Section 42
Control of private key.
The Information Technology Act, 2000
About this Act
An Act to provide legal recognition for transactions carried out by means of electronic data interchange and other means of electronic communication, commonly referred to as
(1) Every subscriber shall exercise reasonable care to retain control of
the private key corresponding to the public key listed in his Digital Signature Certificate and take all steps
to prevent its disclosure 1
***
(2) If the private key corresponding to the public key listed in the Digital Signature Certificate has been compromised, then, the subscriber shall communicate the same without any delay to the Certifying Authority in such manner as may be specified by the regulations.
Explanation.--For the removal of doubts, it is hereby declared that the subscriber shall be liable till he has informed the Certifying Authority that the private key has been compromised.
(2) If the private key corresponding to the public key listed in the Digital Signature Certificate has been compromised, then, the subscriber shall communicate the same without any delay to the Certifying Authority in such manner as may be specified by the regulations.
Explanation.--For the removal of doubts, it is hereby declared that the subscriber shall be liable till he has informed the Certifying Authority that the private key has been compromised.
Notes
1. The words "to a person not authorised to affix the digital signature of the subscriber" omitted by notification No. S.O.1015(E)
(w.e.f. 19-9-2002).