Fundamentals of Business Laws and Business Communication · Legal Aspects of Business Communication

Cyber Law and Misuse of Communication Channels

Updated 10 October 2026 · Fact-checked

Cyber law is the set of rules, mainly the Information Technology Act, 2000, that punishes misuse of computers and online channels. Key offences are hacking, phishing, identity theft and publishing obscene content. To solve a question, spot the act described, match it to the offence name, then recall its penalty.

Understand Cyber Law and Misuse of Communication Channels

Businesses now send orders, invoices, offers and messages over email, apps and social media. Every one of these channels can be misused. Cyber law is the body of law that deals with such misuse. In India its main source is the Information Technology Act, 2000 (IT Act).

Hacking means gaining access to a computer, network or data without permission, then damaging, copying or changing it. Phishing is a trick: the offender sends a fake email, SMS or website that looks like a bank or a known company, so you give away passwords, OTPs or card details. Phishing is usually punished as cheating by personation or identity theft using a computer resource.

The Act also covers content. Publishing or sending obscene material in electronic form is an offence. Sexually explicit material and child sexual abuse material are treated more strictly. Section 67A covers sexually explicit material, and Section 67B covers child sexual abuse material. Both carry heavier punishment than Section 67. Breaching confidentiality of records you got through official powers is also an offence.

Punishment can be of two kinds. Compensation is paid to the victim for damage to a computer or data. Imprisonment and fine are imposed for criminal offences. Repeat offenders get heavier punishment for obscene, sexually explicit and child abuse content.

For work life, the rule is simple. Do not access systems without authority, do not share passwords, do not forward offensive content, and do not click links from unknown senders. Your company can also be affected when staff misuse its email or social media accounts.

Key formulas to remember

Damage to computer or data (Section 43): Access without permission, copying, introducing a virus, damaging or disrupting a system → pay compensation to the victim; This is the civil side of hacking. Section 66 makes the same acts a crime when done dishonestly or fraudulently.
Computer-related offence (Section 66): Imprisonment up to 3 years or fine up to ₹5,00,000 or both; Hacking is usually linked to Sections 43 and 66.
Identity theft (Section 66C) and cheating by personation (Section 66D): Each: imprisonment up to 3 years and fine up to ₹1,00,000; Phishing usually fits these. Use of someone's password or digital signature is 66C. Pretending to be someone else online to cheat is 66D.
Obscene electronic content (Section 67): First conviction: up to 3 years and fine up to ₹5,00,000. Later conviction: up to 5 years and fine up to ₹10,00,000; Remember the pattern: repeat offence means heavier punishment.
Sexually explicit content (Section 67A): First conviction: up to 5 years and fine up to ₹10,00,000. Later conviction: up to 7 years and fine up to ₹10,00,000; Stricter than Section 67.
Child sexual abuse material (Section 67B): First conviction: up to 5 years and fine up to ₹10,00,000. Later conviction: up to 7 years and fine up to ₹10,00,000; The punishment figures match Section 67A. Do not treat child material as falling under Section 67 alone.
Breach of confidentiality and privacy (Section 72): Imprisonment up to 2 years or fine up to ₹1,00,000 or both; Applies to a person with powers under the Act who discloses records without consent.
Offensive messages (Section 66A): Struck down by the Supreme Court in 2015 (Shreya Singhal case); It is no longer law. Do not choose it as a current penalty.

How to solve Cyber Law and Misuse of Communication Channels questions

Most questions describe an act and ask for its name, the section or the penalty. Use this order.

1Read the scenario and underline the action: unauthorised access, fake email, impersonation, offensive content, or leaking data.
2Name the offence: hacking, phishing, identity theft, obscene content or breach of confidentiality.
3Decide whether the question asks about compensation (civil damage to a computer or data) or punishment (jail and fine).
4Recall the section and the penalty from your table. Check the words 'first conviction' versus 'subsequent conviction'.
5Check each option for exact numbers. Years and rupee amounts are the usual traps.
6Eliminate options that name a different offence or a repealed provision such as Section 66A.
7Mark the option that matches both the offence and the penalty.

Quickest way: Keyword-to-offence matching

When to use it: Use this for any MCQ in under 40 seconds.

Fake email or OTP request: phishing.
Entering or damaging a system without permission: hacking.
Using another person's password or identity: identity theft.
Offensive or obscene post: Section 67 family (67, 67A and 67B for child material).
Leaked records by an authorised person: Section 72.
Remember the ladder of years: 2 (confidentiality), 3 (hacking, identity theft, first obscene), 5 (repeat obscene, first explicit, first child material), 7 (repeat explicit, repeat child material).

Common mistakes in Cyber Law and Misuse of Communication Channels

Treating phishing and hacking as the same thing.
Both involve stolen data, so they seem alike.
Fix: Hacking is breaking into a system. Phishing tricks a person into handing over details. Look for a fake message or website.
Mixing up penalty figures for Sections 66, 66C and 67.
All three say 'up to 3 years', and only the fines differ.
Fix: Learn fines in a set: ₹5 lakh (66 and 67 first), ₹1 lakh (66C, 66D), ₹10 lakh (67 repeat, 67A and 67B).
Ignoring 'first' and 'subsequent' conviction in Section 67.
Students memorise only the first penalty.
Fix: Write both penalties side by side and read the question for repeat offence.
Choosing Section 66A for offensive messages.
Older books and notes still mention it.
Fix: Remember it was struck down in 2015 and is not valid law today.
Confusing compensation with imprisonment.
Section 43 and Section 66 describe similar acts.
Fix: Section 43 gives civil compensation. Section 66 gives criminal punishment when the act is dishonest or fraudulent.
Thinking only individuals, not companies, face cyber risks at work.
Students see cyber crime as a personal matter.
Fix: Remember that employee misuse of office email or social media can expose the employer and the employee.

Worked examples

Example 1

Meena receives an email that looks like it is from her bank. It asks for her net-banking password and OTP. She enters them and ₹40,000 is taken from her account. What is this offence called? (a) Phishing (b) Defamation (c) Breach of confidentiality by an officer (d) Publishing obscene material

Show the solution

Underline the action: a fake email posing as a bank to obtain a password and OTP.
A fake message that tricks a person into giving details is phishing.
Defamation concerns harm to reputation, which is not described.
Breach of confidentiality needs an authorised person who discloses records, which is not described.
No obscene content is involved, so option (d) is out.

Answer: (a) Phishing

Example 2

A person is convicted for the first time of publishing obscene material in electronic form under Section 67 of the IT Act. What is the maximum punishment? (a) 2 years and fine up to ₹1,00,000 (b) 3 years and fine up to ₹5,00,000 (c) 5 years and fine up to ₹10,00,000 (d) 7 years and fine up to ₹10,00,000

Show the solution

Identify the section: Section 67, obscene electronic content.
Note the words 'first conviction'.
First conviction under Section 67: up to 3 years and fine up to ₹5,00,000.
Option (a) is the pattern for Section 72. Option (c) is the repeat-offence penalty under Section 67. Option (d) is the repeat penalty under Section 67A.
Only option (b) matches.

Answer: (b) 3 years and fine up to ₹5,00,000

Exam tips

Questions are usually direct: name the offence or pick the penalty. Learn definitions and the penalty ladder.
Check whether the question says first or subsequent conviction before choosing a number.
Eliminate Section 66A as a live provision. It is a favourite trap.
Read the scenario for the key verb: 'enters without permission' is hacking, 'pretends to be the bank' is phishing.
If you are unsure of an exact figure, remove options with the wrong offence first. There is no negative marking, so always answer.

Practice questions from Legal Aspects of Business Communication

Cyber Law and Misuse of Communication Channels in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

CSEETTypes and Channels of Communication

Cyber Law and Misuse of Communication Channels: frequently asked questions

What is phishing in simple words?

Phishing is a trick where a fake email, SMS or website pretends to be a trusted organisation. It makes you share passwords, OTPs or card details. The offender then misuses them to steal money or identity.

What is the difference between hacking and phishing?

Hacking is unauthorised access to a computer system or data, often by technical means. Phishing deceives a person into giving the details voluntarily. Both are punishable under the IT Act.

Which Act deals with cyber crimes in India?

The Information Technology Act, 2000 is the main law. It deals with offences such as hacking, identity theft, cheating by personation, and obscene electronic content, and also gives legal recognition to electronic records.

How can I avoid legal risks in email and social media at work?

Do not share passwords, do not open links from unknown senders, and do not forward offensive or confidential material. Follow your company's social media and email policy. Use official channels only for official matters.