Subs. by notification No. S.O. 1015(E) (w.e.f. 19-9-2002) . — THE INFORMATION TECHNOLOGY ACT, 2000

2. Subs. by notification No. S.O. 1015(E) (w.e.f. 19-9-2002) . Provided that no licence shall be suspended for a period exceeding ten days unless the Certifying Authority has been given a reasonable opportunity of showing cause against the proposed suspension. (3) No Certifying Authority whose licence has been suspended shall issue any 1 [electronic signature] Certificate during such suspension. 26 . Notice of suspension or revocation of licence . – (1) Where the licence of the Certifying Authority is suspended or revoked, the Controller shall publish notice of such suspension or revocation, as the case may be, in the data base maintained by him. (2) Where one or more repositories are specified, the Controller shall publish notices of such suspension or revocation, as the case may be, in all such repositories: Provided that the data base containing the notice of such suspension or revocation, as the case may be, shall be made available through a web site which shall be accessible round the clock: Provided further that the Controller may, if he considers necessary, publicise the contents of data base in such electronic or other media, as he may consider appropriate. 27 . Power to delegate . – The Controller may, in writing, authorise the Deputy Controller, Assistant Controller or any officer to exercise any of the powers of the Controller under this Chapter. 28 . Power to investigate contraventions . – (1) The Controller or any officer authorised by him in this behalf shall take up for investigation any contravention of the provisions of this Act, rules or regulations made thereunder. (2) The Controller or any officer authorised by him in this behalf shall exercise the like powers which are conferred on Income -tax authorities under Chapter XIII of the Income-tax Act, 1961 (43 of 1961), and shall exercise such powers, subject to such limitations laid down under that Act. 29 . Access to computers and data . – (1) Without prejudice to the provisions of sub-section (1) of section 69, the Controller or any person authorised by him shall, if he has reasonable cause to suspect that 2 [any contravention of the provisions of this Chapter] has been committed, have access to any computer system, any apparatus, data or any other material connected with such system, for the purpose of searching or causing a search to be made for obtaining any information or data contained in or available to such computer system. (2) For the purposes of sub-section (1), the Controller or any person authorised by him may, by order, direct any person in charge of, or otherwise concerned with the operation of, the computer system, data apparatus or material, to provide him with such reasonable technical and other assistance as he may consider necessary. 30. Certifying Authority to follow certain procedures . – Every Certifying Authority shall,– (a) make use of hardware, software and procedures that are secure from intrusion and misuse; (b) provide a reasonable level of reliability in its services which are reasonably suited to the performance of intended functions; (c) adhere to security procedures to ensure that the secrecy and privacy of the 1 [electronic signatures] are assured; 3*** 4 [(ca) be the repository of all electronic signature Certificates issued under this Act; (cb) publish information regarding its practices, electronic signature Certificates and current status of such certificates; and ] (d) observe such other standards as may be specified by regulations. 31 . Certifying Authority to ensure compliance of the Act, etc . – Every Certifying Authority shall ensure that every person employed or otherwise engaged by it complies, in the course of his employment or engagement, with the provisions of this Act, rules, regulations and orders made thereunder. 1. Subs. by Act 10 of 2009, s. 2, for “digital signature” (w.e.f. 27-10-2009). 2. Subs. by s. 14, ibid., for "any contravention of the provisions of this Act, rules and regulations made thereunder" (w.e.f. 27-10-2009). 3. The word "and" omitted by s. 15 , ibid. (w.e.f. 27-10-2009). 4. Ins. by s. 15, ibid. (w.e.f. 27-10-2009).

Section 2