Critical Information Infrastructure — Legal Reforms

Entry	Year	Description	Impact
Act 10 of 2009	2009	The Information Technology (Amendment) Act, 2008 (Act 10 of 2009) amended section 70 to define critical information infrastructure by the debilitating consequences of incapacitation or destruction and to provide for notification of protected systems. It inserted section 70A for designation of a national nodal agency for critical-information-infrastructure protection and section 70B for the Indian Computer Emergency Response Team’s incident-response functions.	The amendment separates protecting especially consequential infrastructure from coordinating wider cyber-incident response. The section 70 explanation turns on effects on national security, the economy, public health or safety; public ownership alone is not the test. A protected-system notification, the nodal protection role and CERT-In’s response role are related but distinct. The 2009 statutory framework should not be confused with a later agency-designation notification.