Information Technology Act, 2000 · Chapter VIII: Duties of Subscribers
Section 42: Control of private key
(1) Every subscriber shall exercise reasonable care to retain control of the private key corresponding to the public key listed in his Digital Signature Certificate and take all steps to prevent its disclosure 1 ***
(2) If the private key corresponding to the public key listed in the Digital Signature Certificate has been compromised, then, the subscriber shall communicate the same without any delay to the Certifying Authority in such manner as may be specified by the regulations.
Explanation.—For the removal of doubts, it is hereby declared that the subscriber shall be liable till he has informed the Certifying Authority that the private key has been compromised.
Source: India Code (indiacode.gov.in), the consolidated text published by the Legislative Department, Government of India. Text as updated on India Code on 14 October 2026. Words in square brackets [ ] were inserted or substituted by later amending Acts, and *** marks words omitted by an amendment. The amendment footnotes are not reproduced here. Official text on India Code.
Supreme Court judgments citing the section 42
No Supreme Court judgment in our database cites this section yet.