(1) Every record. Including electronic records pertaining to such directions: for interception or monaortng or decrypttan of'tatofmaion and of intercepted or moruNored or decrypted informatlDrt snal be destroyed oy ttie security agency in every six months except in a case where such information is reqiA'ed, or r*eiy lo berecpuired for functionaF nequiremenls, S ^ ^ , ^ - ^ ^ , ™E GAZETTE OP WPIAj EXTRAORDINARY | far II- Sir. 3tjy
(2) Save as oOmwim required for the purpose of any ongoing ftrtvealigBiion. criminal complaint or tegai proceedings, {he intermediary or person ln-ehsfge of computer resources shall destroy record* pertaining to directions for Interception of intemtaScm wfSNn a pariod of two months erf cftsconilnuarKa of the interception or monitoring or decrypted of such information and m doing so they shaft* maintain extreme secrecy, 24, Prohibition *rf interception or monitoring or decryption of Informatton without aiUhoriiaUoil.— {1} Any person wtto iwwvtoriafy or Ftnoftttrigfy, without auttsorisafon unoer rule 3 or rule 4, intercept* or attempt* to intercept, or authorises or assists any alher person to inferce$yl or attempt* So irtbBrcepi any information in the course Of its occurrence or transmission at any place within Iwlfa. Chal be proceeded against sod punished accordingly under the relevant provisions of 1ft© taws for Una time being in taree,
(2) Any Interception, rrwr^fertng or dtxrypicn of htfortimtbn in computer ressoytce by I M employe* of art iitermedi*ry or p*rs©n in-thafge of computer resource or a person «5iu*y jwfltorte*stf by the intefflrtediary, may to* undertafcert in course of his duty reflating to the service* provfcted by that intermediary, if such actfvHies are reasonably necessary for the dschargie hf* duties as per the preTraiirig Indosfry practice*, in connection wih the fof©w4r»g matters, namely--
(l) «ns4alatiori of compote* resource or any equipment to be used with campyier resource; or
(1) operation or rnainfenflrtce of computer resource; or (I) Instalaiion of any communication ink or software either at ih» end of the utterm^ary or subscflber, or instaBatton of user account on the computer resource of iMemiediary and testing of the **»*& for its fancltfenairty;
(iv) accessing stored information from computer resource relating to the feisttiafen, oonnesc&on or maintenance or aquiprnenl. compu!;^- resoyrce or a coinmyi^calion link or code; or
(v) accessing stored icvfofmaikws from computer reso«c« tor the purpose of—
(a) irnplsmerirflirtg iftfctmalioti teourty pracioetB. in the computer resource, (bj determinirig any security breaches, computer conta-rmiant or computet virus;
(c) underiakirtg forensic of the concerned eompMter resource its a part Of irtvetSgaHon or Manual audit; or W aecesjino; or ar»aiysir»B Irffowrattan from a computer resource for the purpose Of tfieino, a compotfir resource or arty person who has contravened, or is suspected of having; contravened or being likely to oootrwene. -^^pf.fin^|Eoo of the Act thai Is likely to hav* an adverse impact on the servicer provided by tine intenrmdlaryT"' {3} The intertiflH&diary or the person m-eharo:e of computer resource and its. employe**' tiiatl maintain sttkA secrecy and coofidantiaRly of tntermabOfi HHM* pedbrnrir»g the actions. specified under Sub* rule (2),
25. Prohibition of d&actosuw of intercepted or monitored or decrypted! tnfoCTnation ~- (i) The contents of intercepted or monitored or stored or decrypted iniwmatfcm shal not ce used or disclosed by Intermediary or any of its employs** or person irMSwge of computer resource to any person other Urt*n the intended recipient of the said information under rule 10.
(23 The contents of intercepted or monitored or decrypted informatmn shell not be used or dtsckjaed by the agency authorised under rule 4 for any other purpose, except tor kwesiigaiion or shtrtr^ with o4her tecuHty agency for the purposs of lnve.3tig«i|io« or in juoMaf proceedings before ihe competftnt court in India <3J Saws as otherwise provided in *ub-rule {2). the oonter^s of irtteroGpted Of rrtOfiitortsd or deorypted informaiio*! shall not ce disciosod or reported In pupfet by any means, without th@ prtor order of the competent court in India
(4) Save as otherwise provided m aub-rtale {Z). strict confidantiaiiy shall be maRMainarJ In respect oi direction for irtlerception, monitoring or decfypBon Issued by concerned competanl authqrtly or Ihe nodal officers I *m n~wm jfi)] «ror mwm ; mmrn . s •|5) Any Wftfmadtafy at Is emptors of pmm Jn-ch»8e «* eewpJter cuacam who ©Mrtraverie* pflwWons of ihm» ruMs ihal 1% ptoceected tgtainst Hid punished a^xotdingiy tmder. the retevani prwistofts of ihe Act fur the time being In force.
£6} SHftmvm a*fced fw by irw ooncnmed security »g»ney «4 Hie Genlm, lh# security agencies al l ie Seate and the Untot tonrtoiy level shall prcwiplftf tluua any iraftoiaieNri wffikh th*y may hawi obtained following dfrectott fer TirtewfJion or rrwmrtorfnf or dBoyptori of any Jfitowna|lo« generated., transmitted. reertwd or aflond in arty computer reiiowee wrater nil* 3, «Mh the security agarscy *l t ie Centre N» m v i SHANKER. Jt Sesy,