(1) The Controller or any officer authorised by him in this behalf may, by order, direct any Certifying Authority or any employee of such Authority to take such measures or cease carrying on such activities as specified in the order if those are necessary to ensure compliance with the provisions of this Act, rules or any regulations made thereunder.
(2) Any person who fails to comply with any order made under sub-section (1) shall be guilty of an offence and shall be liable on conviction to imprisonment for a term not exceeding three years or to a fine not exceeding two lakh rupees or to both.
Legal Commentary & Landmark Judgments: Section 28
Section 28 equips the Controller and authorized officers with extensive powers of investigation to uncover contraventions of the Act, rules, or regulations, vesting them with the powers of a Civil Court in respect of discovery, inspection, and witness summoning.
Respondents summoned under Section 28 must provide verified documentary records but may claim legal privilege or raise trade secret protections over proprietary cryptographic algorithms not required for regulatory compliance.