Information Technology Act Section 72 — Penalty for Breach of confidentiality and privacy
CHAPTER XI OFFENCES
Cyber Law
Summary
This section applies unless another part of this Act or any other current law says something different. It covers a person who, using powers given by this Act or its rules, has gained access to electronic records, books, registers, correspondence, information, documents, or other material. If that person then shares such material with anyone else without the consent of the person concerned, they commit an offence.
The punishment for this offence is imprisonment for up to two years, or a fine of up to one lakh rupees, or both.
Official Text
Save as otherwise provided in this Act or any other law for the time being in force, if any person who, in pursuance of any of the powers conferred under this Act, rules or regulations made thereunder, has secured access to any electronic record, book, register, correspondence, information, document or other material without the consent of the person concerned discloses such electronic record, book, register, correspondence, information, document or other material to any other person shall be punished with imprisonment for a term which may extend to two years, or with fine which may extend to one lakh rupees, or with both.