Skip to content

CS Professional · Environmental, Social and Governance (ESG) - Principles and Practice · Data Governance

CERT-In calls upon Deccan Data Centres Ltd to furnish information on a ransomware incident affecting its clients and directs it to apply certain containment measures. The company ignores both the request and the direction. Under Section 70B of the IT Act, 2000, what is the position?

The company is punishable with imprisonment up to one year, or fine up to one crore rupees, or both. Section 70B allows the Indian Computer Emergency Response Team to call for information and give directions to data centres and body corporates, and non-compliance is an offence.

  1. ANo penalty, as CERT-In can only issue non-binding advisories
  2. BPunishable with imprisonment up to one year or fine up to one crore rupees or bothCorrect
  3. CPunishable with imprisonment up to three years and mandatory fine
  4. DPunishable with imprisonment for life

Explanation

Section 70B(6) lets the agency call for information and give directions to data centres, body corporate and others. Under 70B(7), failure to comply is punishable with imprisonment up to one year or fine up to one crore rupees or both. The three-year figure was the older penalty under Section 69B and has been replaced; life imprisonment relates to cyber terrorism.

Did you get it right without looking?

One question tells you little. A timed set on Data Governance shows your real accuracy, how long you take and where you lose marks.

Practise Data GovernanceFree diagnostic mock

More Data Governance questions