Section 3 in The Information Technology (Procedure And Safeguard For Monitoring And Collecting Traffic Data Or Information) Rules, 2009
3. Directions for monitoring
.-(1) No directions for monitoring and collection of traffic data or information under sub-section (3) of section 69-B of the Act shall be issued, except by an order made by the competent authority.(2)The competent authority may issue directions for monitoring for any or all of the following purposes related to cyber security, namely: -(a)forecasting of imminent cyber incidents;(b)monitoring network application with traffic data or information on computer resource;(c)identification and determination of viruses or computer contaminant;(d)tracking cyber security breaches or cyber security incidents;(e)tracking computer resource breaching cyber security or spreading virus or computer contaminants;(f)identifying or tracking of any person who has breached, or is suspected of having breached or being likely to breach cyber security;(g)undertaking forensic of the concerned computer resource as a part of investigation or internal audit of information security practices in the computer resource;(h)accessing a stored information for enforcement of any provisions of the laws relating to cyber security for the time being in force;(i)any other matter relating to cyber security.(3)Any direction issued by the competent authority under sub-rule (2) shall contain reasons for such direction and a copy of such direction shall be forwarded to the Review Committee within a period of seven working days.(4)The direction of the competent authority for monitoring and collection of traffic data or information may include the monitoring and collection of traffic data or information from any person or class of persons or relating to any particular subject whether such traffic data or information, or class oftraffic data or information, are received with one or more computer resources, being a computer resource likely to be used for the generation, transmission, receiving, storing of traffic data or information from or to one particular person or one or many set of premises.
