Question

Sec 43A Of the Information Technology Act deals with

• A. Compensation for failure to protect data
• B. Punishment for sending offensive messages
• C. Identity Theft
• D. Impersonation

Hint:

For the IT Act, create a quick reference list of important sections and their subject matter, especially for cybercrimes and data protection: Sec 43 (Damage to computer system), Sec 43A (Compensation for data breach), Sec 66 (Hacking), Sec 66C (Identity Theft), Sec 66D (Cheating by impersonation), Sec 67 (Obscenity).

Answer 1

The Correct Option is A

Step 1: Understanding the Concept:
The question asks for the subject matter of Section 43A of the Information Technology Act, 2000. This section is a crucial part of India's data protection framework.
Step 2: Key Formula or Approach:
The heading of Section 43A of the IT Act is "Compensation for failure to protect data."
The section states that where a body corporate, possessing, dealing or handling any sensitive personal data or information in a computer resource which it owns, controls or operates, is negligent in implementing and maintaining reasonable security practices and procedures and thereby causes wrongful loss or wrongful gain to any person, such body corporate shall be liable to pay damages by way of compensation to the person so affected.
Step 3: Detailed Explanation:
- Option (A) directly corresponds to the title and content of Section 43A. It establishes civil liability for corporations that fail to secure sensitive personal data.
- Punishment for sending offensive messages is dealt with under Section 66A (which was struck down by the Supreme Court) and other related sections.
- Identity Theft is punishable under Section 66C.
- Impersonation is punishable under Section 66D.
Step 4: Final Answer:
Sec 43A of the Information Technology Act deals with Compensation for failure to protect data.

Answer 2

The question asks which subject Section 43A of the Information Technology Act, 2000 covers. Let's check what each of the four listed subjects is actually about and which section deals with it.

1. Compensation for failure to protect data: This is the actual subject of Section 43A. It fixes civil liability on a body corporate that handles sensitive personal data carelessly, if that carelessness causes wrongful loss or gain to someone, the affected person can claim compensation from that body corporate.
2. Punishment for sending offensive messages: This subject was dealt with under a different provision, Section 66A, which criminalised sending offensive messages through communication services. It has no connection to data protection by corporates and is numbered separately from 43A.
3. Identity Theft: This is covered under Section 66C, which penalises fraudulently or dishonestly using another person's unique identification features like a password or signature. This is a criminal provision, distinct from the civil compensation scheme in 43A.
4. Impersonation: This is addressed under Section 66D, which punishes cheating by personation using a computer resource. Again, this is a separate criminal offence, not the subject matter of Section 43A.

Since only the data-protection compensation subject actually corresponds to Section 43A, while the other three subjects belong to entirely different sections of the Act, the match is clear.

Therefore, the correct answer is Compensation for failure to protect data.