Understanding a Statute and Statutory Analysis: Information Technology Act, 2000

Almost every student opens an Act, skips the first four pages, and starts reading at the section they were told to read. Those four pages are the long title, the extent clause and the definitions — and they are the three things that decide what the section you jumped to actually means.

In two minutes

Statutory analysis is a portable five-question method — purpose, application, definitions, operative provision, delegation — and the Information Technology Act, 2000 is this module's worked example, including the sections courts have since struck down or read differently.

The anatomy of an Act

Every Indian statute is built the same way, and knowing the parts is half of statutory analysis.

The short title is the name you cite. The long title is a sentence beginning "An Act to…" and it states the purpose — courts use it when a provision is ambiguous. The preamble , where there is one, does similar work. The extent and commencement clause says where the Act applies and from when. The definitions section fixes the meaning of terms for that Act and no other. Then the substantive provisions creating rights and duties, the machinery provisions creating authorities and procedures, the offences and penalties , the rule-making power , the repeal and savings , and any Schedules .

A definition clause is more powerful than students expect. If an Act defines "vehicle" to include a bullock cart, then within that Act a bullock cart is a vehicle, whatever the dictionary says.

How to read one section

Inside a section there is an order too, and it is not top to bottom.

Find the operative rule first — the part that actually commands, permits or prohibits. Then read the exceptions . Then any proviso , which begins "Provided that" and carves something out of the rule it follows; a proviso qualifies only the provision it is attached to, not the whole section. Then any Explanation , which clarifies the meaning of what is already there and does not add a new rule. Then any Illustration , which shows the rule applied to facts.

Getting the proviso and the Explanation the wrong way round is a standard error and a standard two-mark question.

Now open the IT Act — and read the long title first

The Information Technology Act, 2000 begins with a long title about providing legal recognition for transactions carried out by electronic data interchange and other means of electronic communication, commonly referred to as electronic commerce.

Read that sentence again, because it surprises people. The Act's stated purpose is to enable electronic commerce — to make an electronic record and an electronic signature legally valid so that business can be done online. It was not conceived as an instrument for policing the internet. The policing provisions were added later, and much of the controversy around this Act comes from a law built for one purpose being used for another.

That single observation, stated in an answer, is worth more than a recitation of section numbers.

Walking the Act, part by part

Application. Section 1 extends the Act to the whole of India, and section 75 gives it extra-territorial reach where the offence involves a computer or computer network located in India — which is how an act done abroad can be prosecuted here.

Definitions. Section 2 defines computer , data , electronic record , and at section 2(1)(w) the term intermediary — a definition wide enough to catch search engines, marketplaces, telecom providers and social media platforms, which is why so much later regulation hangs off it.

The enabling core. Section 4 gives legal recognition to electronic records where law requires writing; section 5 does the same for electronic signatures. These two sections are the Act doing the job its long title promised.

Civil liability. Section 43 makes damage to a computer system compensable; section 43A makes a body corporate handling sensitive personal data liable to compensate for negligent security practices.

Offences. Section 66 and its family — 66C identity theft, 66D cheating by personation using a computer resource — and section 67 on obscene material in electronic form.

State powers. Section 69 permits interception, monitoring and decryption on specified grounds; section 69A permits blocking of public access to information.

Safe harbour. Section 79 exempts an intermediary from liability for third-party content, on conditions — the provision the entire platform-regulation debate turns on.

Rule-making. Section 87 empowers the Central Government to make rules. This is the section that produces the Information Technology Rules — and it is exactly the mechanism you learned in Topic 1.1. The Act is the parent; the Rules are delegated legislation; and Rules that travel beyond what section 87 authorises are liable to be struck down.

What the courts did to it

A statute is not only its text. In Shreya Singhal v. Union of India (2015) the Supreme Court struck down section 66A — which had criminalised sending offensive messages — as violating the freedom of speech under Article 19(1)(a) and failing the reasonable-restriction test of Article 19(2). In the same judgment the Court upheld section 69A with its procedural safeguards, and read down section 79(3)(b) so that an intermediary loses safe harbour only on a court order or a government notification, not on a private complaint.

This is an important lesson for statutory analysis generally: a section can be on the page and no longer be law. Reciting section 66A as though it were live is a serious error, and one that still appears in answers.

Currency matters too. Section 43A and the rules made under it have long been India's data-protection provision; the Digital Personal Data Protection Act, 2023 is designed to replace that scheme as it comes into force. Say so, and note that the change is being implemented in stages.

The five questions, for any statute

Strip away the IT Act and the method generalises. Ask these five of anything you are given:

One. What is it for? — the long title and preamble. Two. Who and where does it bind? — extent, commencement, application. Three. What do its words mean? — the definition clause. Four. What is the operative provision, and what qualifies it? — the rule, the exceptions, the provisos, the Explanations. Five. What does it delegate, and to whom? — the rule-making section.

Answer those five and you have analysed a statute, whether you have seen it before or not. That is what the examiner is testing when the question says "statutory analysis" rather than "describe the IT Act".

What the examiner has actually asked

Cheat sheet

Long title
The "An Act to…" sentence stating a statute's purpose. Courts use it to resolve an ambiguous provision.
Extent and commencement
The clause fixing where an Act applies and from what date it takes effect.
Definition clause
Fixes what a term means for that Act alone, whatever the dictionary or ordinary usage says.
Proviso
A clause beginning "Provided that" which carves an exception out of the provision it is attached to, and nothing wider.
Explanation
Clarifies the meaning of an existing provision. Unlike a proviso, it adds no new rule.
Intermediary
Defined in section 2(1)(w) of the IT Act, wide enough to cover search engines, marketplaces and social media platforms.
Safe harbour
Section 79's conditional exemption of an intermediary from liability for third-party content.
Rule-making power
Section 87 of the IT Act, letting the Central Government make delegated legislation — Rules — under the Act.
Section 66A (struck down)
The provision criminalising offensive online messages, held unconstitutional in Shreya Singhal for violating Article 19(1)(a).
Extra-territorial reach
Section 75 lets the IT Act reach an offence committed abroad if it involves a computer or network located in India.

Questions students ask

What is the difference between a proviso and an Explanation?
A proviso begins "Provided that" and carves an exception out of the specific provision it is attached to — it narrows the rule. An Explanation clarifies what a provision already means; it does not create a new exception or add a new rule. Mixing the two up is a standard two-mark mistake.
Why was section 66A of the IT Act struck down?
In Shreya Singhal v. Union of India (2015), the Supreme Court held that section 66A's language criminalising sending offensive messages online was so vague and wide that it violated the freedom of speech under Article 19(1)(a) and could not be saved as a reasonable restriction under Article 19(2).
Is a statute only what is printed on the page?
No. Courts can strike a provision down, read another one down so it applies more narrowly, or interpret a term in a way that changes how it operates in practice. Section 66A of the IT Act is still printed in most textbooks, but it is not law after Shreya Singhal, and treating it as live in an answer is a serious error.
What should I check first when handed an unfamiliar Act?
Start with the long title to learn its purpose, then the extent and commencement clause, then the definitions section. Only after that does it make sense to read the operative provisions, because the definitions and purpose control what those provisions actually mean.