Skip to content

Corporate and Economic Laws · Laws and Regulations related to Cyber Security and Data Privacy

Section 69B IT Act: Monitoring and Collecting Traffic Data

Updated 11 October 2026 · Fact-checked

Section 69B of the IT Act, 2000 lets the Central Government, by Gazette notification, authorise a Government agency to monitor and collect traffic data from any computer resource to enhance cyber security. Intermediaries must give technical assistance. Intentional or knowing default is punishable with up to one year's imprisonment, a fine up to ₹1 crore, or both.

Understand Monitoring of Traffic Data and Cyber Security (Section 69B)

Every online communication leaves a trail. That trail is not the message itself. It shows who or what was connected, where, when and for how long. The Act calls this traffic data.

Section 69B lets the Central Government use this trail to protect the country's cyber space. Its stated purpose is to enhance cyber security and for identification, analysis and prevention of intrusion or spread of a computer contaminant in the country. Computer contaminant has the meaning given in section 43.

The Central Government does not monitor directly. It issues a notification in the Official Gazette authorising an agency of the Government. That agency can then monitor and collect traffic data or information generated, transmitted, received or stored in any computer resource.

To make this work, the intermediary or any person in charge of the computer resource must, when called upon by the authorised agency, provide technical assistance and extend all facilities. This enables online access to the computer resource, or lets the agency secure and provide that access.

The procedure and safeguards are not in the section. They are to be prescribed by rules (section 87(2)(za) lets the Central Government make rules on this). Contravention by an intermediary is an offence under sub-section (4). The punishment was changed by Act 18 of 2023, w.e.f. 30-11-2023, from three years' imprisonment and fine to the present, softer form.

Key rules to remember

Who may authorise (s 69B(1))
Central Government + notification in Official Gazette → authorises any agency of the Government
A State Government is not named in 69B. Authorisation is by Gazette notification, not by an individual order.
Purpose (s 69B(1))
Cyber security: identification, analysis and prevention of intrusion or spread of computer contaminant
Computer contaminant is defined in section 43. The purpose is cyber security, not general crime investigation.
Duty of intermediary (s 69B(2))
On being called upon by the authorised agency: give technical assistance + extend all facilities
Covers any intermediary or person in charge of the computer resource.
Procedure and safeguards (s 69B(3))
Procedure and safeguards = as may be prescribed
Prescribed by rules under section 87(2)(za).
Penalty (s 69B(4))
Intentional or knowing contravention of sub-section (2) by an intermediary → imprisonment up to 1 year, or fine up to ₹1 crore, or both
Substituted by Act 18 of 2023 w.e.f. 30-11-2023. Earlier it was three years and also fine.
Traffic data (Explanation (ii))
Data identifying or purporting to identify any person, computer system, network or location to or from which communication is or may be transmitted, including origin, destination, route, time, date, size, duration or type of underlying service, and any other information
It covers the details about the communication.

How to solve Monitoring of Traffic Data and Cyber Security (Section 69B) questions

Use this method for any question on section 69B, whether it is a short note, a case scenario or a compare-and-contrast question.

  1. 1Identify what is being done: monitoring or collecting traffic data for cyber security, or interception, monitoring or decryption of content.
  2. 2State the power: the Central Government, by Gazette notification, authorises an agency of the Government under section 69B(1).
  3. 3Check the purpose: identification, analysis and prevention of intrusion or spread of computer contaminant.
  4. 4Apply the duty: the intermediary or person in charge must give technical assistance and extend all facilities when called upon by the authorised agency.
  5. 5Mention that the procedure and safeguards are prescribed by rules, not set in the section itself.
  6. 6Apply the penalty only if the intermediary intentionally or knowingly contravened sub-section (2): up to one year, or fine up to ₹1 crore, or both.
  7. 7If the question compares with section 69, contrast the trigger, who issues the direction, the data covered and the penalty.
  8. 8Close with a clear conclusion on whether the agency's demand was valid and whether the intermediary is liable.

Quickest way: Four-point 69B check

When to use it: Use for MCQs and for the opening lines of a written answer when time is short.

  1. Who? Central Government authorises an agency by Gazette notification.
  2. What? Traffic data (not message content) in any computer resource.
  3. Why? Cyber security: intrusion or computer contaminant.
  4. Default? Intermediary, intentional or knowing: up to 1 year or fine up to ₹1 crore or both.

Common mistakes in Monitoring of Traffic Data and Cyber Security (Section 69B)

  • Saying section 69B allows interception or decryption of message content.

    It is confused with section 69, which covers interception, monitoring and decryption.

    Fix: Link 69B to traffic data and cyber security. Link 69 to interception, monitoring or decryption of information.

  • Stating the old penalty of three years' imprisonment and fine.

    Older notes and books carry the pre-amendment text.

    Fix: Use the current text: imprisonment up to one year, or fine up to ₹1 crore, or both (Act 18 of 2023, w.e.f. 30-11-2023).

  • Saying a State Government can authorise an agency under 69B.

    Section 69 mentions State Governments, and students carry that over.

    Fix: Section 69B names only the Central Government.

  • Holding an intermediary liable for any non-cooperation, even if innocent.

    Students skip the words intentionally or knowingly.

    Fix: Penalty needs intentional or knowing contravention of sub-section (2). Always test the state of mind.

  • Thinking the section itself lays down the monitoring procedure.

    Students assume the Act contains all details.

    Fix: Say that sub-section (3) leaves procedure and safeguards to be prescribed by rules.

  • Mixing up 69B with 69A, which deals with blocking.

    The three sections have similar numbers and wording.

    Fix: 69 = intercept/monitor/decrypt; 69A = block public access; 69B = monitor and collect traffic data for cyber security.

Worked examples

Example 1

Distinguish between section 69 and section 69B of the IT Act, 2000.

Show the solution
  1. Power: under 69, the Central Government, a State Government or an officer specially authorised by them may direct an agency of the appropriate Government. Under 69B, the Central Government authorises an agency of the Government by Gazette notification.
  2. Ground: 69 applies where it is necessary or expedient in the interest of sovereignty or integrity of India, defence, security of the State, friendly relations with foreign States, public order, preventing incitement to a cognizable offence relating to these, or investigation of any offence. 69B is for enhancing cyber security and preventing intrusion or spread of computer contaminant.
  3. Form: 69 works by an order with reasons recorded in writing. 69B works by a notification in the Official Gazette.
  4. Subject matter: 69 covers interception, monitoring or decryption of any information. 69B covers monitoring and collecting traffic data or information.
  5. Penalty: 69(4) punishes a subscriber, intermediary or person failing to assist with imprisonment up to seven years and also fine. 69B(4) punishes an intermediary who intentionally or knowingly contravenes sub-section (2) with imprisonment up to one year, or fine up to ₹1 crore, or both.
  6. Both leave procedure and safeguards to be prescribed.

Answer: Section 69 deals with interception, monitoring and decryption by order for reasons recorded in writing, on grounds such as security and public order, with up to seven years' imprisonment and fine. Section 69B deals with monitoring and collecting traffic data for cyber security by Gazette notification, with up to one year, or fine up to ₹1 crore, or both.

Example 2

The Central Government notifies a Government agency under section 69B. The agency asks Nilgiri Net Services Ltd, an intermediary, for technical assistance to access its server for traffic data. The company's head knowingly refuses all help. Is the company liable, and what is the punishment?

Show the solution
  1. Authorisation: the agency was authorised by Gazette notification, which is the route in section 69B(1).
  2. Duty: when called upon, the intermediary or person in charge must provide technical assistance and extend all facilities under 69B(2).
  3. Conduct: the refusal was knowing, so the condition in 69B(4) is met.
  4. Consequence: an intermediary who intentionally or knowingly contravenes sub-section (2) is punishable with imprisonment up to one year, or fine up to ₹1 crore, or both.
  5. Note that the section addresses the intermediary, and the procedure and safeguards in the prescribed rules govern how the agency acts.

Answer: Yes. The knowing refusal contravenes section 69B(2). The intermediary is punishable with imprisonment up to one year, or fine up to ₹1 crore, or both.

Exam tips

  • Expect a compare question on 69, 69A and 69B. Prepare a three-column comparison of power, ground, penalty.
  • In MCQs, watch the penalty numbers: one year and ₹1 crore for 69B; seven years and fine for 69 and 69A.
  • Define traffic data using the Explanation: origin, destination, route, time, date, size, duration, type of service.
  • In case scenarios, check the words intentionally or knowingly before imposing the penalty.
  • Always mention that procedure and safeguards are prescribed by rules, and cite section 87(2)(za) only if sure.

Practice questions from Laws and Regulations related to Cyber Security and Data Privacy

Monitoring of Traffic Data and Cyber Security (Section 69B) in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Monitoring of Traffic Data and Cyber Security (Section 69B): frequently asked questions

What is traffic data under section 69B?

It is any data identifying or purporting to identify a person, computer system, network or location to or from which a communication is or may be transmitted. It includes origin, destination, route, time, date, size, duration or type of underlying service, and any other information.

What is the difference between section 69 and 69B?

Section 69 allows directions to intercept, monitor or decrypt information on grounds like security and public order, with reasons in writing. Section 69B allows an authorised agency to monitor and collect traffic data for cyber security. The penalties also differ.

What is the penalty under section 69B?

An intermediary who intentionally or knowingly contravenes the duty to assist is punishable with imprisonment up to one year, or fine up to ₹1 crore, or both. This is the form substituted by Act 18 of 2023 w.e.f. 30-11-2023.

Who makes the rules on procedure under 69B?

The procedure and safeguards are to be prescribed under sub-section (3). The Central Government has the rule-making power under section 87(2)(za). For the exact rule text, refer to the rules notified under the Act.