for affixing such signature from the second schedule: provided that no electronic signature or authentication technique shall be specified in the second schedule unless such signature or technique is reliable (5) every notification'issued undér sub-section (4) 'shall be taid before each c  house of parliament" -; : pa i a vt 7 after section 6 of the principal act, the following section shal! be inserted, namely:— insertion of new section 6a 6a (1) the appropriate government may, for the purposes of this chapter and delivery of services by service provider for efficient delivery of services to the public through electronic means authorise, by order, any service provider to set up, maintain and upgrade the computerised facilities and perform such other services as it may specify, by notification in the official gazette, explanation—for the purposes of this section, service provider so authorised includes any individual, private agency, private company, partnership firm, sole proprietor firm or any such other body or agency which has been granted permission ($7 by the appropriate government to offer services through electronic means in accordance with the policy governing such service sector (2) the appropriate government may also authorise any service provider authorised under sub-section (/) to collect, retain and appropriate such service charges, ac as may be prescribed by the appropriate government for the purpose of providing such services, from the person availing such service (3) subject to the provisions of sub-section (2), the appropriate government may authorise the service providers to collect, retain and appropriate service charges ~ under this section notwithstanding the fact that there is no express provision under the act, nule, regulation or notification under which the service is provided to collect, ax" retain and appropriate e-service charges by the service providers (4) the appropriate government shall, by notification in the official gazette, specify the scale of service charges which may be charged and collected by the service providers under this section: provided that the appropriate government may specify different scale of service 3e charges for different types of services' 8 after section 10 of the principal act, the following section shall be inserted, namely:— insertion of new section 10a "{0a where in a contract formation, the communication of proposals, the acceptance of proposals, the revocation of proposals and acceptances, as the case may be, are expressed in electronic form or by means of an electronic record, such 3s" contract shall not be deemed to be unenforceable solely on the ground that such electronic form or means was used for that purpose" validity of contracts formed through electronic means amendment of section 12 9 in section 12 of the principal act, in sub-section (/), for the words "agreed with the addressee", the word "stipulated" shall be substituted he substitution of new sections 10 for sections 15 and 16 of the principal act, the following sections shal! be substituted, namely:— for sections 15 and 16 15, an electronic signature shall be deemed to be a secure electronic signature if secure electronic signature "s(i the signature creation data, at the time of affixing signature, was under the exclusive control of signatory and no other person; and (ii the signature creation data was stored and affixed in such exclusive manner as may be prescribed : explanation —in case of digital signature, the "signature creation data" means the private key of the subscriber 16 the central government may, for the purposes of sections 14 and 15, prescribe the security procedures and practices: security procedures and practices provided that in prescribing such security procedures and practices, the central > government shall have regard to the commercial circumstances, nature of transactions and such other related factors as it may consider appropriate' 11 section 20 of the principal act shall be omitted omission of section 20 12 in section 29 of the principal act, in sub-section (/), for the words "any amendment of section 29 [© contravention of the provisions of this act, rules or regulations made thereunder", the words "any contravention of the provisions of this chapter" shall be substituted 13 in section 30 of the principal act, amendment of section 30 (/) in clause (c), after the word "assured", the word "and" shall be omitted; (id after clause (c), the following clauses shall be inserted, namely:— 1s "(ca) be the repository of all electronic signature certificates issued under this act; (cb) publish information regarding its practices, electronic signature certificates and current status of such certificates; and" amendment of section 34 14, in section 34 of the principal act, in sub-section (/), in clause (a), the words "which q° contains the public key corresponding to the private key used by that certifying authority to digitally sign another digital signature certificate" shall be omitted 15 in section 35 of the principal act, in sub-section (4), - amendment of section 35 (a) the first proviso shall be omitted; (2) in the second proviso, for the words "provided further", the word "provided" q5° shall be substituted 16 in section 36 of the principal act, after clause (c), the following clauses shall be amendment of section 36 inserted, namely:— "(ca) the subscriber holds a private key which is capable of creating a digital signature; eo (cb) the public key to be listed in the certificate can be used to verify a digital signature affixed by the private key held by the subscriber;" 17 after section 40 of the principal act, the following section shall be inserted, namely:— | insertion    | of      ||--------------|---------|| new          | section || 40a         |         |"40a in respect of electronic signature certificate the subscriber shall perform as such duties as may be prescribed" | duties       | of    ||--------------|-------|| subscriber   | of    || electronic   |       || signature    |       || certificate |       |18 in chapter ix of the principal act, in the heading, for the words "penalties and adjudication ", the words "penalties, compensation and adjudication" shall be substituted | amendment    | of    ||--------------|-------|| heading      | of    || chapter      | ix,   |19 in section 43 of the principal act,— amendment of section 43,(a) in the margina! heading, for the word "penalty", the word "compensation" uo shall be substituted; () after clause (a), the following clause shall be inserted, namely:— "() destroys, deletes or alters any information residing in a computer resource or diminishes its value or utility or affects it injuriously by any means," 20 after section 43 of the principal act, the following section shall be inserted, namely:—  insertion of hew section 43a, '43 where a body corpofate, possessing, dealing or handling any sensitive compensation » personal data or information ina computer resource which it owns, controls or operates, for failure to protect dats sis negligent in implementing and maintaining reasonable security practices and procedures and thereby causes wrongful loss or wrongful gain to any person, such body corporate shall be liable to pay damages by way of compensation, not exceeding five crore rupees, to the person so affected explanation—for the purposes of this section, - te () "body corporate" means any company and includes a firm, sole proprietorship or other association of individuals engaged in commercial or professional activities; 1° (ii) "reasonable security practices and procedures" means security practices and procedures designed to protect such information from unauthorised access, damage, use, modification, disclosure or impairment, as may be specified ae in an agreement between the parties or as may be specified in any law for the time being in force and in the absence of such agreément or any law, such reasonable security practices and procedures, as may be prescribed by the central government in consultation with such professional bodies or associations as it may deem fit;   (di) "sensitive persona! data or information" means such personal information as may be prescribed by the central government in consultation with such professional bodies or associations as it may deem fit' 21 in section 46 of the principal act, in sub-section (j), for the words "direction ot amendment of section 46, order made thereunder", the words "direction or order made thereunder which renders him 247 liable to pay penalty or compensation," shal] be substituted 22 in chapter x of the principal act, in the heading, the word "reaularions" shail be omitted 23 in section 48 of the principal act, in sub-section (/), the word "regulations" 3e | amendment    | of    ||--------------|-------|| heading      | of    || chapter      | x    || amendment    | of    || section      | 48   |shall be omitted 24, for sections 49 to 52 of the principal act, the following sections shall be substitution of new sections substituted, namely:— for sections 49 to 52, "49 (1) the cyber appellate tribunal shal consist of a chairperson and such number of other members, as the central government may, by notification in the 23 official gazette, appoint composition of cyber appellate tribunal, {2) the selection of chairperson and members of the cyber appeitate tribunal shall be made by the central government in consultation with the chief justice of india (3) subject to the provisions of this act— 40 (a) the jurisdiction, powers and authority of the cyber appellate tribunal may be exercised by the benches thereof; (b) a bench may be constituted by the chairperson of the cyber appellate tribunal with one or two members of such tribunal as the chairperson may deem fit: ; provided that every bench shall be presided over by the chairperson or we the judicial member appointed under sub-section (3) of section 50; (c) the benches of the cyber appellate tribunal shali sit at new dethi and at such other places as the central government may, in consultation with the chairperson of the cyber appellate tribunal, by notification in the official gazette, specify; _ (@) the central government shall,-by notification in the official gazette, specify the arcas in relation to which each bench of the cyber appellate tribunal _ may exercise its jurisdiction 9 -,  ~: a 7 (4) notwithstanding anything cotitained in sub-section (3), the chairperson of the cyber appellate tribunal may transfer a member of such tribunal from one bench to another bench (5) if at any stage of the hearing of any case or matter it appears to the chairperson or a member of the cyber appeliate tribunal that the case or matter is of such a nature that it ought to be heard bya bench consisting of more members, the case or matter may be transferred by the chairperson to such bench as the chairperson may deem fit qualifications 50 (7) a person shall not be qualified for appointment as a chairperson of the cyber appellate tribunal unless he is, or has been, or is qualified to be, a fudge of a high court ss (2) the members of the cyber appellate tribunal, except the judicial member to for appointment as chairperson and members of cyber appeliate tribunal, be appointed under sub-section (3), shall be appointed by the central government from amongst persons, having special knowledge of, and professional experience in, information technology, telecommunication, industry, management or consumer affairs: qo provided that a person shall not be appointed as a member, untess he is, or has been, in the service of the central government or a state government, and has held the post of additional secretary to the government of india or any equivalent post in the central government or state government for a period of not less than two years or joint secretary to the government of india or any equivalent post in the central government or state government for a period of not less than seven years as (3) the judicial members of the cyber appellate tribunal shall be appointed by the central government from amongst persons who is or has been a member of the indian legal service and has held the post of additional secretary for a period of not less than one year or grade i post of that service for a period of not less than five years 51 (/) the chairperson or member of the cyber appellate tribunal shall hold office for a term of five years from the date on which he enters upon his office or until he attains the age of sixty-five years, whichever is earlier term of office, conditions of service, etc, of chairperson and members 37 (2) before appointing any person as the chairperson or member of the cyber appellate tribunal, the central government shall satisfy itself that the person does not have any such financial or other interest as is likely to affect prejudicially his functions as such chairperson or member, (3) an officer of the central government or state government on his selection as the chairperson or member of the cyber appellate tribunal, as the case may be, shall have to retire from service before joining as such chairperson or member luo 52 the salary and allowances payable to, and the other terms and conditions of service including pension, gratuity and other retirement benefits of, the chairperson or'a member of the cyber appellate tribunal shall be such as may be prescribed salary, allowances and other terms and conditions of service of chairperson and members powers of superintendence, direction, etc\e $2a, the chairperson of the cyber appellate tribunal shall have powers of general superintendence and directions in the conduct of the affairs of that tribunal and he shail, in addition to presiding over the meetings of the tribunal, exercise and discharge such powers and functions of the tribunal as may be prescribed distribution 52b where benches are constituted, the chairperson of the cyber appellate tribunal may, by order, distribute the business of that tribunal amongst the benches and also the matters to be-deait with by each bench of business among benches | power       | of       ||-------------|----------|| chairperson |          || to          | transfer || cases      |          |52c on the application of any of the parties and after notice to the parties, and after hearing such of them as he may deem proper to be heard, or sua motu without $~ such notice, the chairperson of the cyber appellate tribunal may transfer any case pending before one bench, for disposal to any other bench decision by majority 52d if the members of a bench consisting of two members differ in opinion on any point, they shall state the point or points on which they differ, and make a reference to the chairperson of the cyber appellate tribunal who shall hear the point or points 10 himself and such point or points shall be decided according to the opinion of the majority of the members who have heard the case, including those who first heard it" amendment of section 53 25, in section 53 of the principal act, for the words "presiding officer", the words "chairperson or member, as the case may be," shall be substituted amendment of section 54 26 in section 54 of the principal act, for the words "presiding officer" wherever they ts occur, the words "chairperson or the member" shall be substituted amendment of section 55 27, in section 55 of the principal act, for the words "presiding officer", the words "chairperson or the member" shail be substituted 28 in section 56 of the principal act, for the words "presiding officer', the word amendment of section 56 "chairperson" shall be substituted do 29 in section 61 of the principal act, the following proviso shall be inserted at the end, amendment of section 61 cnamely:— a7 "provided that the court may exercise jurisdiction in cases where the claim for injury or damage suffered by any person exceeds the maximum amount which can be awarded under this chapter" 30 in section 64 of the principal act,— amendment of section 64 (i) for the words "penalty imposed", the words "penalty imposed or compensation awarded" shall be substituted; (ii) in the marginal heading, for the word "penalty", the words "penalty or compensation" shall be substituted be 31 for sections 66 and 67 of the principal act, the following sections shall be substitution of new sections substituted, namely:— for sections 66 and 67 '66 ifany person, dishonestly or fraudulently, does any act referred to in section 43, he shall be punishable with imprisonment for a term which may extend to two years _ computer related offences or with fine which may extend to five lakh rupees or with both 3> explanation —for the purposes of this section, - (a) the word "'dishonestly" shall have the meaning assigned to it in section 24 of the indian penal code; 45 of 1860 ; (5) the word "fraudulently" shall have the meaning assigned to it in section 25 of the indian penal code tye 45 of 1860 punishment 66a any person who sends, by means of a computer resource or a communication device,— ; (a) any content that is grossly offensive or has menacing character; or (4) any content which he knows to be false, but for the purpose of causing annoyance, inconvenience, danger, obstruction, insult, injury, criminal 4 - for sending offensive messages through communication service, etc intimidation, enmity, hatred or il will, persistently makes use of such computer resource of a communication device, shail be punishable with imprisonment for a term which may extend to two years and with fine explanation —for the purposes of this section, the term "communication device" means cell phones, persona) digital assistance (pda) or combination of both or any other device used to communicate, send or transmit any text, vidéo, audio or image 67 whoever publishes or transmits or causes to be published or transmitted in the electronic form, any material which is lascivious or appeals to the prurient interest or if its effect is such as to tend to deprave and corrupt persons who are likely, having - regard to all relevant circumstances, to read, see or hear the matter contained or embodied punishment for publishing or transmitting obscene 'material in 'electronic form in it, shall be punished on first conviction with imprisonment of either description for \o a term which may extend to two years and with fine which may extend to five lakh - rupees and in the event of second or subsequent conviction with imprisonment of either description for a term which may extend to five years and also with fine which may extend to ten lakh rupees punishment 67a whoever publishes or transmits or causes to be published or transmitted for publishing in the electronic form any material which contains sexually explicit act or conduct shall be punished on first conviction with imprisonment of either description for a term which may extend to five years and with fine which may extend to ten lakh rupees and in the event of second or subsequent conviction with imprisonment of or transmitting of material containing sexually explicit act, qe either description for a term which may extend to seven years and also with fine which may extend to ten lakh rupees ete, in electronic form exception—this section and section 67 does not extend to any book, pamphlet, paper, writing, drawing, painting, representation or figure in electronic form— a7 (i) the publication of which is proved to be justified as being for the public good on the ground that such book, pamphlet, paper, writing, drawing, painting, representation or figure is in the interest of science, literature, art or learning or other objects of general concern; or (ii which is kept or used bona fide for religious purposes' amendment of 32 in section 68 of the principal act, for sub-section (2), the following sub-section _ section 68 2°shall be substituted, namely:-— (2) any person who intentionally or knowingly fails to comply with any order under sub-section (7) shall be guilty of an offence and shall be tiable on conviction to imprisonment for a term not exceeding two years or a fine not exceeding one lakh rupees or both" 33 for section 69 of the principal act, the following section shall be substituted, 357 namely:-— substitution of new section for section 69, "69 (j) where the central government is satisfied that it is necessary or expedient so to do in the interest of the sovereignty or integrity of india, defence of india, security of the state, friendly relations with foreign states or public order or for preventing incitement to the commission of any cognizable offence relating to above he or for investigation of any offence, it may subject to the provisions of sub-section (2), | power        | to       ||--------------|----------|| directions   | for      || interception | or       || monitoring   | or       || decryption   | of       || any          | informa- || tion         | through  || any          | computer || resource,    |          |for reasons to be recorded in writing, by order, direct any agency of the government to intercept or monitor or decrypt or cause to be intercepted or monitored or decrypted any information transmitted through any computer resource us (2) the central government shall prescribe safeguards subject to which such interception or monitoring or decryption may be made or done, as the case may be (3) the subscriber or intermediary or any person incharge of the computer resource shall, when called upon by any agency which has been directed under subsection (/), extend all facilities and technical assistance to— (a) provide access to the computer resource containing such inforination, so (2) intercept or monitor or decrypt the information, (c) provide information contained in computer resource it $7 (4) the subscriber or intermediary or any person who fails to assist the agency referred to in sub-section-3) shall be punished with an imprisonment for a term which may extend to seven years" 34 in section 70 of the principal act,— amendment of section 70 (a) for sub-section (/ ), the following sub-section shall be substituted, namely:— '(j) the appropriate government may, by notification in the official gazette, declare any computer resource which directly or indirectly affects the facility of }o critical information infrastructure, to be a protected system nm explanation —for the purposes of this section, "critical information infrastructure" means the computer resource, the incapacitation or destruction of which, shall have debilitating impact on national security, economy, public health or safety'; (8) after sub-section (3), the following sub-section shall be inserted, namely:— "(4) the central government shall prescribe the information security practices and procedures for such protected system" 35 after section 70 of the principal act, the following section shall be inserted, de namely:— insertion of new section toa "70a (1) the indian computer emergency response team (cert-in) shall serve as the national nodal agency in respect of critical information infrastructure for coordinating all actions relating to information security practices, procedures, guidelines, incident prevention, response and report indian computer emergency response team to serve as7 as national nodal agency (2) for the purposes of sub-section (7), the director of the indian computer emergency response team may call for information pertaining to cyber security from the service providers, intermediaries or any other person (3) any person who fails to supply the information called for under sub-section to (2), shall be punishable with imprisonment for a term which may extend to one year or with fine which may extend to one lakh rupees or with both (4) the director of the indian computer emergency response team may, by order, delegate his powers under this section to his one or more subordinate officers not below the rank of deputy secretary to the government of india" 36 after section 72 of the principal act, the following section shall be inserted, 3s namely:— | insertion    | of      ||--------------|---------|| new          | section || t2a         |         || punishment   |         |"t2a save as otherwise provided in this act or any other law for the time being in force, any person including an intermediary who, while providing services under the for disclosure of-information terms of fawful contract, has secured access to any material containing personal - information about another person, with the intent to cause or knowing that he is likely | in        | breach    ||-----------|-----------|| of        | lawful    || contract |           || 4a        |           |to cause wrongful:loss or wrongful gain discloses, without the consent of the person concerned, or in breach of a lawful contract, such material to any other person, shall be punished with imprisonment for a term which may extend to two years, or with fine which may extend to five lakh rupees, or with both" 37 for sections 77 and 78 of the principal act, the following sections shall be substitution of new sections substituted, namely:— wwfor sections 77 and 78 "77, no compensation awarded, penalty imposed or confiscation made under this act shall prevent the award of compensation or imposition of any other penalty or punishment under any other law for the time being in force compensation, penalties or confiscation not fo interfere with other punishment :  tta notwithstanding anything contained in the code ofcriminal procedure, 2 of 1974 gm 1973, offénces under sections 66, 66a, 72 and 72a may be compounded by the aggrieved person: ' | offences      | under    ||---------------|----------|| sections      | 66,      || 66a,          | 72       || t2a           | to       || compoundable |          |provided that the provisions of this section does not apply where the accused  is, by reason of his previous conviction, liable to either enhanced punishment or to a punishment of a different kind for such offence jo 778 no court shall take cognizance of an offence punishable under sections 66, 66a, 72 and 72a, except upon a complaint made by the person agerieved by the offence  cognizance of offences under sections 66, 66a, 72 and 72a , 78 (1) notwithstanding anything contained in the code of criminal procedure, 2 of 1974 1973, no police officer below the rank of deputy superintendent of police shall | power       ||-------------|| investigate || offences   || 87 - investigate any cognizable offence under this act (2) when information is given to an officer in charge of a police station of the commission within the fimits of such station of a non-cognizable offence under this act, he shall cause to be entered the substance of the information in a book to be kept by such officer in such form as the state government may prescribe in this behalf qo (3) any police officer receiving such information may exercise the same powers in respect of investigation (except the power to arrest without warrant) as an officer in charge of the police station may exercise in a cognizable case under section 156 of the 2 of 1974, code of criminal procedure, 1973" substitution of new chapters 38 for chapter xie of the principal act, the following chapters shall be substituted, a y namely:— for chapter xil  'chapter xii intermediaries not to be liable in certain cases79 (1) notwithstanding anything contained in any other law for the time being exemption from liability of intermediary in certain casesin force but subject to the provisions of sub-sections (2) and (3), an intermediary 30 shall not be liable for any third party information, data, or communication link made available by him (2) the provisions of sub-section (/) shall apply if— (@) the function of the intermediary is limited to providing access to a communication system over which information made available by third parties is 357 transmitted or temporarily stored; or (2) the intermediary does not-— |      |        |     |            | (i)    | initiate    | the           | transmission,    ||------|--------|-----|------------|--------|-------------|---------------|------------------|| (ii) | select | the | receiver   | of     | the         | transmission, | and              || ii)  | select | or  | modify     | the    | information | contained     | in               || yo   | (3)    | the | provisions | of     | sub-section | (/)           | shall            |(a) the intermediary has conspired or abetted in the commission of the unlawful act; (5) upon receiving actual knowledge, or on being notified by the appropriate government or its agency that any information, data or ds communication link residing in or connected toa computer resource controlled by the intermediary is being used to commit the unlawful act, the intermediary fails to expeditiously remove or disable access to that material on that resource without vitiating the evidence in any manner (4) intermediary shall observe stich 'other guidelizies as the central government may prescribe in this behalf explanation—for the purpose of this section, the expression "third party $~~ information" means any information dealt with by an intermediary in his capacity as an intermediary  chapter xia examiner of electronic evidencecentral 79a the central government may, for the purposes of providing expert opinion (o government on electronic form evidence before any court or other authority specify, by notification ee polity of in the official gazette, any department, body or agency of the central government or electronic a state government as an examiner of electronic evidence evidence, explanation—for the purposes of this section, "electronic form evidence" means any information of probative value that is either stored or transmitted in electronic ¢4 ~ form and includes computer evidence, digital audio, digital video, cell phones, digital fax machines' omission of 39 section 80 of the principal act shall be omitted section 80 amendment 40 in section 81 of the principal act, the following proviso shall be inserted at the end, of section 81 namely:—- ze "provided that nothing contained in this act shall restrict any person from exercising any right conferred under the copyright act, 1957 or the patents act, 1970" 14 of 1957 39 of 1970 amendment 41 in section 82 of the principal act,— of section 82 (a) for the marginal heading, the following marginal heading shall be substituted, namely:— 237 "chairperson, members, officers and employees to be public servants"; (4) for the words "presiding officer", the words "chairperson, members" shall be substituted amendment 42, in section 84 of the principal act, for the words "presiding officer", the words of section 84 "chairperson, members" shall be substituted 3e insertion of 43 after section 84 of the principal act, the following sections shall be, inserted, new sections namely:— 84a, 84b and 84c ; modes or "4a the central government may, for secure use of the electronic medium and methods for for promotion of e-governance and e-commerce, prescribe the modes or methods for encryption encryption 3s punishment 84b whoever abets any offence shall, if the act abetted is committed in for wbelment consequence of the abetment, and no express provision is made by this act for the of onlences punishment of such abetment, be punished with the punishment provided for the offence under this act explanation—an act or offence is said to be committed in consequence of 4o abetment, when it is committed in consequence of the instigation, or in pursuance of the conspiracy, or with the aid which constitutes the abetment punishment 84c whoever attempts to commit an offence punishable by this act or causes for attempt such an offence to be committed, and in such an attempt does any act towards the thee commission of the offence, shall, where no express provision is made for the punishment y ¢~ of such attempt, be punished with imprisonment of any description provided for theoffence, for a term which may extend to one-half of the longest term of imprisonment provided for that offence, or with such fine as is provided for the offence, or with both" 44jn-section 8720f the principal act— (a) in sub-section (2),— s (i) fd clause (a), the following clauses shall be substituted, namely:— "(a) the conditions for considering reliability of electronic signature or electronic authentication technique under sub-section (2) of section 3a; (aa) the procedure for ascertaining electronic signature or lo authentication under sub-section (3) of section 3a; (ab) the manner in which any information or matter may be authenticated by means of electronic signature under section 5;"; (ii) after clause (c), the following clause shall be inserted, namely:— - (ca) the manner in which the authorised service provider may collect, ' retain and appropriate service charges under sub-section (2) of section 6as"; (iif for clause (e), the following clauses shall be substituted, namely:— "(e) the manner of storing and affixing electronic signature creation data under section 15; 2 (ea) the security procedures and practices under section 16;"; (iv) clause (g) shall be omitted; 1957 (v) after clause (m), the following clause shall be inserted, namely:— 1970 "(ma) the form of application and fee for issue of electronic signature certificate under section 35; (vi) after clause (0), the following clauses shall be inserted, namety:— "(oa) the duties of subscribers under section 40a; (06) the reasonable security practices and procedures and sensitive personal data or information under section 43;"; (vii) in clause (7), for the words "presiding officer", the words 2% "chairperson and members" shall be substituted: (viii) in clause (s), for the words "presiding officer", the words "chairperson and members" shall] be substituted; (i) for clause (w), the following clauses shall be substituted, namely:— 25 (w) the powers and functionsof the chairperson of the cyber appellate tribunal under section 52a; (x) the safeguards for interception or monitoring or decryption under sub-section (2) of section 69; (y) the information security practices and procedures for protected system under section 70; ge (z) the guidelines to be observed by the intermediaries under subsection (4) of section 79; (za) the modes or methods for encryption under section 84a;"; (b) in sub-section (3),— (i) for the words, brackets, letter and figures "every notification made 4s by the central government under clause (/) of sub-section (4) of section 1 and every rule made by it", the words "every rule made by the central government" shall be substituted; (id) the words "the notification or" wherever they occur, shall be omitted amendment 45 in section 90 of the principal act, in sub-section (2), for clause (c), the following of section 90 clause shall be substituted, namely:— "(c) the form of information book under sub-section (2) of section 78" omission of 46 sections 91,92, 93 and 94 of the principal act shall be omitted sections 91, 92, 93 and 94, substitution 47 for the first schedule and the second schedule to the principal act, the following ss | of        | new      ||-----------|----------|| schedules | for      || first     | schedule || and       | second   || schedule |          || "first    | schedule | [see sub-section (4) of section 1] documents or transactions to which the act shall not apply|                |       |                   |              |             |        |          |            |         | slno    | description        | of      | documents    | or         | transactions    | 15         ||----------------|-------|-------------------|--------------|-------------|--------|----------|------------|---------|-----------|--------------------|---------|--------------|------------|-----------------|------------|| 1             | a     | negotiable        | instrument   | (other      | than   | a        | cheque)    | as      | defined   | in                 | section | 13           | of         | the             | negotiable || instruments    | act,  | 1881             | 26           | of          | 1881  |          |            |         |           |                    |         |              |            |                 |            || 2              | a     | power-of-attorney | as           | defined     | in     | section  | 1a         | of      | the       | powers-of-attorney | act,    | 1882,        | 7          | of              | 1882      || 3             | a     | trust             | as           | defined     | in     | section  | 3          | of      | the       | indian             | trusts  | act,         | 1882      | 2               | of         || 4,             | awill | as                | defined      | in          | clause | (4)      | of         | section | 2         | of                 | the     | indian       | succession | act,            | 1925,      || including      | any   | other             | testamentary | disposition | by     | whatever | name       | called |           |                    |         |              |            |                 |            || 5             | any   | contract          | for          | the         | sale   | or       | conveyance | of      | immovable | property           | or      | any          | interest   | in              |            || such property |       |                   |              |             |        |          |            |         |           |                    |         |              |            |                 |            | the second schedule|            | {see        | sub-section    | (/)        | of             | section    | 3a]    | 20        ||------------|-------------|----------------|------------|----------------|------------|--------|-----------|| electronic | signature   | or             | electronic | authentication | technique  | and    | procedure || 'slno     | description | procedure      |            |                |            |        |           || q)         | @)          | 8)             |            |                |            |        |           |omission of 48 the third schedule and the fourth schedule to the principal act shall be omitted third schedule and fourth schedule p ww amendment of the indian penal code amendment 49 in the indian penal code— 45 of 1860 of indian penal code amendment {a) in section 4,— of section 4 (after clause (2), the following clause shall be inserted, namely:— "(3) any person in any place without and beyond india committing offence targeting a computer resource located in india"; (ii) for the explanation, the following explanation shall be substituted, namely:— 'explanation—in this section— (a) the word offence includes every act committed outside india which, if committed in india, would be punishable under this code; (5) the expression "computer resource" shall have the meaning assigned to it in clause (k) of sub-section (/) of section 2 of the information technology act, 2000'; 21 of 2000 (8) in section 40, in clause (2), after the figure "117", the figures "118, 119 and amendment of section 40, 120" shall be inserted; | amendment    | of           ||--------------|--------------|| section      | 118         || (c)          | in           || omission,    | the          || omission     | or           || of           | a            || 1s           |              || amendment    | of           || section      | 119         || (@)          | in           || omission,    | the          || omission     | or           || of           | a            || (e)          | after        || insertion    | of           || section      | 417a        || 2a           |              || punishment   |              || for          | identity     || theft       |              || "417a       | whoever,     || any          | other        || with         | imprisonment || and          | shall        || (/)          | after        || insertion    | of       ||--------------|----------|| new          | section: || 419a        |          || as           |          || punishment   |          || "419a       | whoever, || resource     | cheats   || description  | for      || fine        |          || for          | cheating || personation  |          || using        | computer || resource,    |          |30 21 of 2000 explanation——the expression "computer resource" shall have the meaning assigned to it in clause (4) of sub-section (/) of section 2 of the information technology act, 2000"; "el amendment of section 464 (g) in section 464 , for the words "digital signature" wherever they occur, the words lectronic signature" shall be substituted; (a) after chapter xxi, the following chapter shall be inserted, namely:— | insertion    | of      ||--------------|---------|| new          | chapter || xxia        |         | "chapter xxia 3s or privacypunishment 502a whoever, intentionally or knowingly captures, publishes or transmits for violation of ptivacythe image of a private area of any person without his or her consent, under circumstances violating the privacy of that person, shall be punished with simple imprisonment for a term which may extend to two years or with fine not exceeding two lakh mupees, or with both explanation—for the purpose of this section— (a) "transmit" means to send electronically a visual image with the intent that it be viewed by a person or persons; (5) "capture", with respect to an image, means to videotape, photograph, film or record by any means; (c) "private area" means the naked or undergarment clad genitals, pubic area, buttocks or female breast; (d) "publishes" means reproduction in the printed or electronic form and making it available for public; (e) "under circumstances violating privacy" means circumstances in which a person van have a reasonable expectation that— (jhe or she could disrobe in privacy, without being concemed 10 that an image of his private area is being captured; or (i any part of his or her private area would not be visible to the public, regardless of whether that person is in a public or private place"  partivis  amendment of the indian evipence acr, 18721 of 1872 50 in the indian evidence act, 1872,— amendment of indian evidence act amendment of section 3 2o (a) in section 3 relating to interpretation clause, in the paragraph appearing at the end, for the words "digital signature" and "digital signature certificate", the words "electronic signature" and "electronic signature certificate" shall respectively be substituted; (b) after section 45, the following section shall be inserted, namely:— "45a when in a proceeding, the court has to form an opinion on any matter relating to any information transmitted or stored in any computer resource 2s insertion of new section 45a opinion of examiner of electronic evidence 21 of 2000 or any other electronic or digital form, the opinion of the examiner of electronic evidence referred to in section 79 of the information technology act, 2000, is a relevant fact explanation —for the purposes of this section, an examiner of electronic evidence shall be an expert"; (c) in section 47a,— amendment of section 47a, 30 (/) for the words "digital signature", the words "electronic signature" shal} be substituted; (i) for the words "digital signature certificate", the words "electronic signature certificate" shall be substituted; (d) in section 67a, for the words "digital signature" wherever they occur, the as" amendment of section 67a words "electronic signature" shall be substituted; (e) in section 85a, for the words "digital signature" at both the places where amendment of section 85a they occur, the words "electronic signature" shall be substituted; amendment of section 85b ( in section 85b, for the words "digital signature" wherever they occur, the words "electronic signature" shall be substituted; ge amendment of section 85c {g) in section 85c, for the words "digital signature certificate", the words "electronic signature certificate" shall be substituted; amendment of section 90a (h) in section 90a, for the words "digital signature" at both the places where they occur, the words "electronic signature" shall be substituted;  part v amendment of the cope of criminal procepure, 1973§1 in the code of criminal procedure, 1973,— | of         | 1974    ||------------|----------|| amendment  | of       || code       | of       || criminat   |          || procedure |          |(a) after section 198a, the following section shall be inserted, namely:-— | insertion    | of      ||--------------|---------|| new          | section || 198b        |         || www          |         || 5            | of      || "198b       | no      || sections     | 417a,   || made         | by      || prosecution  | of      || offences     | under   || sections     | 417a,   || 419a         | and     || of           | indian  || code        |         |} in section 320,— amendment of section 320(i) in sub-section (j), in the table, after the entries relating to— ia (a) sections 352, 355 and 358, the following entries shall be inserted, namely:— 1 2 3 "identity theft 417a the person against whom the offence was committed"; (b) section 502, the following entries shall be inserted, namely: - i 2 3 26 "violation of privacy 502a the person against whom the offence was committed"; (id in sub-section (2), in the table, after the entries relating to section 419, the following entries shall be inserted, namely:— ] 2 3 25 "cheating by personation by using computer resource 419a the person against whom the offence was committed"; {di} in the first schedule, under the heading "i offences under the indian penal code",— (a) after the entries relating to section 417, the following entries 3a shall be inserted, aamely:— t 2 3 4 5 6 "417a identity imprisonment non- bailable any theft for 2 years cognizable magistrate"; and fine (b) after the entries relating to section 419, the following entries shall be inserted, namely:— | i           | 2        | 3            | 4          | 3             | 6    ||-------------|----------|--------------|------------|---------------|------|| "419a       | cheating | imprisonment | cognizable | bailable      | any  || by          | for      | 5            | years      | magistrate"; |      || personation | —_and    | fine        |            |               |      || by          | using    |              |            |               |      || computer    |          |              |            |               |      || resource    |          |              |            |               |      |(c) after the entries relating to section 502, the following entries 0 shall be inserted, namely:— | l     | 2         | 3            | 4     | 5          | 6             ||-------|-----------|--------------|-------|------------|---------------|| "502a | violation | imprisonment | non-  | bailable   | any           || of    | for       | 2            | years | cognizable | magistrate", |is| privacy    | or    ||------------|-------|| or         | both | statement of objects and reasonsthe information technology act was enacted in the year 2000 with a view to give a fillip to the growth of electronic based transactions, to provide legal recagnition for e-commierce and e-transactions, to facilitate e-governance, to prevent computer based crimes and ensure security practices and procedures in the context of widest possible use of information technology worldwide 2, with proliferation of information technology enabled services such as e-governance, e-commerce and e-transactions, protection of personal data and information and implementation of security practices and procedures relating to these applications of electronic communications have assumed greater importance and they require harmonisation with the provisions of the information technology act further, protection of critical information infrastructure is pivotal to national security, economy, public health and safety, so it has become necessary to declare such infrastructure as a protected system so as to restrict its access 3 a rapid increase in the use of computer and internet has given rise to new forms of crimes like publishing sexually explicit materials in electronic form, video voyeurism and breach of confidentiality and leakage of data by intermediary, e-commerce frauds like personation commonly known as phishing, identity theft and offensive messages through communication services so, penal provisioris are required to be included in the information technology act, the indian penal code, the indian evidence act and the code of criminal procedure to prevent such crimes 4 the united nations commission on international trade law (uncitral) in the year 2001 adopted the model law on electronic signatures the general assembly of the united nations by its resolution no 56/80, dated 12th december, 2001, recommended that all states accord favourable consideration to the said model law on electronic signatures since the digital signatures are linked to a specific technology under the existing provisions of the information technology act, it has become necessary to provide for alternate technology of electronic signatures for bringing harmonisation with the said model law 5 the service providers may be authorised by the central government or the state goverment to set up, maintain and upgrade the computerised facilities and also collect, retain and appropriate service charges for providing such services at such scale as may be specified by the central government or the state government 6 the bill seeks to achieve the above objects new delhi; dayaniohi maran, the 6th december, 2006, clause 2—this clause seeks to substitute the words "digital signatures" by the words "electronic signatures" as provided in the table thereunder so as to make it technology neutral, clause 3—this clause seeks to amend sub-section (¢) of section ] so as to exclude negotiable instruments, power of attorney, trust, will and contract from the application of the act and to empower the central government to amend the entries in the first schedule clause 4—this clause seeks to amend section 2 and to define certain new expressions clause 5——this clause seeks to substitute heading of chapter i! with new heading 'digital signature and electronic signature?' s0 as to make the act technology neutral clause 6,—this clause seeks to insert a new section 3a which provides for authentication of electronic record by electronic signature or electronic authentication technique it also empowers the central government to insert in the second schedule any electronic signature or electronic authentication technique and prescribe the procedure for the purpose of ascertaining the authenticity of electronic signature clause 7,—this clause seeks to insert a new section 6a which empowers the central government as well as the state government to authorise the service providers for providing efficient services through electronic means to the public against appropriate service charges further the said section empowers the central government as wel! as the state government to specify the scale of service charges clause 8—this clause seeks to insert a new section 10a to provide for contracts formed through electronic means clause 9—this clause seeks to make amendment in sub-section (/) of section 12 which is of a consequential nature clause 10—this clause seeks to substitute sections 15 and 16 so as to remove certain inconsistencies in the procedures relating to secure electronic signatures and to provide for security procedures and practices clause \1—this clause provides for omission of section 20 with aview to empower the certifying authority under section 30 to act as repository of electronic signatures clause 12—this clause seeks to make amendment in sub-section (7) of section 29 with a view to limit the powers of the controller in respect of access to any computer system only with reference to the provisions of chapter vi and not with reference to the provisions of entire act the powers with respect to access 8 yo any computer system under other provisions of the act are proposed to be entrusted to'the central government under section 69 clause 13—this clause seeks to amend section 30 witha view to empower the certifying authority to be the repository of all electronic signature certificates issued under the act clause 14—this clause seeks to amend section 34 with a view to make the provisions of that section technology neutral clause 15—this clause seeks to amend section 35 with a view to omit the first proviso to sub-section (4) so as to make the provisions of that section technology neutral clause 16—this clause seeks to amend section 36 so as to add two more representations for issuance of digital signature clause 17—this clause seeks to insert a new section 40a which provides for duties of the subscriber of electronic signature certificate clause 18—this clause seeks to make an amendment in the chapter heading of chapter ix with a view to provide for making compensation for damages in respect of various contraventions clause 19—this clause seeks to amend section 43 so as to add certain more contraventions for damaging computer or computer system clause 20—this ciause seeks to jnsert a new section 43a so as to empower the central goverment to provide for reasonable security practices and procedures and the sensitive personal data or information and also to provide for compensation for failure to protect sensitive personal data or information stored in a computer resource, clause 21—this clause seeks to make amendment in section 46 with a view to make consequential changes clauses 22 and 23—-these clauses seek to make amendments in the heading of chapter x and section 48 with a view to suitably modify the same with the title of the cyber appellate tribunal as mentioned in clause (7) of sub-section (j) of section 2 clause 24—this clause seeks to substitute sections 49 to 52 and insert new sections 52a to 52d section 49 provides for the establishment of the cyber appellate tribunal sections 50, 51 and 52 provide for qualifications, term of office, conditions of service and salary and allowances of the chairperson and members of the said tribunal sections 52a to 52 d provide for powers of the chairperson and distribution of business among the benches clauses 25 to 28—these clauses seek to make amendments in sections 53 to 56 with a viewto make the cyber appellate tribunal a multi-member body clause 29—this clause seeks to insert a proviso in section 61 so as to provide jurisdiction to courts in certain cases clause 30—this clause seeks to amend section 64 so as to recover the compensation also as the arrears of land revenue clause 31—this clause seeks to substitute sections 66 and 67 and insert new sections 66a and 67a with a view to make certain more computer related wrong actions punishable and eahance the penalty clause 32—this clause seeks to amend section 68 so as to reduce the quantum of punishment and fine clause 33—this clause seeks to substitute section 69 so as to empower the central government to issue directions to an agency for interception or monitoring or degryption of any information transmitted through any computer resource it also provides for punishment for rendering assistance to such agency clause 34—this clause seeks to amend section 70 so as to enable the central government as weil as the state government to declare any computer resource as protected system it also provides for information security practices and procedures for such protected system clause 35—this clause seeks to insert a new section 70a for empcwering indian computer emergency response team to serve as a national nodal agency in respect of critical information infrastructure clause 36—this clause seeks to insert a new section 72a which makes the disclosure of information in breach of a lawful contract punishable clause 37—this clause seeks to substitute sections 77 and 78 and to insert new sections 77a and 77b section 77 provides that compensation, penalties or confiscation under the act shall not interfere with the award of compensation or imposition of any other penalty or punishment under any other law for the time being in force, section 77a provides for certain offences relating to computer resources as compoundable offences section 77b provides that court shall take cognizance only on a complaint and not otherwise section 78 provides for power to investigate offencesclause 38—this clause seeks to substitute chapter xii and to insert a new chapter xiia which provides for exemption of intermediaries from liability in certain circumstances and also empowers the central government to prescribe guidelines to be observed by intermediaries for providing services it also empowers the central government to specify the examiner of electronic evidence  clause 39—this clause seeks to omit section 80 of the act with a view to entrust the powers of search and seizure, etc, to a police officer not below the rank of deputy superintendent of police and for that purpose necessary provisions have been included in section 78 by substituting the same vide clause 37 clause 40— this clavse proposes to insert a proviso to section 8] so that the rights conferred under this section shall be supplementary to and not in derogation of the provisions of the copyright act or the patents act clause 41—this clause seeks to make amendment in section 82 with a view to declare the chairperson, members, officers and employees as public servants clause 42—this clause seeks to amend section 84 with a view to make consequential changes clause 43—-this clause seeks to insert three new sections 84a, 84b and 84c with a view to empower the central government to prescribe the modes and methods of encryption for secure use of electronic media and for promotion of e-governance and ecommerce applications further it provides that abetment of and attempt to commit any offence shali aiso be punishable clauses 44 and 45—these clauses seek to make amendments in sections 87 and 90 respectively, which are of consequential nature clause 46—-this clause seeks to omit sections 91 to 94 for the reason that these provisions have become redundant as necessary modifications have already been carried out in the indian penal code and other related enactments clause 47—this clause seeks to substitute new schedules for the first schedule and the second schedule so as to provide for documents or transactions to which the provisions of the act shall not apply it also enables the list of electronic signature or electronic authentication technique and procedure for affixing such signature to be specified in the second scheudule clause 48—this clause seeks to omit the third schedule and fourth schedule as consequential to the omission of provisions of sections 93 and 94 clause 49—this clause provides for certain amendments in the indian penal code so as to specify certain offences relating to the computer resource clause 50—this clause provides for certain consequential amendments in the indian evidence act pursuant to the changes proposed in the act clause 51—this €lause provides for amendments in the code of criminal procedure by inserting new section 198b and amending section 320 so as to make certain consequential amendments pursuant to the changes proposed in the actclause 24 of the bill seeks to provide for multi-member composition of the cyber appellate tribunal but the number of members may be determined by the central government in the times to come the salary, allowances and retirement benefits payable to the chairperson and other members of the cyber appellate tribunal as and when appointed shall be met out of the annual budget estimates of the ministry for the present, the bill does not involve any additional recurring or non-recurring expenditure out of the consolidated fund of india  : clause 3 of the bill seeks to amend sub-section (4) of section {| which empowers the central government to amend the first schedule by adding or deleting entries relating to documents or transactions to which the provisions of the act shall not apply 2 clause 6 of the bill seeks to insert a new section 3a vide which the central government is being empowered to— (a) prescribe the conditions to be fulfilied for considering any electronic signature or electronic authentication technique as reliable; (8) prescribe the procedure for affixing and authentication of electronic signature; and (c) insert in the second schedule any electronic signature or electronic authentication technique and the procedure for affixing such signatures 3 clause 7 of the bill seeks to insert a new section 6a which empowers the central government as well as the state government to authorise the service provider to collect, retain and appropriate service charges further the said section empowers the central government and the state government to specify, by notification, the scale of service charges 4, clause 10 of the bill seeks to amend section 15 which empowers the central government to prescribe the manner of storing and affixing the signature creation data for a secure electronic signature the said clause also seeks to amend section 16 which empowers the central government to prescribe the security procedures and practices for a secure electronic record and a secure electronic signature 5 clause 17 of the bill seeks to insert a new section 40a which empowers the central government to prescribe the duties to be performed by the subscriber of the electronic signature certificate 6 clause 20 of the bill seeks to insert a new section 43a which empowers the central government to prescribe, in consultation with professional bodies or associations, the reasonable security practices and procedures and the sensitive personal data or information 7 clause 24 of the bill seeks to substitute section 49 which empowers the central government to specify by notification the places for sitting of the cyber appellate tribunal and the areas of their jurisdiction further, the said clause seeks to insert a new section 52a which empowers the central government to prescribe powers and functions of the chairperson of the cyber appellate tribunal 8 clause 33 of the bill seeks to amend section 69 which empowers the central government to prescribe the safeguards for interception or monitoring or decryption 9 clause 34 of the bill seeks to substitute sub-section (/)of section 70 which empowers the central government as well as the state government to declare by notification any computer resource which affects the facility of critical information infrastructure to be a protected system further, the said clause seeks to insert a new subsection (4) to section 70 which empowers the central government to prescribe the information security practices and procedures for the protected system 10 clause 37 of the bill seeks to substitute section 78 which empowers the state government to prescribe the form of information book 11 clause 38 of the bill seeks to substitute section 79, sub-section (4) of the said section empowers the central government to prescribe the guidelines to be observed by intermediary further, the said clause seeks to insert another new section 79a which empowers the central government to specify by notification the examiner of electronic evidence for providing expert opinion on electronic form evidence 12 clause 42 of the bill seeks to insert a new section 84a which empowers the central government to prescribe the modes and methods for encryption 13 the matters in respect of which the said rules may be made or notification issued are matters of procedure and administrative detail, and as such, it is not practicable to provide for them in the proposed bill itself 14 the delegation of legislative power is, therefore, of a normal character(45 of 1860)      4, the provisions of this code apply also to any offence committed by—      extension of code to extraterritorial offences (2) any person on any ship or aircraft registered in india wherever it may be explanation —in this section the word "offence" includes every act committed outside india which, if committed in india, would be punishable under this code a, who is a citizen of india, commits a murder in uganda he can be tried and convicted of murder in any place in india in which he may be found     "offence" 40, except in the chapters and sections mentioned in clauses 2 and 3 of this section, the word "offence" denotes a thing made punishable by this code in chapter iv, chapter va and in the following sections, namely sections 64, 65, 66, 67, 71, 109, 110, 112, 114, 115, 116, 117, 187, 194, 195, 203, 211, 213, 214, 221, 222, 223, 224,225, 327, 328, 329, 330, 331, 347, 348, 388, 389 and 445, the word "offence" denotes a thing punishable under this code, or under any special or local law as hereinafter defined and in sections 141, 176, 177, 201, 202, 212, 216 and 441, the word "offence" has the same meaning when the thing punishable under the special or local law is punishable under such law with imprisonment for a term of six months or upwards, whether with or without fine      118 whoever intending to facilitate or knowing it to be likely that he will thereby facilitate the commission of an offence punishable with death or imprisonment for life concealing design to commit offence punishable with death or ann voluntarily conceals, by any act or illegal omission, the existence of a design to commit such offence or makes any representation which he knows to be false respecting such design,  for life-— ifeffence be committed, if offence be not committed shall, if that offence be committed, be punished with imprisonment of either description for a term which may extend to seven years, or, if the offence be not committed, with imprisonment of either description, for a term which may extend to three years; and in either case shall also be liable to fine a, knowing that dacoity is about to be committed at b, falsely informs the magistrate that a dacoity is about te be committed at c, a place in an opposite direction, and thereby misleads the magistrate with intent to facilitate the commission of the offence the dacoity is committed at b in pursuance of the design a is punishable under this section 119 whoever, being a public servant intending to facilitate or knowing it to be likely that he will thereby facilitate the commission of an offence which it is his duty as such public servant to prevent public servant concealing design to commit offence which it is his duty to prevent— voluntarily conceals, by any act or illegal omission, the existence of a design to commit such offence, or makes any representation which he knows to be false respecting such design, if offence be committed; shall, ifthe offence be committed be punished with imprisonment of any description provided for the offence, for a term which may extend to one-half of the longest term of such imprisonment, or with such fine as is provided for that offence, or with both; or, if the offence be punishable with death or imprisonment for life, with imprisonment if offence be punishable with of either description for a term which may extend to ten years; death, etc,; or, if the offence be not committed, shall be punished with imprisonment of any description provided for the offence for a term which may extend to one-fourth part of the if offence be not committed, longest term of such imprisonment or with such fine as is provided for the offence, or with both a an officer of police, being legally bound to give information of all designs to commit robbery which may come to his knowledge, and knowing that b designs te commit robbery, omits ta give such information, with intent to facilitate the commission of that offence here a has by an inegal omission concealed the existence of b's design and is liable to punishment according to the provision of this section  « «  ' 464 a person is said to make a false document or false electronic record— making a-false documentfirst—who dishonestly or fraudulently— (a) makes, signs, seals or executes a document or part of a document; (6) makes or transmits any electronic record or part of any electronic tecord; (c) affixes any digital signature on any electronic record; (@) makes any mark denoting the execution of a document or the authenticity of the digital signature, with the intention of causing it to be believed that such document or part of document, electronic record or digital signature was made, signed , sealed, executed, transmitted or affixed by or by the authority of a person by whom or by whose authority he knows that it was not made, signed, sealed, executed or affixed; or secondly—-who, without lawful authority, dishonestly or fraudulently, by cancellation or otherwise, alters a document or an electronic record in any material part thereof, after it has been made, executed or affixed with digital signature either by himself or by any other person, whether such person be living or dead at the time of such alteration; or thirdly—who dishonestly or fraudulently causes any person to sign, seal, execute or alter a document or an electronic record or to affix his digital signature on any electronic record knowing that such person by reason of unsoundness of mind or intoxication cannot, or that by reason of deception practised upon him, he does not know the contents of the document or electronic record or the nature of the alteration {) a, without z's authority, affixes z's seal to a document purporting to be a conveyance of an estate from z to a, with the intention of selling the estate to b and thereby of obtaining from b the purchasemoney a has committed forgery (©)apicks up a cheque oii a banker signed by b, payable to bearer, but without any sum having been inserted in the cheque a fraudulently fills up the cheque by inserting the sum of ten thousaaid rapees a commits forgery (d) aleaves with b, his agent, a cheque on a banker, signed by a, without inserting the sum payable and authorizes b to fill up the cheque by inserting a sum not exceeding ten thousand rupees for the purpose of making certain payments b fraudulently filis up the clieque by inserting the sum of twenty thousand tupees, b commits forgery (e) adraws a bill of exchange on himself in the namie of b without b's authority, intending to discount it as a genuine bili with a banker and intending to take up the bill on its maturity here, as a draws the bill with intent to deceive the banker by leading him to suppose that he had the security of b, and thereby to discount the bill, a is guilty of forgery (z's will contains these words—"l direct that all my remaining property be equally divided between a, band c" adishonestly scratches out b's name, intending that it may be believed that the whole was left to himself and c a has committed forgery (g) a endorses a government promissory note and makes it payable to z ot his order by writing on the bill the words "pay to z or his order" and signing the endorsement b dishonestly erases the words "pay to z or his order", and thereby converts the special eadorsement into a blank endorsement b commits forgery (4) a sells and conveys an estate to z a afterwards, in order to defraud z of his estate, executes a conveyance of the same estate to b, dated six months earlier than the date of the conveyance to z, intending it to be believed that he had conveyed the estate to b before he conveyed it to z a has commntted forgery (i) z dictates his will to a a intentionally writes down a different legate named by z, and by representing to z that he has prepared the will according to his instructions, induces z to sign the will ahas committed forgery () awrites a letter and signs it with b's name without b's authority, certifying that a is aman of good character and in distressed circumstances from unforeseen misfortune, intending by means of such letter to obtain alms from z and other persons here, a5 a made a false document in order to induce z to part with property, a has committed forgery (® a without b's authority writes a letter and signs it in b's name certifying to a's character, intending thereby to obtain employment undev z a has committed forgery inasmuch as he intended to deceive z by the forged certificate, and thereby to induce z to enter into an express or implied contract for service explanation 1 —-a man's signature of his own name may amount to forgery  jilustrations(a) a signs his own name to a bill of exchange, intending that it may be believed that the bill was drawn by another person of the same name a has committed forgery (4) a writes the word "accepted" on a piece of paper and signs it with z's name, in order that b may afterwards write on the paper a bill of exchange drawn by b upon z, and negotiate the bills as though it had been accepted by z a is guilty of forgery; and if b, knowing the fact, draws the bill upon the paper pursuant to a's intention, b is alse guilty of forgery (c) a picks up a bill of exchange payable to the order of a different person of the same name a endorses the bill in his own name, intending to cause it to be believed that it was endorsed by the person to whose order it was payable: here a has committed forgery (d@) a purchases an estate sold under execution of a decree against b b, after the seizure ofthe estate, in collusion with z, executes a lease of the estate, to z at a nominal rent and for a long period and dates the fease six months priot to the seizure, with intent to defraud a, and to cause it to be believed that the lease was granted before the seizure b, though he executes the lease in his own name, commits forgery by antedating it (a, a trader, in anticipation of insotvency, lodges effects with b for a's benefit, and with intent to defraud his creditors, and in order to give a colour to the transaction, writes a promissory note binding himself to pay to b a sum for value received, and antedates the note, intending that it may be believed to have been made before a was on the point of insolvency abas committed forgery under the first head of the definition explanation 2—the making of a false document in the name of a fictious person, inteading it to be believed that the document was made by seal person, or in the mame of a deceased person, inteading it to be believed that the document was made by the person in his lifetime, may amount to forgery explanation 3—for the purposes of this section, the expression "affixing digital signature" shall have the meaning assigned to it in clause (d) of sub-section (/) of section 2 of the information technology 2) of 2000 act, 2000 a draws a bill of exchange upon a fictitious person, and fraudulently accepts the bill in the name of such fictitious person with intent to negotiate it, a commits forgery 2      extracts from the indian evipence act, 1872 (1 of 1872) » 2 s  3 in this act the following words and expressions are used in the following senses, interpretation unless a contrary intention appears from the context:— clause "court" includes all judges and magistrates, and all petsons, except arbitrators, "court" legally authorised to take evidence "fact" means and includes— "fact" (7) anything, state of things, or relation of things, capabie of being perceived by the senses; (2) any mental condition of which any person is conscious  hlustrations(a) that there are certain objects arranged in a certain order in a certain place, is a fact (5) that a man beard or saw something, is » fact {c) that a man said cestain words, is a fact (d) that a man bolds a certain opinion, hes a certain intention, acts in good faith or fraudulently, or uses a pasticular word in a particular sense, of is or was at a specified time conscious of a particular sensation, is a fact (e) that a man has a certain reputation, is a fact one fact is said to be relevant to another when the one is connected with the "relevant" other in any of the ways referred to in the provisions of this act relating to the relevancy of facts the expression "facts in issue" means and includes— "facts in issue", any fact from which, either by itself or in connection with other facts, the existence, non-existence, nature or extent of any tight, hability, or disability, asserted or denied in any suit or proceeding, necessarily follows explanation —whenever, under the provisions of the law for the time being in force relating to civil procedure, any court records an issue of fact, the fact to be asserted or denied in the answer to such issue is a fact in issueais accused of the murder of b at his trial the following facts may be in issue:-— that a'caused b's death; - that a intended to cause'b's death, that a had received grave and sudden provocation from b; that a, at the time of doing the act which caused b's death, was, by reason of unsoundness of mind, incapable of knowing its nature "document" "document" means any matter expressed or described upon any substance by means of letters, figures or marks, or by more than one of those means, intended to be used, or which may be used, for the purpose of recording that matter a writing is a document: words printed lithographed or photographed are documents: amap or plan is a document: an inscription on a metal plate or stone is a document: a caricature is a document "evidence" "evidence" means and includes— (j) all statements which the court permits or requires to be made before it by witnesses, in relation to matters of fact under inquiry; such statements are called oral evidence; (2) all documents including electronic records produced for the inspection of the court; such documents are called documentary evidence "proved", a fact is said to be proved when, after considering the matters before it, the court either believes it to exist, or considers its existence so probable that a prudent man ought, under the circumstances of the particular case, to act upon the supposition that it exists "disproved" a fact is said to be disproved when, after considering the matters before it, the court either believes that it does not exist, or considers its non-existence so probable that a prudent man ought, under the circumstances of the particular case, to act upon the supposition that it does not exist "not proved" a fact is said not to be proved when it is neither proved nor disproved "india" "india" means the territory of india excluding the state of jammu and kashmir the expressions "certifying authority", "digital signature", "digital signature certificate", "electronic form", "electronic records", "information", "secure electronic record", "secure digital signature" and "subscriber" shall have the meanings respectively assigned to them in the information technology act, 2000 474a when the court has to form an opinion as to the digital signature of any person, the opinion of the certifying authority which has issued the digital signature certificate isa relevant fact opinion as to digital signature when relevant proof as to 67a, except in the case of a secure digital signature, if the digital signature of digital signature any subscriber is alleged to have been affixed to an electronic record the fact that such digital signature is the digital signature of the subscriber must be proved presumption 85a the court shall presume that every electronic record purporting to be an agreement containing the digital signatures of the parties was so concluded by affixing the digital signature of the parties | as          ||-------------|| electronic  || agreements || presumption |85b (/) in any proceedings involving a secure, electronic record, the court shall presume unless contrary is proved, thatthe secure electronic record has not been altered since the specific point of time to which the secure status relates | as          | to    ||-------------|-------|| electronic  |       || records     | and   || digital     |       || signatures |       |(2) in any proceedings, involving secure digital signature, the court shall presume unless the contrary is proved that— (a) the secure digital signature is affixed by subscriber with the intention of signing or approving the electronic record; (6) except in the case of a secure electronic record or a secure digital signature, nothing in this section shall create any presumption relating to authenticity and integrity of the electronic record or any digital signature 85c the court shall presume, unless contrary is proved, that the information presumption as to digital signature certificates, listed in a digital signature certificate is correct, except for information specified as subscriber information which has not been verified, if the certificate was accepted by the subscriber |     | ld    |     | a    |     ||------|-------|------|------|------|90a where any electronic record, purporting or proved to be five years old, is produced from any custody which the court in the particular case considers proper, presumption as to electronic records five years old the court may presume that the digital signature which purports to be the digital signature of any particular person was so affixed by him or any person authorised by him in this behalf explanation—blectronic records are said to be in proper custody if they are in the place in which, and under the care of the person with whom, they naturally be; but no custody is improper if it is proved to have had a legitimate origin, or the circurnstances of the particular case are such as to render such an origin probable this explanation applies also to section 81a    s   extracts from the information technology act, 2000 (21 of 2000) ta     chapter i preliminaryshorititle, 1(/)  '    (4) nothing in this act shall apply to,— extent, commencement and application,(a) a negotiable instrument (other than a cheque} as defined in section £3 ofthe negotiable instruments act, 1881; (5) a power-of-attorney as defined in section 1 a of the powers-of-attorney act, 7 of 1882 1882; (c) a trust as defined in section 3 of the indian trusts act, 1882; 2 of 1882 (d) a will as defined in clause (a) of section 2 of the indian succession act, 1925 39 of 1925 including any other testamentary disposition by whatever name called; (e) any contract for the sale or conveyance of immovable property or any interest in such property; (f) any such class of documents or transactions as may be notified by the central government in the official gazette definitions 2 (2) in this act, unless the context otherwise requires,—  (a) "affixing digital signature" with its grammatical variations and cognate expressions means adoption of any methodology or procedure by a person for the purpose of authenticating an electronic record by means of digital signature; (g) "certifying authority" means a person who has been granted a licence to issue a digital signature certificate under section 24; (4) "certification practice statement" means a statement issued by a certifying authority to specify the practices that the certifying authority employs in issuing digital signature certificates; () "computer network" means the interconnection of one or more computers through—  (3 the use of satellite, microwave, terrestrial line or other communication media; and (i) terminals or a complex consisting of two or more interconnected computers whether or not the interconnection is continuously maintained; () "cyber appellate tribunal" means the cyber regulations appellate tribunal established under sub-section (7) of section 48; {v) "information" includes data, text, images, sound, voice, codes, computer programmes, software and data bases or micro film or computer generated micro fiche; , (w) "intermediary" with respect to any particular electronic message means any person who on behalf of another person receives, stores or transmits that message or provides any service with respect to that message;      (2g) "subscriber" means a person in whose name the digital signature certificate is issued;     chapter d diciva signaturelegal recognition of digital signatures 5 where any law provides that information or any other matter shall be authenticated by affixing the signature or any document shall be signed or bear the signature of any person then, notwithstanding anything contained in such law, such requirement shal] be deemed to have been satisfied, if such information or matter is authenticated by means of digital signature affixed in such manner as may be prescribed by the central government explanation—for the purposes of this section, "signed", with its grammatical variations and cognate expressions, shall, with reference to a person, mean affixing of his hand written signature or any mark on any document and the expression "signature" shall be construed accordingly 6 (1) where any law provides for— {@) the filing of any form, application or any other document with any office, authority, body or agency owned or controlled by the appropriate government in a particular manner; | use        | of    ||------------|-------|| clectronic |       || records    | and   || digital    |       || signatures | in    || government |       || and        | its   || agencies  |       |(6) the issue or grant of any licence, permit, sanction or approval by whatever name called in a particular manner; (c) the receipt or payment of money in a particular manner, thén, notwithstanding anything contained in any other law for the time being in force, such requirement shall be deemed to have been satisfied if such filing, issue, grant, receipt or payment, as the case may be, is effected by means of such electronic form as may be prescribed by the apprgpriate government (2) the appropriate government may, for the purposes of sub-section (/), by rules, prescribe— (a) the manner and format in which such electronic records shall be filed, created or issued; (2) the manner or method of payment of any fee or charges for filing, creation or issue any electronic record under clause (a)      10, the central government may, for the purposes of this act, by rules, prescribe— (a) the type of digital signature; ; |            | power    | to    ||------------|----------|-------|| make       | rules    | by    || central    |          |       || government |          |       |(6) the mamer and format in which the digital signature shail be affixed; in respect of digital signature(c) the manner or procedure which facilitates identification of the persan affixing the digital signature; (@ control processes and procedures to ensure adequate integrity, security and confidentiality of electronic records or payments; and (e) any other matter which is necessary to give legal effect to digital signatures   s  + 12 (7) where the originator has not agreed with the addressee that the acknowledgment acknowledgetment of receipt of rec of electronic record be given in a particular form or by a particular method, an acknowledg:rent may be given by— (a) any communication by the addressee, automated or otherwise; or _ (6) any conduct of the addressee, sufficient to indicate to the originator that the electronic record has been received       chapter v secure electronic records and secure digital signatures      secure digital signature, 15 if, by application of a security procedure agreed to by the parties concerned, it can be verified that a digitat signature, at the time it was affixed, was— (a) unique to the subscriber affixing it; (5) capable of identifying such subscriber; (c) created in a manner or using a means under the exclusive control of the subscriber and is linked to the electronic record to which it relates in such a manner that if the electronic record was altered the digital signature would be invalidated, then such digital signature shall be deemed to be a secure digital signature security procedure 16 the central government shail for the purposes of this act prescribe the security procedure having regard to commercial circumstances prevailing at the time when the procedure was used, including— (@ the nature of the transaction; (6) the level of sophistication of the parties with reference to their technological capacity; (c) the volume of similar transactions engaged in by other parties; {d) the availability of alternatives offered to but rejected by any party; (e) the cost of alternative procedures; and ' (f the procedures in general use for similar types of transactions or communications      18 the controller may perform all or any of the following functions, namely:— functions of controller      (f) specifying the contents of written, printed or visual materials and advertiseients that may be distributed or used in respect of a digital signature certificate and the public key; (g) specifying the form and content ofa digital signature certificate and the key;      19(f/)     recognition (2) where any certifying authority is recognised under sub-section (/), the digital signature certificate issued by such certifying authority shall be valid for the purposes of of foreign certifying authorities this act   lj   20 (1) the controller shall be the repository of all digital signature certificates issued under this actcontroller to act as repository (2) the controller shall— (a) make use of hardware, software and procedures that are secure from intrusion and misuse; (6) observe such other standards as may be prescribed by the central government, to ensure that the secrecy and security of the digital signatures are assured (3) the controller shall maintain a computerised data base of all public keys in such a manner that such data base and the public keys are available to any member of the public 21 (j) subject to the provisions of sub-section (2), any person may make an application, to the controller, for a licence to issue digital signature certificates {2) no licence shall be issued under sub-section {7}, unless the applicant fulfills licence to issue digital signature certificates, such requicements with respect to qualification, expertise, manpower, financial resources and other infrastructure facilities, which are necessary to issue digital signature certificates as may be prescribed by the central government   e   230)? +  7 «  suspension of licence (3) no certifying authority whose licence has been suspended shall issue any digital signature certificate during such suspension | 2         |      ||-----------|-------|| access    | to    || computers |       || and       | data |29 (1) without prejudice to the provisions of sub-section (/) of section 69, the coutroller or any person authorised by him shall, if he has reasonable cause to suspect that any contravention of the provisions of this act, rules or regulations made thereunder has been committed, have access to any computer system, any apparatus, data or any other materia] connected with such system, for the purpose of searching or causing a search to be made for obtaining any information or data contained in or available to such computer system |     |     |     |     |     ||------|------|------|------|------|30 every certifying authority shall,——     1 certifying authority fo follow certain procedures, (e) adhere to security procedures to ensure that the secrecy and privacy of the digital signatures are assured; and    s  disclosure - 34 (7) every certifying authority shall disclose in the manner specified by regulations— (a) its digital signature certificate which contains the public key corresponding to the private key used by that certifying authority to digitally sign another digital signature certificate; ,    i  (@ any other fact that materially and adversely affects either the reliability of a digital signatyre certificate, which that authority has issued, or the authority's ability to perform its services (2) where in the opinion of the certifying authority any event has occurred or any situation has arisen which may materially and adversely affect the integrity of its computer system or the conditions subject to which a digital signature certificate was granted, then, the certifying authority shall— (a) use reasonbale efforts to notify any person who is likely to be affected by that occurrence; or (6) act in accordance with the procedure specified in its certification practice statement to deal with such event or situation  chapter vidictta, signature certiricares 35 (7)   py   (4) on receipt of an application under sub-section (7), the certifying authority may, after consideration of the certification practice statement or the other statement under certifying authority to issue digital signature certificatesub-section (3) and after making such enquiries as it may deem fit, grant the digital signature certificate or for reasons to be recorded in writing, reject the application: providd that no digital signature certificate shall be granted unless the certifying authority is satisfied that— (a) the applicant holds the private key corresponding to the public key to be listed in the digital signature certificate; (4) the applicant holds a private key, which is capable of creating a digital signature; (c) the public key to be listed in the certificate can be used to verify a digital signature affixed by the private key held by the applicant: provided further that no application shall be rejected unless the applicant has been given a reasonable opportunity of showing cause against the proposed rejection |     |     |     |     |     ||------|------|------|------|------| chapter ix penalties and adjudicationpenalty for 43 ifany person without permission of the owner or any other person who is incharge damage to of a computer, computer system or computer network,— computer, computer (a) accesses or secures access to such computer,computer system or computer system, etc network;      power to 46 (1) for the purpose of adjudging under this chapter whether any person has adjudicate committed a contravention of any of the provisions of this act or of any rule, regulation, direction or order made thereunder the central government shall, subject to the provisions of sub-section (3), appoint any officer not below the rank of a director to the government of india or an equivalent officer of a state government to be an adjudicating officer for holding an inquiry in the manner prescribed by the central government       chapter x tue cyber regulations appellate tribunalestablishment 48 (/) the central government shall, by notification, establish one or more appellate appellate tribunals to be known as the cyber regulations appellate tribunal tribunal, 2     composition 49 a cyber appellate tribunal shall consist of one person only (hereinafter referred to of cyber as the presiding officer of the cyber appellate tribunal) to be appointed, by notification, by tike nal the central government qualifications 50 a person shall not be qualified for appointment as the presiding officer ofa cyber for appellate tribunal unless he— appointment as presiding (a) is, or has been, or is qualified to be, a judge of a high court; or officer of the cyber (4) is or has been a member of the indian legal service and is holding or has held appellate a post in grade i of that service for at least three years term of §1 the presiding officer of a cyber appellate tribunal shall hold office for a term of office five years from the date on which he enters upon his office or until he attains the age of sixtyfive years, whichever is earlier52, the salary and allowances payable to, and the other terms and conditions of service including pension, gratuity and other retirement benefits of, the presiding officer of a cyber appellate tribunal shall be such as may be prescribed: provided that neither the salary and allowances nor the other terms and conditions of service of the presiding officer shall be varied to his disadvantage after appointment salary, allowances and other terms and conditions of service of presiding officer filling up of vacancies 53 if, for reason other than temporary absence, any vacancy occurs in the office of the presiding officer of a cyber appellate tribunal, then the central government shall appoint another person in accordance with the provisions of this act to fill the vacancy and the proceedings may be continued before the cyber appellate tribunal from the stage at which the vacancy is filled resignation and removal 54, (1) the presiding officer of a cyber appellate tribunal may, by notice in writing under his hand addressed to the central government, resign his office: 'provided that the said presiding officer shall, unless he is permitted by the central government to relinquish his office sooner, continue to hold office until the expiry of three months from the date of receipt of such notice or until a person duly appointed as his successor enters upon his office or until the expiry of his term of office, whichever is the earliest (2) the presiding officer of a cyber appellate tribunal shall not be removed from his office except by an order by the central government on the ground of proved misbehaviour or incapacity after an inquiry made by a judge of the supreme court in which the presiding officer concerned has been informed of the charges against him and given a reasonable opportunity of being heard in respect of these charges (3) the central government may, by rules, regulate the procedure for the investigation of misbehaviour or incapacity of the aforesaid presiding officer 55 no order of the central government appointing any person as the presiding officer | orders       |     ||--------------|------|| constituting |      || appellate    |      || tribunal     | to   |of a cyber appellate tribunal shall be called in question in any manner and no act or proceeding before a cyber appellate tribunal shall be called in question in any manner on the ground merely of any defect in the constitution of a cyber appellate tribunal | final        | and    ||--------------|--------|| invalidate   | its    || proceedings |        |56, (j) the central government shall provide the cyber appellate tribunal with such officers and employees as that government may think fit staff of the cyber appellate tribunal (2) the officers and employees of the cyber appellate tribunal shall discharge their functions under general superintendence of the presiding officer (3) the salaries, allowances and other conditions of service of the officers and employees of the cyber appellate tribunal shal! be such as may be prescribed by the central government,      recovery of penalty 64 a penalty imposed under this act, if it is not paid, shal! be recovered as an arrear of land revenue and the licence or the digital signature certificate, as the case may be, shall be suspended till the penalty is paid    hacking with computer system66 (7) whoever with the intent to cause or knowing that he is likely to cause wrongful loss or damage to the public or any person destroys or deletes or alters any information residing in a computer resource or diminishes is value or utility or affects it injuriously by any means, commits hacking (2) whoever commits hacking shall be punished with imprisonment up to three years, or with fine which may extend up to two lakh rupees, or with both 67 whoever publishes or transmits or causes to be published in the electronic form, any material which is lascivious or appeals to the prurient interest or if its effect is such as to tend to deprave and corrupt persons who are likely, having regard to alt relevant circumstances, to read, see or hear the matter contained or embodied in it, shall be punished on first conviction with imprisonment of either description for a term which may extend to publishing of information which is obscene in electronic form five years and with fine which may extend to one lakh rupees and in the event ofa second or subsequent conviction with imprisonment of either description for a term which may extend to ten years and also with fine which may extend to two jakh ruppes 68 (1)      | power       | of    ||-------------|-------|| controller  | to    || give        |       || directions |       |(2) any person who fails to comply with any order under sub-section (/) shalt be guilty ofan offence and shalt be liable on conviction to imprisonment for a term not exceeding three years or to a fine not exceeding two lakh rupees or to both - 69 (1) if the controller is satisfied that it is necessary or expedient so to do in the |            | directions    | of    ||------------|---------------|-------|| controller | to            | a     || subscriber | to            |       || extend     |               |       |interest of the sovereignty or integrity of india, the security of the state, friendly relations with foreign states or public order or for preventing incitement to the commission of any cognizable offence, for reasons to be recorded in writing, by order, direct any agency of the government to intercept any information transmitted through any computer resource | facilities    ||---------------|| decrypt       || information  |(2) the subscriber or any person incharge of the computer resource shall, when called upon by any agency which has been directed under sub-section (j), extend all facilities and technical assistance to decrypt the information (3) the subscriber or any person who fails to assist the agency referred to in subsection (2) shall be punished with an imprisonment for a term which may extend to seven years 70 (1) the appropriate government may, by notification in the official gazette, declare protected system that any computer, computer system or computer network to be a protécted system |                |     ||-----------------|------|| penalty         |      || for             | mis- || representation |      |71 whoever makes any misrepresentation to, or suppresses any material fact from, the controller or the certifying authority for obtaining any licence or digital signature certificate, as the case may be, shal! be punished with imprisonment for a term which may extend to two years, or with fine which may extend to one lakh rupees, or with both, |     |     |     |     |     ||------|------|------|------|------|73 (1) no person shall publish a digital signature certificate or otherwise make it available to any other person with the knowledge that— |             |     |        ||--------------|------|---------|| penalty      | for  |         || publishing   |      |         || digital      |      |         || signature    |      |         || certificate  |      |         || false        | in   | cestain || particulars |      |         || publication  | for  |         || fraudulent   |      |         || purpose     |      |         |74, whoever knowingly creates, publishes or otherwise makes available a digital signature certificate for any fraudulent or unlawful purpose shail be punished with imprisonment for aterm which may extend to two years, or with fine which may extend to one lakh rupees, or with both      77, no penalty imposed or confiscation made under this act shall prevent the imposition of any other punishment to which the person affected thereby is liable under any other law for the time being in force| penalties    | or    ||--------------|-------|| confiscation |       || nat          | to    || interfere    |       || with         | other || punishments |       ||             |                 |          |           |     |      |      |        |                | 2          | of     | 1974    ||-------------|-----------------|----------|-----------|-----|------|------|--------|----------------|------------|--------|----------|| 78         | notwithstanding | anything | contained | in  | the  | code | of     | criminal       | procedure, | 1973,  | a        || police      | officer         | not      | below     | the | rank | of   | deputy | superintendent | of         | police | shall    || power       | to              |          |           |     |      |      |        |                |            |        |          || investigate |                 |          |           |     |      |      |        |                |            |        |          || offences   |                 |          |           |     |      |      |        |                |            |        |          || offence     | under           | this     | act      |     |      |      |        |                |            |        |          | chapter xii network service providers not to be liable in certain casesnetwork service providers not to be liable in certain cases 79 for the removal of doubts, it is hereby declared that no person providing any service as a network service provider shall be liable under this act, rules or regulations made thereunder for any third party information or data made available by him if he proves that the offence or contravention was committed without his knowledge or that he had exercised all due diligence to prevent the commission of such offence or contravention explanation,—for the purposes of this section, - (a) "network service provider" means an intermediary; (5) "third party information" means any information dealt with by a network service provider in his capacity as an intermediary  chapter xill miscellaneous|           |         |                 |          |            |           |        |           |            | 2          | of             | 1974      ||-----------|---------|-----------------|----------|------------|-----------|--------|-----------|------------|------------|----------------|------------|| 80       | (7)     | notwithstanding | anything | contained  | in        | the    | code      | of         | criminal   | procedure,     | 1973,      || any       | police  | officer,        | not      | below      | the       | rank   | of        | a          | deputy     | superintendent | of         || officer   | of      | the             | central  | government | or        | a      | state     | government | authorised | by             | the        || power     | of      |                 |          |            |           |        |           |            |            |                |            || police    | officer |                 |          |            |           |        |           |            |            |                |            || and other |         |                 |          |            |           |        |           |            |            |                |            || officers  | to      |                 |          |            |           |        |           |            |            |                |            || enter,    | search, |                 |          |            |           |        |           |            |            |                |            || etc,      |         |                 |          |            |           |        |           |            |            |                |            || in        | this    | behalf          | may      | enter      | any       | public | place and | search     | and        | arrest         | without    || found     | therein | who             | is       | reasonably | suspected | or     | having    | committed  | or         | of             | committing || about     | to      | commit          | any      | offence    | under     | this   | act      |            |            |                |            |explanation,—for the purposes of this sub-section, the expression "public place" includes any public conveyance, any hotel, any shop or any other place intended for use by, or accessible to the public (2) where any person is arrested under sub-section (/) by an officer other than a police officer, such officer shall, without unnecessary delay, take or send the person arrested before a magistrate having jurisdiction in the case or before the officer-in charge of a police station |            |       |            |          |        |      |     |          |            |      |        | 2        | of    | 1974,    ||------------|-------|------------|----------|--------|------|-----|----------|------------|------|--------|----------|-------|----------|| (3)        | the   | provisions | of       | the    | code | of  | criminal | procedure, | 1973 | shall, | subject  | to    | the      || provisions | of    | this       | section, | apply, | so   | far | as       | may        | be,  | in     | relation | to    | any:     || made       | under | this       | section |        |      |     |          |            |      |        |          |       |          |82 the presiding officer and other officers and employees of a cyber appellate tribunal, the controller, the deputy controller and the assistant controllers shall be deemed 45 of 1860 to be public servants within the meaning of section 21 of the indian penal code controller, deputy collector and assistant controllers to be public servants, (2) in particular, and without prejudice to the generality of the foregoing power, such power of central government rules may provide for all or any of the following matters, namely:— to make rules,(a) the manner in which any information or matter may be authenticated by means of digital signature under section 5; (5) the electronic form in which filing, issue, grant or payment shall be effected under sub-section (/) of section 6; (c) the manner and format in which electronic records shall be filed, or issued and the method of payment under sub-section (2) of section 6; (d) the matters relating to the type of digital signature, manner and format in which it may be affixed under section 10;      (») the form in which application for issue of a digital signature certificate may be made under sub-section (£) of section 35; (0) the fee to be paid to the certifying authority for issue of a digital signature certificate under sub-section (2) of section 35;       (3) every notification made by the central government under clause (/) of sub-section (4 of section 1 and every rule made by it shall be laid, as soon as may be after it is made, before each house of parliament, while it is in session, for a total period of thirty days which may be comprised in one session or in two or more successive sessions, and if, before the expiry of the session immediately following the session or the successive sessions aforesaid, both houses agree in making any modification in the notification or the rule or both houses agree that the notification or the rule should not be made, the notification or the rule shall thereafter have effect only in such modified form or be of no effect, as the case may be; so, however, that any such modification or annulment shall be without prejudice to the validity of anything previously done under that notification or rule ld     90 qd     (2) in particular, and without prejudice to the generality of the foregoing power, such power of state government to make rules rules may provide for all or any of the following matters, namely: -    ©  (c) any other matter which is required to be provided by rules by the state government   :    91 the indian penal code shail be amended in the manner specified in the first schedule to this act 92 the indian evidence act, 1872 shal] be amended in the manner specified in the second schedule to this act amendment of act 45 of 1860 amendment of act 1 of 1872 amendment 93, the bankers' books evidence act, 1891 shall be amended in the manner specified in the third schedule to this act 94, the reserve bank of india act, 1934 shall be amended in the manner specified in the fourth schedule to this act of act 18 of 1891, amendment of act 2 of 1934  the first schedule (see section 91) amendments to the indian penal cope (45 of 1860)1 after section 29, the following section shall be inserted, namely:— electronic record, "294a the words "electronic record" shall have the meaning assigned to them in clause (4) of sub-section (/) of section 2 of the information technology act, 2000" 2, in section 167, for the words "such public servant, charged with the preparation or translation of any document, frames or translate that document", the words "such public servant, charged with the preparation or translation of any document or electronic record, frames, prepares or translates that document or electronic record" shall be substituted, 3 in section 172, for the words " produce a document in a court of justice", the words "produce a document or an electronic record in a court of justice" shall be substituted 4 in section 173, for the words "to produce a document in a court of justice", the words "to produce a document or electronic record in a court of justice" shall be substituted § in section 175, for the word "document" at bota;the places where it occurs, the words "document or electronic record" shall be substituted 6 in section 192, for the words "makes any false entry in any book or record, or makes any document containing a false statement", the words "makesany false entry in any book or record, or electronic record or makes any document or electromtecord containing a false statement" shall be substituted 7 in section 204, for the word "document" at both the places where it occurs, the words " document or electronic record" shall be substituted 8 in section 463, for the words "whoever makes any false documents or part of a document with intent to cause damage or injury", the words "whoever makes any false documents or false electronic record or part of a document or electronic record, with intent to cause damage or injury" shall be substituted 9 in section 464,— (a) for the portion beginning with the words "a person is said to make a false document" and ending with the words "by reason of deception practised upon him, he does not know the contents of the document or the nature of the alteration", the following shall be substituted, namely:— "a person is said to make a false document or false electronic record— first—who dishonestly or fraudulently— (a) makes, signs, seals or executes a document or part of a document; (2) makes or transmits any electronic record or part of any electronic record; (c) affixes any digital signature on any electronic record; (a) makes any mark denoting the execution of a document or the authenticity of the digital signature, with the intention of causing it to be believed that such document or part of document, electronic record or digital signature was made, signed, sealed, executed, transmitted or affixed by or by the authority of a person by whom or by whose authority he knows that it was not made, signed, sealed, executed or affixed; or secondly—who, without lawful authority, dishonestly or fraudulently, by cancellation of otherwise, alters a document or an electronic record in any material part thereof, after it has been made, executed or affixed with digital signature either by himself or by any other person, whether such person be living or death at the time of such alteration; or thirdly—who dishonestly or fraudulently causes any person to sign, seal, execute or alter a document or an electronic record or to affix his digital signature on any electronic record knowing that such person by reason of unsoundness of mind or intoxication cannot, or that by reason of deception practised upon him, he does not know the contents of the document or electronic record or the nature of the alteration":(6) after explanation 2, the following explanation shall be inserted at the end, namely:— 'explanation 3—for the purposes of this section, the expression "affixing digital signature" shall have the meaning assigned to it in clause (a) 21 of 2000 of sub-section (7) of section (2) of the information technology act, 2000' 10 in section 466,—- (a) for the words "whoever forges a document", the words "whoever forges a document or an electronic record" shall be substituted; (d) the following explanation shall be inserted at the end, namely:— 'explanation—for the purposes of this section, "register" includes any list, data or record of any entries maintained in the electronic form as defined in 21 of 2000clause (r) of sub-section (/) of section 2 of the information technology act, 2000" 11 in section 468, for the words "document forged", the words "document or electronic record forged" shall be substituted 12, in section 469, for the words "intending that the document forged", the words "intending that the document or electronic record forged" shall be substituted 13 in section 470, for the words "document", in both the places where it occurs, the words "document or electronic record" shal! be substituted 14 insection 471, for the words "document", wherever it occurs, the words "document or electronic record" shall be substituted 15, in section 474, for the portion beginning with the words "whoever has in his possession any document" and ending with the words "if the document is one of the description mentioned in section 466 of this code", the following shall be substituted, namely:-— , "whoever has in his possession any document or electronic record, knowing the same to be forged and intending that the same shall fraudulently or dishonestly be used as a genuine, shall, if the document or electronic record is one of the description mentioned in section 466 of this code" 16 in section 476, for the words "any document", the words "any document or electronic record" shall be substituted 17, insection 477a, for the words "book, paper, writing" at both the places where they occur, the words "book, electronic record, paper, writing" shall be substituted  the second schedule (see section 92) amendments to the indian evipencs ar, 1872 (1 of 1872)1 in section 3,— (a) in the definition of "evidence", for the words "all documents produced for the inspection of the court", the words "all documents including electronic records produced for the inspection of the court" shall be substituted; (5) after the definition of "india", the following shall be inserted, namely:— 'the expressions "certifying authority" "digital signature", "digital signature certificate", "electronic form", "electronic records", "information", "secure electronic record", "secure digital signature" and "subscriber" shall have the meanings respectively assigned to them in the information technology act, 2000' 2 in section 17, for the words "oral or documentary,", the words "oral or documentary or contained in electronicform" shall be substituted 3 after section 22, the following section shall be inserted, namely:— "22a oral admissions as to the contents of electronic records are not relevant, © when oral admission as unless the genuineness of the electronic record produced is in question" 4 in section 34, for the words "entries in the books of account", the words "entries in the books of account, including those maintained in an electronic form" shall be substituted | to         | contents    ||------------|-------------|| electronic |             || records    | are         || relevant,  |             |5 in section 35, for the word "record", in both the places where it occurs, the words "record or an electronic record" shall be substituted 6 for section 39, the following section shall be substituted, namely:— "39 when any statement of which evidence is given forms part of 2 longer what evidence statement, or of a conversation or part of an isolated document, or is contained in a document which forms part of a book, or is contained in part of electronic record or of a connected series of letters or papers, evidence shall be given of so much and no more of the statement, conversation, document, electronic record, book or series of letters | to            | be    | given    ||---------------|-------|----------|| when          |       |          || statement     |       |          || forms         | part  | of       || conversation, |       |          || document,     |       |          || electronic    |       |          || record,       | book  |          |or papers as the court considers necessary in that particular case to the full understanding of the nature and effect of the statement, and of the circumstances under which it was made" 7, after section 47, the following section shall be inserted, namety:— | or      | series    ||---------|-----------|| letters | or        || papers |           |"474 when the court has to form an opinion as to the digital signature of any person, the opinion of the certifying authority which has issued the digital signature certificate is a relevant fact" | opinion    ||------------|| digital    || signature  || when       || televant  |8 in section 59, for the words "contents of documents", the words "contents of documents or electronic records" shall be substituted 9 after section 65, the following sections shall be inserted, namely:— '65a the contents of electronic records may be proved in accordance with the provisions of section 65b, special provision as to evidence relating to electronic tecord, admissibility of electronic records65b (4) notwithstanding anything contained in this act, any information contained in an electronic record which is printed on a paper, stored, recorded or copied in optical or magnetic media produced by a computer (hereinafter referred to as the computer output) shall be deemed to be also a document, if the conditions mentioned in this section are satisfied in relation to the information and computer in question and shall be admissible in any proceedings, without further proof or production of the original, as evidence of any contents of the original or of any fact stated therein of which direct evidence would be admissible (2) the conditions referred to in s»b-section (/) in respect of a computer output shali be the following, namely:— (a) the computer output containing the information was produced by the computer during the period over which the computer was used regularly to store or process information for the purposes of any activities regularly carried on over that period by the person having lawful control over the use of the computer; (8) during the said period, information of the kind contained in the electronic record or of the kind form which the information so contained is derived was regularly fed into the computer in the ordinary course of the said activities; (c) throughout the material part of the said period, the computer was opetating properly or, if not, then in respect of any period in which it was not operating properly or was out of operation during that part of the period, was not such as to affect the electronic record or the accuracy of its contents; and @ the information contained in the electronic fecord reproduces or is derived form such information fed into the computer in the ordinary course of the said activities (3) where over any period, the function of storing or processing information for the purposes of any activities regularly carried on over that period as mentioned in clause (a) of sub-section (2} was regularly performed by computers, whether— (a) by a combination of computers operating over that period; or (5) by different computers operating in succession over that period; or (c) by different combinations of computers operating in succession over that period; or  (d@) in any other manner involving the successive operation over that period, in whatever order, of one or more computers and one or more combinations of computers, all the computers used for that purpose during that period shall be treated for the purposes of this section as constituting a single computer; and references in this section to a computer shall be construed accordingly (4) in any proceedings where it is desired to give a statement in evidence by virtue of this section, a certificate doing any of the following things, that is to say,— (@ identifying the elettronic record containing the statement and describing the manner sin which it was produced; (4) giving such particulars of any device involved in the production of that electronic record as may be appropriate for the purpose of showing that the electronic record was produced by a computer; (c) dealing with any of the matters to which the conditions mentioned in sub-section (2) relate, : and purporting to be signed by a person occupying a responsible official position in relation to the operation of the relevant device or the management of the relevant activities (whichever is appropriate) shall be evidence of any matter stated in the certificate; and for the purposes of this sub-section it shall be sufficient for a matter to be stated to the best of the knowledge and belief of the person stating it (5) for the purposes of this section,— "3 (a) information shall taken to be supplied to a computer if it is supplied thereto in any appropriate form and whether it is so supplied directly or (with or without human intervention) by means of any appropriate equipment; (b) whether in the course of'activities carried on by any official, information is supplied with a view to its being stored or processed for the purposes of those activities, by a computer operated otherwise than in the course of those that information, of duly supplied to that computer, shall be taken to be supplied to it in the course of those activities; (c) acomputer output shail be taken to have been produced by a computer whether it was produced by it directly or (with or without human intervention) by means of any appropriate equipment explanation —for the purposes of this section any reference to information being derived from other information shall be a reference to its being derived therefrom by calculation, comparison or any other process',10 after section 67, the following section shall be inserted, namely:— "67a except in the case of a secure digital signature, if the digital signature of any subscriber is alleged to have been affixed to an electronic record the fact that such | proof      ||------------|| digital    || signature |digital signature is the digital signature of the subscriber must be proved" 11 after section 73, the following section shall be inserted, namely:— proof as to verification '734a in order to ascertain whether a digital signature is that of the person by whom it purports to have been affixed, the court may direct— of digital signature (a) that person or the controller or the certifying authority to produce the digital signature certificate; (6) any other person to apply the public key listed in the digital signature certificate and verify the digital signature purported to have been affixed by that person 21 of 2000 explanation—for the purposes of this section, "controller" means the controller appointed under sub-section (/) of section 17 of the information technology act, 2000' 12 after section 81, the following section shall be inserted, namely:-— presumption as to gazettes in clectronic forms, "81a the court shall presume the genuineness of every electronic record purporting to be the official gazette, or purporting to be electronic record directed by any law to be kept by any person, if such electronic record is kept substantially in the form required by law and is produced from proper custody" 13 after section 85, the following sections shall be inserted, namely:— presumption "85a the court shall presume that every electronic record purporting to be an agreement containing the digital signatures of the parties was so concluded by affixing the digital signature of the parties | as          ||-------------|| electronic  || agreements || presumption |85b (7) in any proceedings involving a secure electronic record, the court shall presume unless contrary is proved, that the secure electronic record has not been altered since the specific point of time to which the secure status relates | as          | to      ||-------------|---------|| tonic       | records || and         | digital || signatures, |         |(2) in any proceedings, involving secure digital signature, the court shall presume unless the contrary is proved that-— (a) the secure digital signature is affixed by subscriber with the intention of signing or approving the electronic record; (d) except in the case of a secure electronic record or a secure digital signature, nothing in this section shall create any presumption relating to authenticity and integrity of the electronic record or any digital signature 85c the court shall presume, unless contrary is proved, that the information presumption as to digital signature certificates listed in a digital signature certificate is correct, except for information specified as subscriber information which has not been verified, if the certificate was accepted by the subscriber" 14, after section 88, the following section shail be inserted, namely:— presumption as to electronic messages'88a, the court may presume that an electronic message forwarded by the originator through an electronic mail server to the addressee to whom the message purports to be addressed corresponds with the message as fed into his computer for transmission; but the court shall not make any presumption as to the person by whom such message was sent explanation—for the purposes of this section, the expression "addressee" and "originator" shall have the same meanings respectively assigned to them in clauses (4) and (za) of sub-section (/) of section 2 of the information technology act, 2000' 15 after section 90, the following section shall be inserted, namely:— presumption "0a where any electronic record, purporting or proved to be five years ald, is produced from any custody which the court in the particular case considers proper, | as         | to    ||------------|-------|| electronic |       || records    | five  || years      | old  |the court may presume that the digital signature which purports to be the digital signature of any particular person was so affixed by him or any person authorised by him in this behalf explanation—electronic records are said to be in proper custody if they are in the place in which, and under the care of the person with whom, they naturally be; but no custody is improper if it is proved to have had a legitimate origin, or the circumstances of the particular case are such as to render such an origin probable this explanation applies also to section 81a" 16 for séction 131, the following section shall be substituted, namely:— "131 no one shall be compelled to produce documents in his possession or electronic records under his control, which any other person would be entitled to refuse to produce if they were in his possession or control, unless such last-mentioned person consents to their production"  the third schedule| production    | of     ||---------------|--------|| documents     | or     || electronic    |        || records       | which  || another       |        || person,       | having || possession,   |        || could         | refuse || produce      |        | (see section 93) amendments to the bankers' books evidence act, 1891 (18 of 1891)1 in section 2— {a) for clause (3), the following clause shall be substituted, namely:— '(3) "bankers' books" include ledgers, day-books, cash-books, accountbooks and all other books used in the ordinary business of a bank whether kept in the written form or as printouts of data stored in a floppy, disc, tape or any other form of electro-magnetic data storage device; (4) for clause (8), the following clause shall be substituted, namely:— (8) "certified copy" means when the books of bank,— (a) are maintained in written form, a copy of any entry in such books together with a certificate written at the foot of such copy that it is a true copy of such entry, that such entry is contained in one of the ordinary books of the bank and was made in the usual and ordinary course of business and that such book is still in the custody of the bank, and where the copy was obtained by a mechanical or other process which in itself ensured the accuracy of the copy, a further certificate to that effect, but where the book from which such copy was prepared has been destroyed in the usual course of the bank's business after the date on which the copy had been so prepared, a further certificate to that effect, each such certificate being dated and subscribed by the principal accountant or manager of the bank with his name and official title; and (8) consist of printouts of data stored in a floppy, disc, tape or any other electro-magnetic data storage device, a printout of such entry or a copy of such printout together with such statements certified in accordance with the provisions of section 2a' 2 after section 2, the following section shall be inserted, namely:— conditions in the printout"2a a printout of entry or a copy of printout referred to in sub-section (8) of section 2 shall be accompanied by the following, namely:— (a) a certificate to the effect that it is a printout of such entry or a copy of such printout by the principal accountant or branch manager; and (6) a certificate by a person in-charge of computer system containing a brief description of the computer system and the particulars of - (4) the safeguards adopted by the system to ensure that data is entered or any other operation performed only by authorised persons; (b) the safeguards adopted to prevent and detect unauthorised change of data; (c) the safeguards available to retrieve data that is lost due to systemic failure or any other reasons; (d) the manner in which data is transferred from the system to removable media like floppies, discs, tapes or other electro-magnetic data storage devices; (e) the mode of verification in order to ensure that data has been accurately transferred to such removable media; (f) the mode of identification of such data storage devices; (g) the arrangements for the storage and custody of such storage devices; (h) the safeguards to prevent and detect any tampering with the system; and () any other factor which will vouch for the integrity and accuracy of the system (c) a further certificate from the person in-charge of the computer system to the effect that to the best of his knowledge and belief, such computer system operated properly at the material time, he was provided with all the relevant data and the printout in question represents correctly, or is appropriately derived from, the relevant dat  the fourth schedule (see section 94) amendments to the reserve bank of inpia act, 1934 (zor 1934)2 of 1934 in the reserve bank of india act, 1934, in section 58, in sub-section (2), after clause (p), the following clause shall be inserted, namely:— "(pp) the regulation of fund transfer through electronic means between the banks or between the banks and other financial institutions referred to in clause {c) of section 45-i, including the laying dawn of the conditions subject to which banks and other financial institutions shall participate in such fund transfers, the manner of such fund transfers and the rights and obligations of the participants in such fund transfers;"   la   