Section 88

Section 88 provides for the constitution of the Cyber Regulations Advisory Committee (CRAC) — a multi-stakeholder advisory body to guide the Central Government and Controller on IT Act policy and regulatory matters. The Committee must include both official (government) and non-official (industry/civil society) members representing a range of interests: industry and commerce, insurance and banking, export and import, education and research, consumer protection, and law. This broad membership requirement reflects an intent to make IT Act policy-making consultative and multi-stakeholder rather than purely bureaucratic. The Committee advises on two tracks: first, advising the Central Government on rules (the subordinate legislation made under Section 87) and other matters connected with the Act; second, advising the Controller on regulations (made under Section 89). In practice, the Cyber Regulations Advisory Committee has been constituted and has advised on various matters including the development of the IT Rules. The provision is important as the IT Act's primary institutionalised consultation mechanism — ensuring that industry, banks, exporters, researchers, and consumer groups have formal access to the rule-making process. The payment of allowances to non-official members under Section 88(4) ensures that the non-government representation is not limited to those who can afford to participate without compensation.