E-Commerce and the Development of Cyber Law in India

The Information Technology Act, 2000 describes itself in its Preamble as an Act to give legal recognition to transactions 'commonly referred to as electronic commerce'. Commerce came first, and much of India's cyber law was built to make it possible and then to make it safe. This note explains what electronic commerce is, the business models and FDI rules that shape it, the legal questions it raises, the statutes and cases that answer them, and how each wave of e-commerce growth added a new layer to cyber law.

1. The Marketplace Moves to the Screen

Think of a weekly village market. Buyers and sellers meet face to face, inspect goods, shake hands on a price and pay in cash. Every legal question has an easy answer: the contract was made there, both parties are identifiable, and the goods changed hands on the spot. Now move that market to a screen. The seller may be in another State or country, the buyer clicks a button instead of shaking hands, payment passes through several intermediaries, and the buyer's personal data is stored on a server. Each of these changes raises a legal question, and cyber law is largely the set of answers.

2. Meaning of Electronic Commerce

Section 2(16), Consumer Protection Act, 2019

'e-commerce' means buying or selling of goods or services including digital products over digital or electronic network.

Wider sense. Any commercial transaction conducted through electronic communication, including electronic data interchange between businesses, online retail, online banking and payments, and electronic procurement by government.
In the IT Act. The Act does not define e-commerce, but its Preamble refers to transactions by electronic data interchange and other electronic communication which use alternatives to paper-based methods, commonly referred to as electronic commerce.
E-commerce entity. Under the Consumer Protection (E-Commerce) Rules, 2020, any person who owns, operates or manages a digital or electronic facility or platform for electronic commerce, but not a seller offering goods or services on a marketplace.

3. Models of E-Commerce

Participant models and business models of e-commerce

Figure 1: Participant models and business models of e-commerce

By participants. Business to business (B2B), business to consumer (B2C), consumer to consumer (C2C), and dealings with government (B2G and G2C)
Marketplace model. The platform provides a technology platform to connect buyers and sellers, and does not own the goods.
Inventory model. The platform itself owns the inventory of goods and services and sells them directly to consumers.
FDI policy. Press Note 3 (2016 Series) permitted 100 per cent FDI under the automatic route in the marketplace model but not in the inventory model. Press Note 2 (2018 Series), effective from 1 February 2019, tightened the conditions, for example by barring sellers in which the marketplace or its group has an equity interest from selling on the platform, and by prohibiting exclusive sale arrangements.

⚠ Why the model matters in law

The distinction is not only a matter of FDI. A marketplace that merely hosts third-party listings may claim to be an intermediary under Section 79 of the IT Act, while an inventory seller is the seller itself. The E-Commerce Rules also impose some duties on marketplace entities and different ones on inventory entities.

4. The Legal Issues E-Commerce Raises

Eight legal questions raised by online trade

Figure 2: Eight legal questions raised by online trade

Contract formation. Is a click, an email or an automated response a valid offer or acceptance, and when is the contract concluded?
Authentication. How does the other party know who sent the message and that it has not been altered?
Jurisdiction. Where was the contract made, and which court can hear a dispute between parties in different places?
Consumer protection. How are buyers protected against misleading listings, hidden charges, defective goods and unfair terms they never negotiated?
Payments. Who regulates online payment systems, wallets and payment aggregators?
Data and privacy. What may a platform do with the personal data it collects?
Intermediary liability. Is the platform liable for unlawful listings or content put up by third parties?
Tax and FDI. How is tax collected on online sales, and what foreign investment is allowed?

5. The Indian Framework

Which law answers which question

Figure 3: Which law answers which question

Validity of e-contracts. The Indian Contract Act, 1872 governs the essentials of a contract. Section 10A of the IT Act, inserted in 2008, provides that a contract is not unenforceable solely because the proposal, acceptance or revocation was expressed in electronic form (see Topic 6)
Time and place. Sections 12 and 13 of the IT Act govern acknowledgment of receipt and the time and place of despatch and receipt. Under Section 13(3), an electronic record is deemed to be despatched where the originator has his place of business and received where the addressee has his place of business.
Signatures. Sections 3, 3A and 5 recognise digital and electronic signatures, including Aadhaar-based e-Sign.
Consumers. The Consumer Protection Act, 2019 expressly covers e-commerce. Section 94 empowers the Central Government to take measures against unfair trade practices in e-commerce, and Section 34(2)(d) lets a consumer file a complaint where he resides or personally works for gain.
Intermediaries. Section 79 of the IT Act and the Intermediary Guidelines and Digital Media Ethics Code Rules, 2021.
Payments. The Payment and Settlement Systems Act, 2007, administered by the Reserve Bank of India.
Data. The Digital Personal Data Protection Act, 2023.
Tax. Under the CGST Act, e-commerce operators must register, and Section 52 requires them to collect tax at source on supplies made through them.

The Consumer Protection (E-Commerce) Rules, 2020

Notified. In July 2020, under the Consumer Protection Act, 2019.
Reach. All goods and services bought or sold over a digital or electronic network, all e-commerce models, and entities outside India that systematically offer goods or services to consumers in India.
Key duties. Appoint a grievance officer, acknowledge complaints within 48 hours and redress them within one month, display the total price and seller details, obtain explicit consent rather than pre-ticked boxes, and not manipulate prices or levy cancellation charges unless the entity bears similar charges itself.
Dark patterns. The Central Consumer Protection Authority issued Guidelines for Prevention and Regulation of Dark Patterns in 2023, addressing practices such as false urgency, basket sneaking and drip pricing.

6. E-Contracts and the Leading Cases

Click-wrap. The user clicks 'I agree' to terms shown on screen. Generally enforceable, because assent is expressed.
Shrink-wrap. Terms are packaged with a product, such as software, and accepted by opening or using it.
Browse-wrap. Terms are available through a link, and use of the site is said to amount to acceptance. The weakest form, because the user may never have seen the terms.
Standard form terms. Most e-contracts are one-sided standard forms, so consumer law and the rule against unfair contract terms play a large role.

📖 Bhagwandas Goverdhandas Kedia v. Girdharilal Parshottamdas and Co., AIR 1966 SC 543

Facts: An offer was made from Khamgaon and accepted by telephone from Ahmedabad. The question was which court had jurisdiction.

Held: For instantaneous communication such as the telephone, the contract is concluded when and where the acceptance is received by the offeror, so the Ahmedabad court had jurisdiction.

Relevance: The case is the starting point for analysing electronic communications. For electronic records, Section 13 of the IT Act now supplies specific rules on the time and place of despatch and receipt.

📖 Trimex International FZE Ltd. v. Vedanta Aluminium Ltd., (2010) 3 SCC 1

Facts: The parties exchanged offers, counter-offers and acceptances by email for the supply of bauxite, but no formal contract was signed. When a dispute arose, the question was whether a concluded contract, with its arbitration clause, existed.

Held: Once the essential terms were agreed through the email exchange, a binding contract came into existence. The absence of a signed formal agreement did not prevent it from binding the parties.

Significance: The leading authority that contracts concluded by email are valid and enforceable in India.

P.R. Transport Agency v. Union of India (Allahabad High Court, 2005). Where a bid was accepted by email, the High Court applied Section 13 of the IT Act and held that the acceptance was received, and part of the cause of action arose, at the place of business of the addressee.

7. How E-Commerce Drove the Development of Cyber Law

Each stage of online trade added a layer of law

Figure 4: Each stage of online trade added a layer of law

Validity first. Trade needed to know that electronic records and signatures count. The 2000 Act, following the UNCITRAL Model Law, supplied this through Sections 3 to 13.
Trust next. Parties who never meet need assurance of identity. The Certifying Authority system in Chapters VI to VIII created a trust infrastructure.
Contracts clarified. Section 10A, added in 2008, removed any doubt about contracts formed online.
Platforms regulated. As marketplaces grew, the law had to decide when a platform is a mere conduit. Section 79 was revised in 2008 and supplemented by rules in 2011 and 2021.
Consumers protected. Mass online retail led to the Consumer Protection Act, 2019, the E-Commerce Rules, 2020 and the dark patterns guidelines.
Data secured. Platforms built on personal data led to Section 43A in 2008 and then the Digital Personal Data Protection Act, 2023.

⚠ Exam trap

Do not write that the IT Act is India's e-commerce code. It supplies the foundation of validity, authentication and intermediary liability, but consumer protection, payments, data, tax and foreign investment are governed by other statutes and policies. A good answer names the right law for each question.

8. Quick Revision and Memory Aids

'Village market to screen'. Every change in how trade happens raises a new legal question.
'Marketplace hosts, inventory owns'. The two business models and the FDI rule.
'Kedia phone, Trimex email, PR Transport receipt'. The three e-contract cases.
'Click strong, browse weak'. Enforceability of wrap contracts.
'Validity, trust, contracts, platforms, consumers, data'. The order in which e-commerce built cyber law.

9. Frequently Asked Questions

Is a contract concluded by email valid in India?

Yes. Section 10A of the IT Act provides that a contract is not unenforceable merely because it was formed electronically, and the Supreme Court in Trimex International v. Vedanta Aluminium, (2010) 3 SCC 1 held that an email exchange agreeing on essential terms creates a binding contract.

Where is an online contract made?

Under Section 13(3) of the IT Act, an electronic record is deemed received at the addressee's place of business, so an acceptance sent electronically is generally received where the offeror carries on business, consistent with the rule in Bhagwandas Kedia.

Which law protects consumers who buy online?

The Consumer Protection Act, 2019, which defines e-commerce in Section 2(16), together with the Consumer Protection (E-Commerce) Rules, 2020.

10. Related Topics

Topic 3: UNCITRAL Model Law. The international model for e-commerce law.
Topic 5: Cyber Law, Meaning and Scope. Where e-commerce sits within cyber law.
Topic 6: Legal Recognition. Sections 4, 5 and 10A in detail.