Cybersecurity — Tech Evolutions

Entry	Year	Description	Impact
Information Technology (Amendment) Act, 2008	2008	Introduced significant changes to the IT Act, 2000, to address the evolving cyber threat landscape. It expanded the definitions of cybercrime, introduced new offenses like cyber terrorism (Section 66F) and data theft (Section 43A), and enhanced penalties.	Strengthened India's legal framework for combating cybercrime, provided statutory backing for NCIIPC and CERT-In, and introduced provisions for data protection and privacy, including compensation for negligence in implementing reasonable security practices (Section 43A). It also clarified intermediary liability under Section 79.
Digital Personal Data Protection Act, 2023	2023	Replaced previous drafts of the Personal Data Protection Bill (2019/2022). This Act provides for the processing of digital personal data in a manner that recognizes the right of individuals to protect their personal data and for matters connected therewith or incidental thereto.	Established a comprehensive legal framework for data protection in India, introducing obligations for data fiduciaries, rights for data principals, and a Data Protection Board of India. It mandates robust security safeguards for personal data, breach notification requirements, and significant penalties for non-compliance, thereby profoundly impacting cybersecurity practices for all entities handling personal data.