5 indicating the communication’s origin, destination, route, time, date, size, duration, or type of underlying service. PART II - OFFENCES 3. Unauthorised access to computer data (1) Subject to subsections (2) and (3), any person who causes a computer system to perform a function, knowing that the access he intends to secure is unauthorised, shall commit an offence and shall on conviction be liable to a fine not exceeding 50,000 rupees and to penal servitude not exceeding 5 years. (2) A person shall not be liable under subsection (1) where – (3) (4) (a) he is a person with a right to control the operation or use of the computer system and exercises such right in good faith; (b) he has the express or implied consent of the person, empowered to authorise him, to have such an access; (c) he has reasonable grounds to believe that he had such consent as specified in paragraph (b); (d) he is acting pursuant to measures that can be taken under Part III of this Act; or (e) he is acting in reliance of any statutory power arising under any enactment for the purpose of obtaining information, or of taking possession of, any document or other property. An access by a person to a computer system is unauthorised where the person – (a) is not himself entitled to control access of the kind in question; and (b) does not have consent to access by him of the kind in question from any person who is so entitled. For the purposes of this section, it is immaterial that the unauthorised access is not directed at (a) any particular program or data; (b) a program or data of any kind; or (c) a program or data held in any particular computer system.