The Ministry of Finance has officially declared the ICEGATE and ACES-GST platforms, crucial for customs and GST administration, as 'Protected Systems' under the Information Technology Act, 2000. This designation, effective immediately, restricts access to authorised personnel only, bolstering cybersecurity and data protection for sensitive trade and tax information. The move aims to safeguard these critical digital infrastructures against cyber threats and unauthorised access.
The Ministry of Finance, Department of Revenue, has officially declared key digital platforms of the Central Board of Indirect Taxes and Customs (CBIC) as 'Protected Systems' under the Information Technology Act, 2000.
The declaration was made through Notification S.O. 9(E) issued on January 2, 2026, in exercise of the powers conferred under Section 70 of the IT Act, 2000.
Platforms Declared as Critical Information Infrastructure
As per the notification, the following computer resources and t
Daily Limit Reached
You have reached your daily limit of 2 Free News
Subscribe to
CCI PRO
for unlimited access
Why Upgrade to
CCI PRO?
-
No Ads
-
WhatsApp Community
-
Daily E-Newsletter
-
Unlimited News Access
-
Profile Visitors
-
Link Social Profiles
-
Featured Job Posts
-
Pro Badge
-
Expert GST Guidance
-
Unlimited Forum Replies
-
Download Content in PDF
1 Year PLAN - Rs.1999
1799
(Excl. of GST ₹323)
2 Years PLAN - Rs.3499
3149
(Excl. of GST ₹566)
BEST VALUE
3 Years PLAN - Rs.4999
4499
(Excl. of GST ₹809)
View all CCI PRO benefits
Already a PRO member?
Login here
for an ad-free experience. 07941056694
FAQ :
The Indian Customs Electronic Data Interchange Gateway (ICEGATE) Portal, the Express Cargo Clearance System (ECCS), and the Automation of Central Excise and Service Tax (ACES-GST) Portal, along with their associated dependencies, have been declared 'Protected Systems'.
These systems were declared 'Protected Systems' under Section 70 of the Information Technology Act, 2000.
Access is restricted to designated CBIC employees, authorised third-party vendors, consultants, regulators, government officials, and auditors, all of whom require specific written authorisation.
The purpose is to strengthen cybersecurity and data protection for critical digital infrastructure that handles sensitive trade and tax data, safeguarding against cyber threats and unauthorised access.
The declaration came into force immediately upon its publication in the Official Gazette on January 2, 2026.