Section 11: Attribution of electronic records

Information Technology Act • Official Statutory Text & Practice Guide

Statutory Regulation
Legal Standard
Competent Court / Tribunal
Act 2000

Legal Commentary & Landmark Judgments: Section 11

Section 11 provides the statutory rules for the attribution of electronic records, establishing when an electronic record is deemed to have originated from the sender, whether sent by the originator personally, by an authorized person, or by an automated programmed system.

  • Personal Originator Attribution: Attributes an electronic transmission directly to the originator if generated and transmitted by the originator personally from their account or terminal.
  • Authorized Agent Transmission: Deems the transmission authored by the originator if dispatched by an agent, employee, or representative acting with actual, implied, or ostensible authority.
  • Automated Information System Programming: Attributes legal authorship to the originator where the record was generated automatically by an electronic system programmed to operate autonomously on the originator's behalf.
Key Landmark Precedents:
  • Abdul Rahiman Kunji v. State of Kerala 2016 SCC OnLine Ker 22621: Kerala High Court held that electronic records sent from an account under the exclusive control of the accused carry an immediate statutory attribution under Section 11.
  • State (NCT of Delhi) v. Navjot Sandhu (2005) 11 SCC 600: Supreme Court analyzed attribution of computerized call detail records and SMS dispatches in establishing conspiracy and transmission liability.
  • Sonu v. State of Haryana (2017) 8 SCC 570: Supreme Court affirmed that procedural objections regarding the attribution and dispatch of digital records must be raised during the trial stage rather than in appellate review.
Courtroom Practice & Strategic Litigation Guidance:

To rebut statutory attribution under Section 11, the party must plead and prove unauthorized credential compromise, third-party cyber hacking, or automated system malfunction before the transmission occurred; a bare denial of sending an email is insufficient.