Section 84 of the IT Act, 2000 protects the Controller (and any person acting on their behalf) from suits or prosecution for actions taken in good faith under the Act. The protection also extends to the Central Government, State Government, Presiding Officer, adjudicating officers, and staff of the Cyber Appellate Tribunal — but not specifically to subscribers or originators.

Section 10 of the IT Act, 2000 empowers the Central Government to prescribe rules regarding electronic signatures, including: (a) type of electronic signature, (b) manner and format of affixing it, (c) procedure for identifying the person affixing it, (d) control processes to ensure integrity, security, and confidentiality, and (e) any other matter necessary to give legal effect to electronic signatures. The word 'electronic signature' was substituted for 'digital signature' by the IT (Amendment) Act, 2009.

Section 85 of the IT Act, 2000 provides that a company officer is not liable to punishment if they prove the contravention occurred without their knowledge or that they took all reasonable steps to prevent it. However, if a director, manager, or officer is responsible through consent, connivance, or gross negligence, they are liable to punishment.

Section 16 of the IT Act, 2000 empowers the Central Government to prescribe security procedures and practices for the purposes of Sections 14 and 15. While prescribing these, the Central Government considers commercial circumstances, nature of transactions, technological sophistication of parties, volume of similar transactions, availability of alternatives, and cost of alternative procedures.