi-Fi).
5. Internet: The Internet is a global network of interconnected
computer networks that spans the entire globe. It allows for the
exchange of information and resources among millions of
connected devices worldwide. It enables various online services,
such as email, web browsing, social media, video streaming, and
much more.
2) Discuss the history and growth of the information Technology law in
India with reference to the USA and the UK? Trace the nature, scope
and object of information Technology law AND historical analysis of
the Information Technology Law in India with reference to the
United Nation model law.
History and Growth:
The Information Technology Act, 2000 is an Act of the Indian Parliament
that was passed on 17 October 2000. It is the primary law in India
dealing with cybercrime and electronic commerce. The Act was enacted
to legally recognize e-commerce, amend acts like the Indian Penal Code,
1860, the Indian Evidence Act, 1872, give legal authority to electronic
filing, electronic records, and criminalize cyber offenses. The Act
regulates the activities of intermediaries by keeping a check on their
powers, defines various offenses related to data privacy of citizens, and
hence protects their data. It also regulates and protects the sensitive
data stored by social media and other electronic media. The Act provides
 2

recognition to books of accounts kept in electronic form regulated by the

Reserve Bank 1934. The Act was amended in 2008 and 2018 to meet the
needs of society.
The history of information technology law in India can be traced back to
the formulation and passing of the Information Technology Act of 2000.
This act served as the primary legislation to address legal aspects of
electronic transactions, cybersecurity, and cybercrimes in India. It aimed
to facilitate e-commerce, provide legal recognition for electronic records
and digital signatures, and establish mechanisms to enforce legal
measures against cyber offenses.
In comparison to the USA and the UK, India’s journey in formulating
information technology laws has been influenced by international
developments, but the specific historical analysis of its relationship with
these countries is not readily available. The Information Technology Act,
2000 is an outcome of the resolution dated 30th January 1997 of the
General Assembly of the United Nations, which adopted the Model Law
on Electronic Commerce. The Act was passed in 2000, making India the
12th country in the world to pass legislation for cyber crimes. The Act
was amended in 2008 and 2018 to meet the needs of society. The main
objectives of the Act were to legally recognize e-commerce, amend acts
like the Indian Penal Code, 1860, the Indian Evidence Act, 1872, give
legal authority to electronic filing, electronic records, and criminalize
cyber offenses. The Act regulates the activities of intermediaries by
keeping a check on their powers, defines various offenses related to data
privacy of citizens, and hence protects their data. It also regulates and
protects the sensitive data stored by social media and other electronic
media. The Act provides recognition to books of accounts kept in
electronic form regulated by the Reserve Bank 1934.
Nature, Scope, and Object:
Nature:
Legal Recognition: The Act provides legal recognition to electronic records
and digital signatures, enabling e-governance and e-commerce
Regulation of Intermediaries: It regulates the activities of intermediaries,
defines offenses related to data privacy, and protects sensitive data
stored by social media and electronic platforms
Extra-territorial Jurisdiction: The Act has extra-territorial jurisdiction,
allowing it to apply to offenses committed outside India in certain cases
Institutional and Legal Framework: It aims to establish the necessary
institutional and legal framework for protecting sensitive data and
promoting the growth of the IT sector
1. IT law primarily deals with legal issues and regulations related to the
use, access, storage, transmission, and protection of electronic
information and communication technologies.
 3

2. It addresses the legal aspects associated with computer systems,

networks, software, hardware, digital media, electronic transactions,
cybercrime, data privacy, cybersecurity, intellectual property, and more.
3. IT law is dynamic and constantly evolving to keep pace with
advancements in technology and emerging digital trends.
Scope:
1. IT law encompasses a wide range of legal issues and regulations
related to the use of information technology in various sectors, including
e-commerce, telecommunications, banking, healthcare, government,
education, and entertainment.
2. It covers aspects like data protection, cybersecurity, electronic
contracts, digital signatures, e-governance, intellectual property rights in
the digital realm, cybercrime investigation and prosecution, and
consumer protection in the digital space.
3. IT law’s scope extends to both national and international jurisdictions
due to the global nature of the internet and digital transactions.
Objectives:
1. The primary objective of IT law is to provide legal recognition and
establish a regulatory framework for electronic transactions,
communications, and business conducted through information and
communication technologies.
2. It aims to promote the growth and development of electronic commerce
by providing a secure legal environment for digital transactions.
3. IT law seeks to combat cybercrimes by defining offenses, specifying
penalties, and establishing mechanisms for investigation, prosecution,
and prevention of crimes in the digital sphere.
4. It focuses on protecting individuals’ rights to privacy and data
security, ensuring the confidentiality, integrity, and availability of
electronic information.
5. IT law also serves to address issues related to copyright, trademarks,
patents, and intellectual property rights in the digital age, balancing the
rights of creators while encouraging innovation and creativity.
The nature of information technology law in India is aimed at regulating
electronic transactions, protecting the security and integrity of electronic
records, preventing cybercrimes, and facilitating the growth of e-
commerce and e-governance initiatives. It encompasses provisions
related to data protection, privacy, offenses such as hacking, online
fraud, and the legal recognition of electronic contracts and signatures.
Historical Analysis with Reference to United Nations Model Law:
The Information Technology Act of 2000 in India took inspiration from
the United Nations Commission on International Trade Law (UNCITRAL)
Model Law on Electronic Commerce. The UNCITRAL Model Law provides
a framework for countries to develop their own legislation on electronic
commerce, including areas such as electronic contracts, digital
 4

signatures, and liability of service providers. India’s IT Act aligns with

several key principles of the UNCITRAL Model Law and adapts them to
suit the country’s specific legal requirements and technological
advancements.
The Information Technology Act, 2000 (ITA-2000) in India is based on the
Model Law on Electronic Commerce adopted by the United Nations
Commission on International Trade Law (UNCITRAL) in 1996. The Act
was a response to the increasing importance of information technology in
the global economy and the need for a legal framework to govern
electronic transactions and cybercrimes. Here’s a point-wise analysis of
the historical development of the ITA-2000 with reference to the
UNCITRAL Model Law:
UNCITRAL Model Law: The ITA-2000 is based on the Model Law on
Electronic Commerce adopted by UNCITRAL, which recommended that
all states give favorable consideration to the said Model Law while
revising or enacting new laws, to ensure uniformity in the laws of various
cyber-nations
Enactment: The Act was passed in 2000, making India the 12 th country
in the world to pass legislation for cybercrimes. It was a response to the
increasing use of information technology in various sectors and the need
to protect electronic transactions and data
Objectives and Scope: The Act aimed to legally recognize e-commerce,
amend existing acts, and provide legal authority to electronic filing,
records, and cyber offenses
It regulates the activities of intermediaries, defines offenses related to
data privacy, and protects sensitive data stored by social media and
electronic platforms
Amendments: The Act was amended in 2008 and 2018 to address the
evolving nature of technology and the emergence of new cyber offenses,
reflecting the dynamic nature of the IT landscape
Global Influence: The ITA-2000 is founded upon the 1996 United Nations
Model Law on Electronic Commerce (UNCITRAL Model), which the United
Nations General Assembly suggested through a resolution on January
30, 1997
The ITA-2000, influenced by the UNCITRAL Model Law, has played a
crucial role in providing a legal framework for e-commerce, data
protection, and governance of cyberspace in India. Its historical
development reflects the global recognition of the need for comprehensive
legislation to address the challenges and opportunities presented by the
rapid growth of information technology.
3) Explain the territoriality of law and territorial application Of law &
the issue of ‘jurisdiction’ for application Information technology Act
in India perspectives with Special reference to the IT Act 2000 in
India.
 5

Territoriality of law refers to the principle that laws are generally applied
within the boundaries of a specific territory or jurisdiction. The territorial
application of law means that the laws of a country are enforceable
within its own jurisdiction and may not have direct legal authority
outside its borders.
In the case of the Information Technology Act (IT Act) 2000 in India, the
territorial application is primarily focused on actions and offenses that
occur within India’s jurisdiction. The IT Act provides legal recognition
and penalties for cyber offenses committed within India, regardless of
whether the involved parties are located within or outside the country
.The Issue of jurisdiction becomes relevant when determining whether
the IT Act can be applied to a specific situation. Jurisdiction refers to the
authority of a court or legal system to hear and resolve a legal case. In
the context of the IT Act, jurisdiction becomes significant in determining
which court has the authority to hear cybercrime cases or enforce legal
provisions related to information technology.
According to the IT Act 2000, Indian courts have jurisdiction over
offenses committed within India or offenses committed outside India with
consequences within India. This means that if a cybercrime occurs
within India’s territory or its consequences affect individuals, businesses,
or resources in India, Indian courts can assert jurisdiction and apply the
provisions of the IT Act.
The concept of jurisdiction in the IT Act is crucial in addressing issues of
cybercrime, as the nature of technology allows offenses to be committed
across borders and involve multiple jurisdictions. The IT Act aims to
assert jurisdiction and provide legal measures to combat cyber offenses
that impact Indian interests and individuals.

4) Discuss the issue of cyber jurisdiction with reference to Relevant

cases and the information technology act 2000 in India.
1. Conflict between territoriality and borderless nature: One
significant issue in cyber jurisdiction is the conflict between
territoriality and the borderless nature of the internet. Cyberspace
expands beyond physical boundaries, making it difficult to
determine which jurisdiction has authority over a particular
cybercrime case.
2. Provisions under the IT Act: The IT Act in India provides provisions
related to cyber jurisdiction. Section 75 of the IT Act grants Indian
courts jurisdiction over cybercrimes committed outside India if the
consequences occur within the country. This provision allows
broader jurisdiction in certain cases with international or cross-
border implications.
3. Determining jurisdiction in cross-border cases: When dealing with
cross-border cybercrimes, determining jurisdiction becomes
 6

complex. Factors such as the location of the perpetrator, the

location of the victim, the location of the server hosting the
content, and the impact or consequences of the crime are
considered when determining which jurisdiction has authority.
4. Mutual Legal Assistance Treaties (MLATs): To deal with
international cybercrimes, countries may enter into Mutual Legal
Assistance Treaties to facilitate cooperation in the investigation
and prosecution of cybercrimes. Such treaties help in obtaining
necessary evidence or information from foreign jurisdictions for
cases involving cross-border cybercrimes.
5. Judicial interpretation and challenges: As the IT Act was enacted
in 2000, certain challenges arise concerning its interpretation in
the context of rapidly evolving technology. The application of cyber
jurisdiction relies on judicial interpretation and precedents set by
courts in handling specific cases.
6. Ambiguities and evolving legal framework: With the ever-evolving
nature of technology and the internet, there can be ambiguities
and challenges in applying traditional legal concepts to cyberspace.
This necessitates regular updates and adaptations to the legal
framework to address emerging issues effectively.
The Issue of cyber jurisdiction pertains to the challenge of determining
which country’s laws and courts have authority over cyber-related
offenses or disputes that involve parties located in different jurisdictions.
With the borderless nature of the internet, it becomes complex to
determine the appropriate jurisdiction for legal proceedings.
The Information Technology Act 2000 in India addresses the
jurisdictional aspect of cyber offenses to a certain extent. Section 75 of
the Act states that offenses committed outside the territorial jurisdiction
of India can still be prosecuted if the consequences occur within India.
This provision allows Indian courts to assert jurisdiction on cybercrimes
committed by individuals or entities located outside India if their actions
have an impact within the country.
However, the issue of cyber jurisdiction remains a challenge due to the
international nature of cybercrimes and the involvement of multiple
parties across different jurisdictions. It requires cooperation and
coordination between countries to effectively address cyber offenses.
One example of a cybercrime case in India where jurisdiction was a
challenge is the 2004 case of Satyam Computer Services. The company
was accused of committing a major financial fraud, and the jurisdictional
challenge arose due to the company’s operations being spread across
multiple countries. This made it difficult to determine which country had
the authority to prosecute the case. Ultimately, the case was tried in
India, but it highlighted the complexities of jurisdiction in cybercrimes
involving multinational corporations. Another example is the 2018
 7

WhatsApp data privacy case, where the jurisdictional challenge arose

due to the cross-border nature of the crime. The case involved allegations
of data privacy breaches affecting users in India. However, determining
the appropriate jurisdiction for prosecuting the case posed a significant
challenge due to the transnational nature of the crime and the lack of
specific laws governing data privacy at that time. The challenges in
determining jurisdiction in cybercrime cases in India are complex and
multifaceted. The lack of clear boundaries in cyberspace jurisdiction is a
primary challenge, as the internet’s borderless nature complicates
matters related to territorial jurisdiction. When a dispute takes place,
both the parties may belong to different parts of the world, creating a
situation where the jurisdiction lies where the cause of action arises.
Additionally, the criteria to determine jurisdiction are different in
different countries, leading to conflicting laws and making it difficult to
ascertain the jurisdiction in cybercrime cases, especially when the victim
and the accused are from different countries. The internet’s lack of
physical boundaries makes it difficult to determine which laws apply and
which jurisdiction has authority in cross-border cybercrimes, further
complicating the issue.
5) Critically examine the application of the IT act , 2000 in India with
special reference to jurisdiction in cybercrime.
1. Lack of explicit provisions on territorial jurisdiction: One of the
significant challenges within the IT Act, 2000, is the absence of
explicit provisions regarding territorial jurisdiction in cyberspace.
This creates ambiguity when determining which court has
authority over cybercrime cases with international or cross-border
implications.
2. Section 75 and its relevance: Section 75 of the IT Act, 2000 grants
Indian courts jurisdiction over cybercrimes committed outside
India if the consequences occur within the country. While this
provision allows for broader jurisdiction in certain cases, its
interpretation and practical application can be complex,
particularly in cases involving multiple jurisdictions.
3. Challenges in cross-border cooperation: Cybercrime often involves
perpetrators and victims in different countries. Effective
investigation and prosecution require international cooperation
and information-sharing. However, the application of jurisdiction
can be challenging due to differences in legal frameworks and the
reluctance of some countries to cooperate fully.
4. Complexity in determining jurisdiction: The borderless nature of
the internet complicates the determination of jurisdiction in
cybercrime cases. Cybercriminals can operate from anywhere in
the world, making it difficult to attribute the offense to a specific
 8

jurisdiction. This complexity hampers the effective prosecution of

cybercriminals.
5. Need for harmonization of international laws: The lack of
standardized international laws regarding cybercrime jurisdiction
further adds to the challenges. There is a need for greater
harmonization among countries to facilitate seamless collaboration
and ensure consistent application of jurisdiction in cybercrime
cases.
6. Evolving nature of technology: The IT Act, 2000 was enacted in
2000, and since then, technology has significantly evolved.
Emerging technologies, such as cryptocurrency, cloud computing,
and social media platforms, present new challenges in determining
jurisdiction and enforcing cybercrime laws.
6)What do you mean by Cyber Appellate Tribunal? Briefly Describe
its Procedure and powers? Discuss the power And function of
controller and information Appellate Tribunal in India?
The Cyber Appellate Tribunal (CAT) is a specialized adjudicatory body
established by the Central Government in India to handle cases related to
cyber law and information technology. It functions as an appellate
authority for appeals against orders passed by the Adjudicating Officers
under the Information Technology Act, 2000.
Procedure of the Cyber Appellate Tribunal:
1. Summoning and Examination: The CAT has the power to summon
and enforce the attendance of any person, examination of witnesses on
oath, and receive evidence from them.
2. Discovery and Production of Documents: It can require the discovery
and production of documents or any other electronic evidence relevant
to the case.
3. Hearing Appeals: The CAT hears and adjudicates appeals filed
against orders passed by Adjudicating Officers under the IT Act.
4. Appellate Jurisdiction: It has the authority to determine the validity
and legality of the orders passed by the Adjudicating Officers and has
the power to modify, quash, or uphold such orders.
The Controller of Certifying Authorities (CCA) and the Information
Technology Appellate Tribunal (ITAT) are also important bodies related to
cyber law and jurisdiction in India:
Powers and Functions of the Controller of Certifying Authorities (CCA):
1. Regulating Digital Signatures: The CCA has the power to regulate
and supervise the issuance and management of digital signatures in
India.
2. Granting Certificates: It grants licenses to Certifying Authorities
(CAs) and ensures compliance with the provisions of the IT Act
regarding digital signatures.
3. Suspension or Revocation: The CCA can suspend or revoke the
license of a Certifying Authority in case of non-compliance with
regulations or security concerns.
 9

Powers and Functions of the Information Technology Appellate Tribunal

(ITAT):
1. Appeals: The ITAT hears appeals against judgments, orders, or
decisions made by the Controller of Certifying Authorities, Adjudicating
Officers, or any other authority under the IT Act.
2. Adjudicatory Authority: It functions as the primary adjudicatory
authority for cases related to cyber law, including issues such as data
protection, security breaches, and cybercrimes.
3. Review and Revision: The ITAT has the power to review, revise, or
modify its own orders or decisions.
These bodies play important roles in upholding and enforcing cyber laws
in India while providing redressal mechanisms for grievances and disputes
in the digital domain.
Cyber Appellate Tribunal (CAT):
1. Establishment: The CAT is a specialized single-person judicial body
established under the Information Technology Act, 2000.
2. Appellate Authority: It serves as an appellate authority for appeals
against orders passed by Adjudicating Officers under the IT Act.
3. Presiding Officer: The CAT is headed by a Presiding Officer, who is
responsible for hearing and deciding the appeals.
4. Appeals Jurisdiction: The CAT has the power to hear appeals filed
against orders passed by Adjudicating Officers.
5. Summoning and Examination: The CAT can summon and enforce the
attendance of any person, examine them under oath, and receive evidence.
6. Discovery and Production of Documents: The CAT has the authority to
require the discovery and production of relevant documents or electronic
records.
7. Adjudication of Appeals: The CAT adjudicates appeals, determines the
validity of orders passed by Adjudicating Officers, and can modify, quash,
or uphold such orders.
Controller of Certifying Authorities (CCA):
1. Regulating Digital Signatures: The CCA regulates and supervises the
issuance and management of digital signatures in India.
2. Licensing Certifying Authorities: It grants licenses to Certifying
Authorities (CAs) and ensures compliance with the provisions of the IT Act
related to digital signatures.
3. Suspension or Revocation: The CCA has the power to suspend or revoke
the license of a Certifying Authority in cases of non-compliance or security
concerns.
Information Technology Appellate Tribunal (ITAT):
1. Appeals Jurisdiction: The ITAT hears appeals against judgments,
orders, or decisions made by the Controller of Certifying Authorities,
Adjudicating Officers, or any other authority under the IT Act.
2. Adjudicatory Authority: It functions as the primary adjudicatory
authority for cases related to cyber law, including issues like data
protection, security breaches, and cybercrimes.
3. Review and Revision: The ITAT has the power to review, revise, or modify
its own orders or decisions.
 10

These bodies, the CAT, CCA, and ITAT, play crucial roles in the Indian
legal framework to ensure effective implementation and enforcement of
cyber laws, provide appellate mechanisms, and regulate digital signatures
and cyber-related matters.
7)Examine the power and function of the controller for Prevention and
control of cybercrime and contravention.
1. Appointment: The Controller for Prevention and Control of Cybercrime and
Contravention is appointed under the provisions of the Information Technology
Act, 2000.
2. Regulation of Certifying Authorities: The controller has the responsibility of
regulating Certifying Authorities (CAs) and ensuring their compliance with the
provisions of the Act.
3. Investigative Authority: The controller, or any authorized officer, has the power
to investigate any contravention of the provisions, rules, or regulations under
the Act, relating to cybercrime and contravention.
4. Enforcement of Provisions: The controller is responsible for enforcing the
provisions of the Act and taking appropriate action against any entity found to
be in contravention of the cyber law.
5. Recognition of Foreign Certifying Authorities: The controller has the authority
to recognize foreign certifying authorities, establishing international cooperation
and recognition of digital signatures across borders.
6. Delegation of Powers: The controller has the power to delegate certain
functions and authorities to other officers or entities as deemed necessary.
7. Access to Information: The controller is granted access to relevant information
and records for the purpose of investigation and ensuring compliance with cyber
laws.
The role of the Controller for Prevention and Control of Cybercrime and
Contravention in India is defined in the Information Technology Act, 2000. The
Controller is empowered to supervise the activities of Certifying Authorities,
certify public keys of Certifying Authorities, lay down standards to be maintained
by Certifying Authorities, specify qualifications and experience for employees of
Certifying Authorities, specify conditions for conducting business by Certifying
Authorities, specify terms and manner for maintenance of accounts by Certifying
Authorities, and specify terms and conditions for appointment of auditors and
their remuneration. Additionally, the Controller has the power to make
regulations after consultation with the Cyber Regulations Advisory Committee
and with the previous approval of the Central Government. The Controller plays
a crucial role in ensuring the security and integrity of digital transactions and
electronic records by regulating the activities of Certifying Authorities and
establishing standards for their operations. This is essential for preventing and
controlling cybercrimes related to digital signatures, electronic records, and
other electronic transactions.
The specific powers of the Controller for Prevention and Control of Cybercrime
and Contravention in India include:
 11

Supervising the activities of Certifying Authorities.

Certifying public keys of Certifying Authorities.
Laying down standards to be maintained by Certifying Authorities.
Specifying qualifications and experience for employees of Certifying Authorities.
Specifying conditions for conducting business by Certifying Authorities.
Specifying terms and manner for maintenance of accounts by Certifying
Authorities.
Specifying terms and conditions for appointment of auditors and their
remuneration
These powers are aimed at regulating the activities of Certifying Authorities and
establishing standards for their operations, which are essential for ensuring the
security and integrity of digital transactions and electronic records.
8) What do you understand by Digital signature and Electronic signature?
Digital Signature:
1. Definition: A digital signature is a specific type of electronic signature that
provides enhanced security and verification.
2. Technical Implementation: Digital signatures use cryptographic technology to
ensure the authenticity and integrity of a document or message.
3. Identity Verification: Digital signatures offer stronger guarantees about the
identity of the signer by using encryption and certification methods.
4. Legal Validity: Digital signatures are often legally recognized as having a
higher level of trustworthiness and are often required for certain transactions or
contracts.
5. Tamper Detection: Digital signatures detect any alteration or tampering with
the signed document, rendering it invalid if changes are detected.
Electronic Signature:
1. Definition: An electronic signature refers to various methods used to sign or
confirm a document electronically.
2. Broad Range: Electronic signatures encompass a wide range of techniques,
including but not limited to digital signatures.
3. Simplicity and Convenience: Electronic signatures provide a convenient way
to sign documents by electronic means, eliminating the need for physical
signatures.
4. Legal Validity: Electronic signatures are generally legally recognized and
accepted for most business and personal transactions.
5. Different Implementation: Electronic signatures can be as simple as a scanned
image of a handwritten signature, a typed name, an agreement checkbox, or
other forms of electronic acceptance.
In summary, while electronic signatures are a general term covering various
methods of electronically signing documents, digital signatures are a specific
type of electronic signature that offers enhanced security, identity verification,
and tamper detection features.
A digital signature Is a secure way to sign electronic documents, messages, or
software, using a mathematical technique to validate their authenticity and
 12

integrity. It relies on public key infrastructure and cryptographic algorithms, and

is authenticated using a digital signature certificate. Digital signatures carry the
user’s information and come with encryption standards, making them less prone
to tampering and more secure
On the other hand, an electronic signature is a legally valid electronic
replacement of a handwritten signature. It can be a file, image, or symbol
attached to a document to give consent for a signature. Unlike a digital signature,
an electronic signature does not rely on cryptographic algorithms, and is
authenticated using a phone number, SMS, or other methods. Electronic
signatures do not come with encryption standards and are less secure and more
vulnerable to tampering compared to digital signatures
In summary, a digital signature is a more secure and tamper-evident form of
electronic signature, while an electronic signature is a more basic, legally valid
electronic replacement for a handwritten signature.
9) Discuss the procedure of digital signature and it’s Security system with
reference to Indian legal system?
1. Digital Signature Certificates (DSC):
- Digital Signature Certificate: The first step in the procedure is obtaining a
Digital Signature Certificate (DSC) from a Certifying Authority (CA) registered
under the IT Act.
- Identity Verification: The CA verifies the identity of the individual or
organization applying for the DSC by following the prescribed Know Your
Customer (KYC) procedures.
- Issuance of Certificate: Once the verification is completed, the CA issues the
DSC to the applicant, linking it to their unique identification details.
2. Digital Signatures:
- Signing Process: To sign a document digitally, the signer uses their DSC along
with specialized software or hardware devices to apply the digital signature to
the document.
- Encryption and Hashing: The digital signature is created using asymmetric
cryptographic techniques, which involves using a private key to sign the
document and a corresponding public key to verify the signature’s authenticity.
- Hash Function: The document is typically hashed using a secure hash function
to generate a unique digest, which is then encrypted with the signer’s private
key.
- Verification: The recipient of the digitally signed document can use the
corresponding public key to decrypt and verify the digital signature, ensuring
the integrity of the document and the authenticity of the signer.
3. Legal Recognition and Security:
- Legal Validity: The IT Act recognizes digital signatures as legally valid and
equivalent to handwritten signatures. Digital signatures are admissible in court
proceedings as evidence.
 13

- Security Standards: The IT Act and rules prescribe security standards and
requirements for digital signatures, including the use of encryption algorithms,
secure hash functions, and compliance with international standards.
- Certifying Authorities: The CAs in India are regulated by the Office of the
Controller of Certifying Authorities (CCA), which sets guidelines and standards
to ensure the security and reliability of digital signatures.
- Tamper Detection: Digital signatures provide tamper detection mechanisms,
ensuring that any unauthorized changes or modifications to the signed
document will render the signature invalid.
It's Important to note that specific procedures and security measures may vary
based on the type of digital signature, level of assurance, and the rules and
guidelines issued by the CCA.
Procedure of Digital Signature in the Indian Legal System:
1. Obtaining a Digital Signature Certificate (DSC):
- Identify a certified Certifying Authority (CA) recognized under the Information
Technology Act, 2000.
- Submit necessary identity and address proofs and follow the KYC procedures
as prescribed by the CA.
- Once verified, the CA issues a Digital Signature Certificate (DSC) with a unique
identification number and the corresponding public-private key pair.
2. Digital Signing Process:
- Use specialized software or hardware devices to sign the electronic document
with the DSC.
- The signing process involves encrypting the document hash with the signer’s
private key, generating a digital signature.
- The signature includes information such as the signer’s identity, the signing
time, and the public key for verification.
3. Verification of Digital Signature:
- The recipient of the signed document utilizes the corresponding public key of
the signer to decrypt and verify the digital signature.
- The verification process checks the integrity of the document and confirms the
authenticity of the signer.
Security System of Digital Signatures in the Indian Legal System:
1. Legal Recognition:
- Digital signatures are legally recognized in India under the Information
Technology Act, 2000.
- They hold the same legal validity as handwritten signatures, making them
admissible as evidence in courts.
2. Regulatory Authorities:
- The Office of the Controller of Certifying Authorities (CCA) in India acts as the
regulatory body overseeing the functioning of Certifying Authorities.
- CCA sets guidelines and standards for issuing, managing, and revoking Digital
Signature Certificates.
3. Encryption and Hashing:
 14

- Digital signatures in India employ asymmetric cryptographic techniques and

secure hash functions.
- Encrypted document hashes ensure the integrity and non-repudiation of the
signed electronic document.
4. Security Compliance:
- Certifying Authorities and their infrastructure must adhere to security
standards and practices as prescribed by the CCA.
- This ensures the reliability, confidentiality, and protection of the digital
signature ecosystem.
In India, the process of creating a digital signature involves obtaining a digital
signature certificate from a Certifying Authority (CA). The certificate is issued
after following a prescribed process, and it contains unique private and public
keys that are used for digital signing. The Certifying Authorities are authorized
to issue a certificate with a validity of 1 or 2 years, and individuals or
organizations can obtain a digital signature for personal or professional
purposes. The Information Technology Act, 2000 (IT Act) and the rules made
under this Act regulate electronic and certificate-based digital signatures in
India, providing them with the same legal status as handwritten signatures. The
Act distinguishes between electronic signatures and certificate-based digital
signatures, with both having the same status as handwritten signatures under
Indian law. The security of digital signatures is maintained through the use of
digital certificate-based digital IDs, along with personal PINs, to sign documents,
making them legally admissible in a court of law as provided under the provisions
of the IT Act, 2000. The validity period of a digital signature certificate (DSC) in
India typically ranges from 1 to 3 years. DSCs commonly used for individual tax
filing and basic agreements usually have a validity of 1 year, 2 years, or 3 years.
The Certifying Authorities (CAs) are authorized to issue a DSC with a validity of
1 or 2 years. It is important for the holder to be aware of the validity period of
the certificate to avoid any business loss. The DSC is a legally admissible digital
signature in a court of law, as provided under the provisions of the Information
Technology Act, 2000
10) Distinguish between Electronic signature and Digital Signature.
Validation: Electronic signatures are not typically validated by trusted
authorities, while digital signatures are validated by licensed certifying
authorities.
Security: Digital signatures provide a higher level of security compared to
electronic signatures, as they use advanced cryptographic techniques to secure
the signature.
Authentication: Digital signatures are authenticated using a digital signature
certificate, while electronic signatures are authenticated using methods such as
a phone number or SMS.
Legal Recognition: Digital signatures are legally recognized in many countries,
providing greater assurance and validity to signed documents, while electronic
 15

signatures are simply a legally valid electronic replacement of a handwritten

signature.
Encryption Standards: Digital signatures come with encryption standards,
making them less prone to tampering, while electronic signatures do not come
with encryption standards and are more vulnerable to tampering.
Electronic Signature:
1. Nature: An electronic signature refers to any electronic symbol, sound, or
process that is attached to or logically associated with a record, indicating
the signer's intent to sign or approve the document.
2. Legal Validity: Electronic signatures have legal recognition in many
jurisdictions, including India. They are considered valid and enforceable
in most cases, but the specific legal framework may vary across countries.
3. Authentication: Electronic signatures may or may not utilize encryption or
cryptographic techniques. They often rely on basic authentication
methods, such as a username or password, to verify the identity of the
signer.
4. Security: The level of security provided by electronic signatures can vary.
It depends on the underlying method or technology used to capture and
associate the signature with the document. However, they may be more
susceptible to forgery or tampering compared to digital signatures.
Digital Signature:
1. Nature: A digital signature is a specific type of electronic signature that
utilizes asymmetric cryptographic techniques to create a unique identifier
linked to the signer. It provides a higher level of security and integrity than
traditional electronic signatures.
2. Legal Validity: Digital signatures, in most jurisdictions, including India,
are considered legally binding and have the same legal status as
handwritten signatures. They are often subject to specific legislation, such
as the Information Technology Act, 2000, and associated regulations.
3. Authentication: Digital signatures employ public key infrastructure (PKI)
technology, where a signer possesses a pair of cryptographic keys, namely
a private key for signing and a corresponding public key for verification.
This ensures the authenticity and integrity of the signed document.
4. Security: Digital signatures offer a higher level of security compared to
electronic signatures. They use encryption and secure hash functions to
protect the integrity of the document and to detect any tampering
attempts. Digital signatures are generally more difficult to forge or
manipulate.
11) What is Electronic Record and E- Governance in India? Are they
recognized by Law?
Electronic Record:
1. Definition: An electronic record refers to any information that is generated,
sent, received, or stored in electronic form or any other form that can be
easily readable by a computer system.
 16

2. Legal Recognition: The Information Technology Act, 2000, provisions

specifically recognize electronic records under Section 4. It states that
electronic records shall be considered as evidence in legal proceedings,
given they fulfill certain conditions to ensure their integrity and
authenticity.
3. Admissibility as Evidence: Electronic records, such as emails, digital
documents, online transactions, etc., are admissible as evidence in a court
of law in India, provided they meet the requirements laid out in the Act.
E-Governance:
1. Definition: E-governance refers to the use of information and
communication technology (ICT) to enhance the efficiency, transparency,
accessibility, and accountability of governmental processes, enabling
effective service delivery to citizens.
2. Legal Recognition: E-governance initiatives in India are recognized and
regulated by various laws and acts. For example, the IT Act, 2000, provides
a legal framework for e-governance initiatives by enabling electronic
transactions, digital signatures, and the use of electronic records.
3. Government Initiatives: The Government of India has launched several e-
governance initiatives, such as Digital India, e-Government
Interoperability Framework, and various state-specific projects. These
initiatives aim to enhance citizen participation, deliver online services, and
improve government-to-government interactions.
4. Data Protection: To ensure data security and privacy within e-governance,
the IT Act, 2000, includes provisions for the protection and regulation of
data, including personal information, sensitive data, and obligations to
implement reasonable security practices.
Electronic records are recognized by law in India and are considered equivalent
to paper documents for various online transactions and government filings. The
legal framework governing electronic records in India is primarily derived from
two key acts: the Indian Evidence Act, 1872, and the Information Technology (IT)
Act, 2000. These acts provide the foundational legal basis for the admissibility,
authenticity, and evidentiary value of electronic records in India. Section 65B of
the Indian Evidence Act, 1872, deals with the admissibility of electronic evidence
and lays down the criteria for the admissibility of electronic records as evidence
in court. The admissibility of electronic records is subject to certain conditions,
including the requirement of a certificate attesting to its authenticity. Electronic
records are now considered to be the most important component of evidence in
every case, and Indian courts have clarified that the original electronic record
and the computer output can be submitted as evidence, subject to certain
conditions.
The limitations of electronic records as evidence in India include:
Veracity and Manipulation: India has yet to devise a mechanism for ensuring the
veracity of the contents of electronic records, which are open to manipulation by
 17

any party. Without safeguards, there is a risk of manipulation, potentially

leading to a travesty of justice.
Admissibility Requirements: The admissibility of electronic records is subject to
specific requirements, such as the need for a certificate attesting to the
authenticity of the electronic record under Section 65B of the Indian Evidence
Act. Failure to meet these requirements can impact the admissibility and
evidentiary value of the electronic record.
Lack of Modernization in Justice System: The Indian justice system is perceived
as decrepit and poorly funded, which can impact the understanding and
handling of electronic evidence by trial judges. The lack of modernization in the
judicial system poses challenges in ensuring the admissibility and proper
handling of electronic records as evidence.
12) What is the procedure for authentication of electronic Records?
1. Use of Asymmetric Cryptosystem: The authentication of electronic records
often involves the use of an asymmetric cryptography system. This system
utilizes a pair of cryptographic keys – a private key and a corresponding
public key.
2. Hash Function: A hash function is used during authentication to create a
unique digital representation of the electronic record. This representation
is commonly referred to as a hash or digital fingerprint.
3. Enveloping: The electronic record is enveloped with the sender’s private
key to ensure confidentiality and integrity of the record during its
transmission.
4. Digital Signature: The sender, also known as the subscriber, authenticates
the electronic record by affixing their digital signature to it. This process
involves using their private key to create a digital signature that can be
verified using their corresponding public key.
5. Verification: During the verification process, the receiver of the electronic
record uses the sender’s public key to validate the digital signature. This
ensures that the record has not been tampered with or altered during
transmission.
6. Authentication Check: The authenticating party checks the integrity and
authenticity of the electronic record by comparing the calculated hash
value of the received record with the original hash value created by the
sender. If the values match, it signifies that the record is authentic and
unaltered.
The process for giving a digital certificate with the signer’s identity information
involves the following steps:
Application: The applicant must apply for a digital signature certificate (DSC)
from a licensed Certifying Authority (CA) by filling out the necessary details and
submitting the required documents.
Verification of Identity: The CA verifies the identity of the applicant through
various methods, such as a remote video conversation, verification of the
person’s identity based on an issued document, or through the use of the
 18

person’s name, surname, email address, and phone number linked to the IP
address of the device used for the signature.
Issuance of Digital Certificate: Once the identity of the applicant is verified, the
CA issues a digital certificate containing the signer’s identity information and a
biometric signature like a fingerprint.
Validity Period: The Certifying Authorities are authorized to issue a certificate
with a validity of 1 or 2 years, and the holder must be well aware of the validity
of the certificate to avoid any business loss.
13) How are e-record and e-commerce used and applied by Government?
1. Online Government Services: Governments establish online platforms and
portals where citizens can access and interact with various government
services. These services can include applying for permits, licenses, and
certificates, filing taxes, renewing documents, and accessing public
records.
2. Electronic Filing and Documentation: Governments utilize electronic
record systems to store and manage official documents, such as financial
reports, contracts, land records, and administrative records. This
improves accessibility, reduces paperwork, and enables efficient record
keeping.
3. E-Government Procurement: Governments adopt e-commerce platforms
and electronic procurement systems to streamline the procurement
process. These platforms allow suppliers and contractors to submit bids,
track procurement opportunities, and facilitate secure and transparent
transactions.
4. Digitized Payment Systems: Governments incorporate e-commerce
solutions to facilitate online payment transactions for services, taxes,
fines, and fees. This enables citizens and businesses to make secure
payments electronically, reducing the need for physical transactions and
cash handling.
5. Digital ID and Authentication: Governments implement digital identity
solutions to improve authentication and security in online transactions.
This can include the use of eIDs, digital signatures, and secure login
mechanisms to ensure the integrity and authenticity of electronic records.
6. Data Analytics and Decision-Making: Governments utilize e-records and e
commerce data to analyze trends, monitor performance, and make data-
driven decisions. This helps in optimizing service delivery, identifying
areas for improvement, and enhancing policy planning.
How e-records and e-commerce are used and applied by governments:
1. Legal Framework: Governments enact laws and regulations such
as the Electronic Signatures in Global and National Commerce Act
(E-Sign Act) or the Uniform Electronic Transaction Act (UETA) to
validate and support the use of electronic records and
communications, enabling e-commerce transactions.
 19

2. Online Government Services: Governments establish online

platforms and portals that allow citizens to access government
services electronically. This includes services like applying for
permits, licenses, and certificates, filing taxes, and accessing
public records, which can be done using e-records and e-
commerce.
3. Electronic Documentation and Record-Keeping: Governments
adopt electronic record systems to store and manage official
documents, administrative records, financial reports, land records,
and more. This helps in efficient record-keeping, promotes
accessibility, and reduces the reliance on paper-based
documentation.
4. E-Government Procurement: Governments leverage e-commerce
platforms and electronic procurement systems to streamline the
procurement process. Suppliers and contractors can submit bids,
track opportunities, and engage in secure and transparent
transactions digitally.
5. Secure Online Payments: Governments implement e-commerce
solutions to enable secure online payment transactions for various
government services, taxes, fines, and fees. This allows citizens
and businesses to make payments electronically, reducing cash
handling and improving convenience.
7. Digital Identity and Authentication: Governments employ digital identity
solutions to enhance authentication and security in online transactions.
These solutions may include electronic IDs, digital signatures, and
secure login mechanisms to ensure the integrity and authenticity of e-
commerce transactions and e-records.
8. Data Analysis and Decision-Making: Governments leverage e-records and
e-commerce data for analysis, performance monitoring, and data-driven
decision-making. This helps optimize service delivery, identify areas for
improvement, and inform policy planning.
Usage and Application of E-Record and E-Commerce by the Government
E-Record:
Fundamental to E-Governance: Electronic records management (ERM) is
fundamental to good governance, business efficiency, and the
effectiveness of e-government in networking and digital
Legal Recognition: The use of electronic records is recognized and
promoted by the Information Technology Act, 2000, which includes
provisions for the use of electronic records and digital signatures in
government and its agencies
E-Commerce:
Government Transactions: E-commerce, including e-governance, involves
the buying and selling of goods and services, or the transmitting of funds
or data, over an electronic network. This is applicable to government
 20

transactions, such as the receipt or payment of money in a particular

manner, and the issue or grant of any license, permit, sanction, or
approval in a particular manner
B2A Services: Business-to-administration (B2A) services have grown
considerably in recent years as investments have been made in e-
government. This refers to transactions conducted online between
consumers and public administration or the government
Advantages: The benefits of e-commerce, including its availability,
accessibility, speed of access, selection of goods and services, and
international reach, are leveraged by the government to provide services
to citizens and businesses in a convenient, efficient, and transparent
manner
14. Examine prospects and problems of application of E-Governance
system in India with reference to Suitable. Examples and Legal
Provision.
Prospects:
1. Improved Service Delivery: E-Governance has the potential to
enhance service delivery by providing citizens with easy access to
government services and reducing bureaucratic bottlenecks. This
includes online applications for passports, driving licenses, and
other official documents. Example: The “Digital India” campaign
launched by the Government of India aims to provide various
online services to citizens, such as digital lockers, e-health records,
and online education platforms.
2. Enhanced Efficiency and Transparency: E-Governance can
streamline administrative processes, reduce corruption, and
increase accountability. It enables the digitization of records,
making them easily accessible to citizens and government officials.
Example: The implementation of the Goods and Services Tax (GST)
in India introduced a robust e-governance system, facilitating
simplified tax filing, reducing tax evasion, and promoting
transparency in financial transactions.
4. Citizen Empowerment: E-Governance promotes citizen participation by
providing platforms for feedback, grievance redressal, and public
consultations. It allows citizens to actively engage with the government
and voice their concerns. Example: The MyGov platform in India
encourages citizen participation by allowing them to contribute ideas,
suggestions, and feedback on various government initiatives and policies.
5. Challenges:
1. Digital Divide: A significant challenge in implementing e-
governance in India is the digital divide. The accessibility and
affordability of internet connectivity and digital devices vary across
different regions, hindering the inclusivity of e-governance
initiatives.
 21

2. Infrastructure and Connectivity: Lack of robust internet

infrastructure and reliable connectivity in remote areas pose
challenges in ensuring seamless access to e-governance services,
particularly for marginalized communities.
3. Cybersecurity and Data Privacy: E-Governance systems need to
address concerns related to cybersecurity and data privacy to
protect citizen information and ensure trust in online transactions.
Stringent laws and policies regarding data protection are crucial
for successful e-governance implementation.
Legal Provisions:
To facilitate e-governance in India, several legal provisions have been
established, including:
- The Information Technology Act, 2000: Provides a legal framework for
electronic communications, digital signatures, and authentication,
enhancing the legal validity of e-governance transactions.
- The Right to Information (RTI) Act, 2005: Enables citizens to access
government information digitally, ensuring transparency and
accountability in governance.
- The Aadhaar (Targeted Delivery of Financial and Other Subsidies,
Benefits, and Services) Act, 2016: Facilitates the unique identification of
citizens through Aadhaar cards, enabling smooth access to government
services.
Problems:
There are limits to e-governance related to people’s technological assets,
preferences, and the wide range of problems people bring Issues like
corruption and lack of infrastructure are hampering India’s growth. E-
governance is hardly of any use in matters related to health, education,
and agriculture, which need to be addressed primarily through other
means
There is an urgent need to have a comprehensive plan against security
threats and cyber crimes. Legal implications include freedom of
information and privacy concerns
Financial considerations, such as the cost of implementation and effect
on existing budgets, can be a challenge
Legal provisions:
The Right to Information Act, 2005, provides citizens with the right to
access information held by public authorities. The Information
Technology Act, 2000, provides a legal framework for e-governance and
electronic transactions. The National e-Governance Plan (NeGP) was
launched in 2006 to provide a framework for the delivery of e-governance
services.
E-governance has the potential to make the Indian government more
effective, transparent, and accountable. It can improve internal
efficiency, the delivery of public services, and processes of democratic
 22

governance. E-governance can support good governance, which is

imperative for developing countries to be progressive. It can improve the
accessibility and quality of public services, especially for citizens in rural
areas. E-governance can provide quick and timely services to
stakeholders, reduce bureaucracy, minimize hierarchy of authority for
availing any government services, and automate administrative
processes. It can enhance communication and coordination between
government organizations, reduce paperwork, and reduce the cost and
time of services. E-governance can also increase India’s overall
competitiveness internationally. However, there are several challenges
that need to be addressed for successful implementation, such as
people’s technological assets, preferences, and the wide range of
problems people bring, corruption, lack of infrastructure, security
threats, cyber crimes, legal implications, and financial considerations.