IT Act Offences in Asansol — Complete Guide to Cyber Laws in India

The Information Technology Act, 2000 is the primary legislation governing cyberspace and digital transactions in India, and it applies in full force to the city of Asansol, where the rapid adoption of internet banking, digital payments, and social media has brought a corresponding rise in cybercrime. The Act was enacted to provide legal recognition to electronic records and digital signatures, to facilitate electronic governance, and to penalise a wide range of cyber offences. It was substantially amended by the Information Technology (Amendment) Act, 2008, which introduced key provisions on data protection, identity theft, cyber terrorism, and intermediary liability, bringing the law in line with the emerging threats of the digital age.

The Act defines a computer, a computer system, a computer network, and data in Section 2, and these definitions are broad enough to cover smartphones, online banking platforms, email accounts, social media profiles, and the entire digital infrastructure on which residents of Asansol rely. Cyber offences under the Act are cognizable and are tried by the courts as per the procedure laid down in the Bharatiya Nagarik Suraksha Sanhita, 2023 (which replaced the Code of Criminal Procedure, 1973 from 1 July 2024), with the trial itself governed by the Bharatiya Sakshya Adhiniyam, 2023 for cases registered after that date. The investigation of cyber offences in Asansol is handled by the local police and, for complex matters, by the cyber crime cells of the West Bengal Police.

Beyond the IT Act, certain traditional offences committed using a computer, such as cheating, fraud, criminal breach of trust, and defamation, continue to be punishable under the Bharatiya Nyaya Sanhita, 2023 (which replaced the Indian Penal Code, 1860), and a single act may attract charges under both statutes. The Victim can lodge an FIR at the local police station or the cyber crime police station, and can also report certain offences online through the National Cyber Crime Reporting Portal. Because digital evidence is fragile and time-sensitive, early legal advice from a cybercrime lawyer in Asansol is critical to ensure that the complaint is properly drafted, the evidence is preserved, and the investigation proceeds in the right direction.

Hacking, known in legal terms as unauthorized access, is one of the foundational offences under the Information Technology Act, 2000. Section 43 of the Act lists a series of acts — including accessing or securing access to a computer, computer system, or computer network without the permission of the owner, and downloading, copying, or extracting data — that make a person liable to pay compensation to the affected party. Where any of these acts is committed dishonestly or fraudulently, the conduct becomes a criminal offence under Section 66 of the Act, which prescribes imprisonment up to three years and/or a fine up to five lakh rupees. In Asansol, hacking cases commonly involve the unauthorized intrusion into email accounts, social media profiles, online banking credentials, and the business systems of small and medium enterprises.

A related and more serious offence is found in Section 66 of the Act as read with Section 43(b), which penalises the act of causing damage to a computer system, whether by introducing a virus, deleting files, or altering the data, and Section 66 of the Act also covers the denial of service and the disruption of services. Where the damage extends to critical information infrastructure, the offence escalates. The distinction between a civil wrong under Section 43 and a criminal offence under Section 66 lies in the presence of dishonest or fraudulent intention, which the prosecution must establish beyond reasonable doubt. The investigation relies heavily on digital forensic evidence, including logs, IP addresses, timestamps, and the forensic imaging of the affected devices.

Residents and businesses in Asansol who suspect that their systems have been hacked should immediately secure the evidence — preserve server logs, take screenshots of the unauthorized access, avoid altering the affected files, and lodge an FIR at the nearest police station or the cyber crime cell. A complaint lodged under the IT Act should specify the provisions violated, the nature of the unauthorized access, the loss caused, and the available digital evidence. A cybercrime lawyer in Asansol drafts the FIR complaint, liaises with the investigating officer, and ensures that the matter is referred to a forensic expert where necessary. For the accused, the lawyer examines the digital evidence, challenges its chain of custody, and raises defences such as the lack of criminal intention or the absence of a connecting link between the accused and the alleged act.

Identity theft and cheating by impersonation are among the most prevalent cyber offences reported in Asansol, and they are specifically addressed by Sections 66C and 66D of the Information Technology Act, 2000. Section 66C punishes identity theft, defined as the fraudulent or dishonest use of the electronic signature, password, or any other unique identification feature of any other person. The offence is punishable with imprisonment up to three years and a fine up to one lakh rupees. Section 66D punishes cheating by personation by means of any communication device or a computer resource, that is, the act of pretending to be someone else online to deceive and thereby cheat a person; it carries imprisonment up to three years and a fine up to one lakh rupees.

In practice, these offences manifest in several common patterns in Asansol. Fraudsters create fake social media profiles impersonating a victim to defraud the victim's contacts; they use stolen KYC documents to open bank accounts or obtain mobile SIM cards that are then used for further frauds; they clone WhatsApp accounts by accessing the OTP and then solicit money from the victim's contacts; and they use stolen photographs to create fake profiles on matrimonial or dating applications to extort money. These acts simultaneously attract the provisions of the IT Act and the offences of cheating and forgery under the Bharatiya Nyaya Sanhita, 2023, and a single FIR can be registered combining the relevant sections of both statutes.

The investigation of identity-theft offences hinges on the preservation of digital evidence, including the URL of the fake profile, screenshots, the IP address and the mobile number used to create the profile, the bank account in which the cheated money was deposited, and the CCTV or KYC records of the SIM card used. The victim should immediately report the fake profile to the platform, freeze the bank account involved, file a complaint with the cyber crime cell, and preserve all communications. A cybercrime lawyer in Asansol drafts a comprehensive FIR that ties together the IT Act and the BNS provisions, follows up with the investigating officer for the preservation of evidence and the issuance of notices to intermediaries under Section 69B, and pursues the matter through the trial to secure the conviction and the recovery of the cheated amount.

Cyber terrorism is the most serious offence under the Information Technology Act, 2000, and is defined and punished under Section 66F. The section covers two categories of conduct. First, any person who, with the intent to threaten the unity, integrity, security, or sovereignty of India, or to strike terror in the people, or any section of the people, denies or causes denial of access to any computer resource, or attempts to penetrate or access a computer resource without authorisation, with the intent to cause injury or damage. Second, any person who knowingly or intentionally penetrates a computer resource without authorisation and obtains access to information, data, or computer databases, and uses such information to cause injury to the interests of the sovereignty and integrity of India.

The defining feature of cyber terrorism, as distinct from ordinary hacking, is the specific intent to threaten the unity, integrity, security, or sovereignty of the nation or to strike terror in the people. Where such intent is established, the offence is made out regardless of whether the actual damage occurred. This makes Section 66F an inchoate offence, and the prosecution need not prove a successful attack; the attempt and the requisite intent suffice. Critically, the punishment for an offence under Section 66F may extend to imprisonment for life, making it the only provision in the IT Act that carries a sentence of life imprisonment. The offence is cognizable and non-bailable, and the investigation is conducted at a high level, often with the involvement of national agencies.

While cases under Section 66F are less common in everyday Asansol practice, the provision is sometimes invoked where hacking is directed at critical infrastructure, government databases, or large-scale data theft that affects national interests. Because the threshold of intent is high, mere unauthorized access without the requisite terroristic intent does not attract Section 66F, and a person wrongly charged with this section has strong grounds to challenge the charge. A cybercrime lawyer in Asansol plays a dual role: for the State or the victim, the lawyer ensures that the grave nature of the offence is properly presented; for the accused, the lawyer scrutinises the FIR and the charge sheet to test whether the essential ingredient of terroristic intent is made out, and seeks bail and the quashing of the charge where it is not, by approaching the High Court under Section 482 of the BNSS (formerly Section 482 CrPC).

The publication and transmission of obscene and sexually explicit content online is penalised under Sections 67, 67A, and 67B of the Information Technology Act, 2000. Section 67 punishes the publishing or transmitting of obscene material in electronic form, and the first conviction attracts imprisonment up to three years and a fine up to five lakh rupees, while a subsequent conviction attracts up to five years and a fine up to ten lakh rupees. The test of obscenity draws upon the standards laid down in the Indian Penal Code's analogue of Section 292, now Section 294 of the Bharatiya Nyaya Sanhita, 2023, which asks whether the matter, taken as a whole, is lascivious, appeals to the prurient interest, and tends to deprave and corrupt the audience.

Section 67A addresses material that is sexually explicit in nature, such as explicit photographs or videos, and prescribes a higher punishment — up to five years and a fine up to ten lakh rupees for the first conviction, and up to seven years and a fine for subsequent convictions. Section 67B specifically protects children, penalising the creation, collection, transmission, and facilitation of child pornography in electronic form, with imprisonment up to five years and a fine up to ten lakh rupees for the first conviction, extending to seven years for subsequent offences. The provisions also penalise the act of enticing a minor into a sexual act using a computer resource, reflecting India's commitments under the international protocols on child protection.

In Asansol, these provisions are increasingly invoked where intimate photographs or videos are shared without consent, where fake profiles are created to circulate morphed images, where content is circulated to harass or extort, and where online platforms are used to transmit child sexual abuse material. Such conduct also attracts the offences of voyeurism, stalking, and insult to modesty under the Bharatiya Nyaya Sanhita, 2023. A victim should immediately report the content to the platform for removal, lodge an FIR with the cyber crime cell, and preserve the URL and screenshots as evidence. A cybercrime lawyer in Asansol drafts the FIR, pursues the removal of the content, and, where the accused is wrongly implicated, examines whether the material satisfies the legal test of obscenity and whether the essential ingredients of the offence are established.

The liability of intermediaries — social media platforms, search engines, e-commerce marketplaces, internet service providers, and content hosts — is governed by Section 79 of the Information Technology Act, 2000, read with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Section 79 grants intermediaries a safe harbour, meaning they are not liable for third-party content hosted by them, provided three conditions are satisfied: the intermediary's role is limited to providing access to a communication system over which information is made available, it does not initiate the transmission, select the receiver, or select or modify the information, and it exercises due diligence and complies with the guidelines issued by the government. This safe harbour is the legal foundation on which the entire user-generated internet operates.

The due-diligence requirement is elaborated in the 2021 Rules, which require intermediaries to publish terms of service, to appoint a grievance officer resident in India, a nodal contact person, and a chief compliance officer, and to acknowledge and resolve user grievances within defined timeframes — acknowledging within 24 hours and resolving within 15 days. Significantly, the Rules draw a distinction between ordinary intermediaries and significant social media intermediaries, with the latter subject to additional obligations including traceability of the originator of messages, which has been the subject of litigation concerning the right to privacy. An intermediary loses the safe harbour where it fails to expeditiously remove or disable access to unlawful content upon receiving actual knowledge, either through a court order or a notification by the government or an appropriate agency under Section 69A.

For residents and businesses in Asansol, the intermediary-liability framework is practically important in two scenarios. First, where defamatory, obscene, or infringing content has been posted about a person or a business online, a complaint can be made to the platform's grievance officer for removal, and a failure to act within the statutory timeframe exposes the platform to liability. Second, where a person is wrongly named in a takedown request, the person can oppose the removal and, if the platform removes the content arbitrarily, seek a remedy. A cybercrime lawyer in Asansol drafts the takedown notice citing the specific violation, follows up with the grievance officer, and, where the platform does not comply, approaches the appropriate government authority or the court for an order under Section 69A, ensuring that unlawful content is removed while protecting the legitimate right to free expression.

Data protection and the obligation to notify breaches are among the most significant obligations imposed on entities that handle personal data, and in Asansol, where businesses increasingly collect customer data for digital payments, e-commerce, and service delivery, compliance with these obligations is critical. Section 43A of the Information Technology Act, 2000, read with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, requires a body corporate that possesses, deals with, or handles sensitive personal data or information to implement reasonable security practices and procedures. Where the body corporate is negligent in implementing these practices and thereby causes wrongful loss or wrongful gain to any person, it is liable to pay damages by way of compensation to the affected person.

Sensitive personal data, as defined in the 2011 Rules, includes passwords, financial information such as bank account and credit card details, health information, biometric data, sexual orientation, and any other information that the body corporate may specify. The Rules require consent for the collection of such data, a clear privacy policy, restrictions on retention and transfer, and the implementation of documented security practices. Where a data breach occurs, the body corporate must take remedial action, and although the IT Act does not contain an express statutory breach-notification obligation in the manner of the GDPR, the IRDAI, the Reserve Bank of India, and the Securities and Exchange Board of India have issued sectoral directions requiring regulated entities to report breaches within specified timeframes. The Digital Personal Data Protection Act, 2023, which has been enacted and is being brought into force in phases, will further strengthen data-protection obligations, including a mandatory breach notification to the Data Protection Board and affected individuals.

For individuals in Asansol whose personal data has been compromised, the remedy lies in a complaint to the Adjudicating Officer under the IT Act (the Secretary, Department of Information Technology of the State) for compensation up to five crore rupees, and for amounts above that, before a civil court. For businesses, the failure to implement reasonable security practices exposes them to compensation claims, reputational damage, and regulatory action. A cybercrime lawyer in Asansol advises businesses on the implementation of compliant security practices, drafts privacy policies and consent forms, and represents individuals in compensation proceedings where a breach has caused wrongful loss, ensuring that the legal rights of both data subjects and data handlers are properly enforced.

A cybercrime lawyer in Asansol serves both victims of cyber offences and persons who have been accused, and the role differs substantially between the two. For the victim, the lawyer begins by assessing the facts to identify the precise offences under the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita, 2023, and then drafts a detailed FIR or complaint that sets out the chronology, the digital evidence, the loss caused, and the specific sections violated. The lawyer advises on the preservation of evidence — screenshots, URLs, IP addresses, bank statements, call records, and device images — and ensures that the complaint is registered, either at the local police station, the cyber crime cell, or through the National Cyber Crime Reporting Portal, and that the investigation moves in the right direction.

For the accused, the lawyer's role begins with an examination of the FIR and the charge sheet to test the legal sufficiency of the allegations. The lawyer identifies whether the essential ingredients of the alleged offences are made out, whether the digital evidence has been properly seized and its chain of custody preserved, and whether the procedural safeguards of arrest under the BNSS have been observed. Where the offence is bailable, the lawyer arranges the bail; where it is non-bailable, the lawyer moves a bail application before the magistrate or the Sessions Court and, where the allegations are frivolous or legally untenable, moves the High Court under Section 482 of the BNSS to quash the FIR or the charge.

Beyond criminal proceedings, a cybercrime lawyer in Asansol also handles the civil and regulatory dimensions of a cyber dispute. For a victim of financial fraud, the lawyer liaises with the bank to freeze the cheated amount and to seek a chargeback, drafts representations to the intermediaries for the removal of unlawful content, and pursues compensation before the Adjudicating Officer or the consumer forum. For businesses, the lawyer advises on the implementation of the reasonable security practices under the IT Rules, drafts the privacy policy and the breach-response protocol, and represents the business before the regulators. By combining criminal, civil, and regulatory expertise, the lawyer ensures that the legal rights of the client are protected at every stage of a cyber dispute.