Information Technology Act, 2000 — salient features, objectives, jurisdiction; IPR provisions — Intellectual Property Rights I Notes

Information Technology Act, 2000 — salient features, objectives, jurisdiction; IPR provisions

By 2000 Indians were e-mailing contracts and banking online, yet a judge could not treat an electronic record as “writing” or a digital signature as a “signature” — the Evidence Act of 1872 knew only paper. Parliament fixed this by passing the Information Technology Act, 2000, modelled on the UNCITRAL Model Law on Electronic Commerce (1996), giving electronic records and signatures the same legal standing as paper and ink.

What the Act is and why it exists

The Information Technology Act, 2000 is India’s primary cyber-law. It received Presidential assent on 9 June 2000 and came into force on 17 October 2000. It was enacted to solve a simple problem: the whole of Indian commercial and evidentiary law assumed paper, so an electronic transaction had no clear legal recognition. The Act was later overhauled by the IT (Amendment) Act, 2008 (in force 2009), which added most of the modern cyber-crime sections and replaced “digital signature” with the technology-neutral “electronic signature”.

Objectives of the Act (the “why”):

to grant legal recognition to electronic records and to transactions done by electronic data interchange (e-commerce);
to grant legal recognition to digital / electronic signatures;
to facilitate electronic filing of documents with Government agencies (e-governance);
to facilitate electronic storage of data;
to give legal sanction to electronic fund transfers between banks; and
to prevent and punish cyber crimes and consequently amend the Indian Penal Code, the Indian Evidence Act, 1872, the Bankers’ Books Evidence Act, 1891 and the Reserve Bank of India Act, 1934.

Salient features (the “what” — the list examiners reward):

Legal recognition of electronic records (s.4) — where a law requires information “in writing”, an electronic record satisfies it.
Legal recognition of electronic signatures (ss.5, 3, 3A) — a subscriber may authenticate an electronic record by digital signature (asymmetric cryptography, s.3) or any other prescribed electronic-signature technique (s.3A).
E-governance (ss.4–10A) — use of electronic records and signatures in Government offices, e-filing and e-payment.
Regulation of certifying authorities (ss.17–34) — a Controller of Certifying Authorities licenses and supervises the bodies that issue Digital Signature Certificates.
Cyber offences and penalties (Chapters IX and XI) — civil penalties for data damage (s.43) and criminal punishment for hacking, identity theft, obscenity, cyber terrorism, etc. (ss.65–74).
Adjudication and appeal (ss.46–48) — an Adjudicating Officer decides contraventions; appeals lie to the Appellate Tribunal.
Intermediary liability and safe harbour (s.79) — an intermediary (ISP, host, marketplace) is exempt from liability for third-party content if it observes due diligence.
Extra-territorial operation (ss.1(2), 75) — the Act reaches offences committed outside India if a computer or network in India is involved.

A. Jurisdiction of the Act

Jurisdiction is a favourite sub-question, so keep it separate. Under s.1(2) the Act extends to the whole of India. Crucially, it also has extra-territorial reach: read with s.75, it applies to an offence or contravention committed outside India by any person of any nationality, provided the act involves a computer or network located in India. So a hacker sitting abroad who attacks a server in India is caught by the Act.

B. IPR provisions and exclusions

The IT Act is not itself an IP statute, but it touches IP at two points. First, s.1(4) read with the First Schedule originally excluded certain documents from the Act (negotiable instruments, powers of attorney, trusts, wills, and sale of immovable property) — so not everything can be done electronically. Secondly, IP enforcement online relies on the Act’s recognition of electronic records as evidence (e.g. proving online infringement), while the substantive IP rights stay in the Copyright, Trade Marks and Patents Acts.

Information Technology Act, 2000, s.4: “Where any law provides that information or any other matter shall be in writing or in the typewritten or printed form, then, notwithstanding anything contained in such law, such requirement shall be deemed to have been satisfied if such information or matter is rendered or made available in an electronic form; and accessible so as to be usable for a subsequent reference.”

Information Technology Act, 2000, s.75(1): “the provisions of this Act shall apply also to any offence or contravention committed outside India by any person if the act or conduct constituting the offence or contravention involves a computer, computer system or computer network located in India.”

In Simple Terms: The IT Act, 2000 makes electronic records and signatures legally valid, sets up e-governance and certifying authorities, and punishes cyber crimes. It covers the whole of India and even reaches offenders abroad if an Indian computer is involved (s.75). It is cyber law’s backbone; IP rights themselves still come from their own Acts.

🧩 WORKED EXAMPLE — the hacker abroad

Facts. A person in another country hacks into and damages a company’s server physically located in Bengaluru.

Rule. ss.1(2) and 75 — the Act applies to offences committed outside India where a computer/network located in India is involved.

Apply. Although the offender never entered India, the targeted server is in India, so s.75 pulls the offence within the Act; he can be proceeded against under the relevant offence (e.g. s.66 read with s.43).

Conclusion. The extra-territorial provision (s.75) makes the foreign hacker liable under the Indian IT Act.

flowchart TD
    IT["IT Act, 2000 (assent 9 June 2000; in force 17 Oct 2000)"]:::root
    IT --> REC["Legal recognition of e-records (s.4) & e-signatures (ss.3, 3A, 5)"]:::leaf
    IT --> GOV["E-governance & e-filing (ss.4-10A)"]:::leaf
    IT --> CA["Certifying authorities & Controller (ss.17-34)"]:::leaf
    IT --> CRIME["Cyber offences & penalties (ss.43, 65-74)"]:::leaf
    IT --> JUR["Whole of India + extra-territorial (ss.1(2), 75)"]:::leaf
    classDef root fill:#FFF8DC,stroke:#000,color:#000;
    classDef leaf fill:#E6F3FF,stroke:#1E3A8A,color:#000;

Case Laws

Shreya Singhal v Union of India (2015) — struck down s.66A (offensive messages) as unconstitutional, while upholding the rest of the Act; the leading case on the Act’s limits.
Avnish Bajaj v State (2005) — the Bazee.com (eBay India) case; considered intermediary liability under the Act, prompting the s.79 safe-harbour reform.

📄 Full notes + Question Bank (₹199) — every topic in depth, model answers to all past KSLU questions, in one printable PDF. Get the bundle · 10 Solved Problems · All Intellectual Property Rights I topics