The IT Act has legal framework for privacy and security of data in digital format and provides for compensation to the victim in the case of unauthorised access and leakage of sensitive personal information, the government said on Friday.