Cyber Security is a concept and a practice of protecting computer systems, networks, and data from unauthorized access, attacks, or damage. It is also known as Information Technology (IT) security and involves a coordinated approach combining technology, processes, and people to ensure the security of digital information. The concept's origin in India is closely tied to the advent of the internet and the need for a legal framework to govern digital transactions and combat cybercrime.
India's formal legal structure for cyber security began with the enactment of the Information Technology Act, 2000 (IT Act, 2000), which came into effect on October 17, 2000. The problem it solved was the lack of legal recognition for electronic records and digital signatures, which was necessary to promote e-commerce and e-governance. The IT Act, 2000 provides a legal framework by giving electronic records and digital signatures the same legal validity as paper documents and handwritten signatures. Key mechanisms include defining and penalizing cybercrimes like hacking, identity theft, and cyber terrorism.
The mechanism was strengthened by the Information Technology (Amendment) Act, 2008, which expanded the definition of cybercrime and strengthened data protection provisions. The IT Act, 2000, specifically Section 70B, empowered the government to establish the Indian Computer Emergency Response Team (CERT-In) in 2004 as the national nodal agency for responding to cyber security incidents. CERT-In's functions, outlined in Section 70B(4), include collecting, analyzing, and disseminating information on cyber incidents, issuing alerts, and coordinating response activities.
A key recent change is the passage of the Digital Personal Data Protection Act, 2023 (DPDP Act) on August 11, 2023, which shifted power to citizens by requiring consent and breach notifications for personal data processing. This new law, which replaced the previous focus on data protection under Section 43A of the IT Act, 2000, brings India closer to global privacy standards. Cyber security also connects to the National Cyber Security Policy, 2013, which set a vision for a secure cyberspace, and the Indian Cyber Crime Coordination Centre (I4C), established in 2018 under the Ministry of Home Affairs to combat cybercrime.