In the Indian context, internet jurisdiction is determined by a combination of the IT Act's extra-territorial reach (S.75), CPC's territorial jurisdiction rules (S.16-20), BNSS criminal jurisdiction provisions (S.196), and judicial pronouncements adapting traditional tests to the digital environment.
Legal Framework
| Provision | Application to Internet Jurisdiction |
|---|---|
| IT Act S.75 | Extra-territorial application (computer in India involved) |
| IT Act S.46 | Adjudicating officer: jurisdiction over S.43 contraventions |
| IT Act S.48 | Cyber Appellate Tribunal (now TDSAT post-2017) |
| IT Act S.80 | Power of police officer (Inspector rank+) to investigate |
| CPC S.19 | Suit where cause of action arises (wholly or partly) |
| CPC S.20 | Suit where defendant resides or carries on business |
| BNSS S.196 | Criminal court jurisdiction: place of offence |
| BNSS S.198 | Offences committed on journey or in multiple places |
Indian Judicial Approach
Indian courts have evolved from the "mere accessibility" standard to the "purposeful availment/effects" test:
| Phase | Approach | Authority |
|---|---|---|
| Early (2003-2009) | Accessibility test: if website accessible in forum, jurisdiction exists | Casio India v. Ashita Tele Systems (2003) |
| Mature (2010+) | Targeting/effects test: website must be directed at forum, mere access insufficient | Banyan Tree v. Murali Krishna Reddy (2010) |
| Current | Effects + commercial harm: jurisdiction where commercial damage occurs in IP cases | WWE v. Reshma Collection (2014) |
Why: The accessibility test was abandoned because every website is technically accessible everywhere. Under that test, every Indian court would have jurisdiction over every website globally, an absurd and unworkable result.
Enforcement Agencies
| Agency | Role | Authority |
|---|---|---|
| CERT-In | National nodal agency for cyber security incidents; issues advisories, coordinates response | S.70B IT Act |
| Cyber Crime Cells (State Police) | Investigation of cyber offences under IT Act and BNS | S.80 IT Act, State Police Acts |
| CBI (Cyber Crime Division) | Investigate complex, inter-state, or international cyber crimes | Delhi Special Police Establishment Act |
| National Cyber Crime Reporting Portal (cybercrime.gov.in) | Citizen reporting mechanism for cyber offences | MHA Administrative Order |
| Indian Cyber Crime Coordination Centre (I4C) | Coordinate law enforcement responses; analytics, capacity building | MHA (2020 establishment) |
| TDSAT | Appellate jurisdiction (replaced Cyber Appellate Tribunal from 2017) | Telecom Disputes Settlement and Appellate Tribunal, S.48 IT Act |
| Adjudicating Officer | First instance jurisdiction for data breach compensation (S.43-45) | S.46 IT Act |
Powers of Investigation
Under S.80 IT Act (read with S.78):
- Any police officer of Inspector rank or above may investigate offences under the IT Act
- S.78 applies provisions of BNSS to investigation, search, and arrest
- Power to search and seize computer systems without warrant in exigent circumstances (S.80(2))
- Intermediaries must cooperate with lawful orders (S.69, S.69A, S.69B)
Why: Cyber crimes require technical expertise and rapid response. The Inspector-rank threshold ensures a minimum competence level while S.80(2) permits urgency-driven seizure to prevent evidence destruction.
Recall Check
- Why was the "mere accessibility" test abandoned by Indian courts?
- Which body replaced the Cyber Appellate Tribunal from 2017?
- What is the minimum rank of a police officer authorized to investigate IT Act offences?
Key Cases
Casio India v. Ashita Tele Systems (2003) Casio-India-v-Ashita-Tele-Systems-2003 Issue: Whether a Delhi court has jurisdiction over trademark infringement via a website merely accessible from Delhi. Rule: Early accessibility approach: if a website is accessible within a court's territorial limits and infringes rights there, jurisdiction vests. Held: Delhi court assumed jurisdiction on the basis that the infringing website was accessible to Delhi consumers. Later overruled in principle by Banyan Tree (2010).
India TV v. Joy Mukherji (2013) India-TV-v-Joy-Mukherji-2013 Issue: Whether uploading defamatory content on a website accessible in Delhi confers jurisdiction on Delhi courts. Rule: Where content is specifically directed at and causes reputational harm in a jurisdiction, that court has jurisdiction under effects doctrine. Held: Delhi HC held jurisdiction exists because the defamatory content targeted and harmed the plaintiff's reputation in Delhi specifically.
Super Cassettes v. Myspace (2011) Super-Cassettes-v-Myspace-2011 Issue: Whether an intermediary (Myspace) can be sued in India for copyright infringement by Indian users uploading content. Rule: Where an intermediary has Indian users, derives revenue from Indian market, and the infringing act affects rights in India, Indian courts have jurisdiction. Held: Delhi HC held jurisdiction existed. Myspace had Indian users and the infringement harmed Indian copyright holders.
Distinctions
| Aspect | Adjudicating Officer (S.46) | Criminal Court (S.80) |
|---|---|---|
| Nature | Quasi-judicial (civil compensation) | Criminal prosecution |
| Jurisdiction over | S.43-45 contraventions (data breach, unauthorized access causing damage) | S.65-78 offences (tampering, hacking, identity theft) |
| Penalty | Compensation up to Rs.5 crores per contravention | Imprisonment and/or fine |
| Appeal lies to | TDSAT (formerly Cyber Appellate Tribunal) | Sessions Court / High Court |
| Investigation by | Not applicable (complaint-based) | Police (Inspector rank+) |
| Standard of proof | Preponderance of probability | Beyond reasonable doubt |
Flashcards
Q: What is the current appellate body for IT Act civil contraventions? A: Telecom Disputes Settlement and Appellate Tribunal (TDSAT), which replaced the Cyber Appellate Tribunal from 2017.
Q: What is the maximum compensation an Adjudicating Officer can award under S.43? A: Rs.5 crores per contravention (no upper limit on total aggregate).
Q: What did Casio India (2003) hold about internet jurisdiction? A: Adopted the accessibility test: if an infringing website is accessible in a jurisdiction, that court has jurisdiction. Later superseded by the targeting test in Banyan Tree (2010).
Q: What is the role of CERT-In? A: National nodal agency for cyber security incident response; collects, analyzes, and disseminates information on cyber incidents; issues advisories and guidelines.
Q: Under which section can police seize computer systems without warrant? A: S.80(2) IT Act, in cases of urgency where delay may cause evidence destruction.
Q: What is I4C? A: Indian Cyber Crime Coordination Centre, established by MHA in 2020, to coordinate law enforcement responses to cybercrime across states.
Q: What provision of BNSS governs criminal jurisdiction for cyber offences? A: S.196 (jurisdiction where offence committed) read with IT Act S.75 (extra-territorial reach).
Exam Scenario
A person in Hyderabad operates a fraudulent e-commerce website that cheats consumers in Mumbai and Kolkata. Victims in both cities file complaints. Determine which court has jurisdiction, which enforcement agencies are involved, and what powers police can exercise.
Jurisdiction: Under BNSS S.198 (offences at multiple places), the court of any place where part of the offence occurred has jurisdiction. Both Mumbai and Kolkata courts have jurisdiction since consumers there suffered loss. Under CPC S.19, a civil suit can be filed where the cause of action (fraud, delivery failure) arises. The accused's location (Hyderabad) also confers jurisdiction under S.196 BNSS (place where act was done). Enforcement: State Cyber Crime Cells of Maharashtra/West Bengal can investigate under S.80 IT Act. If inter-state, CBI may take over. The National Cyber Crime Portal (cybercrime.gov.in) facilitates cross-state coordination through I4C. Police of Inspector rank or above may investigate, and under S.80(2), seize the accused's computer system to prevent evidence destruction.