The IT Act creates a multi-layered adjudicatory and investigative framework: Adjudicating Officers (S.46) for civil contraventions, the Cyber Appellate Tribunal (now TDSAT) for appeals, and police officers (S.78-80) for criminal investigation of cyber offences.
Legal Framework
| Provision | Subject |
|---|---|
| S.46 | Adjudicating Officer: jurisdiction over S.43-45 contraventions |
| S.47 | Factors for adjudication (quantum of compensation) |
| S.48 | Cyber Appellate Tribunal (establishment) |
| S.49 | Composition of Tribunal |
| S.50 | Qualifications of Chairperson |
| S.51 | Term of office |
| S.52 | Conditions of service |
| S.57 | Appeal to Tribunal (from S.46 orders) |
| S.62 | Appeal to High Court (from Tribunal orders) on substantial question of law |
| S.78 | Offences under IT Act are cognizable (police can investigate without magistrate order) |
| S.80 | Power of police officer (Inspector rank+) to enter, search, arrest |
| S.69 | Power to issue directions for interception/monitoring/decryption |
| S.69A | Power to block websites |
| S.69B | Power to authorize monitoring of traffic data |
Adjudicating Officer (S.46)
| Aspect | Details |
|---|---|
| Appointed by | Central Government (not below rank of Director/equivalent) |
| Jurisdiction | Claims under S.43 (damage to computer system: up to Rs.5 crore per contravention) and S.44 (failure to furnish returns/information) |
| Powers | Same as Civil Court under CPC for: summoning witnesses, examining on oath, receiving evidence on affidavit, issuing commissions |
| Factors for compensation (S.47) | Amount of gain/unfair advantage; amount of loss; repetitiveness of default |
| Nature of proceedings | Civil (not criminal); preponderance of probability |
| Appeal | To Cyber Appellate Tribunal (TDSAT) within 45 days (S.57) |
Why: A specialized adjudicating authority was necessary because civil courts lack the technical expertise to assess data breach damages and computer system violations efficiently. The Adjudicating Officer provides fast-track compensation.
Cyber Appellate Tribunal → TDSAT
| Stage | Tribunal | Period |
|---|---|---|
| Original (2000-2003) | Cyber Regulations Appellate Tribunal (CRAT) | Constituted under S.48 |
| Renamed (2003-2017) | Cyber Appellate Tribunal (CAT) | IT Amendment 2008 reconstituted it |
| Current (2017+) | TDSAT (Telecom Disputes Settlement and Appellate Tribunal) | Finance Act 2017 merged CAT into TDSAT |
Jurisdiction of TDSAT (in IT matters):
- Appeals from orders of Adjudicating Officer (S.57)
- Powers of Civil Court (S.58)
- Procedures to be guided by natural justice (S.59)
- Orders are executable as decree of civil court (S.61)
Appeal from TDSAT: To High Court on substantial question of law within 60 days (S.62).
Powers of Police (S.78-80)
S.78: Offences are Cognizable
All offences under the IT Act are cognizable (police can investigate without Magistrate's permission) and bailable (except S.67, 67A, 67B which are non-bailable and cognizable).
S.80: Power to Enter, Search, Arrest
| Power | Condition |
|---|---|
| Who exercises | Police officer of rank Inspector or above |
| Entry and search | Any public place; reasonable belief of contravention |
| Warrant not required | S.80(2): in cases where delay would cause evidence destruction |
| Search with warrant | Otherwise, search warrant from Magistrate required |
| Arrest | Without warrant if cognizable offence suspected |
| Seizure | Computer, computer system, floppies, CDs, hard drives, data storage devices |
Government Powers (S.69, 69A, 69B)
| Section | Power | Authority | Safeguard |
|---|---|---|---|
| S.69 | Direct interception, monitoring, or decryption of information | Central/State Government or authorized officer | Necessary in interest of sovereignty, defence, security, public order, prevention of offence |
| S.69A | Block public access to information through any computer resource | Central Government (through designated authority) | Reasons recorded in writing; review committee oversight |
| S.69B | Authorize to monitor and collect traffic data | Central Government (CERT-In) | Enhance cyber security; procedures prescribed |
Why: Cyber offences are technical, evidence is volatile (can be destroyed in seconds), and cross-jurisdictional. Enhanced police powers and cognizability ensure rapid response. Government monitoring powers balance security needs against privacy rights (subject to proportionality per Puttaswamy).
Impact of IT Act on Other Laws
| Law Affected | Nature of Impact |
|---|---|
| Indian Evidence Act (now BSA 2023) | Electronic records made admissible; S.57-58 BSA |
| Bankers Books Evidence Act, 1891 | Electronic banker's books given same status as paper |
| RBI Act, 1934 | Electronic fund transfers regulated |
| Indian Penal Code (now BNS 2023) | Electronic forgery, electronic fraud captured |
| Code of Criminal Procedure (now BNSS 2023) | Electronic production orders, digital service of summons |
Recall Check
- What is the minimum rank of a police officer authorized to investigate under S.80?
- Which body currently hears appeals from the Adjudicating Officer's orders?
- Under what conditions can police search without a warrant under S.80(2)?
Key Cases
No specific landmark cases exclusively on the Cyber Appellate Tribunal's functioning exist in reported decisions. The procedural framework is primarily statutory. Courts have held that TDSAT's IT jurisdiction follows the same principles as its telecom jurisdiction: adherence to natural justice, reasoned orders, and availability of High Court appeal.
Distinctions
| Aspect | Adjudicating Officer (S.46) | Criminal Court (S.78-80) |
|---|---|---|
| Nature | Civil/quasi-judicial | Criminal |
| Jurisdiction | S.43-45 contraventions | S.65-78 offences |
| Remedy | Compensation (up to Rs.5 crore/contravention) | Imprisonment and/or fine |
| Standard of proof | Preponderance of probability | Beyond reasonable doubt |
| Procedure | IT Act provisions + CPC | BNSS 2023 |
| Appeal | TDSAT | Sessions Court / High Court |
| Filing by | Aggrieved person (complaint) | State (FIR/chargesheet) |
| Investigation | Not applicable | Police (Inspector rank+) |
Flashcards
Q: Who currently hears appeals from IT Act Adjudicating Officers? A: TDSAT (Telecom Disputes Settlement and Appellate Tribunal) since 2017.
Q: What is the maximum compensation an Adjudicating Officer can award per contravention? A: Rs.5 crores (for contraventions under S.43).
Q: What is the minimum rank required for investigating IT Act offences? A: Inspector of Police.
Q: Are IT Act offences cognizable? A: Yes (S.78). Police can investigate without Magistrate's order. Most are bailable; S.67/67A/67B are non-bailable.
Q: What are the three powers under S.69, 69A, 69B? A: S.69: interception/monitoring/decryption. S.69A: blocking websites. S.69B: monitoring traffic data.
Q: What must be recorded in writing before blocking a website under S.69A? A: Reasons must be recorded in writing by the designated authority; a review committee must oversee the blocking order.
Q: Under what conditions can police search without warrant (S.80(2))? A: Where delay in obtaining warrant would cause destruction of evidence or the apprehension of the offender would be frustrated.
Q: Where does final appeal from TDSAT lie? A: High Court, on substantial question of law, within 60 days (S.62).
Exam Scenario
A company suffers a data breach causing loss of sensitive personal data of 10,000 customers. The company did not implement reasonable security practices as required under S.43A. Customers seek compensation. Trace the adjudicatory path and available remedies.
The customers can file a complaint before the Adjudicating Officer (S.46) claiming compensation under S.43A (body corporate failing to implement reasonable security practices). The Adjudicating Officer, being not below the rank of Director, will: (1) summon the company, (2) examine evidence of data breach and security practices, (3) consider factors under S.47 (gain to company, loss to customers, repetitiveness), (4) award compensation up to Rs.5 crores per contravention. If either party is dissatisfied, appeal lies to TDSAT within 45 days (S.57). From TDSAT, further appeal to High Court on substantial question of law within 60 days (S.62). Simultaneously, if the breach involved unauthorized access (S.43(a)), criminal complaint may be registered (cognizable under S.78) with police of Inspector rank or above (S.80). CERT-In must be notified within 6 hours of discovery (IT Rules 2021).