Sections 81 to 90 IT Act: Overriding Effect and Miscellaneous Provisions

The Act closes with the machinery that makes the rest work: a clause giving it primacy over inconsistent law, deeming provisions and immunities for its officers, the general rules for abetment, attempt and corporate contraventions that every offence chapter borrows, and the delegated legislation powers under which the signature rules, the SPDI Rules and the intermediary guidelines were all made. Sections 81 and 85 are the two the examiner reaches for, the first for the special law doctrine, the second for corporate liability, and this note covers the whole run, Sections 81 to 90.

1. Section 81: Overriding Effect

Figure 1: The rule, the proviso and the consequence

• The non-obstante clause. For electronic records, signatures, intermediaries and cyber conduct, the IT Act is the special law: where it and a general law both speak, the IT Act's voice prevails to the extent of inconsistency.
• Savings for copyright and patents. The 2008 proviso preserves the exercise of rights under the Copyright Act, 1957 and the Patents Act, 1970, so the safe harbour and the Act's scheme never extinguish an IP owner's remedies; s.79 case law on infringing content operates in this shadow (Topic 67)
• The DPDP interface. The DPDP Act's schedule of amendments will, when its final phase commences, add the Digital Personal Data Protection Act, 2023 to this proviso, alongside the omission of s.43A, completing the migration of data protection out of the IT Act (Topic 39)

2. The Special Law Principle: Sharat Babu Digumarti

Figure 2: The case that fixed the doctrine

• IT Act vs IPC and BNS. Where the IT Act specifically penalises the electronic conduct, obscenity, identity theft, violation of privacy, the charge travels under the IT Act; where it does not, cheating, extortion, defamation, criminal intimidation, the BNS applies, and mixed charge sheets carrying both are routine where the acts are distinct.
• IT Act vs Copyright and Trademark law. The proviso keeps copyright and patent remedies intact, and trademark law was never displaced: infringement, passing off and domain name disputes proceed under their own statutes and the common law, with the IT Act supplying only the intermediary and evidence framework.
• IT Act vs Contract Act. No conflict at all: s.10A validates electronic contracts, while formation, consideration, capacity and voidability remain governed by the Contract Act, the IT Act supplementing rather than overriding (Topic 45)

3. Officers, Directions and Good Faith: Sections 82 to 84 and 86

Figure 3: The administrative quartet

• Section 82: public servants. The Presiding Officer's provision having gone with the Tribunal merger, the section deems the Controller, Deputy and Assistant Controllers and other officers public servants for the penal law, attracting both the protections and the offences that attach to public servants.
• Section 83: directions to States. The Central Government may direct any State Government on carrying the Act into execution in the State, the federal execution clause for a statute administered centrally but enforced on the ground by State police.
• Section 84: good faith. No suit, prosecution or other legal proceeding lies against the Central or a State Government, the Controller or any person acting on their behalf for anything done in good faith under the Act, the standard statutory immunity, lost where mala fides or want of care is shown.
• Section 86: removal of difficulties. The commencement-era power to remove difficulties by published order, exercisable only within two years of commencement and laid before Parliament, now spent.

4. Encryption, Abetment and Attempt: Sections 84A to 84C

Figure 4: The 2008 trio

• Section 84A: modes and methods for encryption. The Central Government may prescribe modes or methods of encryption for secure electronic communication and e-commerce. No rules have ever been notified: a draft National Encryption Policy floated in 2015 was withdrawn within days after public objection to its key-retention demands, and encryption standards instead surface indirectly, in the CA security rules, sectoral regulators, and the SSMI traceability debate.
• Encryption vs lawful interception. The unresolved tension of the field: strong end-to-end encryption protects the s.69 privacy interest, while s.69(3) obliges subscribers and intermediaries to extend decryption assistance, and Rule 4(2) traceability presses on the same architecture; the WhatsApp challenge holds the question open (Topics 72, 79)
• Section 84B: abetment. Whoever abets an offence under the Act is punished with the punishment provided for the offence, if the abetted act is committed in consequence and the Act makes no express provision for the abetment, importing the general abetment doctrine into the cyber chapter.
• Section 84C: attempt. Attempt to commit an offence under the Act draws up to one half of the longest term provided for the offence, or the prescribed fine, or both. With s.80's about-to-commit limb, the Act thus reaches conduct at every stage from preparation's edge to completion, and the attempt line, proximate act beyond preparation, is drawn as in general criminal law.

5. Section 85: Offences by Companies

Figure 5: The two levels of corporate liability

• Contravention, not only offence. The section speaks of contraventions of the Act, rules, directions and orders, so it serves both the penal chapter and the civil and adjudication machinery: a company's s.43A era failures, CERT-In direction defaults and licence breaches all engage it.
• The person in charge. Liability under s.85(1) turns on being in charge of and responsible to the company for the conduct of its business at the time, a matter of function, not designation: the vicarious liability jurisprudence built on the identically worded provisions of the NI Act and other corporate liability statutes applies, requiring specific averments of the role, not the bare recital of a directorship.
• The due diligence defence. The person in charge escapes on proving absence of knowledge or all due diligence to prevent the contravention, the reverse burden that makes documented compliance programmes, security practices and delegation records the practical defence.
• Officers under s.85(2). Independently, a director, manager, secretary or other officer to whose consent, connivance or neglect the contravention is attributable is deemed guilty, the prosecution here carrying the burden of proving that attribution.
• The company itself. The company is liable in every case, fines and civil consequences applying directly; for offences carrying imprisonment, the corporate accused suffers the fine component, on the settled corporate criminal liability doctrine.

6. The Rule-Making Architecture: Sections 87 to 90

Figure 6: Who makes what

• Section 87: Central Government rules. The engine of the whole field: rules on electronic signatures and their standards, the CA licensing scheme, the s.6A service providers, the ss.69, 69A and 69B safeguards, the s.79(2) intermediary guidelines, the s.70B CERT-In functions and the s.52-era tribunal matters, each notified rule laid before Parliament with the power of modification or annulment. The SPDI clause, s.87(2)(ob), departs with the DPDP transition (Topic 39)
• Section 88: the Cyber Regulations Advisory Committee. A committee of official and non-official members representing the interests principally affected, advising the Central Government on rules and the Controller generally, the consultative organ of the original scheme.
• Section 89: the Controller's regulations. The Controller, after consulting the Committee and with the Central Government's previous approval, makes regulations on CA practice, the particulars of licences and certificates and the technical standards of the trust hierarchy, likewise laid before Parliament (Topics 49 to 52)
• Section 90: State Government rules. State Governments make rules for matters the Act leaves to them, electronic filing and delivery of documents in State offices under s.6 among them, laid before the State legislature, the counterpart federal pocket in a centrally driven statute.

7. Frequently Asked Questions

What is the effect of Section 81 of the IT Act?

It gives the Act overriding effect notwithstanding anything inconsistent in any other law, subject to a proviso preserving rights under the Copyright Act, 1957 and the Patents Act, 1970. The Supreme Court in Sharat Babu Digumarti read this to make the IT Act a complete code for the electronic conduct it specifically covers, so prosecution for such conduct lies under the IT Act and not under the general penal law, while conduct the Act does not cover continues under the BNS and other statutes.

Who is liable when a company commits a contravention under the IT Act?

Under Section 85, the company itself and every person who at the time was in charge of and responsible to it for the conduct of its business, the latter escaping on proof that the contravention occurred without his knowledge or that he exercised all due diligence to prevent it. Additionally, any director, manager, secretary or other officer is deemed guilty where the contravention is proved to have taken place with his consent or connivance or is attributable to his neglect.

8. Related Topics

• Topic 38: Subsequent Amendments and Rationalisation. How the closing chapter has been reshaped.
• Topic 67: Section 79 and IP claims. The copyright proviso at work in safe harbour cases.