Information Technology Act, 2000

The Schedules of the IT Act: First, Second and the DPDP Amendment

The Act's Schedules carry two boundaries and a pointer: the First Schedule marks what the Act does not reach, the Second Schedule names the electronic signature techniques it recognises, and the DPDP Act's schedule will, on commencement, reshape the Act from outside. Topics 32 to 34 covered the First Schedule and the 2022 change in detail; this note, as asked, consolidates all the Schedules into one.

1. The Schedules at a Glance

Each Schedule and its status

Figure 1: Each Schedule and its status

  • First Schedule, Section 1(4). The exclusion list: documents and transactions to which the Act does not apply, kept paper-bound because they turn on formality, personal execution or registration.
  • Second Schedule, Section 3A. The recognition list: the electronic signature or authentication techniques the Act accepts, amendable by notification as technology develops (Topic 129)
  • Third and Fourth Schedules. Originally amended other statutes and are now omitted and spent, a historical note rather than live law.
  • The DPDP schedule. Not a Schedule to the IT Act, but the DPDP Act's own schedule of consequential amendments that, on its final phase, rewrites parts of the IT Act (Topic 39)

2. The First Schedule

What is excluded and the 2022 shift

Figure 2: What is excluded and the 2022 shift

  • The excluded documents. A negotiable instrument other than a cheque; a power of attorney; a trust; a will and any testamentary disposition; and, historically, a contract for the sale or conveyance of immovable property, the five classes long kept outside electronic recognition (Topic 32)
  • The 2022 change. Contracts for the sale or conveyance of immovable property were removed from the exclusion list, opening the field to electronic execution in principle, subject to the registration and stamping regimes that still govern such transactions in practice (Topics 33, 34)
  • What stays out. Wills, trusts, powers of attorney and negotiable instruments other than cheques remain paper-bound, because their formality, attestation or negotiability has no settled electronic equivalent.
  • The reading. The First Schedule is the Act's outer boundary: everything electronic not listed there falls within the Act's recognition, and the list is read as the measured exception, narrowing over time as technology matures.

3. The Second Schedule and the DPDP Amendment

  • The Second Schedule's content. The e-authentication technique using Aadhaar or other e-KYC services, notified by G.S.R. 61(E) and 62(E) in 2015 and widened in 2019, the live entry that gives s.3A its practical content and powers the eSign service (Topics 129, 135)
  • Amendable by notification. The Central Government may add to or alter the Second Schedule by notification, subject to laying before Parliament, so new reliable techniques enter without amending the body of the Act, the engine of technology-neutrality.
  • The DPDP amendment. On the final phase of the DPDP Act, its schedule omits s.43A and the rulemaking clause s.87(2)(ob), and adds the DPDP Act to the s.81 proviso beside the Copyright and Patents Acts, completing the migration of data protection out of the IT Act (Topics 39, 84, 116)

⚠ Exam trap

Keep the two IT Act Schedules in their roles: the First Schedule is the exclusion list under s.1(4), the Second Schedule the recognised-techniques list under s.3A, and do not confuse either with the DPDP Act's schedule, which is an external amendment, not a Schedule of the IT Act. Quote the First Schedule's five classes and flag the 2022 removal of immovable-property contracts, and note that the Third and Fourth Schedules are omitted and spent.

4. Frequently Asked Questions

What do the Schedules of the IT Act contain?

The First Schedule, under Section 1(4), lists documents and transactions excluded from the Act, negotiable instruments other than cheques, powers of attorney, trusts and wills, with contracts for the sale or conveyance of immovable property removed from the list by the 2022 change. The Second Schedule, under Section 3A, lists the recognised electronic signature and authentication techniques, presently e-authentication using Aadhaar or other e-KYC services. The Third and Fourth Schedules, which once amended other statutes, are omitted and spent, and the DPDP Act's own schedule will, on its final phase, amend the IT Act by omitting Section 43A and Section 87(2)(ob) and adding the DPDP Act to the Section 81 proviso.

5. Related Topics

  • Topic 32: Section 1 and the First Schedule. Excluded transactions in detail.
  • Topic 129: Section 3B and the Second Schedule. The recognised techniques.