Section 89: Power of Controller to make regulations

Information Technology Act • Official Statutory Text & Practice Guide

Statutory Regulation
Legal Standard
Competent Court / Tribunal
Act 2000

Legal Commentary & Landmark Judgments: Section 89

Section 89 confers regulatory power upon the Controller of Certifying Authorities to make regulations consistent with the Act and rules, with the prior approval of the Central Government, establishing operational standards for Certifying Authorities and public key infrastructure.

  • Controller's Regulatory Autonomy: Empowers the CCA to frame technical regulations governing the day-to-day operations and licensing standards of Certifying Authorities.
  • Mandatory Prior Approval Requirement: Conditions the validity of regulations upon obtaining the prior written approval of the Central Government.
  • Parliamentary Oversight and Tabling: Directs that all regulations framed by the Controller must be laid before Parliament for legislative review, modification, or annulment.
Key Landmark Precedents:
  • PTC India Ltd. v. Central Electricity Regulatory Commission (2010) 4 SCC 603: Constitution Bench held that subordinate regulations framed by specialized statutory regulators have the force of law, provided they remain within the statutory charter.
  • KSEB v. Indian Aluminium Co. (1976) 1 SCC 466: Constitution Bench affirmed that statutory regulations framed with executive approval carry full legal efficacy across the regulated industry.
  • St. Johns Teachers Training Institute v. Regional Director, NCTE (2003) 3 SCC 321: Supreme Court expounded on the distinction between administrative guidelines and binding statutory regulations framed pursuant to statutory rulemaking powers.
Courtroom Practice & Strategic Litigation Guidance:

When advising Certifying Authorities on cryptographic compliance, treat CCA regulations framed under Section 89 as binding statutory law; non-compliance provides immediate legal grounds for license suspension under Section 25.