India's New IT Rules Target AI Content and Deepfakes
India has taken a decisive step to combat the rising tide of AI-generated misinformation and deepfakes. On February 10, 2026, the Ministry of Electronics and Information Technology (MeitY) notified amendments to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. These changes, effective from February 20, 2026, introduce the first formal regulatory framework for synthetically generated information (SGI) in the country. The rules mandate social media platforms to label AI-generated content, embed traceable metadata, and act swiftly on takedown requests. This move aims to empower users to distinguish between real and machine-made content, while holding platforms accountable for the spread of harmful synthetic media.
The amendments define SGI as any audio, visual, or audio-visual content created or altered using a computer resource that appears real and could be mistaken for genuine. Routine editing like color correction, noise reduction, or translation is exempt, as long as it doesn't distort the original meaning. Research papers, training materials, and hypothetical drafts are also excluded. The rules specifically target deceptive content such as deepfake videos, AI-generated voiceovers, and face-swapped images. This clarity ensures that everyday editing isn't overburdened, while focusing on malicious uses that can cause harm.
Key Obligations for Social Media Platforms
Under the new Rule 4(1A), significant social media intermediaries like Instagram, YouTube, and Facebook must implement several measures. Before any upload, they must ask users to declare whether the content is AI-generated. Platforms then need to deploy automated tools to verify these declarations, checking format, source, and nature. If confirmed as synthetic, the content must carry a clear, prominent label. Moreover, platforms must embed persistent metadata and unique identifiers to trace content back to its origin, and they cannot allow these labels to be removed or suppressed. Failure to comply could result in loss of safe harbour protection under Section 79 of the IT Act.
The rules also require platforms to actively block SGI that violates the law, including child sexual abuse material, obscene content, false electronic records, and explosives-related material. Deepfakes that misrepresent real people's identity or voice are also covered. Platforms must warn users at least once every three months about penalties for misusing AI content, in English or any Eighth Schedule language. These obligations aim to deter malicious creation and sharing of synthetic media while promoting transparency.
Verification and Labeling Process
The verification process involves a two-step approach: user declaration and automated cross-checking. Platforms must integrate technical measures to verify declarations, and if content is flagged as synthetic, a visible disclosure tag is applied before publication. This tag must be clear and unambiguous, ensuring users can instantly recognize AI-generated material. The rules also prohibit platforms from enabling removal or tampering with labels. This end-to-end accountability is designed to build trust and reduce the spread of misinformation.
Drastic Reduction in Takedown Timelines
One of the most striking changes is the compression of takedown timelines. Platforms now have just three hours to act on lawful orders from government or court authorities for certain violations, down from 36 hours. Other windows have been slashed: the 15-day window is now seven days, and the 24-hour deadline has been halved to 12. Grievance redressal processes have also been sped up, with complaints requiring acknowledgment within 24 hours. Silence or automated non-response will be treated as a failure of the grievance mechanism. These tighter deadlines reflect the urgency to curb the viral spread of harmful AI content.
Grievance Redressal and User Complaints
Users can expect faster responses to their complaints about AI-generated content. Platforms must acknowledge complaints within 24 hours and resolve them within 15 days, explaining any action taken or lack thereof. If a violation is found, platforms must take corrective steps, including content removal, account suspension, or limiting visibility. Repeat offenders or those causing serious harm may face stricter penalties. This streamlined process aims to provide users with a reliable channel to report deepfakes and other harmful synthetic media.
What the New Rules Mean for Users
For the average social media user, the most visible change will be labels on AI-generated posts, reels, videos, and audio clips. These disclosure tags will appear before users engage with the content, helping them identify what's real and what's machine-made. This empowers users to make informed decisions about liking, sharing, or forwarding content. Additionally, users will be asked to declare whether their uploads are AI-generated, promoting responsible posting. The rules also warn that misuse of AI content can lead to account suspension, content removal, and even legal liability under laws like the Bharatiya Nyaya Sanhita and POCSO Act.
Users can also expect to see periodic warnings from platforms about the consequences of sharing harmful AI content. These warnings will appear at least once every three months, in multiple languages. This educational component aims to foster a culture of accountability and caution. With deepfakes becoming increasingly sophisticated, such measures are crucial to protect individuals from reputational harm and misinformation.
Legal Implications and Penalties
The rules draw a direct line between synthetic content and criminal law. SGI involving child sexual abuse material, obscene content, false electronic records, explosives-related material, or deepfakes that misrepresent a real person's identity or voice now falls under the Bharatiya Nyaya Sanhita, POCSO Act, and Explosive Substances Act. Platforms must report such content to law enforcement and may disclose user identities to victims in some cases. Non-compliance by platforms can result in loss of safe harbour protection, making them directly liable for user content. This legal framework sends a strong deterrent message to potential offenders.
Safe Harbour and Platform Liability
Safe harbour under Section 79 of the IT Act protects intermediaries from liability for user-generated content. However, the new rules stipulate that if a platform knowingly permits, promotes, or fails to act on violating synthetic content, it will be deemed to have failed its due diligence. This could lead to loss of safe harbour, exposing platforms to lawsuits and prosecution. The government has assured that acting against synthetic content won't strip them of protection, but failure to comply will. This balance aims to encourage proactive moderation while holding platforms accountable for negligence.
Industry and Public Response
The new rules have elicited mixed reactions. Privacy advocates and digital rights groups have raised concerns about potential overreach and the impact on free expression. They argue that automated verification tools may lead to false positives and censorship. On the other hand, many welcome the move as a necessary step to combat deepfakes and misinformation that have plagued Indian social media. Platforms are still assessing the operational challenges of implementing these rules within the tight deadlines. The government has assured that it will work with stakeholders to ensure smooth compliance. As the February 20 deadline approaches, all eyes are on how effectively these rules are enforced.
The success of these regulations will depend on robust implementation and continuous adaptation. With AI technology evolving rapidly, the rules may need periodic updates to stay relevant. The government's proactive stance sets a precedent for other nations grappling with similar challenges. Ultimately, the goal is to create a safer, more transparent digital ecosystem where users can trust the content they consume and share.
