LLB · Semester 6 · Paper K-6005
Chaudhary Charan Singh University
Information Technology and Cyber Law
Read on phone, tablet or laptop
“Technology, Cyber Law & Electronic Contracts — Terms · Cyberspace · Jurisprudence · E-Contracts”, the complete chapter, exactly as it appears in the full notes.
| Term (PYQ year) | Meaning — write this in the exam | Remember |
|---|---|---|
| Data (2018) | Raw facts, figures, symbols (numbers, text, images, audio, video) — no meaning until processed. IT Act s.2(1)(o): “data” = representation of information, knowledge, facts, concepts or instructions prepared in a formalised manner for processing in a computer. | Data → processed → Information (marks vs total/average) |
| Computer System (2018, 2022) | Hardware (keyboard, monitor, CPU, storage) + software (programs, OS) working together. 4 functions: input, processing, storage, output. IT Act s.2(1)(l): device/collection of devices with input, output, processing, storage, communication facilities, programs… | IPSO |
| Computer Memory (2017) | Primary (RAM — volatile; ROM — permanent) = fast. Secondary (hard disk, pen drive, SSD) = slower, permanent. | RAM loses data on power-off |
| Computer Network (2018, 2019, 2022) | Interconnected computers/devices that share resources. LAN (office/building), MAN (city), WAN (country/world — Internet is the biggest WAN). IT Act s.2(1)(j): interconnection through satellite, microwave, terrestrial line, wire, wireless etc. | LAN < MAN < WAN |
| Communication Device (2019) | Hardware that sends/receives data: modem, router, switch, mobile phone. IT Act s.2(1)(ha) (added 2008): cell phones, personal digital assistants, or combination of both or any other device used to communicate, send or transmit text, video, audio or image. | Modem = modulator + demodulator |
| Internet (2019) | Global network of networks (TCP/IP) — email, websites, banking, social media, e-commerce. | Internet ≠ WWW |
| WWW (2023) | System of interlinked web pages accessed through browsers using HTTP + hyperlinks. WWW is a service running on the Internet (Tim Berners-Lee, ~1989–91). | Internet = road; WWW = shops on the road |
| Wi-Fi (2017) | Wireless networking using radio waves (IEEE 802.11) for internet without cables — homes, offices, airports. Risk: open public Wi-Fi can be sniffed. | Mobility + flexibility |
| Cyber Cafe (2018, 2019) | Place where public pays to access computers/internet. IT Act s.2(1)(na): any facility from where access to the internet is offered to members of the public in the ordinary course of business. Operators must keep user identity records — IT (Guidelines for Cyber Cafe) Rules, 2011 (log register, ID proof, record retention 1 year). | Identity + log register |
| Multimedia (2017) | Text + images + audio + video + animation combined — education, ads, OTT. Legal angle: each component has its own copyright (see Ch.2). | Interactive content |
| Information Technology (2020) | Use of computers, software, networks & electronic systems to store, process, transmit information (data mgmt, networking, cyber-security, software). | IT Act = law of IT |
| Electronic Record (2019) | IT Act s.2(1)(t): data, record or data generated, image or sound stored, received or sent in an electronic form or micro film or computer-generated micro fiche. Emails, PDFs, logs, WhatsApp chats. Legally equal to paper (s.4). | “Writing” in digital form |
| Web Conferencing (2023) | Real-time meetings/seminars via audio, video, chat (Zoom, Meet, Teams). Legal use: video-conferencing evidence — State of Maharashtra v. Dr. Praful B. Desai (2003 SC): witness examined through video-link = “presence” for CrPC; now BNSS s.530 (trial & proceedings in electronic mode). | Courts use VC daily |
| Science vs Technology (2024) | Science = systematic study of natural world (why/how), discovers laws, does not change. Technology = application of science to build tools (what can we build), changes continuously, can be useful or harmful. | Science → knowledge; Tech → tools |
| Term | Meaning | Law / key point |
|---|---|---|
| Virus (2017) | Malicious program that attaches to files and replicates, corrupting data/disrupting systems; spreads via infected files, e-mail, downloads. Guide: ILOVEYOU worm (2000, ~45 million machines) & Klez (2001). | IT Act s.43(c) “computer contaminant/virus” → compensation; s.66 if dishonest/fraudulent |
| Worm (extra) | Self-replicating without host file; spreads over network by itself. | WannaCry 2017 = ransomware worm |
| Trojan Horse (2017) | Looks legitimate (e.g., e-mail attachment) but opens back-door to steal/delete/modify; does NOT replicate itself (Guide). Named after Trojan War story. | Virus replicates; Trojan deceives |
| Ransomware (extra) | Encrypts victim’s files and demands payment for the key. | s.43 + s.66 + BNS extortion (s.308) / cheating |
| Cyber Security (2022) | Protecting systems, networks & data from attack/unauthorised access using encryption, firewalls, antivirus, strong passwords. Goals = CIA triad: Confidentiality · Integrity · Availability. IT Act s.2(1)(nb) defines it (2008). | CERT-In (s.70B), NCIIPC (s.70A) |
| Secure System (2020) | IT Act s.2(1)(ze): computer hardware, software and procedure that are (a) reasonably secure from unauthorised access/misuse, (b) reasonably reliable & correct in operation, (c) reasonably suited to intended functions, (d) adhere to generally accepted security procedures. (Guide gives only the gist; clause letter — verify.) | Basis of “secure electronic record” (s.14) |
| Firewall | Hardware/software that monitors & filters traffic by predefined rules → Accept (allow), Reject (block with error), Drop (block silently). First line of defence; also parental controls & workplace policy. | Prevents unauthorised access |
| Hacking (2017, 2025) | Unauthorised access to systems/networks to steal or misuse data (finding security holes; password cracking). Punishable: s.43 (civil — compensation up to ₹5 crore) + s.66 (criminal — up to 3 years or fine up to ₹5 lakh or both) if dishonest/fraudulent. | See Ch.7 & Ch.9 |
| Phishing | Fake e-mail/SMS/call/site posing as bank/government to trick victim into revealing passwords, OTP, card data. Variants: smishing (SMS), vishing (voice). | s.66D (cheating by personation) + s.66C (identity theft) + s.43; BNS s.318/319 |
| Data Encryption | Converting plaintext into ciphertext using algorithm + key so only key-holder can read it → confidentiality in storage/transit. | IT Act s.84A (modes of encryption); s.69 (decryption help) |
| Asymmetric Crypto System (2022) | Public-key cryptography: pair of mathematically related keys — public (shared) & private (secret). Used for digital signatures and secure transactions. IT Act s.2(1)(f): system capable of securely generating a key pair (private key to create a digital signature; public key to verify it). | Backbone of DSC (Ch.6) |
| Digital Signature | Electronic signature authenticating identity + integrity of an electronic record (made with asymmetric crypto + hash). Legally recognised under IT Act ss.3, 5. | Details in Ch.5–6 |
| Subscriber (2022) | Person in whose name the Digital/Electronic Signature Certificate is issued — IT Act s.2(1)(zg); must guard private key (ss.40–42). | Duties — Ch.6 |
| Cyber Law (2020) | Body of law regulating computers, internet & digital communication: cyber-crimes, e-contracts, data protection, privacy, IPR online. Main statute: IT Act, 2000. | Chapter 1 s5 |
| Point | Virus | Worm | Trojan |
|---|---|---|---|
| Needs host file? | Yes | No | No (disguised as useful software) |
| Self-replicates? | Yes (when file runs) | Yes (automatic over network) | No |
| Spreads by | Infected files, e-mail | Network flaws | User tricked into installing |
| Typical harm | Corrupt/delete data | Slows network, installs payload | Back-door, data theft, remote control |
| Type | How acceptance happens | Legal strength | Example |
|---|---|---|---|
| Click-wrap | User clicks “I Agree”/ticks box | Strong — clear assent | Swiggy/Ola T&C, bank app onboarding |
| Browse-wrap | Terms hyperlinked; mere browsing/use | Weak — notice/assent doubtful | “By using this site you agree…” footer |
| Shrink-wrap | Terms in box/inside software; open/install | Moderate | MS Office licence, game CD |
| E-mail / EDI | Exchange of mails or structured data | Valid (Trimex 2010) | Tender, supply orders |
| E-sign contract | Aadhaar eSign / DSC | Strongest (ss.3, 3A, 5) | Loan agreement, rent e-agreement |
| Section | Provision | Key words |
|---|---|---|
| s.4 | Legal recognition of electronic records — “writing/typewritten/printed” requirement satisfied if in electronic form and accessible for subsequent reference. | accessible → usable |
| s.5 | Legal recognition of electronic signatures — where law requires signature, e-signature (as per Act) satisfies it. (Pre-2008: “digital signatures”.) | signature equivalence |
| s.10A (2008) | Contract formed through electronic means not unenforceable merely because e-form/e-record used for proposal, acceptance, communication or revocation. | “solely because” |
| s.11 | Attribution — e-record is the originator’s if sent by him, by an authorised person, or by an information system programmed by/for him to operate automatically. | who sent it? |
| s.12 | Acknowledgment of receipt — as agreed, or by communication/conduct; if originator said “binding only on acknowledgment”, not binding till received. | receipt proof |
| s.13 | Time & place of dispatch/receipt — decides when/where contract is formed (see diagram). | timing + jurisdiction |
| First Schedule item | Defined in | Why excluded |
|---|---|---|
| Negotiable instrument (other than a cheque) | NI Act 1881, s.13 | Promissory note/bill of exchange — risk of forgery; cheque truncation (CTS) is separately allowed |
| Power-of-attorney | Powers-of-Attorney Act 1882, s.1A | Gives wide authority — needs strong authentication |
| Trust | Indian Trusts Act 1882, s.3 | Creates fiduciary obligations |
| Will / testamentary disposition | Indian Succession Act 1925, s.2(h) | Needs 2 attesting witnesses (s.63 ISA) |
| Contract for sale / conveyance of immovable property | — | Registration & stamp laws; high value |
| Any other notified class | Central Govt notification | Flexible list |
| Term | Plain meaning | Legal / exam hook |
|---|---|---|
| IP address | Unique number of a device on the network. IPv4 = 32-bit (about 4.3 billion addresses, runs out) · IPv6 = 128-bit (practically unlimited). | Used to trace the sender; ISP keeps logs (CERT-In Directions 28-4-2022: logs for 180 days; IT Act s.67C — preservation & retention by intermediaries). |
| DNS (Domain Name System) | Phone-book of the Internet: converts name → IP. | Domain-name disputes, cybersquatting (Ch.4); DNS blocking is how many s.69A orders are executed. |
| URL · HTTP · HTTPS | URL = full web address. HTTP = language browser and server talk. HTTPS = HTTP + TLS (successor of SSL) — encrypted. | Padlock = reasonable security practice (s.43A / SPDI Rules); sniffing on open Wi-Fi is s.43(a)/(b). |
| ISP | Company that gives you Internet access (Jio, Airtel, BSNL…). | Intermediary under s.2(1)(w) → s.79 safe harbour; licensed through Department of Telecommunications. |
| Cookie | Small file a website stores in your browser to remember you / track you. | Personal data → needs consent under DPDP Act, 2023 (Ch.10). |
| Cloud computing | Storage / processing on someone else’s remote servers (Google Drive, AWS). | Where is the data? → jurisdiction and cross-border transfer questions. |
| IoT (Internet of Things) | Everyday devices online — CCTV, smart TV, wearables. | Weak passwords → botnets; manufacturer / owner duty of reasonable security. |
| Blockchain · crypto-asset | Shared tamper-resistant ledger; crypto is its best-known use. | No dedicated Indian statute yet (taxed as “virtual digital assets”) — verify current position; used in ransomware payments. |
| Dark web | Part of the Internet reachable only through special software (e.g., Tor); hides identity. | Marketplace for stolen data / drugs / CSAM → cross-border investigation problem (Ch.9). |
| Type | How it behaves | Typical example | Section |
|---|---|---|---|
| Virus | Attaches to a file/program; spreads when the file is run or shared | infected pen-drive file | s.43(c) · s.66 |
| Worm | Copies itself across the network without a host file or user action | email / network worms | s.43(c),(e) |
| Trojan (Q26) | Looks useful (free app, “invoice.pdf”), hides a harmful payload; usually spread by spam attachments | fake “KYC.apk” | s.43(a),(i) · s.66 |
| Ransomware | Encrypts your files and demands payment (often crypto) | hospital / company shutdown | s.43(i) · s.66 · BNS s.308 (extortion) |
| Spyware / keylogger | Secretly records screen, keystrokes, location | stalkerware on a phone | s.43(b) · s.66E · BNS s.78 |
| Logic bomb | Sleeps until a date/event, then deletes or corrupts data | angry employee’s time-bomb script | s.43(d),(i) |
| Botnet / DDoS | Thousands of infected devices flood a server so real users cannot enter | website knocked offline | s.43(e),(f) · s.66 · s.66F if critical system |
| Zero-day | Attack on a flaw the vendor does not yet know | unpatched software | Report to CERT-In within 6 hrs (2022 Directions) |
Chapter by chapter, mapped to the LLB Semester 6 syllabus.
About the Information Technology and Cyber Law paper and these notes.
The notes cover technology terms, cyberspace and e-contracts, copyright, patents and trademarks in cyberspace, the IT Act, 2000 with digital and electronic signatures and certifying authorities, penalties, adjudication and offences, intermediaries and the IT Rules, cyber crimes and the BNS, the right to privacy and the DPDP Act, 2023, and online speech and cyber defamation.
A digital signature authenticates an electronic record using an asymmetric crypto system of a private key and a public key. An electronic signature under section 3A is the wider, technology-neutral term added in 2008, which includes digital signatures and other reliable techniques listed in the Second Schedule.
In Shreya Singhal v. Union of India the Supreme Court struck down section 66A because its vague restrictions on online speech violated Article 19(1)(a) and were not saved by Article 19(2). The case also read down the takedown duty of intermediaries under section 79.
Section 79 protects an intermediary from liability for third-party content if it only provides access, does not initiate or modify the transmission and observes due diligence, and it loses the protection if it fails to remove unlawful content after notice. The notes cover the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and their amendments.
Yes. The privacy chapter starts from the right to privacy recognised in K.S. Puttaswamy v. Union of India, explains the IT Act provisions such as section 43A, and then covers the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, including the penalty chart.
Still have a question? Ask us
