Information Technology — Tech Evolutions

Entry	Year	Description	Impact
Information Technology (Amendment) Act, 2008	2008	This was a significant amendment to the original IT Act, 2000. It aimed to address new forms of cybercrime and technological advancements that had emerged since 2000.	Introduced new definitions for terms like 'cyber cafe', 'communication device', and 'cyber security'. Strengthened provisions related to cyber terrorism (Section 66F), child pornography (Section 67B), and data protection. Clarified the liability of intermediaries (Section 79), providing them with a safe harbor if they adhere to due diligence. Enhanced penalties for various cyber offenses. Expanded the scope of electronic records and digital signatures.
Digital Personal Data Protection Act, 2023	2023	This is a standalone comprehensive law enacted to regulate the processing of digital personal data in India. It builds upon the principles laid down by the Supreme Court in the Puttaswamy judgment.	Establishes rights for Data Principals (individuals) and obligations for Data Fiduciaries (entities processing data). Introduces the concept of 'consent' as the primary basis for data processing, with certain 'legitimate uses' also permitted. Mandates data fiduciaries to implement reasonable security safeguards to prevent data breaches. Provides for the establishment of the Data Protection Board of India for enforcement and adjudication. Imposes significant penalties for non-compliance. Replaces Section 43A of the IT Act, 2000, which dealt with compensation for failure to protect data.