Section 3A of IT Act: Electronic signature

Section 3A(1)

Notwithstanding anything contained in section 3, but subject to the provisions of sub-section (2), a subscriber may authenticate any electronic record by such electronic signature or electronic authentication technique which—

(a) is considered reliable; and

(b) may be specified in the Second Schedule.

Section 3A(2)

For the purposes of this section any electronic signature or electronic authentication technique shall be considered reliable if—

(a) the signature creation data or the authentication data are, within the context in which they are used, linked to the signatory or, as the case may be, the authenticator and to no other person;

(b) the signature creation data or the authentication data were, at the time of signing, under the control of the signatory or, as the case may be, the authenticator and of no other person;

(c) any alteration to the electronic signature made after affixing such signature is detectable;

(d) any alteration to the information made after its authentication by electronic signature is detectable; and

(e) it fulfils such other conditions which may be prescribed.

Section 3A(3)

The Central Government may prescribe the procedure for the purpose of ascertaining whether electronic signature is that of the person by whom it is purported to have been affixed or authenticated.

Section 3A(4)

The Central Government may, by notification in the Official Gazette, add to or omit any electronic signature or electronic authentication technique and the procedure for affixing such signature from the Second Schedule:

Provided that no electronic signature or authentication technique shall be specified in the Second Schedule unless such signature or technique is reliable.

Section 3A(5)

Every notification issued under sub-section (4) shall be laid before each House of Parliament.

Explained:

Section 3A(1) – Authentication of Electronic Records

Subsection (1) permits a subscriber to authenticate an electronic record using an electronic signature or an approved electronic authentication technique.

However, two essential requirements must be satisfied.

Clause (a) – Reliability: The electronic signature must meet the prescribed standards of reliability and security.

Clause (b) – Second Schedule: The authentication technique must be specified in the Second Schedule of the Act.

For example, electronic signing services using authorised e-KYC authentication procedures may provide legally recognised authentication when they comply with the applicable statutory requirements.

Merely inserting a scanned handwritten signature into a PDF does not automatically establish compliance with Section 3A.

Section 3A(2) – Conditions for a Reliable Electronic Signature

This subsection establishes five essential safeguards.

Clause (a) – Unique Identification: The authentication data must be linked exclusively to the person signing the document. This helps prevent impersonation.

Clause (b) – Exclusive Control: At the time of signing, the authentication data must remain under the control of the signatory or authenticator alone.

Clause (c) – Detection of Signature Alteration: Any subsequent modification to the electronic signature must be detectable.

Clause (d) – Protection of Document Integrity: Changes made to the authenticated electronic record after signing must be identifiable.

Clause (e) – Additional Requirements: The authentication process must satisfy any other legally prescribed conditions.

Together, these requirements protect the identity of the signatory and the integrity of electronic documents.

Section 3A(3) – Government’s Power to Prescribe Verification Procedures

Subsection (3) empowers the Central Government to prescribe procedures for verifying whether an electronic signature genuinely belongs to the person claiming to have signed the document.

This provision is important in disputes involving forged electronic signatures, unauthorised transactions and questionable digital agreements.

Section 3A(4) – Modification of the Second Schedule

The Central Government may add or remove electronic authentication techniques through notifications published in the Official Gazette.

However, the proviso establishes an important restriction: an authentication technique cannot be included unless it satisfies the reliability requirement.

This enables the legal framework to accommodate technological developments without abandoning essential security safeguards.

Section 3A(5) – Parliamentary Oversight

Every notification issued under subsection (4) must be placed before both Houses of Parliament.

This requirement provides legislative oversight over changes to the approved methods of electronic authentication.

Important Judicial Decisions

1. Gudla Vanaja v. Assistant Commissioner (ST) – 2026

In this significant decision dated 30 September 2026, the Court examined electronic authentication in the context of GST proceedings.

The judgment discussed Sections 3, 3A and 5 of the Information Technology Act, 2000, including the distinction between digital signatures and other legally recognised electronic authentication techniques.

The Court explained that Section 3A establishes requirements such as unique identification, control over authentication data and the ability to detect subsequent alterations.

Legal significance: The decision provides a detailed judicial examination of Section 3A and its relationship with electronic government records. Indian Kanoon+1

2. Trimex International FZE Ltd. v. Vedanta Aluminium Ltd. – 2010

The Supreme Court considered whether commercial communications exchanged electronically could establish a binding agreement.

The Court recognised that a concluded contract could arise through electronic correspondence where the essential contractual requirements were satisfied, even without a subsequently executed formal agreement.

Legal significance: Although this decision does not directly interpret Section 3A, it illustrates judicial recognition of electronic commercial transactions and the importance of establishing authenticity and contractual intention. Science Web API+1

Difference Between Digital Signature and Electronic Signature

A digital signature is a particular form of electronic signature that uses cryptographic technology, including public and private keys.

An electronic signature is a broader legal concept encompassing authentication techniques recognised under the Information Technology Act.

Section 3 primarily governs digital signatures, whereas Section 3A permits additional reliable electronic authentication techniques specified in the Second Schedule.

Section 5 separately provides legal recognition to electronic signatures when the applicable statutory requirements are satisfied.

Importance of Section 3A

Section 3A plays an important role in digital governance, business transactions, electronic documentation and online services.

It supports secure authentication while reducing dependence on physical paperwork. However, the legal validity of a particular transaction also depends on the nature of the document, applicable laws and compliance with prescribed procedures.

The provision does not mean that every electronic signature method is automatically valid for every legal document.

Conclusion

Section 3A of the Information Technology Act, 2000 is an important safeguard for electronic authentication in India. By requiring reliable identification, exclusive control and detection of alterations, it strengthens confidence in electronic records.

The provision also allows the Government to recognise emerging authentication technologies while maintaining statutory oversight.