Cyber Regulations Appellate Tribunal (CRAT) — Intellectual Property Rights I Notes

Cyber Regulations Appellate Tribunal (CRAT)

When an Adjudicating Officer fines a company lakhs of rupees for a data breach, the company must be able to appeal without rushing to the High Court. The IT Act created a specialist forum for exactly this — a tribunal of technical and legal minds to hear cyber-law appeals.

What the Tribunal is

The Cyber Regulations Appellate Tribunal (CRAT) — later renamed the Cyber Appellate Tribunal (CyAT) — was established under s.48 of the IT Act, 2000, as a specialised appellate body to hear appeals against the orders of the Controller and the Adjudicating Officers under the Act.

Constitution. Originally the Tribunal consisted of a single Presiding Officer; the 2008 amendment allowed a Chairperson and other Members. The Presiding Officer had to be qualified to be, or to have been, a Judge of a High Court.

Jurisdiction and appeals (s.57). Any person aggrieved by an order of the Controller or an Adjudicating Officer may appeal to the Tribunal within 45 days. The Tribunal has the powers of a civil court and is guided by the principles of natural justice, not bound by the Code of Civil Procedure. A further appeal from the Tribunal lies to the High Court within 60 days (s.62).

⚠️ The Cyber Appellate Tribunal no longer exists as a separate body. By the Finance Act, 2017, it was merged into the Telecom Disputes Settlement and Appellate Tribunal (TDSAT), which now hears IT Act appeals. Answer the question on the CRAT’s original scheme, but note that its functions have been transferred to TDSAT — do not present it as a live, standalone tribunal.

Information Technology Act, 2000, s.48(1): “The Central Government shall, by notification, establish one or more appellate tribunals to be known as the Cyber Appellate Tribunal.”

Information Technology Act, 2000, s.57(1): “any person aggrieved by an order made by the Controller or an adjudicating officer under this Act may prefer an appeal to a Cyber Appellate Tribunal having jurisdiction in the matter.”

In Simple Terms: The Cyber Regulations/Appellate Tribunal (s.48) was a specialist forum to hear appeals against orders of the Controller and Adjudicating Officers, within 45 days, with a further appeal to the High Court. Since the Finance Act, 2017, its work has been taken over by the TDSAT.

🧩 WORKED EXAMPLE — appealing an adjudication order

Facts. An Adjudicating Officer imposes a penalty on a company for a data breach. The company wants to challenge it.

Rule. s.57 — an aggrieved person may appeal to the Cyber Appellate Tribunal (now TDSAT) within 45 days; a further appeal lies to the High Court within 60 days (s.62).

Apply. The company is aggrieved by the officer’s order and may file an appeal to the Tribunal (TDSAT) within 45 days; if still dissatisfied, it may approach the High Court.

Conclusion. The proper remedy is a statutory appeal to the Tribunal within 45 days, not a fresh suit.

flowchart TD
    ADJ["Adjudicating Officer (s.46) / Controller"]:::root
    ADJ -->|"appeal within 45 days (s.57)"| CAT["Cyber Appellate Tribunal (s.48)"]:::leaf
    CAT -->|"appeal within 60 days (s.62)"| HC["High Court"]:::leaf
    CAT --> NOTE["Merged into TDSAT — Finance Act, 2017"]:::warn
    classDef root fill:#FFF8DC,stroke:#000,color:#000;
    classDef leaf fill:#E6F3FF,stroke:#1E3A8A,color:#000;
    classDef warn fill:#FDE2E2,stroke:#B91C1C,color:#000;

Case Laws

Shreya Singhal v Union of India (2015) — reviewed the Act’s enforcement and appellate architecture.
Umashankar Sivasubramanian v ICICI Bank (2010) — an early phishing case decided by the Adjudicating Officer, the kind of order that goes on appeal to the Tribunal.

📄 Full notes + Question Bank (₹199) — every topic in depth, model answers to all past KSLU questions, in one printable PDF. Get the bundle · 10 Solved Problems · All Intellectual Property Rights I topics