Section 70A

Section 70A is the statutory foundation for the National Critical Information Infrastructure Protection Centre (NCIIPC), which was established in 2014 under the National Technical Research Organisation (NTRO) and operates under the Prime Minister's Office. NCIIPC is India's designated national nodal agency under Section 70A and is responsible for all aspects of protecting Critical Information Infrastructure — defined as computer resources whose incapacitation or destruction would have a debilitating impact on national security, economy, public health, or safety. NCIIPC's core functions include: identifying and notifying CII sectors (currently: power and energy, banking and finance, telecom, transport, government, and strategic/public enterprises); issuing sector-specific cybersecurity guidelines; coordinating with sectoral regulators (RBI, SEBI, TRAI, CEA); receiving and analysing threat intelligence; and supporting incident response for CII operators. Section 70A(2) notably gives NCIIPC a research and development mandate in addition to its regulatory role — reflecting the legislature's view that CII protection requires continuous innovation, not just compliance. The 'manner of performing functions' delegation in Section 70A(3) has been exercised through NCIIPC's published guidelines, which are not statutory rules but carry significant regulatory weight as the nodal agency's formal guidance.