Section 66 of the Information Technology Act, 2000 provides punishment for computer-related offences committed dishonestly or fraudulently. If a person unlawfully accesses a computer, steals data, damages a computer system, introduces malware, or commits similar acts with dishonest or fraudulent intent, they can be punished with imprisonment for up to three years, a fine of up to ₹5 lakh, or both.
Detailed Explanation
Section 66 of the Information Technology Act, 2000 deals with punishment for various computer-related offences. It applies when a person commits any act mentioned under Section 43 of the Act dishonestly or fraudulently.
Section 43 mainly deals with unauthorized access to computers, computer systems, networks, and data. While Section 43 provides for compensation in civil cases, Section 66 makes the same acts criminal offences if they are committed with criminal intent.
Meaning of “Dishonestly” and “Fraudulently”
These terms are defined under the Bharatiya Nyaya Sanhita, 2023 (BNS).
- Dishonestly means doing an act with the intention of causing wrongful gain to one person or wrongful loss to another.
- Fraudulently means doing an act with the intention to deceive another person for an unlawful benefit.
A person can be punished under Section 66 only if such dishonest or fraudulent intention is proved.
Punishment Under Section 66
| Particular | Details |
|---|---|
| Act | Information Technology Act, 2000 |
| Section | Section 66 |
| Nature of offence | Computer-related offence committed dishonestly or fraudulently |
| Maximum imprisonment | Up to 3 years |
| Maximum fine | Up to ₹5 lakh |
| Court may impose | Imprisonment, fine, or both |
Acts Covered Under Section 66
A person may be prosecuted under Section 66 if they knowingly and dishonestly:
| Offence | Example |
|---|---|
| Unauthorized access | Logging into another person’s account without permission |
| Data theft | Copying confidential company files |
| Deleting data | Erasing important business records |
| Introducing malware | Sending viruses or ransomware into a computer system |
| Damaging computer systems | Intentionally disrupting a website or server |
| Stealing digital information | Downloading sensitive customer databases without authority |
Practical Example
Suppose an employee secretly accesses the company’s database after office hours and copies confidential customer information to sell it to another business. Since the act involves unauthorized access and dishonest intention, the employee may be prosecuted under Section 66 of the Information Technology Act, apart from facing civil liability.
When Section 66 Does Not Apply
Section 66 generally does not apply if:
- A person accidentally accesses a system without criminal intention.
- The computer owner has given valid permission.
- There is no dishonest or fraudulent motive.
- The dispute is purely contractual or civil in nature.
Each case depends on its facts, and the prosecution must establish the required criminal intent.
Key Points / Important Facts
- Section 66 is a criminal provision under the Information Technology Act, 2000.
- It applies only when computer-related offences are committed dishonestly or fraudulently.
- Mere unauthorized access without criminal intent may not attract Section 66.
- The maximum punishment is three years’ imprisonment.
- The court may also impose a fine of up to ₹5 lakh.
- Civil compensation under Section 43 and criminal prosecution under Section 66 may both arise from the same incident.
- Electronic evidence such as server logs, emails, IP addresses, and digital records often plays a key role in investigation and trial.
- Serious cyber offences may also attract other provisions of the Information Technology Act or the Bharatiya Nyaya Sanhita, depending on the facts.
Legal Provision or Section
Applicable Act
Information Technology Act, 2000
Relevant Section
Section 66 – Computer-related Offences
What the Section Says
Section 66 states that if any person commits any act referred to in Section 43 dishonestly or fraudulently, they shall be punishable with imprisonment for a term which may extend to three years, or with a fine which may extend to ₹5 lakh, or with both.
Why It Matters
Section 66 strengthens India’s cyber law framework by converting certain unauthorized computer-related activities into criminal offences when they are carried out with dishonest or fraudulent intent. It helps protect individuals, businesses, and government systems from cybercrime.
Important Supreme Court / High Court Judgments
Shreya Singhal v. Union of India (2015)
The Supreme Court struck down Section 66A of the Information Technology Act as unconstitutional because it violated the right to freedom of speech. Although this case did not invalidate Section 66, it clarified that Section 66 continues to remain valid and enforceable.
S. Umashankar v. State of Chhattisgarh (2001)
The Supreme Court observed that criminal prosecution should not continue where the necessary ingredients of the alleged offence are absent. The decision highlights that criminal intent must be established before imposing criminal liability.
Frequently Asked Questions (FAQs)
Is Section 66 of the IT Act still valid?
Yes. Section 66 remains in force and is regularly used in cybercrime cases. Only Section 66A was declared unconstitutional by the Supreme Court in 2015.
What is the punishment under IT Act Section 66?
A person convicted under Section 66 may face imprisonment for up to three years, a fine of up to ₹5 lakh, or both, depending on the nature and seriousness of the offence.
Is unauthorized access always punishable under Section 66?
No. Unauthorized access alone is not enough. The prosecution must also prove that the act was committed dishonestly or fraudulently.
Can a company file a complaint under Section 66?
Yes. Companies, government departments, and individuals whose computer systems or data have been unlawfully accessed or damaged may file a complaint with the police or cyber crime authorities.
What evidence is commonly used in Section 66 cases?
Courts often rely on digital evidence such as server logs, IP addresses, email records, CCTV footage, forensic reports, electronic devices, and other electronic records to establish the offence.
Conclusion
Section 66 of the Information Technology Act, 2000 provides punishment for computer-related offences committed with dishonest or fraudulent intent. The provision covers acts such as unauthorized access, data theft, deletion of data, and damage to computer systems. A conviction may result in imprisonment for up to three years, a fine of up to ₹5 lakh, or both. Since cybercrime cases often involve technical and electronic evidence, obtaining legal advice can be helpful for both complainants and accused persons.
Sources & References
- India Code – Information Technology Act, 2000: https://www.indiacode.nic.in
- eCommittee, Supreme Court of India: https://www.sci.gov.in
- Ministry of Electronics and Information Technology (MeitY): https://www.meity.gov.in
- National Cyber Crime Reporting Portal: https://cybercrime.gov.in
Explore Question Categories
Prabh Kalsi provides global legal information and educational content to help readers understand legal concepts, rights, and processes across different countries. With experience in researching legal topics and simplifying complex legal information, he creates easy-to-understand content based on publicly available and trusted sources. This content is intended for informational purposes only.