Skip to content

CS Professional · Environmental, Social and Governance (ESG) - Principles and Practice · Data Governance

Vistara Retail Pvt Ltd's server is suspected of holding data linked to a contravention of Chapter VI of the IT Act, 2000 (the Chapter on Controller powers and certifying authorities). The Controller has reasonable cause to suspect the contravention. Under Section 29 of that Act, what may the Controller or a person authorised by him do?

The Controller or an authorised person may access the computer system, apparatus, data or connected material to search for information, because Section 29(1) of the IT Act gives this power where there is reasonable cause to suspect a contravention. It confers no power of arrest or bank account seizure.

  1. AHave access to the computer system, apparatus, data or related material to search for information or dataCorrect
  2. BArrest the directors of the company without any further procedure
  3. CPermanently seize the company's bank accounts
  4. DImpose compensation for failure to protect data without any inquiry

Explanation

Section 29(1) of the IT Act lets the Controller or an authorised person, on reasonable cause to suspect a contravention, access any computer system, apparatus, data or material connected with it to search for information. It does not give powers of arrest, seizure of bank accounts or compensation awards.

Did you get it right without looking?

One question tells you little. A timed set on Data Governance shows your real accuracy, how long you take and where you lose marks.

More Data Governance questions