Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Regulatory Framework on AI, Cyber Security and Cyberspace

IT Act 2000 Key Definitions: Computer Resource, Intermediary and More

Updated 11 October 2026 · Fact-checked

The Information Technology Act, 2000 defines the terms that decide whether a person, device or data falls under its rules. Section 2(1) gives these definitions, such as computer resource, intermediary, electronic record and cyber security. To solve a question, match the facts to the exact words of the definition and then state the consequence.

Understand Information Technology Act, 2000: Key Definitions and Scope

The IT Act, 2000 gives legal recognition to electronic records and signatures and sets rules for cyber offences, intermediaries and cyber security. Every later provision depends on the vocabulary in section 2(1). If you misread a definition, you misapply the section built on it.

Start with the building blocks. A computer is any electronic, magnetic, optical or other high-speed data processing device or system that performs logical, arithmetic and memory functions. It includes the input, output, processing, storage, software and communication facilities connected to it. A computer network is the inter-connection of computers, computer systems or communication devices through satellite, microwave, terrestrial line, wire, wireless or other media. The inter-connection need not be continuously maintained.

The widest term is computer resource. It means computer, computer system, computer network, data, computer data base or software. Many sections, including section 69B, speak of a computer resource, so a phone, a server, a database or an app can all be covered.

Cyber security means protecting information, equipment, devices, computer, computer resource, communication device and the information stored in them from unauthorised access, use, disclosure, disruption, modification or destruction. Note the six threats listed. Also note that a communication device means cell phones, personal digital assistants or a combination of both, or any other device used to communicate, send or transmit text, video, audio or image.

Two more terms carry heavy exam weight. An electronic record means data, record or data generated, image or sound stored, received or sent in an electronic form or micro film or computer generated micro fiche. An intermediary, for any particular electronic record, means any person who on behalf of another person receives, stores or transmits that record or provides any service with respect to it. The list includes telecom service providers, network service providers, internet service providers, web-hosting service providers, search engines, online payment sites, online-auction sites, online-market places and cyber cafes. The test is acting on behalf of another person for that particular record.

Key rules to remember

Computer resource: Computer resource = computer + computer system + computer network + data + computer data base + software; Section 2(1)(k). Any one of these items is enough.
Cyber security: Protection of information, equipment, devices, computer, computer resource, communication device and stored information from unauthorised access, use, disclosure, disruption, modification or destruction; Section 2(1)(nb). Inserted in 2017. Quote the six threats.
Intermediary: Person who, on behalf of another, receives, stores or transmits a particular electronic record or provides a service for it; Section 2(1)(w). Includes ISPs, search engines, online marketplaces, payment sites and cyber cafes.
Electronic record: Data, record, generated data, image or sound stored, received or sent in electronic form or micro film or computer generated micro fiche; Section 2(1)(t).
Originator and addressee: Originator sends, generates, stores or transmits a message; addressee is the intended recipient. Neither includes an intermediary; Section 2(1)(za) and (b).
Electronic signature: Electronic signature = authentication by the technique in the Second Schedule, and includes digital signature; Section 2(1)(ta). A digital signature uses an asymmetric crypto system with a key pair.
Traffic data (section 69B Explanation): Data identifying or purporting to identify any person, computer system, network or location to or from which a communication is or may be transmitted, including origin, destination, route, time, data, size, duration or type of service; Defined for section 69B only, not in section 2.

How to solve Information Technology Act, 2000: Key Definitions and Scope questions

Definition questions are case-based. Reach the conclusion by matching facts to the statutory words.

1Identify which term the facts turn on, such as computer resource, intermediary or electronic record.
2Quote the definition from section 2(1) in plain words, with the clause number if you are sure of it.
3Break the definition into its parts and list them.
4Match each fact in the question to a part of the definition.
5Check exclusions, for example an intermediary is not an originator or addressee for the same record.
6State the legal consequence, such as which section or duty then applies.
7Write a one-line conclusion that answers the exact question asked.

Quickest way: Term, test, match, conclude

When to use it: Use for short-note and case questions when time is limited.

Write the term and its definition in one sentence.
Underline the key test: on behalf of another for intermediary; any of six items for computer resource.
Tick the facts that meet the test.
Write the consequence in one line.
If a section such as 69B is mentioned, add its related duty or penalty.

Common mistakes in Information Technology Act, 2000: Key Definitions and Scope

Treating computer resource as only a physical computer.
The word computer suggests hardware.
Fix: Remember that data, computer data base and software are also computer resources.
Calling every website owner an intermediary.
Students overlook the words on behalf of another person.
Fix: Check whether the person receives, stores, transmits or serves a record for someone else.
Treating an originator or addressee as including an intermediary.
Both terms sound broad.
Fix: Recall that the definitions of originator and addressee expressly exclude an intermediary.
Writing a loose meaning of cyber security as protection from hackers.
Everyday usage replaces the legal text.
Fix: Use the statutory wording: unauthorised access, use, disclosure, disruption, modification or destruction.
Confusing electronic signature with digital signature.
The terms are used interchangeably in practice.
Fix: Electronic signature is the wider term and includes digital signature.
Quoting the old penalty under section 69B.
Older notes say three years and fine.
Fix: The text now provides imprisonment up to one year or fine up to one crore rupees, or both, after the 2023 amendment.

Worked examples

Example 1

Nexora Cloud Pvt Ltd in Pune hosts the website data of its customers on its servers and offers storage services. A customer's file is stored by Nexora. Is Nexora an intermediary under the IT Act, 2000?

Show the solution

The term is intermediary under section 2(1)(w).
It means a person who, on behalf of another, receives, stores or transmits a particular electronic record or provides any service for it.
Nexora stores the customer's files on behalf of the customer and provides a service for them.
The list in the definition includes web-hosting service providers, and Nexora fits that description.
The files are electronic records, so the test is met for that record.

Answer: Yes. Nexora is an intermediary for the customer's electronic records because it stores them and provides a service on the customer's behalf.

Example 2

Anita sends an e-mail with a PDF to Rahul through an e-mail service provider. Identify the originator, addressee and intermediary, and say whether the PDF is an electronic record.

Show the solution

An originator sends or generates an electronic message. Anita sends it, so she is the originator.
An addressee is the person intended by the originator to receive the record. Rahul is the addressee.
The e-mail service provider receives, stores and transmits the message on behalf of another, so it is an intermediary.
Neither the originator nor the addressee includes an intermediary, so the provider is neither.
The PDF is data or a record stored, sent and received in electronic form, so it is an electronic record under section 2(1)(t).

Answer: Anita is the originator, Rahul is the addressee, the e-mail service provider is the intermediary, and the PDF is an electronic record.

Exam tips

Learn the definitions almost word for word. Examiners reward the statutory test, not paraphrases.
In a case on intermediaries, always add the link to section 69B duty of technical assistance and the penalty if the facts show non-cooperation.
Mention that traffic data is defined in the Explanation to section 69B, not in section 2.
Use a short list of included intermediaries from the definition as supporting examples.
Close each answer with a clear conclusion in one sentence.

Practice questions from Regulatory Framework on AI, Cyber Security and Cyberspace

Information Technology Act, 2000: Key Definitions and Scope in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Information Technology Act, 2000: Key Definitions and Scope: frequently asked questions

What is a computer resource under the IT Act, 2000?

It means computer, computer system, computer network, data, computer data base or software. This is in section 2(1)(k). Because it is so wide, it covers both hardware and digital content.

What is cyber security under the IT Act?

It means protecting information, equipment, devices, computer, computer resource, communication device and stored information from unauthorised access, use, disclosure, disruption, modification or destruction. The definition was inserted in 2017.

Who is an intermediary under the IT Act?

An intermediary is any person who, on behalf of another, receives, stores or transmits a particular electronic record or provides a service for it. It includes telecom, internet, web-hosting and search engine providers, online payment, auction and marketplace sites, and cyber cafes.

Is the term traffic data defined in section 2?

No. It is defined in the Explanation to section 69B for the purposes of that section. It covers data about origin, destination, route, time, size, duration or type of service of a communication.