Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Cyber Threats and Cyber Laws

Section 69B IT Act: Monitoring and Collecting Traffic Data

Updated 11 October 2026 · Fact-checked

Section 69B of the IT Act, 2000 lets the Central Government, by Gazette notification, authorise a government agency to monitor and collect traffic data or information in any computer resource, to enhance cyber security. Intermediaries must give technical assistance. Intentional or knowing default is punishable with up to one year's imprisonment, or a fine up to ₹1 crore, or both.

Understand Monitoring and Collection of Traffic Data (Section 69B)

Every online communication leaves a trail apart from its content. This trail is traffic data. It shows who talked to whom, from where, when and for how long. Section 69B lets the State use this trail to detect and stop cyber attacks.

Under s.69B(1), the Central Government may, to enhance cyber security and for identification, analysis and prevention of intrusion or spread of computer contaminant in the country, authorise any agency of the Government by notification in the Official Gazette. The agency may monitor and collect traffic data or information generated, transmitted, received or stored in any computer resource. Computer contaminant has the meaning given in section 43 (for example, viruses and malware).

The Explanation defines traffic data as any data identifying or purporting to identify any person, computer system, computer network or location to or from which the communication is or may be transmitted. It includes origin, destination, route, time, data, size, duration or type of underlying service, and any other information. The words 'any other information' make the list open-ended.

Section 69B(2) puts a duty on the intermediary or any person in charge of the computer resource. When called upon by the authorised agency, they must provide technical assistance and extend all facilities to enable online access, or to secure and provide online access to the computer resource. Section 69B(3) says the procedure and safeguards are as prescribed. Section 87(2)(za) gives the Central Government the rule-making power for this. The rules are the Traffic Data Rules made in 2009; check the ICSI material for their detail.

Section 69B(4) is the penalty. An intermediary who intentionally or knowingly contravenes sub-section (2) is punished with imprisonment up to one year, or fine up to one crore rupees, or both. This was substituted by Act 18 of 2023 with effect from 30-11-2023. Earlier it was imprisonment up to three years and also fine. Note the contrast with s.69: the s.69 penalty is imprisonment up to seven years and also fine.

Key rules to remember

Who authorises (s.69B(1)): Central Government → notification in Official Gazette → any agency of the Government; State Governments are not named in s.69B. Authority is by Gazette notification, not by individual order.
Purpose: Enhance cyber security + identify, analyse, prevent intrusion or spread of computer contaminant; Cyber security is the purpose. Unlike s.69, the grounds of sovereignty, public order or investigation are not listed.
Subject matter: Traffic data or information generated, transmitted, received or stored in any computer resource; Traffic data = identifying data plus origin, destination, route, time, data, size, duration, type of service and any other information.
Intermediary duty (s.69B(2)): When called upon: provide technical assistance + extend all facilities for online access; Applies to the intermediary or any person in charge of the computer resource.
Procedure and safeguards (s.69B(3)): As may be prescribed (rule power: s.87(2)(za)); Safeguards sit in the rules, not in the section.
Penalty (s.69B(4)): Intermediary intentionally or knowingly contravening s.69B(2): imprisonment up to 1 year, or fine up to ₹1 crore, or both; Amended by Act 18 of 2023, w.e.f. 30-11-2023. Earlier: up to 3 years and also fine.
Section 69 comparison: s.69: interception, monitoring, decryption of information; reasons recorded in writing; failure to assist: up to 7 years and fine; Section 69 covers Central or State Government, specified grounds, and an order by an authorised officer.

How to solve Monitoring and Collection of Traffic Data (Section 69B) questions

Use this provision-analysis-conclusion method for any s.69B question, whether it is theory or a case.

1Identify the power: say that s.69B(1) allows the Central Government to authorise a Government agency by Gazette notification.
2Check the purpose: is the action to enhance cyber security, or to identify, analyse or prevent intrusion or spread of computer contaminant?
3Classify the data: is it traffic data (origin, destination, route, time, size, duration, type of service)? Content is the domain of s.69.
4Apply the intermediary duty: was the intermediary or person in charge called upon by the authorised agency? If yes, it must give technical assistance and all facilities for online access.
5Check the safeguards: mention that procedure and safeguards are prescribed under s.69B(3) and s.87(2)(za), and that the agency must follow them.
6Test the mental element for penalty: was the contravention intentional or knowing? Only then does s.69B(4) apply.
7Conclude with the consequence: imprisonment up to one year, or fine up to ₹1 crore, or both. Add a drafting or compliance point, such as keeping a log of agency requests.

Quickest way: Four-question check for s.69B

When to use it: Short-note or case questions with little time.

Who? Central Government authorises an agency by Gazette notification.
Why? Cyber security, and intrusion or computer contaminant.
What? Traffic data, not the message content.
Duty and penalty? Intermediary assists; intentional or knowing default means up to 1 year, or fine up to ₹1 crore, or both.

Common mistakes in Monitoring and Collection of Traffic Data (Section 69B)

Mixing up s.69 and s.69B
Both deal with government monitoring and carry similar headings.
Fix: Remember: s.69 is interception, monitoring and decryption of information on listed grounds; s.69B is traffic data for cyber security. Also remember the penalties differ: up to 7 years and fine in s.69, and up to 1 year or fine up to ₹1 crore or both in s.69B.
Stating the old penalty of three years and fine
Older notes and books still carry the pre-2023 text.
Fix: Use the current text: up to one year, or fine up to one crore rupees, or both, after Act 18 of 2023 (w.e.f. 30-11-2023).
Saying State Governments can authorise agencies under s.69B
Students carry over the wording of s.69.
Fix: Section 69B(1) names only the Central Government.
Treating traffic data as the content of a message
The word 'data' suggests content.
Fix: Traffic data describes the communication: origin, destination, route, time, size, duration, type of service. Note that the definition ends with 'any other information'.
Applying the penalty to any person who fails to help
Students confuse s.69(4) with s.69B(4).
Fix: Section 69B(4) penalises an intermediary who intentionally or knowingly contravenes s.69B(2). Section 69(4) covers subscriber, intermediary or any person.
Ignoring the safeguards and rules
Students focus on the power and the penalty.
Fix: Always add that procedure and safeguards are as prescribed under s.69B(3), with rule power in s.87(2)(za).

Worked examples

Example 1

Nirvana Cloud Services Pvt Ltd, an intermediary, receives a request from an agency authorised by Gazette notification of the Central Government under s.69B. The agency wants online access to servers to collect traffic data for tracing a malware campaign. The company's director refuses, saying the agency has no court order. Advise the company.

Show the solution

Provision: s.69B(1) lets the Central Government, by Gazette notification, authorise any Government agency to monitor and collect traffic data in any computer resource to enhance cyber security and prevent spread of computer contaminant.
Analysis of facts: the agency is notified by the Central Government. The purpose, tracing a malware campaign, fits identification and prevention of spread of computer contaminant. The data sought is traffic data.
Duty: s.69B(2) requires the intermediary, when called upon by the authorised agency, to provide technical assistance and extend all facilities for online access. The section does not require a court order.
Consequence: s.69B(4) applies if the intermediary intentionally or knowingly contravenes s.69B(2). The refusal appears deliberate.
Practical point: the company may verify the Gazette notification and the agency's compliance with the prescribed procedure and safeguards, and record the request.

Answer: The refusal is not justified on the ground of no court order. Nirvana must extend technical assistance and facilities. Deliberate refusal exposes it to imprisonment up to one year, or fine up to ₹1 crore, or both, under s.69B(4). It should verify the notification and procedure, then comply.

Example 2

Distinguish between s.69 and s.69B of the IT Act, 2000.

Show the solution

Subject: s.69 covers interception, monitoring or decryption of any information in a computer resource. Section 69B covers monitoring and collecting traffic data or information.
Authority: s.69 operates through the Central or State Government or an officer specially authorised by it, by order with reasons recorded in writing. Section 69B operates through the Central Government authorising a Government agency by Gazette notification.
Grounds: s.69 lists sovereignty, integrity, defence, security of the State, friendly relations, public order, preventing incitement to related cognizable offences, or investigation of any offence. Section 69B has the purpose of cyber security and preventing intrusion or computer contaminant.
Assistance duty: under s.69(3) the subscriber, intermediary or any person in charge must extend facilities. Under s.69B(2) the intermediary or person in charge must provide technical assistance and facilities.
Penalty: s.69(4) provides imprisonment up to seven years and also fine. Section 69B(4) applies to intermediaries who intentionally or knowingly contravene, with imprisonment up to one year, or fine up to ₹1 crore, or both.
Rules: s.69(2) and s.69B(3) both leave procedure and safeguards to rules, under s.87(2)(y) and (za) respectively.

Answer: Section 69 is a wide power to intercept, monitor or decrypt information on listed grounds, with a seven-year penalty. Section 69B is a narrower cyber security power over traffic data, with a lighter penalty for intermediaries who intentionally or knowingly default.

Exam tips

Write the section number with the sub-section, for example s.69B(2) for duty and s.69B(4) for penalty. Examiners reward precision.
In comparison questions, use a point-wise layout: authority, grounds, data covered, duty, penalty, rules.
For case questions, follow provision, analysis of facts, conclusion, and add one compliance point such as verifying the notification and logging requests.
State the penalty in full: imprisonment up to one year, or fine up to ₹1 crore, or both. Mention the 2023 amendment if you are sure of it.
Quote the traffic data definition from memory: origin, destination, route, time, data, size, duration, type of underlying service and any other information.

Practice questions from Cyber Threats and Cyber Laws

Monitoring and Collection of Traffic Data (Section 69B) in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

CMA FinalMonitoring of Traffic Data and Cyber Security (Section 69B)

Monitoring and Collection of Traffic Data (Section 69B): frequently asked questions

What is Section 69B of the IT Act?

It lets the Central Government, by Gazette notification, authorise a Government agency to monitor and collect traffic data or information in any computer resource. The aim is to enhance cyber security and to identify, analyse and prevent intrusion or spread of computer contaminant.

What is the difference between Section 69 and Section 69B?

Section 69 deals with interception, monitoring and decryption of information on grounds such as sovereignty, public order and investigation, by written order with reasons. Section 69B deals only with traffic data for cyber security, through an agency authorised by notification. Penalties also differ.

What is the penalty under Section 69B?

An intermediary who intentionally or knowingly contravenes s.69B(2) faces imprisonment up to one year, or fine up to one crore rupees, or both. This is the position after the 2023 amendment effective 30-11-2023.

What is traffic data under Section 69B?

It is any data identifying or purporting to identify any person, computer system, computer network or location to or from which a communication is or may be transmitted. It includes origin, destination, route, time, data, size, duration, type of underlying service and any other information.

Where are the procedure and safeguards for s.69B laid down?

Section 69B(3) says they are as prescribed. Section 87(2)(za) empowers the Central Government to make rules for this. Study the detail of those rules from the ICSI study material.