UPSC Notes

Information Technology Act, 2000

PYQs

19

Articles

3

Momentum

46

Phase IFoundation

Background

Overview

The IT Act is fundamental to India's digital governance, internal security, and legal framework for the digital economy. Understanding its provisions, especially those related to cybercrime and data protection, is crucial for GS2 (Governance, Legal Frameworks) and GS3 (Internal Security, Science & Technology).

The Information Technology Act, 2000, is India's primary law dealing with cybercrime and electronic commerce. It provides legal recognition for transactions carried out by means of electronic data interchange and other means of electronic communication, commonly referred to as 'electronic commerce', which involve the use of alternatives to paper-based methods of communication and storage of information.

Phase IIStatic core

Facts & tables

Key facts

Enactment and Amendments

Enacted in 2000, significantly amended in 2008 to address emerging cyber threats.

Scope

Provides legal framework for e-governance, e-commerce, digital signatures, and cybercrime.

Key Sections (as per article)

Sections 43(b) (extraction of data from a computer) and 66 (punishment for accessing computer systems or networks without permission) deal with unauthorized access and data theft.

Regulatory Body

Establishes CERT-In (Indian Computer Emergency Response Team) as the national agency for cybersecurity incident response.

Enactment

Passed in 2000

Data Protection Scope (pre-DPDP)

Regulated 'sensitive personal data' via 2011 Rules

Limitations

Did not cover all personal data (e.g., browsing history, caste, religion)

Penalties (pre-DPDP)

Capped at three years' imprisonment or ₹5 lakh fine for unauthorized disclosure of sensitive personal data

Reference table

Data Covered vs. Not Covered under IT Act, 2000 (2011 Rules)

Covered (Sensitive Personal Data)Not Covered (Personal Data)
Financial dataNames, addresses, phone numbers
Medical or health detailsCaste, religion, political affiliations
Sexual orientationBrowsing history, social media activity
Biometric informationOnline/offline behavioural patterns, institutional affiliations

Reference table

Static syllabus anchors

TypeReference
Conceptual areaEmerging Information Technologies
Conceptual areaJudiciary & Judicial Review
Conceptual areaIndian Polity & Governance

Reference table

Institutions & roles

BodyRole
Supreme Court of IndiaInterprets and applies the provisions of the act in legal cases.
Indian Computer Emergency Response Team (CERT-In)Acts as the national nodal agency for responding to computer security incidents and advising on vulnerabilities.
Union GovernmentEnforces and amends
JudiciaryInterprets and reviews
Phase IIIExam lens

Prelims angle

Overview

Prelims angle: Multi-statement analysis

Prelims angle: Conceptual understanding

Quick revision

  • India's primary law for cybercrime and e-commerce.
  • Provides legal recognition to electronic transactions and digital signatures.
  • Sections 43 & 66 address unauthorized access and data extraction.
  • Establishes CERT-In for cybersecurity incident response.
  • Amended in 2008 to strengthen provisions against cyber terrorism and data theft.

Elimination traps

Constitutional vs statutory — The IT Act is a statutory law, distinct from constitutional provisions, though it must comply with them.

Check if created by Constitution or by Parliament.

High-confidence PYQs

Topic timeline

Emerging Information TechnologiesJudiciary & Judicial ReviewIndian Polity & Governance

SC allows interim bail to cyber-security researcher in case relating to unauthorised accessing of computer networks

07 Aug 2026 · The IT Act, 2000, is India's cyber law, legalizing e-transactions and penalizing cybercrimes like unauthorized data access (Sec 43, 66). It underpins digital India and establishes CERT-In.

Read article

Internet unbound: On the summoning of Meta staff

15 Aug 2026 · The article highlights the government's use of Section 79(3)(b) of the IT Act, 2000, to compel social media platforms like Meta to remove content, raising questions about the interpretation and application of intermediary liability provisions and their implications for online speech.

Read article

How AI training models could compromise privacy

03 Nov 2026 · The IT Act, 2000, was India's initial cyber law, regulating electronic transactions and sensitive personal data, but had limitations in scope and penalties, which the DPDP Act later addressed.

Read article

Related topics

Practice writing on this topic

UPSC has asked 19 linked questions on Information Technology Act, 2000 in Mains. Write an answer to one — and get it evaluated.

UPSC Prelims PYQs on Information Technology Act, 2000

Practice official previous year questions asked by UPSC related to this concept.

In India, it is legally mandatory for which of the following to report on cybersecurity incidents? 1. Service providers 2. Data centres 3. Body corporate...

2017·Science & Technology
Solve

Which of the following statements is/are correct regarding Smart India Hackathon 2017? 1. It is a centrally sponsored scheme for developing every city of ou...

2017·Science & Technology
Solve

Regarding ‘DigiLocker’, sometimes seen in the news, which of the following statements is/are correct? 1. It is a digital locker system offered by the Governm...

2016·Science & Technology
Solve

With reference to ‘Near Field Communication (NFC) Technology’, which of the following statements is/are correct? 1. It is a contactless communication technol...

2015·Science & Technology
Solve

Consider the following statements: A digital signature is 1. an electronic record that identifies the certifying authority issuing it 2. used to serve as ...

2019·Science & Technology
Solve

The identity platform `Aadhaar' provides open "Application Programming Interfaces (APIs)". What does it imply? 1. It can be integrated into any electronic de...

2018·Science & Technology
Solve

Which of the following statements with regard to drone swarms is/are correct ? 1. They use Terahertz band of frequency to communicate with the command centr...

2026·Science & Technology
Solve

Which one of the following words/phrases is most appropriately used to denote “an interoperable network of 3D virtual worlds that can be accessed simultaneou...

2024·Science & Technology
Solve

Organic Light Emitting Diodes (OLEDs) are used to create the digital display in many devices. What are the advantages of OLED displays over Liquid Crystal di...

2017·Science & Technology
Solve

With reference to communication technologies, what is/are the difference/differences between LTE (Long-Term Evolution) and VoLTE (Voice over Long-Term Evolut...

2019·Science & Technology
Solve

With reference to Web 3-0, consider the following statements : 1. Web 3-0 technology enables people to control their own data. 2. In Web 3-0 world, there ca...

2022·Science & Technology
Solve

Consider the following actions: 1. Detection of car crash/collision which results in the deployment of airbags almost instantaneously 2. Detection of acciden...

2023·Science & Technology
Solve

Which of the following statements with regard to the National Quantum Mission (NQM) is/are correct? 1. It aims at developing intermediate-scale quantum comp...

2026·Science & Technology
Solve

Consider the following statements: Statement I: Some rare earth elements are used in the manufacture of flat television screens and computer monitors. Stat...

2025·Science & Technology
Solve

Which of the following statements about DHRUV64 is/are correct ? 1. It is the third chip fabricated under the DIR-V Programme with an overall aim to enable ...

2026·Science & Technology
Solve

Consider the following statements about Mission Sudarshan Chakra of India: 1. It aims to enhance India's air defence, ballistic missile defence and aerial o...

2026·Science & Technology
Solve

Consider the following statements with respect to the AI Impact Summit, 2026 held in New Delhi : 1. The Summit's intellectual framework was based on three f...

2026·Science & Technology
Solve

"3D printing" has applications in which of the following? 1. Preparation of confectionery items 2. Manufacture of bionic ears 3. Automotive industry 4. R...

2018·Science & Technology
Solve

Consider the following statements: I. It is expected that Majorana 1 chip will enable quantum computing. II. Majorana 1 chip has been introduced by Amazon W...

2025·Science & Technology
Solve

Editorial & Review Process

Every revision note and practice question on UPSC Practice is researched using authoritative primary sources and reviewed for factual accuracy, syllabus relevance, and exam value. Read our Editorial Policy.

Verified Quality