BACK TO IT ACT
IT Act 2000AMENDED 2008

Section 15

Secure Electronic Signature

THE STATUTE

Original Text

An electronic signature shall be deemed to be a secure electronic signature if— (i) the signature creation data, at the time of affixing signature, was within the exclusive control of signatory and no other person; and (ii) the signature creation data was stored and affixed in such exclusive manner as may be prescribed.

Simplified

Section 15 defines the conditions under which an electronic signature qualifies as a 'secure electronic signature' — a status with heightened evidentiary value under Indian law. Two conditions must be satisfied simultaneously. First, at the time of affixing the signature, the signature creation data (the private key or equivalent cryptographic material) must have been within the exclusive control of the signatory and no other person. This condition focuses on key custody: if a private key was shared, compromised, or accessible to others at the time of signing, the signature cannot be deemed 'secure' under this provision. This is why subscriber duties under Section 40A (private key protection) are legally significant — failure to protect the private key breaks the Section 15 security conditions. Second, the signature creation data must have been stored and affixed in the prescribed exclusive manner — meaning the technical implementation must comply with the security procedures and standards prescribed under Section 16. A Digital Signature Certificate-based signature (using the DSC system under Chapter VI) that is properly managed will typically satisfy both conditions and will qualify as a secure electronic signature. The legal benefit: the Indian Evidence Act / Bharatiya Sakshya Adhiniyam presumptions for secure electronic signatures mean a court will presume the signatory affixed the signature and that the signed record was not altered — a powerful evidentiary advantage in disputes over electronic contracts and documents.

Legal Evolution

The section was amended in 2008 to substitute 'electronic signature' for 'digital signature' — aligning with India's technology-neutral approach to electronic authentication after the 2008 Amendment broadened the IT Act's signature framework beyond asymmetric cryptography alone.

Key Amendments

Amended by IT (Amendment) Act 2008: 'digital signature' replaced by 'electronic signature' throughout, reflecting technology neutrality.

Connects to Section 3A (electronic signatures generally) introduced by the 2008 Amendment.