Corporate and Economic Laws · Laws and Regulations related to Cyber Security and Data Privacy

Overview of the Information Technology Act, 2000

Updated 11 October 2026 · Fact-checked

The Information Technology Act, 2000 is the Indian law that gives legal recognition to electronic records and digital signatures and deals with cyber crime and cyber security. To answer exam questions, identify the relevant definition in section 2(1), such as computer resource, data, electronic record or intermediary, and apply its exact wording to the facts given.

Understand Overview of the Information Technology Act, 2000

The Information Technology Act, 2000 (IT Act) is India's main law for electronic transactions and cyber matters. It treats electronic records and electronic signatures as legally valid. It also sets up the framework for Certifying Authorities, regulates cyber offences and gives powers to the Government on cyber security.

Most exam questions test the vocabulary. The Act's meaning of each term decides whether a person or thing is covered. So you must know the definitions in section 2(1) in the Act's own words, not in everyday language.

The core definitions build on each other. A computer is a high-speed data processing device or system that performs logical, arithmetic and memory functions. A computer system is a device or collection of devices, excluding non-programmable calculators, that holds programmes and data and performs logic, arithmetic, storage, retrieval and communication control functions. A computer network is the inter-connection of computers, computer systems or communication devices. A computer resource is the widest term: it means a computer, computer system, computer network, data, computer data base or software.

Data is a representation of information, knowledge, facts, concepts or instructions prepared in a formalised manner and intended to be processed in a computer system or network. An electronic record is data, record or generated data, image or sound stored, received or sent in an electronic form or micro film or computer generated micro fiche. Information includes data, message, text, images, sound, voice, codes, computer programmes, software and data bases.

An intermediary, for a particular electronic record, is any person who on behalf of another receives, stores or transmits that record or provides any service with respect to it. The Act lists telecom service providers, network service providers, internet service providers, web-hosting service providers, search engines, online payment sites, online-auction sites, online-market places and cyber cafes. Note that an originator or addressee does not include an intermediary. Other laws borrow these terms: the Digital Personal Data Protection Act, 2023 takes the meanings of computer resource, information and intermediary from the IT Act (section 37(3) of that Act).

The text supplied to you covers definitions, not the long title, the preamble or the territorial clauses. For objectives and extraterritorial reach, state them in general terms: the Act aims at legal recognition of electronic transactions and facilitates e-governance, and it can reach offences involving a computer, system or network located in India even if committed from outside. Do not quote section numbers for these unless you are sure of them.

Key rules to remember

Computer resource: Computer resource = computer + computer system + computer network + data + computer data base + software; Section 2(1)(k). Any one of these items is a computer resource. It is wider than 'computer'.
Computer network: Computer network = inter-connection of one or more computers, computer systems or communication devices; Section 2(1)(j). Connection by satellite, microwave, terrestrial line, wire, wireless or other media. It does not matter whether the inter-connection is continuous.
Data: Data = representation of information, knowledge, facts, concepts or instructions, in formalised manner, meant to be or being or already processed in a computer system or network; Section 2(1)(o). It may be in any form, including printouts, storage media or internal memory.
Electronic record: Electronic record = data, record or generated data, image or sound stored, received or sent in electronic form or micro film or computer generated micro fiche; Section 2(1)(t). Electronic form is defined separately in section 2(1)(r).
Intermediary: Intermediary = any person who, on behalf of another, receives, stores or transmits a particular electronic record or provides any service with respect to it; Section 2(1)(w). It is record-specific. Includes ISPs, search engines, online marketplaces, payment sites and cyber cafes.
Originator and addressee: Originator and addressee both exclude an intermediary; Section 2(1)(za) and (b). The originator sends or generates the message; the addressee is intended to receive it.
Cyber security: Cyber security = protecting information, equipment, devices, computer, computer resource, communication device and stored information from unauthorised access, use, disclosure, disruption, modification or destruction; Section 2(1)(nb). Inserted by Act 7 of 2017.

How to solve Overview of the Information Technology Act, 2000 questions

Use this method for any question on the scope or definitions of the IT Act.

1Read the question and underline the key term or the actor, such as a website host, a cyber cafe, a mobile phone or a cloud database.
2Name the definition that decides the issue, for example computer resource, electronic record or intermediary.
3State the definition in the Act's words, quoting the key phrases and giving section 2(1) with the clause letter only if you are sure.
4Break the definition into its elements and test each fact in the case against each element.
5Check for exclusions. For example, a non-programmable calculator is outside 'computer system', and an originator is not an intermediary.
6If the question is about reach or objectives, state the general position without inventing section numbers.
7Write a one-line conclusion that answers the question asked, such as 'Hence the platform is an intermediary for that record'.

Quickest way: Element-matching for definition questions

When to use it: Use it in Section A MCQs and in short parts of case-based answers, when you have under two minutes.

Spot the term being tested.
Recall its one-line core: resource = widest term; intermediary = acts for another on a record; originator and addressee exclude intermediaries.
Check the options for words that add or drop an element, such as 'only' or 'continuously'.
Eliminate options that confuse two terms, such as data and electronic record.
Pick the option that matches the Act's wording most closely.

Common mistakes in Overview of the Information Technology Act, 2000

Treating 'computer' and 'computer resource' as the same thing.
In daily use a computer means a PC or laptop.
Fix: Remember that computer resource also covers computer system, network, data, data base and software. Software or data alone is a computer resource.
Saying a person is an intermediary in general, without reference to a record.
Students memorise the list of ISPs and platforms.
Fix: The definition says 'with respect to any particular electronic records'. The same person can be an intermediary for one record and an originator for another.
Including an intermediary within 'originator' or 'addressee'.
Students think anyone who handles a message is a sender or receiver.
Fix: Both definitions expressly exclude an intermediary. A courier-like carrier of the record is not the originator or addressee.
Saying a computer network requires a continuous connection.
The word 'network' suggests a permanent link.
Fix: The definition applies 'whether or not the inter-connection is continuously maintained'.
Quoting section numbers or case names for scope and extraterritorial application from memory.
Students try to look precise.
Fix: Use section numbers only when sure. Otherwise state the rule in plain words. A wrong section loses marks that a correct plain statement would earn.
Confusing the IT Act with the Digital Personal Data Protection Act, 2023.
Both deal with data and are studied in the same chapter.
Fix: The IT Act defines core terms and covers electronic records, cyber offences and security. The DPDP Act deals with personal data of Data Principals and borrows IT Act terms.

Worked examples

Example 1

Shreya runs an online marketplace in Pune. A seller in Jaipur uploads a product listing, and a buyer in Chennai reads it. Is Shreya's company an intermediary under the IT Act, 2000? Is the seller the originator?

Show the solution

Take the definition: an intermediary, for a particular electronic record, is any person who on behalf of another receives, stores or transmits that record or provides any service with respect to it.
The listing is an electronic record, stored and transmitted in electronic form.
The company stores and transmits the listing on behalf of the seller. It also provides a service with respect to that record.
The definition expressly includes online-market places, so the company fits both the general test and the list.
The seller generates the listing and causes it to be transmitted to others, so the seller is the originator. The buyer is the addressee or reader.
An originator does not include an intermediary, so the company is not the originator of the seller's listing.

Answer: Yes, the marketplace company is an intermediary for the seller's listing. The seller is the originator, and the company is not.

Example 2

Explain, with reference to the IT Act, 2000, whether a stored customer database and a non-programmable calculator are each covered by the term 'computer resource' or 'computer system'.

Show the solution

Computer resource means computer, computer system, computer network, data, computer data base or software.
A stored customer database is a computer data base, and the information in it is data. So it is a computer resource.
Computer system means a device or collection of devices that holds programmes, input data and output data and performs logic, arithmetic, storage and retrieval, communication control and other functions. The definition expressly excludes calculators which are not programmable.
A non-programmable calculator is therefore not a computer system.
A computer resource is a computer, system, network, data, data base or software. A calculator that is not programmable does not fall in any of them, since it is not a computer system and the question gives no sign that it is a computer or part of a network.
The database is covered. The calculator is not, on the facts given.

Answer: The customer database is a computer resource, as a computer data base and data. The non-programmable calculator is excluded from computer system and is not a computer resource on these facts.

Exam tips

Learn the section 2(1) definitions almost word for word. MCQs often change one phrase, such as 'continuously maintained' or 'excluding intermediary'.
In case-based questions, name the party first (originator, addressee or intermediary) and then give the rule it triggers.
For long answers, structure the reply as definition, elements, application, conclusion. This earns marks for application, not recall.
Link the IT Act to the DPDP Act, 2023. Section 37(3) of the DPDP Act adopts the IT Act's meanings of computer resource, information and intermediary.
Quote a section number only when you are certain. Plain-word rules are safer than a wrong number.

Practice questions from Laws and Regulations related to Cyber Security and Data Privacy

Overview of the Information Technology Act, 2000 in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Overview of the Information Technology Act, 2000: frequently asked questions

What is the main purpose of the Information Technology Act, 2000?

It gives legal recognition to electronic records and signatures, supports electronic governance and addresses cyber offences and cyber security. In the exam, state these aims in plain words and add the definitions that apply to the facts.

What is the difference between data and electronic record under the IT Act?

Data is a formalised representation of information meant to be processed in a computer system or network. An electronic record is data, record, image or sound stored, received or sent in electronic form or micro film or computer generated micro fiche. So an electronic record is the stored or transmitted form.

Who is an intermediary under the IT Act, 2000?

It is anyone who, on behalf of another, receives, stores or transmits a particular electronic record or provides a service for that record. The Act names telecom, network, internet and web-hosting providers, search engines, online payment, auction and marketplace sites, and cyber cafes.

Does the IT Act apply to acts done outside India?

In general terms, the Act can reach offences involving a computer, system or network located in India even when the person is outside India. The official text supplied does not include the territorial clause, so state the rule in plain words and avoid quoting a section number unless you are sure.