Section 24(2) in The Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Rules, 2009
(2)Any interception, monitoring or decryption of information in computer resource by the employee of an intermediary or person in-charge of computer resource or a person duly authorised by the intermediary, may be undertaken in course of his duty relating to the services provided by that intermediary, if such activities are reasonably necessary for the discharge his duties as per the prevailing industry practices, in connection with the following matters, namely:(i) installation of computer resource or any equipment to be used with computer resource; or(ii)operation or maintenance of computer resource; or(iii)installation of any communication link or software either at the end of the intermediary or subscriber, or installation of user account on the computer resource of intermediary and testing of the same for its functionality;(iv)accessing stored information from computer resource relating to the installation, connection or maintenance of equipment, computer resource or a communication link or code; or(v)accessing stored information from computer resource for the purpose of(a) implementing information security practices in the computer resource;(b)determining any security breaches, computer contaminant or computer virus;(c)undertaking forensic of the concerned computer resource as a part of investigation or internal audit; or (vi) accessing or analysing information from a computer resource for the purpose of tracing a computer resource or any person who has contravened, or is suspected of having contravened or being likely to contravene, any provision of the Act that is likely to have an adverse impact on the services provided by the intermediary.
