Penalties and Adjudication
The Information Technology Act, 2000 sets out a detailed civil penalty framework to address contraventions involving misuse of computers, unauthorized access, data theft, and tampering with electronic records. The Act recognizes that cyber harms may not always require criminal prosecution and therefore provides for monetary compensation for damage or loss caused by negligent or unlawful conduct. For example, any person who destroys, alters, or disrupts a computer, computer network, or electronic database may be held liable to pay compensation, which may extend to several crores depending on the seriousness of the damage. The emphasis is on making good the loss suffered by victims while also discouraging improper use of digital resources.
To enforce these penalties, the Act provides for Adjudicating Officers, usually senior government officials with expertise in IT and legal procedures. These officers are vested with powers similar to those of a civil court, including summoning witnesses, examining evidence, and imposing penalties. They have jurisdiction over cases where the claim for compensation does not exceed five crore rupees. Their role is vital because cyber disputes often involve technical evidence and require speedy, specialized adjudication. Once the Adjudicating Officer issues an order, aggrieved parties may appeal to the Cyber Appellate Tribunal (now functioning under TDSAT). This structure ensures that civil disputes arising from cyber contraventions are addressed efficiently, without burdening regular courts.
Offences under the Information Technology Act
Alongside civil penalties, the IT Act defines a wide range of criminal offences to address more serious and intentional forms of cybercrime. These offences cover acts such as hacking, unauthorized access, data theft, identity theft, cheating by impersonation through the use of computer resources, and the publication or transmission of obscene or sexually explicit material in electronic form. Such offences attract imprisonment, fines, or both, depending on the nature and severity of the wrongdoing.
Particularly serious offences include cyber terrorism, where any act intended to threaten the sovereignty, integrity, or security of the nation through digital means can result in imprisonment for life. The Act also criminalizes tampering with computer source code, damaging critical information infrastructure, and violating privacy by capturing or transmitting private images without consent. These provisions reflect the increasing risks faced in a digital society and the need for robust legal protection.
The Act’s offence framework is drafted in broad, technology-neutral language so that it remains applicable regardless of changes in digital tools or methods. This ensures that new forms of cyber misconduct — such as phishing, ransomware, or identity spoofing — can be prosecuted under appropriate sections even if they were not explicitly mentioned when the Act was enacted. The offence provisions ultimately aim to safeguard individuals, businesses, and the State against the growing spectrum of cyber threats, establishing clear criminal liability for actions that undermine the safety and integrity of the digital ecosystem.
