Section 37 IT Act: Suspension of Digital Signature Certificate

Information Technology Act, 2000

Section 37 IT Act at a Glance

Section 37 IT Act lets the issuing Certifying Authority suspend a Digital Signature Certificate on request by the subscriber or an authorised person, or in public interest. Suspension cannot exceed 15 days unless the subscriber gets an opportunity of being heard.

Section 37 IT Act Bare Act Text

37. Suspension of Digital Signature Certificate.
(1) Subject to the provisions of sub-section (2), the Certifying Authority which has issued a Digital Signature Certificate may suspend such Digital Signature Certificate,—
(a) on receipt of a request to that effect from—
(i) the subscriber listed in the Digital Signature Certificate; or
(ii) any person duly authorised to act on behalf of that subscriber;
(b) if it is of opinion that the Digital Signature Certificate should be suspended in public interest.
(2) A Digital Signature Certificate shall not be suspended for a period exceeding fifteen days unless the subscriber has been given an opportunity of being heard in the matter.
(3) On suspension of a Digital Signature Certificate under this section, the Certifying Authority shall communicate the same to the subscriber.

Section 37 IT Act in Simple Words

Section 37 IT Act governs when and for how long a Digital Signature Certificate can be suspended. Under Section 37(1) IT Act, subject to Section 37(2) IT Act, the Certifying Authority that issued a Digital Signature Certificate may suspend that certificate in two situations. Under Section 37(1)(a) IT Act, the Certifying Authority may suspend the certificate on receiving a request for suspension from either (i) the subscriber listed in the Digital Signature Certificate, or (ii) any person duly authorised to act on behalf of that subscriber. Under Section 37(1)(b) IT Act, the Certifying Authority may also suspend the certificate if it is of the opinion that the Digital Signature Certificate should be suspended in public interest.

Section 37(2) IT Act caps the duration of suspension without a hearing. A Digital Signature Certificate cannot be suspended for more than 15 days unless the subscriber has been given an opportunity of being heard in the matter (that is, a chance to present the subscriber's response before suspension continues beyond 15 days).

Under Section 37(3) IT Act, whenever a Certifying Authority suspends a Digital Signature Certificate under Section 37 IT Act, the Certifying Authority must communicate the suspension to the subscriber. Section 38 IT Act covers revocation of a Digital Signature Certificate.

When Section 37 IT Act Applies

Only the Certifying Authority that issued the Digital Signature Certificate may suspend it under Section 37(1) IT Act.
Suspension may take place on receipt of a request from the listed subscriber or a person duly authorised to act on that subscriber's behalf, or where the Certifying Authority is of the opinion that suspension is needed in public interest.
Under Section 37(2) IT Act, suspension cannot exceed 15 days unless the subscriber has been given an opportunity of being heard in the matter.
Under Section 37(3) IT Act, on suspending a Digital Signature Certificate, the Certifying Authority must communicate the suspension to the subscriber.

Example of Section 37 IT Act

Anil, an exporter in Silchar, suspects that an office computer holding Anil's private key has been misplaced while Anil is travelling. Cyril, who is duly authorised to act on behalf of Anil, sends a request to the Certifying Authority that issued Anil's Digital Signature Certificate asking for its suspension. Under Section 37(1)(a)(ii) and Section 37(3) IT Act, the issuing Certifying Authority may suspend the Digital Signature Certificate on Cyril's request and must communicate the suspension to Anil. Under Section 37(2) IT Act, the suspension cannot continue beyond 15 days unless Anil has been given an opportunity of being heard in the matter.

When Section 37 IT Act Does Not Apply

Under Section 37(2) IT Act, a Digital Signature Certificate cannot be suspended for a period exceeding 15 days unless the subscriber has been given an opportunity of being heard in the matter.

FAQs on Section 37 IT Act

What is Section 37 IT Act?▼

Section 37 IT Act allows the Certifying Authority that issued a Digital Signature Certificate to suspend it on a request from the subscriber or a duly authorised person, or in public interest. It limits suspension without an opportunity of being heard to 15 days and requires the Certifying Authority to communicate the suspension to the subscriber.

How long can a Digital Signature Certificate be suspended without hearing the subscriber under Section 37 IT Act?▼

Up to 15 days. Under Section 37(2) IT Act, a Digital Signature Certificate cannot be suspended for a period exceeding 15 days unless the subscriber has been given an opportunity of being heard in the matter.

Can an authorised representative request suspension of a Digital Signature Certificate under Section 37 IT Act?▼

Yes. Under Section 37(1)(a)(ii) IT Act, the issuing Certifying Authority may suspend a Digital Signature Certificate on receiving a request from any person duly authorised to act on behalf of the subscriber listed in the certificate.

Can a Certifying Authority suspend a Digital Signature Certificate without a request from the subscriber?▼

Yes. Under Section 37(1)(b) IT Act, the issuing Certifying Authority may suspend a Digital Signature Certificate if it is of the opinion that the certificate should be suspended in public interest, subject to Section 37(2) IT Act, which bars suspension beyond 15 days without giving the subscriber an opportunity of being heard.

Must the Certifying Authority inform the subscriber after suspending a Digital Signature Certificate under Section 37 IT Act?▼

Yes. Under Section 37(3) IT Act, on suspension of a Digital Signature Certificate, the Certifying Authority must communicate the suspension to the subscriber.

Have questions about Section 37 IT Act?

Ask NyayGuru about your situation and get an answer based on the Information Technology Act, 2000.

Ask NyayGuru →

Disclaimer: This is for informational purposes only. Always consult a qualified advocate for legal advice.

Sources: Bare Act Text, Information Technology Act, 2000 ·