Cyber Appellate Tribunal — Composition and Procedure (Sections 48–64)

Chapter X of the Information Technology Act, 2000 builds a self-contained appellate machinery for the civil wing of cyber law. Sections 48 to 64 establish the Cyber Appellate Tribunal, prescribe who sits on it and how they are chosen, fix the procedure it follows, oust the ordinary civil courts, and channel further challenge to the High Court. For the judiciary and CLAT-PG aspirant the chapter is deceptively examinable: it interlocks with the constitutional law of tribunals, with the adjudication machinery of Sections 43 and 46, and with a turbulent administrative history in which the Tribunal was renamed, restructured, allowed to lie vacant for years, and finally merged into the TDSAT. This article walks the provisions section by section, grounds each in the bare text, and ties the dry skeleton to the leading case law on tribunal independence and judicial review.

The scheme of Chapter X and where the Tribunal fits

The IT Act runs two parallel enforcement tracks. The criminal track lives in Chapter XI (Sections 65 onwards) and is tried by ordinary criminal courts. The civil-penalty track lives in Chapter IX: an adjudicating officer appointed under Section 46 (an officer not below the rank of Director to the Government of India) inquires into contraventions of Sections 43, 43A, 44 and 45 and awards penalty or compensation. Chapter X then supplies the appellate roof over that civil track. The Cyber Appellate Tribunal hears appeals from the adjudicating officer and from the Controller of Certifying Authorities, and its own orders travel onward to the High Court under Section 62.

Understanding this division matters because the Tribunal has no role in the offences chapter. When the Supreme Court struck down Section 66A in Shreya Singhal v. Union of India (AIR 2015 SC 1523) it was dealing with the criminal speech provision, not the civil adjudication track that the Tribunal supervises. The Tribunal's universe is compensation, penalty, digital-signature certification disputes and the like — the matters discussed in digital and electronic signatures and the certification regime that surrounds them. A clean grasp of this two-track design prevents the common examination error of treating the Tribunal as a forum for cyber offences. Penalty under Section 43, compensation for failure to protect sensitive personal data under Section 43A, and the residuary penalty under Section 45 all flow to the adjudicating officer first and to the Tribunal on appeal; theft of identity, cheating by personation and the other Chapter XI offences flow to the Magistrate. Chapter X presides only over the former.

Section 48 — Establishment of the Cyber Appellate Tribunal

Section 48(1) empowers the Central Government, by notification, to establish one or more appellate tribunals to be known as the Cyber Appellate Tribunal. Section 48(2) requires the same notification to specify the matters and places in relation to which the Tribunal may exercise jurisdiction. As originally enacted in 2000 the body was christened the Cyber Regulations Appellate Tribunal. The Information Technology (Amendment) Act, 2008 (in force from 27 October 2009) re-styled it simply the Cyber Appellate Tribunal, the name now found in the section heading.

The first and only Tribunal was notified and began functioning in October 2006 at New Delhi. Its appellate character is structural: it is not a court of first instance and cannot originate proceedings. It only reviews the decisions of designated functionaries below it, which is why its jurisdiction is described as derivative and supervisory rather than original.

Section 49 — Composition and the move from single member to bench

The 2008 amendment effected the single most important structural change in the chapter. As originally framed, the Tribunal consisted of one person only, designated the Presiding Officer. The substituted Section 49 reconstituted it as a collegiate body: the Tribunal now consists of a Chairperson and such number of other Members as the Central Government may appoint by notification. Section 49 further provides that the jurisdiction, powers and authority of the Tribunal are exercisable by Benches, that a Bench may be constituted by the Chairperson with one or two Members as the Chairperson deems fit, and that the Chairperson may transfer Members from one Bench to another.

Critically, the selection of the Chairperson and Members is made by the Central Government in consultation with the Chief Justice of India. That consultation requirement is the textual hook for everything the constitutional courts have said about keeping the executive's grip off tribunal appointments — a theme that runs through Union of India v. R. Gandhi and the Madras Bar Association line discussed below. The move from a one-person body to a CJI-consulted bench was meant to lend the forum the dignity and independence of a court.

Section 50 — Qualifications for Chairperson and Members

Section 50, as substituted in 2008, sets three eligibility templates. A person is qualified to be Chairperson only if he is, has been, or is qualified to be a Judge of a High Court — the same judicial-calibre threshold the Supreme Court has repeatedly insisted upon for the head of any tribunal exercising judicial power. The Judicial Member is drawn from persons who are or have been members of the Indian Legal Service holding the post of Additional Secretary for at least one year, or a Grade I post in that Service for at least five years. The remaining Members are appointed from persons possessing special knowledge of, and professional experience in, information technology, telecommunication, industry, management or consumer affairs.

This tripartite design — a judicial head, a judicial member and technical/administrative members — reflects the hybrid nature of cyber disputes, which braid hard legal questions about evidence and liability with technical questions about networks, certification and security. The judicial-member requirement is not cosmetic; it is the device by which the legislature attempts to satisfy the constitutional demand that a tribunal substituting for a court contain a sufficient judicial element.

Sections 51 and 52 — Term of office and conditions of service

Section 51 fixes the term of office of the Chairperson and Members at five years from the date of entering office, or until the incumbent attains the age of sixty-five years, whichever is earlier. Section 52 secures the salary, allowances and other conditions of service as may be prescribed by rules, with the familiar protective proviso that these conditions shall not be varied to the holder's disadvantage after appointment — a guarantee of security of tenure modelled on the protection enjoyed by superior judges.

The amendment also inserted Sections 52A to 52D, dealing with the powers of the Chairperson, distribution of business among Benches, the procedure where Members of a Bench differ, and the decision by majority. Together with Section 53 (filling of vacancies), Section 54 (resignation and removal) and Section 55 (orders not to be invalid merely on the ground of a vacancy or defect in constitution), these provisions complete the institutional architecture. The tenure and service guarantees are not mere housekeeping: in Rojer Mathew v. South Indian Bank Ltd. ((2020) 6 SCC 1) the Supreme Court treated short tenures and executive-controlled service conditions as direct threats to the independence that Article 50 and the basic-structure doctrine require.

Section 57 — Appeal to the Cyber Appellate Tribunal

Section 57 is the gateway provision. Any person aggrieved by an order of the Controller or of an adjudicating officer may appeal to the Cyber Appellate Tribunal having jurisdiction. The proviso carves out an important exception: no appeal lies from an order made by an adjudicating officer with the consent of the parties. A consent order is, in effect, a settlement the appellant cannot resile from.

The time limit is supplied by Section 57(3): the appeal must be filed within forty-five days from the date the order is received, with a discretionary power in the Tribunal to entertain a late appeal if satisfied that there was sufficient cause for the delay. Section 57(4) directs the Tribunal to give the parties an opportunity of being heard before passing orders, and Section 57(5) enjoins the Tribunal to endeavour to dispose of the appeal finally within six months of receipt. The leading factual illustration of the appellate track is the first Indian phishing adjudication, S. Umashankar v. ICICI Bank, where the Tamil Nadu adjudicating officer held the bank liable under Section 43 for a phishing-induced fraudulent transfer; the bank's challenge travelled up the very ladder Section 57 creates, and was ultimately rejected by the appellate forum (by then the TDSAT) in 2019.

Section 58 — Procedure and powers of the Tribunal

Section 58(1) frees the Tribunal from the rigours of the Code of Civil Procedure, 1908: it is not bound by the CPC but is guided by the principles of natural justice, and subject to the other provisions of the Act it has power to regulate its own procedure, including the place of its sittings. This procedural autonomy is standard tribunal design and is precisely what distinguishes a tribunal from an ordinary civil court.

Section 58(2) then arms the Tribunal with the trial powers of a civil court under the CPC for specified purposes — summoning and enforcing the attendance of persons and examining them on oath; requiring the discovery and production of documents or electronic records; receiving evidence on affidavit; issuing commissions for examination of witnesses or documents; reviewing its decisions; dismissing an application for default or deciding it ex parte; and any other prescribed matter. Section 58(3) deems every proceeding before the Tribunal to be a judicial proceeding within the meaning of Sections 193 and 228 and for the purposes of Section 196 of the Indian Penal Code, and deems the Tribunal to be a civil court for the purposes of Section 195 and Chapter XXVI of the Code of Criminal Procedure, 1973. The combined effect is a body that runs on natural justice yet wields coercive evidentiary powers and the protection of a court against perjury and contempt — the deeming fictions doing the heavy lifting that flexible procedure alone could not.

Sections 59 and 60 — Legal representation and limitation

Section 59 confers the right of legal representation: the appellant may either appear in person or authorise one or more legal practitioners or any of its officers to present the case before the Tribunal. This mirrors the open-court principle and ensures that a lay appellant, often an individual consumer pitted against a bank or a certifying authority, is not disadvantaged for want of counsel.

Section 60 attracts the Limitation Act, 1963 to appeals before the Tribunal, so that the computation of limitation, the exclusion of time and the principles of sufficient cause developed under that Act apply to the forty-five-day window in Section 57. The pairing is deliberate: Section 59 keeps the door of access open, while Section 60 disciplines that access with the ordinary law of limitation rather than leaving timeliness to the Tribunal's unguided discretion.

Section 61 — Civil court not to have jurisdiction

Section 61 is the ouster clause. No court shall have jurisdiction to entertain any suit or proceeding in respect of any matter which an adjudicating officer or the Appellate Tribunal is empowered under the Act to determine, and no injunction shall be granted by any court or other authority in respect of any action taken or to be taken in pursuance of any power conferred by or under the Act. The provision is the corollary of the specialised adjudication scheme: having created a dedicated forum, the Act forecloses parallel civil litigation over the same subject-matter.

But the bar is not as absolute as its language suggests. In L. Chandra Kumar v. Union of India (AIR 1997 SC 1125) a seven-judge Bench held that the power of judicial review vested in the High Courts under Articles 226 and 227 and in the Supreme Court under Article 32 is part of the basic structure of the Constitution and cannot be ousted by any statute. Tribunals, the Court held, perform a supplemental rather than a substitutional role; their decisions remain subject to scrutiny by a Division Bench of the High Court within whose territorial jurisdiction the tribunal sits. Section 61 therefore bars the ordinary civil suit but cannot, and does not, exclude constitutional judicial review.

Section 62 — Appeal to the High Court

Section 62 supplies the statutory exit from the Tribunal. Any person aggrieved by a decision or order of the Cyber Appellate Tribunal may appeal to the High Court within sixty days from the date of communication of the order, on any question of fact or law arising out of the order. Two features stand out. First, the appeal lies on both fact and law — wider than the typical statutory appeal confined to questions of law alone. Second, the proviso permits the High Court to condone delay and admit an appeal within a further period not exceeding sixty days where it is satisfied that the appellant was prevented by sufficient cause from filing in time.

Read with L. Chandra Kumar, Section 62 dovetails neatly with the constitutional position: the High Court is the designated appellate and supervisory authority over the Tribunal, and litigants cannot leapfrog directly to the Supreme Court. The statutory appeal on fact and law thus operates alongside, and largely subsumes, the constitutional remedy of judicial review for routine challenges.

Sections 63 and 64 — Compounding and recovery

Section 63 permits the compounding of contraventions either before or after institution of adjudication proceedings, on payment of a sum not exceeding the maximum penalty prescribed for the contravention. The power is hedged: it cannot be exercised where the same or substantially the same contravention has been committed within three years of a previous compounding, and once a contravention is compounded no further proceeding may be taken against the offender in respect of that contravention. Compounding is thus a one-off concession to first-time and bona fide contraveners, not a recurring escape route.

Section 64 deals with recovery. A penalty imposed or compensation awarded under the Act which is not paid is recoverable as an arrear of land revenue, and the licence or Electronic Signature Certificate concerned may be suspended until the penalty is paid. Casting the dues as land-revenue arrears imports the summary and effective state machinery for revenue recovery, ensuring that the Tribunal's and adjudicating officer's orders are not paper victories. The suspension of the offending licence or Electronic Signature Certificate adds a coercive lever distinct from monetary recovery, particularly potent against certifying authorities and other licensed intermediaries whose business depends on the certificate remaining valid. These provisions on penalty and recovery sit close to the substantive liabilities discussed under secure electronic records and signatures, where the certification obligations whose breach attracts penalty are spelt out. Read together, Sections 63 and 64 balance a measured leniency for the genuine first-time contravener against a hard-edged recovery mechanism for the recalcitrant defaulter.

The constitutional law of tribunals around Sections 48-64

The composition and service provisions of Chapter X cannot be read in isolation from the Supreme Court's tribunalisation jurisprudence, which is heavily examinable. The foundational principle is that where a tribunal substitutes for a court, its members must enjoy the independence, calibre and security of tenure comparable to the judges it replaces. In Rojer Mathew v. South Indian Bank Ltd. ((2020) 6 SCC 1) the Court struck down the Tribunal, Appellate Tribunal and Other Authorities (Qualifications, Experience and Other Conditions of Service of Members) Rules, 2017 framed under Section 184 of the Finance Act, 2017 as destructive of judicial independence, holding that executive-dominated selection committees and truncated tenures undermined the separation of powers.

That theme recurred in Madras Bar Association v. Union of India (2021), where the Court read down or struck provisions of the Tribunals Reforms framework that imposed a minimum appointment age of fifty and a four-year tenure, reaffirming the parity standard traced through Union of India v. R. Gandhi (2010) and the earlier Madras Bar Association decisions. Although these cases did not arise under the IT Act directly, they govern the validity of the appointment and service rules that breathe life into Sections 49 to 52, and any exam answer on the Cyber Appellate Tribunal's composition is incomplete without them. The contrast with the criminal side — and with the constitutional invalidation in Shreya Singhal — usefully reminds the student that Chapter X is a civil-administrative edifice tested against Articles 14 and 50, not against the free-speech guarantee of Article 19(1)(a).

The vacancy crisis and merger into the TDSAT

For all its careful drafting, the Tribunal's working history is cautionary. After its acting Chairperson demitted office in mid-2011, the office of Chairperson lay vacant for years. Because Section 49 vests the adjudicatory power in the Chairperson and Benches constituted by the Chairperson, the prolonged vacancy left pending appeals frozen — a vivid demonstration of how a single unfilled judicial office can paralyse an entire statutory forum and of why security of tenure and prompt filling of vacancies under Section 53 are not mere formalities.

The legislature's eventual answer was consolidation rather than revival. The Finance Act, 2017, as part of a broad rationalisation of tribunals, merged the Cyber Appellate Tribunal into the Telecom Disputes Settlement and Appellate Tribunal (TDSAT) constituted under the TRAI Act, 1997, with effect from 26 May 2017. Since the merger, appeals that Sections 57 to 62 would have routed to the Cyber Appellate Tribunal are heard by the TDSAT exercising the transferred cyber jurisdiction — which is why the 2019 appellate disposal of the ICICI Bank/Umashankar phishing matter was rendered by the TDSAT. For exam purposes the student should state the position precisely: Sections 48-64 remain on the statute book and define the powers and procedure, but the institutional forum exercising them is now the TDSAT. The wider statutory architecture is best revised alongside the introduction to the Act and its definitions, which fix the meaning of the adjudicatory and certification concepts the Tribunal applies.