Question

The Information Technology Act, 2000, distinguishes between civil liability and criminal liability in cases of misuse of computer resources. In which of the following situations would such conduct attract criminal punishment rather than mere compensation?

• A. When the damage to computer resources exceeds a prescribed monetary limit
• B. When the act is done dishonestly or fraudulently in addition to unauthorised access
• C. When the affected party chooses to initiate criminal proceedings
• D. When access to a computer system is without permission, irrespective of intent

Hint:

Civil = Compensation (Section 43). Criminal = Intent (Dishonesty/Fraud). If you see "Dishonestly or Fraudulently," it is almost certainly a criminal offence under the IT Act!

Answer 1

The Correct Option is B

Step 1: Understanding the Concept:
The IT Act separates "Contraventions" (handled civilly via adjudication) from "Offences" (handled as crimes). Criminal liability requires an element of intent, such as dishonesty or fraud.

Step 2: Detailed Explanation:
- Mere unauthorized access may often lead to civil liability (compensation under Section 43).
- However, Chapter XI of the Act specifies criminal offences. For example, hacking under Section 66, or identity theft/cheating under Sections 66C and 66D, requires the act to be committed "dishonestly" or "fraudulently."
- Criminal law focuses on the mens rea (guilty mind), whereas civil liability under the IT Act focuses on the fact of damage or unauthorized access.

Step 3: Final Answer:
Dishonest or fraudulent intent elevates the conduct from a civil breach to a criminal offence. Option (B) is correct.

Answer 2

The Information Technology Act, 2000 treats some computer misuse as a civil wrong calling only for compensation, and other misuse as a criminal offence calling for punishment. The question asks what tips conduct from the civil side into the criminal side, and each option needs to be tested against that dividing line.

1. When the damage to computer resources exceeds a prescribed monetary limit: The Act does not draw the civil-criminal line by the size of the monetary damage caused. Section 43 allows compensation regardless of the exact amount of damage.
2. When the act is done dishonestly or fraudulently in addition to unauthorised access: The criminal offences under Chapter XI, such as hacking under Section 66 or identity theft and cheating by personation, require the unauthorised act to be committed dishonestly or fraudulently. This added mental element is exactly what elevates conduct from a mere civil contravention to a criminal offence.
3. When the affected party chooses to initiate criminal proceedings: Whether a matter is criminal in nature is not left to the choice of the affected party. The classification depends on whether the statutory ingredients of a criminal offence, including the requisite intent, are actually made out.
4. When access to a computer system is without permission, irrespective of intent: Unauthorised access on its own, without any accompanying dishonest or fraudulent intent, is squarely what Section 43 addresses as a civil contravention.

Only the presence of dishonest or fraudulent intent, layered on top of unauthorised access, is what the Act treats as converting the conduct into a criminal offence.

Therefore, the correct answer is When the act is done dishonestly or fraudulently in addition to unauthorised access.