(1) The appropriate Government may, by notification in the Official Gazette, declare any computer resource which directly or indirectly affects the facility of Critical Information Infrastructure, to be a protected system.
Explanation: For the purposes of this section, “Critical Information Infrastructure” means the computer resource, the incapacitation or destruction of which , shall have debilitating impact on national security, economy, public health or safety.
(2) The appropriate Government may, by order in writing, authorise the persons who are authorised to access protected systems notified under sub-section (1)
(3) Any person who secures access or attempts to secure access to a protected system in contravention of the provisions of this section shall be punished with imprisonment of either description for a term which may extend to ten years and shall also be liable to fine.
(4) The Central Government shall prescribe the information security practices and procedures for such protected system.
MINISTRY OF COMMUNICATIONS AND INFORMATION TECHNOLOGY
(Department of Electronic and Information Technology)
(UNIQUE IDENTIFICATION AUTHORITY OF INDIA)
NOTIFICATION
New Delhi, the 11th December, 2015
G.S.R. 993(E).— In exercise of the powers conferred by sub-section (1) of Section 70 of the Information Technology Act, 2000 (21 of 2000), the Central Government hereby declares the UIDAI’s Central Identities Data Repository (CIDR) facilities, Information Assets, Logistics Infrastructure and Dependencies Installed at UIDAI (Unique Identification Authority of India) locations to be Protected System for the Purpose of Information Technology Act 2000.
Authorised personnel as per Sub-section (2) of Section 70 of IT Act 2000 (amended 2008) having role based access to UIDAI-CIDR facility are:
1. Designated UIDAI officers & Support Staff.
2. UIDAI authorised team members of contracted Managed Service Provider (MSP).
3. Other authorised third party Vendors and its partners.
4. UIDAI authorised business partners.
source: http://meity.gov.in/sites/upload_files/dit/files/UIDAI%20CII%20notification%20Dec15.pdf
Firos V State of Kerala (2006):
http://www.itlaw.in/firos-vs-state-of-kerala-2006/