BACK TO IT ACT
IT Act 2000
Section 14
Secure Electronic Record
THE STATUTE
Original Text
Where any security procedure has been applied to an electronic record at a specific point of time, then such record shall be deemed to be a secure electronic record from such point of time to the time of verification.
Simplified
Section 14 defines the concept of a 'secure electronic record' — a status that carries significant legal and evidentiary weight under the IT Act. The provision establishes a simple but powerful rule: if a security procedure (as prescribed under Section 16) has been applied to an electronic record at a specific point in time, that record is legally deemed secure from that moment until the time it is verified. A security procedure applied to an electronic record typically involves a cryptographic hash function — a mathematical process that generates a unique fingerprint of the document's contents. If the document is altered after the hash is generated, the hash will no longer match, proving tampering. More sophisticated procedures may include digital timestamps from a trusted authority. The legal significance of 'secure' status flows from Section 16's prescribed procedures and ultimately from the Indian Evidence Act (now Bharatiya Sakshya Adhiniyam 2023): a secure electronic record benefits from a presumption of integrity. In practical terms: a company's financial records secured under a prescribed procedure, a bank's electronic ledger entries with applied security procedures, or a government's electronically stored official documents may all be admitted in court with reduced evidentiary burden on the party relying on them. Section 14 should be read alongside Section 15 (secure electronic signature), which applies the same framework to signatures rather than the underlying document.
Common Queries
Yes. IT Act Section 14 applies to all electronic records as defined under Section 2(t) of the IT Act 2000, including emails, WhatsApp messages, cloud documents, and digital contracts. A 'secure electronic record' is one processed through a government-notified security procedure such as encryption or hash authentication, giving it heightened evidentiary weight in court.
Yes. IT Act Section 14 applies to all electronic records — as defined under Section 2(t) of the IT Act 2000 — including emails, WhatsApp messages, cloud-stored documents, and digital contracts. A 'secure electronic record' under Section 14 is one that has been processed through a security procedure notified by the Central Government (such as encryption or cryptographic hashing), giving it heightened evidentiary weight in court proceedings compared to an ordinary electronic record.
IT Act Section 14 was retained without substantial change by the Information Technology (Amendment) Act, 2008. The provision continues to be in force and must be read alongside the DPDP Act, 2023 and relevant rules notified under the IT Act. Courts continue to apply this section in disputes involving electronic records and digital transactions.
Legal Evolution
Section 14 was in the original IT Act 2000. The 'secure electronic record' framework was designed to encourage businesses and government to adopt cryptographic security practices in document management. The Indian Evidence Act was simultaneously amended to recognise electronic records generally, with secure electronic records receiving enhanced status.
Key Amendments
Unchanged since the original IT Act 2000.
The Indian Evidence Act 1872 (Section 85B, now Bharatiya Sakshya Adhiniyam 2023) provides the presumption of integrity for secure electronic records.