**_ _. _J1gCAZETTH OF INDIA: EXTRAORDINARY IPAHTM %jc.3fi1| 3iftiq*nT H*fo*ft. 27 31*5**, 2009 « . « C n 782(3fy ^ j ^ ^ ^ ^ ^ j j ^ p j ^ af t fapj . 2000 (2000 3>T 21) tft tTTO 69W flft frftCT 3ft? Tjgrfirfl * ^ 3> J c « HftHIF 3fl? «frlTG) PfcPT, 2009 $ I
(2) fi *ra*ni fl tronpr <3>1 iirfrw ^ a^n fffl 1
(m) "*RiPta*r ^t ^ n rfhtftPra>l arf&ftflH. 2000 (2000 *r 21) arftto % ,
(a) --<fnK' r̂ ^ ? H I 11 *tAa <M fo'tft ^ 1̂ irarctf. tifaw. sen 3*ftritei J 3fa £*r<fc 3HT% BOTH fl^TC sft* 3fJIBRf tf*R ^ f l ft - ^f^ScT flTS^, c!H *fiTy qj fifctft 3RJ fl^R TOSH W ^rpfrT 3TPrSfiT ft ;
(a) "««*i Hifiwrfl" * *raR oft? gtrn jftrittfntf ^ T 3 Q $ mita q«Hi sfttfift^ ft^R
(3) " f l ^p * ffltH" 3t WftPWlH *rft HRT 2 3>t OTSTC (1) 3> **5 ft) 1 ?PfI HftmftcT W ^ OTfcPI ^Pri»d J ;
TC=n aifttfra ft ^1 cfni g«n =ftf?r P̂T sra>̂ w $ *n P T M WT ?* tffttspirar ̂ ^ft ft lW<fi
(vi) "q5=n" ^1 ^ftPnR irtl lira 2 ^1 tfqara (i) A ^ « (v) >1 «rar qftqifiid ^<j-n
(w) "?p=n § « n ygRpif" A jn$*? gOTT u^n3il 3fl< **»fl *»»! ^ i a>^ * f̂ nj ^SHI (5?) -m*ratf" rt 3TRrPtOT rft «ra 2 rft unata (i) * ^ « («) t TOT ^rt^iftd «>4 ;e) "•niter' tf 3 ^ u , gwft an^^Tq> w ^ i aft* ww£\u vit ^t&. f^rfl »itflw TTT ̂ i n i T^I ft^n ^n \*tio>i R8«"i * ^n *n ^ orPifcrfeci tf^n îr TOT? ?P?=TT ^t ft;
r̂<ni>tiT# nwnraftfl *n 3Ri ^u*^j| f gRtr̂ ^ w ?n wfirj, Rnrw 'Ji <il w*i ^r ft^H 3T*q OT^P^I. gfifr ^ ^ R ^ ? ^ wfe^ A *ra wfra^ * . §Ps« 3 i t ^ i ai ^ -TT *1 ^ ^ 1 qi Ftf\m ^ \ m arfiiftfiftf WIOT mn? qr^ * fcHi ̂ rrftTi fa*n w*n ft w OTtfii fa>*ji ^1 ««n 6 -
(5) "<ft£" ^1 "OTrfra r̂ tfli"* ?* ^ * SfrraJ^R PRRI a>i *e 3iP?ira ft yft gtnftvi A ?RCT ft <rfR ^?raa 3^31 ^cn & ;
£MTH H - O T 3(i)l mttl gMFWI: 3TRIWCT 35 (?) " ^ f l H n n wflrfct" * ^rtffa) ?R Run. 1951 A PHPI 419W * anfcf *tfiM 3, W R *CT^ *fc fe**J ftfclL- (1) OifilPttro & OTtf 69*? flfl tfTOIfl (3) # art*! 4F&T> 3rttfd 31 qiRT * Hl-Att 9T** 3^7 tfflE* * ftn! *?T$ Pft*. TOT* STTftTOrtt Bfl ft>V *nj fotft 3(1** * RlflUI. SJf!® =00 ftfUT ÎTCnTT I
(2) ™ prfirarit ms« g*n 3 rtifltr ftHfetftw i W w *nft wfaril * fcnj »irtta w*t
(as) 3TTCF=T i nwgnnr t w ijjrtjHR ww ] (*l) VPRtii 1*1 tf^ec CTjntf W TOT cTFHT 3ft? flWTTO Wffl ;
dfa Prenyl;
(B) *<̂ <w tftfH ft ^TRT g w Jr»nfcral * 3F$TO *n OTnfrK ̂ i&n A wi w ft p-i) ocxt*iq jfljti n m g w ^ tf*ft?T fiftnfi * fiR^ n M rt irecfa * fen; 'W*!
gTRi w i T̂gfl y w W7=n ;
(3) OTPIHH (2) * OT^T wm yiftmS SRT ^rtl ftnj T^ % * ftin >| itf» Prfiw A fenj OT tfcrffo: Ŵ 3fR ^ pftv rfl ^ uRt w?i qsrtKro1* *l d̂ fft * I!UR yif^WH R̂rfcl n*t aitftfl <nficT OT rt * Hififtrdi * m fiB^ft ftflrc fir** * Wl&n jpw 3rt* l̂ m qjni *r Jn-ft« 3fl̂ tfas 3rtfta> *cq£? w r t ^ ffFa ftnn ^m S; ^1 W ^^V* WOT 6 RHa»t w> fifjre ai^i n̂ w ai
(4) «JPb« aittfft at ^=n * vpin *I WIF v r t ii ftnj w w n mft̂ sw 4 A M , - (I) TOPI jnf&wr̂ wwn? * ferfl wftrow *rA ftf* *^c? OTR H vfifii. vfifat. HW QT *tafta 5^JP
(2) OT PRR (1) *ft ^rt=i W R juftm^ ffw iniifyd i R s n ^ ^t 3rf&a> ^1 f̂red PT&W^ ITF! fl^ JiTcft arorten rfl mft^i wrt 3 ^ * ^ A jrfttR A Rnj iRiftffe! Ŵ TT I
(3) OT ftm? (2) A wfci 3mrtffT 1 vffl 3?firartl m e#ra>w wr =m tfrt <roftwH ftftfiS:
THEGAZfeTTKOFINpiA; EXTRAORDINARY |PAOT II Sir. 3<i)|
(4) Wop* m n A wraf l *n TfwwR arf̂ B tjw m 3iRra> wftraifttfi rfi $fib* OT?P^I in q tm m *r f tw *n tfas s*% * ten; ^frea arftortt * * t f amrtrar yra * t f t f t W» aiwrtsi * 3d&wifofi UT *rrc*mra srtftr At ^rea a f twS sra f$T%n *ni m Aro gra qgtfrai viwn w f)d wftrarft era. «ft 3W7 ^aftra At 1*f5& * ftR <tf3a «T ^ ^1 *n OT^ <lf3a * i d . *iffen ft**n ^njni ( f a f f * 3ftPfa 5 ^ * ^ 1 0 * ftwI^R 1̂ ft1?R! i'*T& CRT MffeR *fl 8) I
(6) OTPran (2) * anfrr irrlte* a ^ * fc^ Pfc* <rgtirt STcft amrtwi w » <*>«} arai 4ku wftyra * arjm* Hrftw v r t * fin; forffcra *t ift wj&r W^TI aft* OTAI fWtc OTFWT {3) <& 3nto vciftfftfl 3rf?rarit Al ^ n l
(7) ^WCT 3*fira>r$ ^ I O T * <TWIMI. K ^ aft? nifcr&i v ^ l , wft g f t w t srstfm aft* wuwi #1 * ftnj aJta afa a t p ^ Al * wr f inr t ^ £fo« #iff*a m q*rn TO nrfto ate *ros * r t * frn; Aiags flWT <ro 3ifa HTT=! *rg^ At ^8r?i SR* Mto 3*wi OT*f ^ ^ * lonj *rft ^ u u j .
T I F ^ I 3^7 ^rpRrai W A fc^ OTPTOH (4) * » f a vumdl * aift«ril ^r vtog* ^TIR * »n«ra* °jt$$ A rfl 3 H ^ *^'ll I
(8) Pm^ 3 * diPWH (2) * w f r i ^rtl ftn; ^ pft^ ^ i^gart *iRfl OTftrm (2) * 3nH-i 3ra^wr gft 5nf3f 137 \3VP»UH (4) * &f& mmrSi w <raRrl|ci wRiffiif *n a>«p? wo^ m TOUT* {10) iun<f1 *M ^raftf^a 3jftrar4t *n uft^? ATIR W ' H O T * <*jfit 5 ^ * 3 f t r t ^ i ^Wl *^ »rr-ft^ m mre wrt * fen; Ww ygfli^ *Rft 3Kzrtfli i ! ipp ^ i * H ^ P ^ ft-i ** il*c* wRr«5l ^ arifta 5sW. ftnrt *Htfra MIM mft^Ta * Prtv ut\ q^wrt 5T t̂ 3iurt«i A Priw oil* gftf i tra i5?=n.- TOmtft m gtqps OTFT OT HRflm* aifei 5^ W H IJ^ U? qPrRfty ^ l A f&i;
^ ^ * *TPTC! 4 3iwRro m w r l l ate tpfcranft ^ mjft ft wfffc vJ«*1 ̂ rifWt * ft^n 17 $P?M TC3T ft 3̂ R vx iff ft* * ^ fpr^ A *iOTrcft A ^ i f i r f ^ 3fft»:8 «i stop? *mn * VROTHP srf^r BRTftl vr^rri rfl wrfl ft 1 ip=n A mnftipa " * Tr t to *n * in* w ^ ^ ?Wft?r MftPPR 3ft? OT* arit^ <Rnj ^ Pmft A
7. w n i iiiftei'A A ft^rrt rfl ^HfiWt*-i.- jHflI<ft*-i flftft At t&n A 'ira l ^ i ^ ^ i V^ *R iPfl tfft ^ f t f t 3 ^ *FT ftwfl Al «PrRrf&c! OSW! f * WT Pin*! 3 A ^qfom (2) A wf l^ ^r*t fih? m; Pf t* 3iftrPRm At ura 693 At STORF (3) A ^rtt f t A arjfiR ft 3ft? ^?l 3-iffltfm-i TTftft At w ^ni ft fe Pftn ^ R ftfife OT*ft A aijflR =rfl ft <ra *rg R^fl At 3WIM ^? ^TAITI ^R wt?pft A. f ^ A 3hnhr HT-ftffe *IT Tfiir ft^ 'TV ?J*lnp a i f t ^ 51 qsRi w (Htfw s ^ J f t * a ;yft<*^ ^t ^K as*=i.- (1) Pc*w aift&a, Rra* 3fir*1a JRWs 3rtaF$ wi irfte^ *ii *ra*i tftf * ftnj itft fWtfl * a*fiRf *datfftw 3rt̂ R*« 4 ft Pfttf 5ft jnfa ar aiftRta * ^ f ^p dl * wmnnfl & =rt >rra aft araft *9 wnfa # qrura. ftniflj OT CTT rt srsi £RM> w ^ *n *J*HI ?RWSTJI ^rtsra/l * ftn 3rtfta ft m |M aft «vraTT ft TC a>* ft*n s*npn I
(2) fotft ITS * OT***I anrofira tjftan: *T ftftta wfaifcil * irafc^ * fin* artftra A 3wnn * ftrcm TOURR tf^ TOFT W w i r a v arfSr TJTRI A *rr̂ te? *>?* OI flue * flfctfl A tf*f&a MftcTrf w^ 5J** 3itw< an qMtCT JETTT m flirp ift ft"? ^ i w ira aft araft * *ftiR TO as*nr I
9. inftWR £ ftqt £flp* OTOT^ m ^w*\ a t *?rfta? *T was w% an iifMff.- (1) tfti srfife. tfr *mra 7n mnjjnK Pnro a * Wftw (2) vi ROT 4 * viftim (1) <ft anita siftton # ft^r 5̂ **«» 3rtartf m ^ IRI w *rra * tfcre fa>*fl W R ^ ^** ^ in VT^OI * appm 1 'irfle* 31 {tut w^n ft m {Ffe<r> ara^l *n qtRi wr qrfrR *p^ *n fla? aR*l an smra a w fc *n £fV* WOT ft OTT* fiwi wdarfl aft wtpft ^ ffcfftro H n̂ firW * ^ ^ &mi * gtffr jn^rc 4fa flsai *«HC*JI 1
(2) tt^n WW fl Jfaas 3rt*< m q ^ i WT t*# 'Tarafl & »Wna *n ayreT w n * momw ^ifSa sra n̂ >rara*ft 5 ^ WOTT ^?i ^ 5nRrpa a$fa era Tpft« «n fljif wi iitfi4dl gn TCRI aft *T{ Ararat * wl&a OT* 5̂ <zi * « f̂fsn « ftnn «T ^I*TT, «ift ^ *iti*tfra w â ^dli CO **rap3 OTtR ra w « T ^ ^mn * 1̂̂ 1 irrfPi fiK ^rt vr^ ftnfl v m R *i wwnn;
(iii) TOTEA ?n alffran * flft w ft^ft Wtn7 f?e* *n flfaeiu* w flwnn m >na*Kfl
(iv) yrws't *^q?7 VHR n̂ ftnft STIR f?r»s n̂ *ifts * fl«nn. fl^v*^ UT 3nj*w i> fl*Rla tfopi CTOT £ *t*ift<i fl^*n <r* npi arcr 3>WT • 11
(v) *a£C7 ̂ mr̂ ^ ftMfiHffcw urfra^ * f&ni 4VRB ^ R T TTO *njn pro g^^i:
(n) W^I^T n̂ 3Trat?̂ r writer * ITR wi * fl«fifc! * ^ r TIHR oft vftSfti* *T
(vi) « h ^ wnn m ftp* wffe rfl. fanrt arffiftw * ft^ft ^J«u *T ;r<wn ftwr S sra jrag qft nj ^nnrf <re yfir^ wra w^ aft flwn ft ^ra^ # yrfRn * ftre « ^ s ?TTTR t̂ *fTR? TIW ^TTT n̂ TA*I ft*Awi ai?=n 1 TOiftftft^ wral « picH 9>^ 5^ w<I ifivtfmn aft? ftwpto ^ n 1 tt T H E G A Z b T T g W INDIA : EXTRAORDINARY | P « i II—8w\ 3i0l
(4) bn<A« fan; >nj *n fiflfta J f a * 3ira>^l *n * J * H I * nftii i n >ruratfl *JT **m<w fmi^r * t f l u m TOT in \ra<£ fifcifl fl^ftartl gra g^raTr ^ l ftrcn ^r tpn *IT ̂ ft*j*i 4 *ft ^ P w i (2) <t> 3idhi OTA q T r n A airafict flranpji $ ft=j ft^fi arfSft <*>l w » e n̂$t fifizn smjin 1 fifctfl >i«jflifl v\ OT* 4»4m9 *n « u j ^ W O T A v ramis* o i f t a * ft^c rft J A PftR * gttftrt <tr ^c^u-r W O T ft mfe i r f sft *4iy*ft 3 t a OT» p « 3rf&f^iT i *n 33f»w 1*5*1 ft>*ft 3 R I ftft * gtf*RT av*tft A
10. J f i f t l f f i «SnETT CRT {!**<& 3ITO*S 3$ 31 q^- f l »> B*tT «l>7ft «»"T w f r r tu . - HT-flc< f&>*Z IV I T flsrf&d £fl»r* ar twf l i i ^ m * a f t ) w Pro*) 4 * OTfttro (1) d 3nfta jnfifipa a i f twrw ^ w t l s i n w w w A firi 3f iw*i ^ n p R W T ^ I I T s ^ f t c *re tfr<* - t n v n $ffew *f> o n n vvp j l v * *i?**itfl* i ^ ^ ^ ^ ' * , | < ^rs^^rafl * * m n w flte£mri *n ai-^uui * few a w n TO ft ™ n ^ r a r d i * A » W ^n f t ra *idfliffc*ft ft A R m i OTtfm ^flS ftsm \nv;*n I T *rt» jrase ^rfl fi>*n vinpn 1 1 | . ftwfl-ttaen ifcl ¥ W ; TOFT STRI-PRFT 10 ft TOT 3FT5fT %5M48frl <fi f)T4IV 5^ ftiPJI A orfta W R m f t * i $ era w f l ft>^ *nj SW*» 3iras# *n ?JTFIT <*>i T r i t o * t f i HT T1*JF w r t *t> fpnj P f t r f A *t4n ft ^Ftt r n v 4 n t n w f l w p B i I * . 9(16)4004 i A | i p . tf* T W T . w g w * t f w NOTIFICATION Nfw Delhi, the 2 7 * O c t o M . 2009 G S R 782 <E) — lo exercise of :ne powers conferred by clause (za) of subsection (2) of section 87. read with sub-section (3) of section 69S of the l^format>oo Technology Act 2000 (21 of 2000). the Central Government hereby make* the foltawng rules, namely;— 1 Short tit le and commencement— (1) These rule* may be called the information Technology (ProceA>re and safeguard for Monitoring and Collecting Traffic Data or Information) Rutes. 2009
(2) They shall come into force on the date of their pubitcabor MI the Official Gazette 2 Definitions.-~> fn these rules, unless the context otherwise requires,— i J ) "Act" means the Information Technology Aci. 2000 (21 of 20O0);
(b) "communication* means dissemination, transmission, carnage of information or signal m some manner and include both a direct communication and an indirect communication.
(c) 'communication link" means the use of satellite. m*crov/aveH radio terrestnal line. wire, wireless or any other communication media to inter-connect computer resource.
(d) 'competent authonty* means the Secretary to the Government of India in the Department of Information Technology under the Mirtstry of Communications and Information Technology;
(e) "computer resource' means computer resource as deSned »n clause <k> of sub-section (1) oi section 2 of the Act, (0 'cyber security incident" means any real or suspected adverse event in relation to cyber security that violates an explicitly or impfcetty apphcaWc security policy resulting in unauthorised access denial of service/ disruption unauthorised use of a computer resource for processing or storage of information or changes to data, information without authorisation.
(g) "cyber security breaches* means un^uthonsed acquisition or unauthorised use by a person of data or information that compromises the confidentiality, integrity or availability of ^formation maintained in a computer resource;
(h) "information" means information as defined in clause (v) of sub-section (1) of section 2 of the Act
(i) **formabon security practices* means implemenlaton of secunty policies and standards *n order to minimize the cyber secunty incidents and breaches;
0) "intermediary" means an intermediary as defined m clause (w) of sub -section (1) of section 2 of the A d .
(k) 'monnor" w*h its grammatical variations and cognate expressions, includes to view or inspect or record or coltect traffic data or information generated, transmitted, received or stored A a computer resource by means of a monitoring devtce;
I VF1 II— q y g i^iy a HITW T l OTTO! : OTIUTW
(1) "monitoring device" means any electronic mechanical electromechanical. electro-magnebc, optical or other instrument, :-*• cc. equipment or apparatus which is used of can be used* whether by itserf in combination with any other instrument, device, equipment or apparatus, to wew or inspect or record or collect traffic data or information;
(m) *port* o* 'application port* means a set of software rules which identifies and permits communication between application to application, network to network, computer to computer computer system lo computer system;
{n} 'Review Committee* means the Review Committee constituted under rule 419A of the Indian Telegraph Rules. 1951;
(o) "security policy* means documented buwiess rules and processes for protecting nformatcn and the computer resource;
(p) 'traffic data* means traffic data a« defined in Explanation (W to section 69B of the Act 3 Directions fo r m o n i t o r i n g — (1) No directions for monitoring and collection of traffic data or information under sub-secton (3) of section 698 of the Act shall be Issued, except by an order made by the competent authority.
(2) The competent authority may Issue directions for monitoring for any or all of the foiioww>g purposes related to cyber security namety-
(a) forecasting of imminent cyber incidents.
(b) monrtonng network application with traffic data or information on computer resource;
(c) identification and determination of viruses or computer contaminant.
(d) tracking cyber security breaches or cyber security incidents;
(e) tracking computer resource breach*>g cyber security or spreading virus or computer contaminants;
(0 identifying or tracking of any person who has breached, or is suspected of having breached or bang Ikery to breach cyber security;
(g) undertaking forensic of the concerned computer resource as a part of investigation or internal audit of information security practices in the computer resource.
(h) accessing a stored information for enforcement of any provisions of the laws relating to cyber security for the tme being in force,
(i) any other matter relating to cyber security.
(3) Any direction issued by the competent authority under sutKule (2) shall contain reasons for such direction and a copy of such direction $hau be forwarded to the Review Committee within a period of seven working days.
(4) The direction of the competent authority for monttonng and collection of traffic data or information may include the monitoring and collection of traffic data or information from any person or class of persons or relating to any particular subject whether such traffic data or information, or ciass of traffic data or information, are received with one or more computer resources, being a computer resource fakely to be used for the generation, transmission, receiving, storing of traffic data or information from or to one particular person or one or many set of premises.
4. Authorised agency o f Government for monitor ing and col lect ion o f traffic data or information — )1) The competent authority may authorise any agency of the government for monitoring and collection of traffic data or information generated, transmitted, received or stored m any computer resource 42) The agency authonsed by the competent authority under sub-rule (1) shall designate one or more nodal officer, not bekrw the rank of the Deputy Se^etary to the Government of India, tor the purpose to authenticate and send the requisition conveying oVection issued under rule 3 to the designated officers of the concerned intermediary or person m-charge of computer resources
(3) The requisition under sub-rule (2) shal specify the name and designat>on of the officer or the agency to whom the monitored or collected traffic data or information is to be disdosed.
(4) The intermediaries or person in-charge of computer resource shall designate one or more officers to receive requisition and to handle such requisition from the nodal officer for monitoring or collection of traffic data or information.
4B J THE GAZETTE QHND1A : KX1EAORDINARY I P m I I Sit. 3(i)[
(6) The requisition conveying directions for monilonng t h a i be conveyed (o the designated officer* of the intermediary or person *vcharge of computer resources, *t wntmg through letter or fax by the nodal officer or delivered (.nciudmg delivery by email signed with electronic signature), by an officer not betow the rank of Under Secretary or officer of the equivalent rank
(6) The nodal officer issuing the requisition conveying directions for monitoring under sub-rule
(2) t h a i a*so make a request in writing to the designated officer of intermediary or person in-charge of computer resource for monitoring •> accordance with the format indicated in such requisition and report the same to the officer designated under sub-rule (3).
(7) The nodaJ officer shall also make a request to the of ice - of intermediary or person m-charge of computer resource designated under sub-rule (*) to extend all facilities, co-operation and assistance in instigation, removai and testing of equipment and also enable online access or to secure and provide onbne access to the computer resource for monitoring and collecting traffic data or information.
(6) On receipt of requisition under sub*mle (2) conveywig the direction issued under sub-rule (2) of rute 3. me designated officer of the intermecfrary or person ki-charge of computer resource designated under tub-rule (4) t h a i acknowledge the receipt of requisition by way of letter or fax or ^'cclromcaty signed e-mail to the nodal officer within a period of two hours from the time of receipt of such requisition.
(9) The officer o f the intermediary or person in-chargc of computer resource designated under sub-rute (4) shall maintain proper records of the requisitions received by him.
(10) The designated officer of the intermediary or person irvcharge of computer resource shall forward in every fifteen days a fest of requis*ion conveying direction for monitoring or coietfbon of traffic data or information to the nodal officer which shall include de' jJs such as the reference and date of requisition convey.ng direction of the concerned competent authanty
5. intermediary to ensure effective check In handling monitor ing or col lect ion o f traffic data or in fo rmat ion— The aitermediary or person m-cMrge of computer resources Shalt put in place adequate and effective ntemal checks to ensure that unauthorised monitoring or collection of traffic data or information does not take place and extreme secrecy is maintained and utmost care 9n6 precaution is taken in the matter of monrtonng or collection of traffic data or nformation as rt affects pnvacy of citizens and alto that this matter is handled only by the designated officer of the intermediary o* person incharge of computer resource.
6. Responsibil i ty of intermediary — The intermediary or person in*charge of computer resource Shalt be responsible for the actons of their employees also, and in case of violation of the provision of the Act and rules made thereunder pertainng to maintenance of secrecy and confidentiality of information or any unauthorised monitoring or collection of traffic data or information, the intermediary pr person incharge of computer resource shal be liable for any action under the relevant provision of the laws for the time being in force.
7. Review of directions of competent authori ty — The Review Committee shall meet at least once in two months and record its findings whether the directions issued under sub-rule (2) o* rule 3 are in accordance with the provisions of sub-section (3) of secbon 69B of the Act and where the Review Committee is of the opinion that the directions are not in accordance with the provisions referred to above, < may set aside the directions and issue order for destruction of the coptf*. inc*ud«g corresponding electronic record of the monitored or cotected traffic data or information.
8. Destruction o f records — M) Every record, including electronic records pertaining to such Erections lor monitoring or collection of traffic data shall be destroyed by the designated officer after the cxpwy of a period of n ne months from the receipt of direction or creation of record, whichever is Later except in a case where the traffic data or information is, or likely to be. required for functional requ*ements
(2) Save as otherwise required for the purpose of any ongoing investigation, criminal complaint or legal proceedings the intermediary or the person in-charge of computer resource *hall destroy records pertaining to drections for monrtonng or collection of information within a period of £»x months of discontinuance of the monrtomg or collection of traffic data and in doing so they shall maintain extreme secrecy.
| * f f T H - y * 3 < i > ] VRfl w\ JfJRi : ^ratVOT
9. ProMbltton of monitoring or collection of traffic data or information without authorisation —
(1) Any person who. intentional!/ or knowing ty. vnthout authorisation under sub-rule (2) of rule 3 or sub rule (1) of rule 4. monitors or collects traffic data or information, or attempts to mooter or colled traffic data or information. or authorised or assists any person to monitor or collect traffic data or inlormabon w\ the course of its occurrence or transmission at any place within India, shall be proceeded against punished accordingly under the relevant prov isos of the law lor the tome be*ng m force <2( The monioring or coflecfon of traffic data or mJormabon in computer resource by the employee of an mtermeojiary or person in-charge of computer resource or a person duty authorised by the intermediary, may be undertaken m course of hts duty relating to the services provided by that intermediary, I such actrvdea are reasonably necestary for the discharge his duties as per the prevailing industry practices, in connection v*th the Mowing matters, namely :— (I) installation of computer resource or any equipment to be used with computer resource: or («) operation or maintenance of computer resource, or <«) installation of any commur-cation link or software either at the end of the intermediary or subscriber, or installation of user account on the computer resource of intermediary and tesbng of the same for its funcWnafcty;
(rv) accessing stored information from computer resource relating to the installation, comechon or maintenance Of equipment computer resource or a communication link or code; or <v) accessing stored information from computer resource for the purpose of —
(a) iflplemen:mg information secunty practices n the computer resource.
(b) determining any security breaches, computer contaminant or computer vrus.
(C) uncertalung forensic of the concerned computer resource as a part of investigation or rtemal audit; or
(vi) accessing or analysing information from a computer resource for the purpose of tracing a computer resource Of any person who has contravened, or is suspected of having contravened or being hkety to contravene, any provision of the Act that is Ifcely to have an adverse impact on the services provicc J ov the intermediary
(3) The intermediary or the person in-charge of compute* resource and its employee* snail maintain strict secrecy and confidentiality of information while peforming the actions as specified under sub-rule {4) The detaris of monitored or coiected traffic data or format ion shall not be used or disclosed by intermediary or person tveharge of computer resource or an / of its employees to arty person other than *>e Intended recipient of the s**d information under sub-rule H) of rule 4 Any intermediary or i s employees or person *vcharge of computer resource who contravenes the provisions of this rule shall be proceeded aganst and punched accordingly under the relevant provisions of the Act or any other law for the time being m force.
10 Prohibition of disclosure ot traffic data or Information by authorised agency — The ceteris of monitored or collected traffic datt or information shall not be jsed or disdosed by the agency authorised under sub-rule (1) of rule 4 for any other purpose, except for forecasting imminent cyber threats or general trend of port-wise traffic on Internet or general analysis of cyber incidents, or for investigation or m judicial proceedings before the competent court in fndta.
11 Itairrtemnce of confidentiality— Save as otherwise provided w\ rule 10. strict confidentiality shall be maintained in respect Of direobons for monitonng or collection of traffic data or information issued by Ihe competent authority under thffse rutes.
[MO. 9<16K2004-EC) N. RAVI SrWjKER. J t Secy Primed by oV Mmdfcr. Government of India Ptou. Rms Romt M*>*pwi, No* Drlht-HOQfrt ml fiattUM by ihc t omrollcf of F\MK:.HO«, Dclfci-L I00$4.