Public-Private Partnership — Legal Reforms

Entry	Year	Description	Impact
Information Technology (Amendment) Act	2008	The 2008 amendment to the IT Act 2000 introduced Section 70A establishing CERT-In as the national nodal agency for cyber security incident response and coordination. It also added Section 70B empowering the government to declare protected systems and prescribe security procedures, creating the legal foundation for public-private coordination in critical infrastructure protection.	This amendment transformed India's cyber security governance from a purely regulatory approach to a collaborative framework, enabling formal partnerships between government agencies and private sector entities while providing legal backing for information sharing and coordinated incident response mechanisms.
Digital Personal Data Protection Act	2023	While not an amendment to the IT Act, this new legislation creates comprehensive data protection obligations for private entities (data fiduciaries) and establishes the Data Protection Board as a regulatory authority. It mandates appropriate technical and organizational measures for data protection, creating new dimensions for public-private collaboration in cybersecurity.	The Act necessitates enhanced coordination between government agencies and private sector data handlers, creating new partnership requirements for compliance, incident reporting, and breach response while balancing data protection with legitimate government access for national security purposes.