The Information Technology Act, 2000
CHAPTER VI: REGULATION OF CERTIFYING AUTHORITIES
Section 29: Access To Computers And Data
Bare Act
(1) Without prejudice to the provisions of sub-section (1) of section 69, the Controller or any person authorised by him shall, if he has reasonable cause to suspect that any contravention of the provisions of this Chapter has been committed, have access to any computer system, any apparatus, data or any other material connected with such system, for the purpose of searching or causing a search to be made for obtaining any information or data contained in or available to such computer system.
(2) For the purposes of sub-section (1), the Controller or any person authorised by him may, by order, direct any person in charge of, or otherwise concerned with the operation of, the computer system, data apparatus or material, to provide him with such reasonable technical and other assistance as he may consider necessary.
Simplified Act
(1) Even if other rules in section 69 have already been mentioned, the Controller (the person in charge of applying this law) or someone he allows to act on his behalf can check any computer system or related equipment and data if they believe there might have been a violation of this part of the law. They can search the system to get… Read the complete text with KanoonGPT Pro.
Explanation using examples
Let's consider a hypothetical scenario. Suppose there's a company named XYZ Tech. Based on some anonymous tip, the Controller of Certifying Authorities (CCA) in India or a person authorised by him suspects that XYZ Tech is involved in some cybercrime activities, potentially violating the provisions of The Information Technology Act, 2000.
According to Section 29(1), the Controller or his authorised person can access XYZ Tech's computer systems, apparatus, data, or any other material connected to such systems. This could be to search for any information or data contained in or available to such computer systems that may provide evidence of the alleged contravention.
As per Section 29(2), the Controller or his authorised person can direct any person in charge at XYZ Tech, or anyone else involved with the operation of the computer system, to provide them with the necessary technical and other assistance. This could include helping to navigate the system, explaining how data is stored, or even decrypting encrypted data.
