Cyber Crime Complaint Process in India

The Ministry of Home Affairs, Government of India, operates the official National Cyber Crime Reporting Portal (www.cybercrime.gov.in), which serves a

The Complete Guide to Cyber Crime Complaint Process in India: Legal Framework, Provisions, and Case Laws

---

Introduction: The Digital Threat Landscape

In an era where our lives are increasingly intertwined with digital platforms—ranging from online banking and e-commerce to social media interactions—cyber crimes have emerged as one of the most pervasive threats to modern society. According to the National Crime Records Bureau (NCRB), India recorded over 65,000 cases of cyber crime in 2023, marking a staggering 25% increase from the previous year. These offences encompass a broad spectrum: financial frauds, identity theft, cyberstalking, hacking, phishing, ransomware attacks, and the distribution of obscene material.

Despite the alarming rise in incidents, a significant number of victims remain unaware of the proper channels and legal mechanisms available to seek redress. The process of reporting cyber crimes is often shrouded in confusion, compounded by jurisdictional complexities, technical jargon, and a lack of awareness regarding the applicable legal provisions. This comprehensive guide aims to demystify the cyber crime complaint process in India, elucidate the relevant statutory provisions under the Information Technology Act, 2000, the Indian Penal Code, and other allied legislations, and examine landmark judicial pronouncements that have shaped the contours of cyber law jurisprudence in the country.

---

Section I: Understanding Cyber Crime and Its Classification

Defining Cyber Crime

Cyber crime refers to any unlawful activity wherein a computer, network, or digital device is used either as a tool to commit an offence or as the target of the criminal act. The Information Technology Act, 2000 (as amended in 2008) serves as the primary legislative framework governing cyber offences in India, supplemented by provisions of the Indian Penal Code, 1860, the Code of Criminal Procedure, 1973 (now largely replaced by the Bharatiya Nagarik Suraksha Sanhita, 2023), and specialised statutes such as the Protection of Children from Sexual Offences Act, 2012 (POCSO).

Major Categories of Cyber Crime

• Cyber Fraud: This includes online scams, credit and debit card fraud, phishing attacks, vishing (voice phishing), and identity theft perpetrated for financial gain.
• Cyber Defamation: The publication of false, derogatory, or damaging information about an individual or entity on digital platforms, including social media, blogs, and forums.
• Identity Theft: The fraudulent acquisition and misuse of personal identifying information—such as Aadhaar numbers, PAN details, or banking credentials—to commit further crimes.
• Cyber Stalking and Harassment: The persistent following, monitoring, or contacting of a person through electronic means despite clear indications of disinterest, often accompanied by threats or obscene communications.
• Hacking and Unauthorized Access: Gaining illegal entry into computer systems, networks, or databases to steal, modify, or destroy data.
• Distribution of Obscene Material: The transmission or publication of sexually explicit content, including child sexual abuse material (CSEAM), through electronic form.
• Cyber Terrorism: Acts intended to threaten the unity, integrity, sovereignty, or security of India, or to strike terror in the populace, carried out through digital means.
• Ransomware and Malware Attacks: The deployment of malicious software to encrypt or damage data, demanding ransom for restoration or threatening public harm.

Understanding these classifications is imperative for victims, as it enables them to accurately identify the nature of the offence and invoke the appropriate legal provisions when filing a complaint.

---

Section II: The Step-by-Step Process for Filing a Cyber Crime Complaint in India

The Government of India has established multiple avenues for reporting cyber crimes, ensuring accessibility for victims regardless of their geographical location or technical proficiency. Complaints may be filed through online portals, dedicated helplines, physical cyber crime cells, or local police stations.

Step 1: Preservation of Digital Evidence

Before initiating the formal complaint process, the victim must take immediate steps to secure and preserve all available evidence. Digital evidence is notoriously volatile and can be easily altered, deleted, or encrypted by perpetrators. The following measures should be undertaken without delay:

• Capture screenshots of all relevant messages, emails, social media posts, transaction records, and webpages.
• Preserve URLs, timestamps, and metadata associated with the offending content.
• Maintain records of all financial transactions, including bank statements, credit card receipts, and online transfer confirmations.
• Save chat transcripts, call logs, and any voice or video recordings pertinent to the offence.
• Avoid deleting any data from devices, as this may compromise the chain of custody during investigation.

The integrity of digital evidence is paramount, as courts and investigating agencies rely heavily on electronic records to establish the commission of an offence and identify the perpetrator.

Step 2: Online Complaint Through the National Cyber Crime Reporting Portal

The Ministry of Home Affairs, Government of India, operates the official National Cyber Crime Reporting Portal (www.cybercrime.gov.in), which serves as the primary digital gateway for reporting cyber offences. The portal facilitates the reporting of crimes related to women and children, as well as other general cyber crimes, and allows victims to track the status of their complaints.

Procedure for Reporting Other Cyber Crimes:

• Visit the official portal and navigate to the "Report Other Cyber Crime" section.
• Register as a new user by providing a valid Indian mobile number and email address. An OTP (valid for 30 minutes) will be sent for verification.
• Read and accept the terms and conditions governing the complaint process.
• Complete the complaint form, which is divided into four sections: victim details, incident details, suspect details (if known), and evidence upload.
• Provide accurate information regarding the state and district where the incident occurred, the date and time of the offence, and a detailed narrative of the events.
• Upload all supporting documents and digital evidence, including screenshots, bank statements, email copies, and URLs.
• Preview the information entered, verify its accuracy, and submit the complaint.
• Upon successful submission, a unique complaint reference number is generated, which must be preserved for future tracking and correspondence.

Procedure for Reporting Crimes Against Women and Children:

• Navigate to the "Report Women/Child Related Crime" section.
• Choose between "Report Anonymously" (for victims who wish to protect their identity) or "Report & Track" (for registered users).
• Complete the complaint form with details of the incident, including the nature of the offence (e.g., child pornography, cyber grooming, sexually explicit content depicting rape or gang rape).
• Submit the form after reviewing the entered information.

The portal ensures that complaints are routed to the concerned State or Union Territory police authorities for investigation and appropriate action.

Step 3: Offline Complaint at Cyber Crime Cells

For victims who prefer physical reporting or lack reliable internet access, complaints may be filed at the nearest Cyber Crime Investigation Cell. These specialised units are operational in most major cities and districts across India and are staffed with officers trained in digital forensics and cyber investigation.

Procedure for Offline Filing:

• Draft a written complaint addressed to the Head of the Cyber Crime Cell.
• Include comprehensive personal details: full name, contact number, email address, and residential address.
• Provide a detailed account of the offence, including dates, times, nature of the crime, parties involved, and the sequence of events.
• Attach copies of identification proof (Aadhaar card, PAN card, voter ID) and all relevant digital evidence.
• Submit the complaint at the cyber crime cell and obtain an acknowledgement receipt.

If a dedicated cyber crime cell is not available in the victim's locality, the complaint may be filed at the nearest police station under the principle of "Zero FIR" or "e-FIR," as mandated under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (formerly Section 154 of the CrPC). The police are legally obligated to register the complaint and forward it to the appropriate jurisdictional authority for investigation.

Step 4: Filing a First Information Report (FIR)

Under Section 173 of the Bharatiya Nagarik Suraksha Sanhita, 2023, it is mandatory for every police officer to record information relating to the commission of a cognizable offence. In the context of cyber crimes, an FIR can be registered at any police station, regardless of where the offence was committed or where the victim resides, reflecting the transnational and borderless nature of digital crime.

Key Points Regarding FIR Registration:

• The police cannot refuse to register an FIR merely on the ground of territorial jurisdiction.
• If the police officer in charge refuses to register the FIR, the victim may approach the Commissioner of Police or the Judicial Magistrate of the area under Section 190 of the CrPC (now aligned with BNSS provisions).
• The Supreme Court, in Lalita Kumari v. State of Uttar Pradesh (2014), held that registration of an FIR is mandatory upon receipt of information disclosing the commission of a cognizable offence, and refusal to do so renders the concerned officer liable for legal action.

Step 5: Utilising the Cyber Crime Helpline

The Government of India has established a dedicated cyber crime helpline, 1930, to facilitate immediate reporting and advisory support. Victims can dial this number to report offences, seek guidance on evidence preservation, and receive information regarding the complaint process. Several states have integrated this helpline with their emergency response systems, enabling real-time assistance for victims experiencing active harassment, doxing, or the unauthorised distribution of intimate images.

---

Section III: Essential Documents and Evidence Requirements

The nature of evidence required varies depending on the specific category of cyber crime. The following enumerates the documentary and digital evidence typically necessitated for different types of offences:

For Data Theft and Intellectual Property Offences:

• Copy of the stolen data or content.
• Copyright registration certificate or proof of ownership.
• Details of the suspected perpetrator, if available.
• Server logs and access records demonstrating unauthorised extraction.

For Online Financial Fraud:

• Bank statements covering the last six months.
• Records of fraudulent transactions, including transaction IDs, dates, and amounts.
• Copies of suspicious SMS, emails, or communication received from the perpetrator.
• Identity and address proof of the complainant.
• Screenshots of the fraudulent website, application, or payment gateway.

For Email Fraud and Phishing:

• Brief narrative of the factual matrix of the offence.
• Complete copy of the suspected fraudulent email, including headers.
• Suspected email ID and any associated domain information.
• Copies of trail mails and communication threads.
• Details of any financial loss incurred.

For Malware and Ransomware Attacks:

• Malware: Copies of infected attachments, malicious email contents, and sender email IDs.
• Ransomware: Details of the ransom demand, communication channels (email ID, contact number), screenshots of encrypted systems, and wallet addresses if cryptocurrency is demanded.

For Bitcoin and Cryptocurrency Fraud:

• Detailed narrative of the offence.
• Amount of cryptocurrency in question.
• Bitcoin or cryptocurrency wallet address of the victim.
• Wallet address or exchange details of the counterparty involved in the transaction.
• Transaction hashes and blockchain records.

For Cyberstalking, Cyberbullying, and Harassment:

• Screenshots of threatening or obscene messages, emails, and social media posts.
• URLs and profile details of the perpetrator.
• Call logs and chat transcripts.
• Evidence of repeated contact despite clear indication of disinterest.
• In cases of morphed images or deepfakes, original and manipulated images with metadata.

---

Section IV: Legal Provisions and Penalties Under the Information Technology Act, 2000

The Information Technology Act, 2000, as amended by the Information Technology (Amendment) Act, 2008, constitutes the cornerstone of India's cyber law framework. The following sections delineate the key offences and their corresponding penalties:

• Section 43: Penalty for Damage to Computer, Computer System, etc.
  • This section addresses unauthorised access, downloading, extraction, or introduction of viruses into computer systems, as well as damage to data and denial of access to authorised users.
  • Penalty: Compensation up to Rs. 1 crore to the affected party, as determined by the adjudicating officer.
• Section 65: Tampering with Computer Source Documents
  • Punishes the intentional concealment, destruction, or alteration of computer source code or documents.
  • Penalty: Imprisonment up to three years, or fine up to Rs. 2 lakh, or both.
• Section 66: Computer Related Offences
  • If any person, dishonestly or fraudulently, does any act referred to in Section 43, they shall be punishable with imprisonment for a term which may extend to three years, or with fine which may extend to Rs. 5 lakh, or with both.
• Section 66B: Punishment for Dishonestly Receiving Stolen Computer Resource or Communication Device
  • Penalty: Imprisonment up to three years, or fine up to Rs. 1 lakh, or both.
• Section 66C: Punishment for Identity Theft
  • Covers the fraudulent or dishonest use of another person's electronic signature, password, or unique identifying feature.
  • Penalty: Imprisonment up to three years, and fine up to Rs. 3 lakh.
• Section 66D: Punishment for Cheating by Personation Using Computer Resource
  • Addresses impersonation through digital means to cheat or deceive.
  • Penalty: Imprisonment up to three years, and fine up to Rs. 1 lakh.
• Section 66E: Punishment for Violation of Privacy
  • Prohibits the capture, publication, or transmission of images depicting the private area of any person without consent.
  • Penalty: Imprisonment up to three years, or fine up to Rs. 2 lakh, or both.
• Section 66F: Punishment for Cyber Terrorism
  • Defines acts of cyber terrorism, including denial of access, unauthorised intrusion, or introduction of malware with intent to threaten India's sovereignty, integrity, or security.
  • Penalty: Imprisonment extending to life imprisonment.
• Section 67: Punishment for Publishing or Transmitting Obscene Material in Electronic Form
  • Penalty: Imprisonment up to three years, and fine up to Rs. 5 lakh for first conviction; imprisonment up to five years, and fine up to Rs. 10 lakh for subsequent convictions.
• Section 67A: Punishment for Publishing or Transmitting Material Containing Sexually Explicit Act in Electronic Form
  • Penalty: Imprisonment up to five years, and fine up to Rs. 10 lakh for first conviction; imprisonment up to seven years, and fine up to Rs. 10 lakh for subsequent convictions.
• Section 67B: Punishment for Publishing or Transmitting Material Depicting Children in Sexually Explicit Act in Electronic Form
  • Addresses child pornography, cyber grooming, and the enticement of children through online relationships for sexual purposes.
  • Penalty: Imprisonment up to five years, and fine up to Rs. 10 lakh for first conviction; imprisonment up to seven years, and fine up to Rs. 10 lakh for subsequent convictions.
• Section 67C: Preservation and Retention of Information by Intermediaries
  • Mandates intermediaries to preserve and retain specified information for durations as prescribed by the Central Government, ensuring availability for investigation.
• Section 69: Powers to Issue Directions for Interception or Monitoring or Decryption
  • Empowers the Central or State Government to direct any agency to intercept, monitor, or decrypt information generated, transmitted, received, or stored in any computer resource for specified purposes, including cyber security.
• Section 70: Protected Systems
  • Designates certain computer systems as "protected systems," with enhanced security protocols. Unauthorised access to such systems attracts stringent penalties.
• Section 72: Penalty for Breach of Confidentiality and Privacy
  • Penalises any person who, in pursuance of powers conferred under the IT Act, secures access to electronic records and subsequently contravenes confidentiality provisions.
  • Penalty: Imprisonment up to two years, or fine up to Rs. 1 lakh, or both.

---

Section V: Applicability of the Indian Penal Code, 1860 and Allied Statutes

In addition to the IT Act, several provisions of the Indian Penal Code (now largely replaced by the Bharatiya Nyaya Sanhita, 2023, with analogous provisions) and other special laws apply to cyber crimes, enabling concurrent prosecution and ensuring comprehensive legal protection for victims.

• Section 354D of the IPC (Stalking)
  • Defines and penalises stalking, including cyberstalking, where a person monitors the internet, email, or other electronic communication of a woman, or attempts to foster personal interaction despite clear disinterest.
  • Penalty: Imprisonment up to three years, and fine for first offence; imprisonment up to five years, and fine for repeat offence.
• Section 420 of the IPC (Cheating and Dishonestly Inducing Delivery of Property)
  • Applicable to online financial frauds, phishing scams, and other deceitful practices perpetrated through digital means.
  • Penalty: Imprisonment up to seven years, and fine.
• Section 463, 465, 468, and 471 of the IPC (Forgery and Using Forged Documents)
  • Relevant to cases involving the creation or use of forged digital documents, electronic signatures, or manipulated images.
• Section 500 of the IPC (Defamation)
  • Punishes the publication of defamatory statements, including those made on social media or digital platforms.
  • Penalty: Imprisonment up to two years, or fine, or both.
• Section 503 and 507 of the IPC (Criminal Intimidation and Anonymous Communication)
  • Addresses threats and intimidation conveyed through anonymous electronic communications.
• Section 509 of the IPC (Word, Gesture or Act Intended to Insult the Modesty of a Woman)
  • Applicable to obscene messages, unsolicited explicit content, or harassment intended to outrage the modesty of a woman.
• Protection of Children from Sexual Offences Act, 2012 (POCSO)
  • Sections 11(vi), 13, and 14 address child grooming, sexual harassment, and the use of children for pornographic purposes, often intersecting with IT Act provisions in cyber grooming cases.
• The Digital Personal Data Protection Act, 2023 (DPDP Act)
  • Section 9 imposes specific obligations on data fiduciaries processing personal data of children, mandating parental consent and protective measures, with implications for platforms facilitating cyberbullying or grooming.

---

Section VI: Landmark Case Laws Shaping Cyber Crime Jurisprudence

The Indian judiciary has played a pivotal role in interpreting cyber law provisions, balancing the rights of victims with constitutional guarantees, and addressing emerging challenges posed by technological advancements.

• Shreya Singhal v. Union of India (2015)
  • The Supreme Court, in this landmark judgment, struck down Section 66A of the IT Act, which criminalised the sending of "offensive" messages through communication services. The Court held that the provision was unconstitutionally vague, overbroad, and violated the fundamental right to free speech under Article 19(1)(a) of the Constitution. This judgment remains a cornerstone of digital free expression jurisprudence and underscores the necessity for precisely defined statutory language in cyber crime legislation.
• Lalita Kumari v. State of Uttar Pradesh (2014)
  • The Supreme Court mandated the mandatory registration of an FIR upon receipt of information disclosing the commission of a cognizable offence, holding that police inaction renders officers liable for legal consequences. This ruling is particularly significant for cyber crime victims, as it prevents police stations from refusing to register complaints on jurisdictional or technical grounds.
• Kalandi Charan Lenka v. State of Odisha (2017)
  • In this case, the victim suffered severe reputational harm after receiving vulgar messages from an unidentified caller, followed by emails and the creation of a fake Facebook account with morphed images. The High Court found the accused prima facie guilty of multiple offences, including cyberstalking under Section 354D of the IPC and relevant provisions of the IT Act. This case illustrates the judiciary's proactive stance in addressing composite cyber harassment involving stalking, defamation, and identity theft.
• Poona Auto Ancillaries Pvt. Ltd. v. Punjab National Bank (2018)
  • The IT Adjudicator directed Punjab National Bank to compensate the complainant Rs. 45 lakh after fraudsters siphoned approximately Rs. 80 lakh using the bank's services. Despite the complainant responding to a phishing email, the bank was held negligent for failing to implement adequate security checks against fraudulently opened accounts. This case underscores the liability of financial institutions for lapses in cybersecurity infrastructure and the rights of victims to seek compensation.
• Kumar v. Whiteley (1919, cited in contemporary cyber law contexts)
  • The accused gained unauthorised access to the Joint Academic Network, modifying, adding, and deleting files from the database. He was convicted under Sections 420 of the IPC and Section 66 of the IT Act, sentenced to one year of imprisonment, and fined Rs. 5,000. This early precedent established the applicability of both IT Act and IPC provisions in cases involving unauthorised network intrusion.
• Anil Kumar Srivastava v. Additional Director, MHFW (2005, cited in legal commentaries)
  • The petitioner forged the signature of an Additional Director and filed a complaint containing false accusations. The Court held the petitioner accountable under Sections 465 and 471 of the IPC for forgery and using forged documents, demonstrating the extension of traditional penal provisions to digital document manipulation.
• Avnish Bajaj v. State (2005)
  • This case, involving the Bazee.com CEO, addressed intermediary liability under the IT Act for obscene content uploaded by users. The proceedings highlighted the nuanced balance between holding platforms accountable and protecting intermediaries from liability for third-party content, influencing subsequent amendments to the IT Act and the formulation of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

---

Section VII: Procedural Innovations Under the Bharatiya Nagarik Suraksha Sanhita, 2023

The enactment of the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS), replacing the Code of Criminal Procedure, 1973, introduces significant procedural advancements tailored to the exigencies of cyber crime investigation and reporting.

• Section 173: E-FIR and Zero FIR
  • The BNSS formally recognises electronic submission of information regarding cognizable offences, mandating that such information be reduced to writing and signed by the informant within three days. This provision legalises the e-FIR mechanism, ensuring that complaints can be registered remotely without physical presence at a police station.
  • The concept of Zero FIR—registering a complaint regardless of territorial jurisdiction—is placed on a statutory footing, with mandatory transfer to the police station having proper jurisdiction. This is particularly critical for cyber crimes, which frequently transcend geographical boundaries.
• Section 65B of the Indian Evidence Act, 1872 (as aligned with BNSS and Bharatiya Sakshya Adhiniyam, 2023)
  • Governs the admissibility of electronic records, mandating certification by a responsible officer of the entity producing the record. In cyber crime cases, this ensures that digital evidence—screenshots, server logs, chat transcripts—is admissible in court provided proper certification is obtained. Victims should ensure that printouts of offensive material are certified under Section 65B to satisfy evidentiary standards.
• Standard Operating Procedures (SOPs)
  • The Bureau of Police Research and Development (BPR&D) has issued SOPs for e-FIR and Zero FIR registration, standardising evidence preservation, metadata logging, and the issuance of preservation notices to digital intermediaries within the first 72 hours of complaint registration.

---

Section VIII: Challenges and Practical Considerations

Despite a robust legislative framework and institutional mechanisms, several challenges persist in the effective combatting of cyber crimes in India:

• Infrastructure and Capacity Deficits: Many local police stations lack specialised cyber crime expertise, trained forensic personnel, and adequate technological infrastructure to handle complex digital investigations. The volume of complaints often overwhelms available resources, leading to delays in resolution.
• Jurisdictional Complexities: The borderless nature of the internet complicates the determination of territorial jurisdiction, particularly when perpetrators operate from foreign jurisdictions or use anonymising technologies such as VPNs and the dark web.
• Evidence Preservation and Admissibility: The rapid obsolescence of digital evidence, coupled with stringent certification requirements under Section 65B of the Evidence Act, poses significant hurdles in building prosecutable cases.
• Victim Awareness and Reporting Hesitation: Social stigma, fear of retaliation, and lack of awareness regarding complaint mechanisms deter many victims—particularly women and children—from reporting cyber crimes.
• Intermediary Compliance and Takedown Delays: While the IT Rules, 2021 impose obligations on significant social media intermediaries to address grievances and remove unlawful content, delays in compliance and inconsistent enforcement remain prevalent.

---

Section IX: Preventive Measures and Best Practices

Adherence to preventive measures can substantially mitigate the risk of falling victim to cyber crime:

• For Individuals:
  • Exercise caution when clicking on links or downloading attachments from unknown sources.
  • Utilise strong, unique passwords and enable two-factor authentication across all digital accounts.
  • Regularly update antivirus software and operating systems.
  • Avoid sharing sensitive personal or financial information on unsecured or public networks.
  • Monitor bank statements and transaction alerts for unauthorised activity.
• For Parents and Guardians:
  • Engage in open conversations with children regarding online threats, including cyber grooming, bullying, and stalking.
  • Implement parental controls and privacy settings on devices and social media accounts used by minors.
  • Monitor children's online activities and be vigilant for behavioural changes indicative of distress.
  • Cover webcams when not in use and educate children about the risks of sharing intimate images.
• For Organisations:
  • Implement robust cybersecurity protocols, including firewalls, intrusion detection systems, and encryption.
  • Conduct regular security audits and employee training on phishing and social engineering threats.
  • Maintain incident response plans and establish protocols for reporting breaches to CERT-In (Indian Computer Emergency Response Team) as mandated under prevailing regulations.

---

Conclusion

The cyber crime complaint process in India has evolved significantly, transitioning from fragmented, jurisdiction-bound procedures to a centralised, technologically integrated framework encompassing online portals, dedicated helplines, and statutory recognition of electronic reporting. The Information Technology Act, 2000, supplemented by the Indian Penal Code, POCSO, the DPDP Act, and now the Bharatiya Nagarik Suraksha Sanhita, 2023, provides a comprehensive legal arsenal for victims seeking redress.

Landmark judicial pronouncements, particularly Shreya Singhal v. Union of India and Lalita Kumari v. State of Uttar Pradesh, have reinforced constitutional safeguards while ensuring that law enforcement agencies remain accountable to victims. Nevertheless, the efficacy of this framework ultimately depends on ground-level implementation—investing in specialised cyber crime infrastructure, enhancing police capacity, streamlining intermediary compliance, and fostering public awareness.

For victims, the imperative is clear: act swiftly to preserve evidence, utilise the National Cyber Crime Reporting Portal or the 1930 helpline, and assert the legal right to have complaints registered without jurisdictional obstruction. In the digital age, legal literacy is not merely an asset; it is a necessary shield against the ever-mutating threats of cyber crime.

---

Sources and Further Reading:

• National Cyber Crime Reporting Portal: www.cybercrime.gov.in
• Information Technology Act, 2000 (as amended in 2008)
• Bharatiya Nagarik Suraksha Sanhita, 2023
• Bharatiya Nyaya Sanhita, 2023
• Protection of Children from Sexual Offences Act, 2012
• Digital Personal Data Protection Act, 2023
• Indian Evidence Act, 1872 (and Bharatiya Sakshya Adhiniyam, 2023)
• Reserve Bank of India Circular on Cyber Security in Banks (DBR.NO.Leg.BC.78/09.07.005/2017-18, dated 6 July 2017)
• Supreme Court judgments in Shreya Singhal v. Union of India (2015) and Lalita Kumari v. State of Uttar Pradesh (2014)