Section 34 IT Act: Disclosure

Section 34 of Information Technology Act: Disclosure

Official Bare Act Text

Override / Mandate Mens Rea (Intent) Actus Reus (Conduct) Punishment Limitation Monetary

(1) Every Certifying Authority shall disclose in the manner specified by regulations—

(a) its electronic signature Certificate which contains the public key corresponding to the private key used by that Certifying Authority to digitally sign another electronic signature Certificate;

(b) any certification practice statement relevant thereto;

(c) notice of the revocation or suspension of its Certifying Authority certificate, if any; and

(d) any other fact that materially and adversely affects either the reliability of a electronic signature Certificate, which that Authority has issued, or the Authority's ability to perform its services.

Legal Commentary & Landmark Judgments: Section 34

Section 34 imposes extensive public disclosure duties on Certifying Authorities, requiring mandatory publication of their Certification Practice Statement, operational certificates, current revocation lists, and any material circumstance adversely affecting operational integrity.

Publication of Certification Practice Statement: Requires every CA to disclose its detailed operational procedures, key handling rules, and cryptographic algorithms to the public.
Real-Time Certificate Revocation List (CRL): Mandates continuous, accessible publication of all suspended, revoked, or compromised certificates to prevent fraudulent relying party transactions.
Immediate Disclosure of Material Breaches: Obligates the CA to disclose immediately any event, software vulnerability, or security breach that could adversely affect its capability to issue secure certificates.

Key Landmark Precedents:

Reliance Petrochemicals Ltd. v. Proprietors of Indian Express Newspapers (1988) 4 SCC 592: Supreme Court established that the public right to know in regulated commercial spheres is vital for informed public participation and commercial certainty.
Central Board of Secondary Education v. Aditya Bandopadhyay (2011) 8 SCC 497: Supreme Court affirmed that mandatory disclosure frameworks under specialized statutes promote institutional accountability and prevent arbitrary concealment.
Reserve Bank of India v. Jayantilal N. Mistry (2016) 3 SCC 525: Supreme Court emphasized that statutory disclosure obligations cannot be evaded under the guise of commercial confidentiality where public trust is implicated.

Courtroom Practice & Strategic Litigation Guidance:

If your client suffers financial loss due to a fraudulent transaction signed with a compromised certificate that was not promptly published on the CA's Certificate Revocation List, plead Section 34 non-disclosure to establish actionable negligence against the CA.

Section 34: Disclosure

Section 34 of Information Technology Act: Disclosure

Legal Commentary & Landmark Judgments: Section 34