Cyber Crime Laws in India 2026: IT Act, DPDP Act & Career Guide

India’s digital regime is controlled through robust cyber crime laws in India, including the Information Technology Act 2000, new laws such as the DPDP Act 2023, and the Bharatiya Nyaya Sanhita. These laws together control cybercrimes in India, including punishment and a career in cyber laws.

Students pursuing a career in law will have the opportunity to learn about different legal specialisations before deciding which area of law to pursue.

What are Cyber Crime and Laws?

Cyber laws in India are a set of laws that define, investigate, and punish any crime that happens through the use of computers and digital devices. They include the laws that protect individuals and companies against computer hacking, identity theft, cyber fraud, data theft, and cyber terrorism. Unlike traditional criminal laws, there are jurisdictional issues in cyber laws, and they need technical know-how. As such, it is becoming a more and more complicated field of specialization in the law sector.

Those planning to enter this field should first understand the types of law courses after 12th grade and the academic pathways available.

Must Read:

• New Criminal Laws in India
• Evolution of Legal Education: Cyber Laws

Major Cyber Laws in India

The cyber crime laws in India come from different laws, but not from one unified law. Some of them are:

• Information Technology Act 2000 (Amended in 2008) – Main law governing electronic records and signatures, among others.
• Digital Personal Data Protection (DPDP) Act 2023 – Dealing with consent-based data protection with a penalty of ₹250 crore per incident.  Data Protection Board of India has been made operational with the notification of the DPDP Rules 2025 on 13 November, 2025. The substantive obligations (consent, breach notification, data principal rights and security safeguards) do not take effect until the hard compliance deadline on 13th May 2027.
• Bharatiya Nyaya Sanhita (BNS) 2023 – Replaces the Indian Penal Code and deals with cyber fraud, cyber forgery, and extortion.
• CERT-In Directions 2022 – Mandatory reporting of any incident to the Computer Emergency Response Team in India within six hours.
• IT (Intermediary Guidelines & Digital Media Ethics) Rules 2021 – Define due diligence norms for social media platforms & intermediaries.

Types of Cyber Crime Laws in India 2026

There are various types of digital laws in India in relation to different types of cybercrime:

• Unauthorised Access and Hacking – Illegal access to systems/networks without authority is covered in Section 66 of the IT Act.
• Identity Theft – Use of another person’s electronic credentials fraudulently- is covered under Section 66C.
• Online Fraud and Impersonation – Phishing, Vishing, and cheating through digital impersonation are dealt with under Section 66D.
• Cyber Terrorism – Cyber attacks on critical infrastructure, including the power grid, banks, and hospitals, with a penalty of life imprisonment under Section 66F.
• Data Breach and Privacy Violations – Controlled by both Section 72 of the IT Act and the DPDP Act 2023.
• Obscenity and Other Harms – Publishing obscene matter electronically is covered under Section 67.

Cyber Laws in India – Major Acts/Statutes

Information Technology Act 2000 (As amended in 2008): Provides for e-records, cybercrime offences, and digital signatures.

• CERT-In Directions 2022: Mandatory Incident Reporting for 6 hours and maintaining CERT-In Log for 180 days.
• Guidelines 2021 (amended 2023): IT due diligence, content takedowns.
• DPDP Act 2023: Consent-based data protection, Data Protection Board.
• Bharatiya Nyaya Sanhita 2023: Cyber fraud, extortion, organized cybercrime.
• Bharatiya Sakshya Adhiniyam 2023: Admissibility of electronic evidence (Section 63).

IT Act Sections: Cybercrime in India

Authorities Handling Cyber Crime in India

There are a number of agencies that function within the ambit of cyber laws in India to tackle cyber crimes:

• Indian Cyber Crime Coordination Centre (I4C) – It is the nodal body for dealing with cyber crimes and cyber law in India under the Ministry of Home Affairs.
• CERT-In – This agency deals with responding to incidents of cybercrime on critical networks and mandates reporting of breaches.
• CBI Cyber Wing – This agency investigates complicated cybercrimes that require investigation in more than one State, and coordinates with INTERPOL.
• State Cyber Cells – There is a dedicated cybercrime unit in each State that investigates cybercrime in the State.
• Enforcement Directorate (ED) – Financial Crimes involving digital aspects, including cryptocurrency fraud.

Agency workers like CERT-In, CBI, etc., have in their hands criminal law career opportunity as well as cyber law skills.

Steps for Filing a Cyber Crime Complaint

Victims have options for accessing online fraud legal provisions in India and filing complaints through:

• Cybercrime.gov.in: The national online website used for registering cyber crime cases such as fraud, harassment, or child exploitation.
• Helpline 1930: Cybercrime financial fraud helpline in India that starts the freezing of funds.
• Police Station: Going to the nearest police station or state cyber cell for filing an FIR under the IT Act sections.
• CERT-In: In case of data breach notifications, CERT-In must be notified within six hours according to the 2022 directions.

Penalties and Punishments

Cyber crime laws in India indicate that the court provides a graduated range of punishments depending on the gravity of the crime:

• Misdemeanours (tampering, receiving stolen digital property): Fine from ₹1 lakh to ₹2 lakh, with three-year imprisonment.
• Crimes (identity theft, impersonation, obscenity): Up to ₹5 lakh fine and three to five years of imprisonment.
• Cybercrimes against critical infrastructure systems: Life imprisonment according to Section 66F.
• Violation of data protection regulations: Under the DPDP Act 2023, fines on significant data fiduciaries.

The Bharatiya Nyaya Sanhita 2023 further extends the legislation concerning Cyber Crimes in India by incorporating provisions about digital extortion and organized cyber crime into one code.

In order to learn more about Cyber Crime, the online user may resort to reading the Cyber Crime laws in India, the PDF version of the laws available at the official portal of MeitY, meity.gov.in. For the cybercrime case laws in India, refer to Indiankanoon.

Career in Cyber Law

Salary ranges are indicative estimates based on industry job listings as of 2026 and can vary:

Some relevant certifications include IAPP CIPP/IN for Indian data privacy law, ISO 27001 Lead Implementer for security governance, and LLM courses in Cyber Law provided by top law colleges in India.

Conclusion

Cyber Crime laws in India have progressed far, and 2026 will be a time when enforcement, compliance, and litigation in this area will all be escalating. With the IT Act sections, the DPDP Act 2023, and the BNS 2023, India now has the entire legal framework dealing with almost every kind of cyber offense. Irrespective of whether you are a victim, a company, or a professional building a career in this area, it is no longer an option, but a professional requirement to understand cyber laws in India.

If you are on the lookout for a specialization in this area, the best law colleges for cyber law could be of great benefit in determining your admission selection.