India to crack down on deepfakes, obscene content; intermediaries face liability under IT Rules
Synopsis
India's February 2026 amendment to IT Rules now compels social media platforms to actively block deepfakes and AI-generated harmful content — or lose the legal shield that protects them from third-party liability. With ₹132.93 crore deployed for state-level cyber forensics and over 24,600 officials trained, the government is building both regulatory teeth and enforcement muscle simultaneously.
Key Takeaways
Minister of State Dr L.
Murugan confirmed in the Lok Sabha that intermediaries failing IT Rules obligations lose protection under Section 79 of the IT Act and face prosecution.
IT Rules were amended on 10 February 2026 to specifically target deepfakes and AI-generated content including obscene, misleading, and child-harmful material.
Platforms must now report relevant offences under the Bharatiya Nagarik Suraksha Sanhita, 2023 and POCSO Act, 2012 to authorities.
The National Cyber Crime Reporting Portal (NCRP) allows anonymous reporting of crimes against women and children.
The Centre has disbursed ₹132.93 crore under the CCPWC Scheme to states and UTs for cyber forensic labs and training.
Cyber forensic labs are now operational in 33 States/UTs ; more than 24,600 officials have been trained.
The Indian government on Wednesday, 5 August reaffirmed its commitment to keeping the internet free of unlawful content, with a particular focus on obscene material, deepfakes, and AI-generated harmful content proliferating across social media platforms. The assurance came from Minister of State for Information and Broadcasting and Parliamentary Affairs, Dr L. Murugan, in a written reply to a question raised by Prabhakar Reddy Vemireddy in the Lok Sabha.
Legal Framework and Intermediary Liability
According to Dr Murugan, the Information Technology Act, 2000 (IT Act) and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (IT Rules) together form a comprehensive regulatory framework governing unlawful digital content. Intermediaries that fail to comply with their obligations under these rules lose the liability shield granted under Section 79 of the IT Act and become subject to prosecution under applicable laws.
This is a significant deterrent: the safe harbour provision under Section 79 is what protects platforms such as social media companies from being held responsible for third-party content. Losing it exposes them to direct legal action.
Deepfake and AI Content Rules Tightened in 2026
On 10 February 2026, the government amended the IT Rules to specifically address harms arising from synthetically generated information (SGI), including deepfakes and other AI-generated content. Under the revised rules, intermediaries and large social media platforms are now required to deploy reasonable technical measures to prevent the creation and spread of unlawful AI-generated content — covering material that is obscene, misleading, impersonates individuals, or is harmful to children.
Platforms are also mandated to report relevant offences to appropriate authorities under laws such as the Bharatiya Nagarik Suraksha Sanhita, 2023 and the Protection of Children from Sexual Offences (POCSO) Act, 2012, the minister noted. This reporting obligation adds a proactive compliance layer beyond mere content removal.
National Cyber Crime Reporting Portal
The National Cyber Crime Reporting Portal (NCRP), launched under the Indian Cyber Crime Coordination Centre (I4C), enables citizens to report all categories of cybercrime. Notably, the portal includes an anonymous reporting option under the 'Report Women/Child Related Crime' module, allowing complainants to file complaints without disclosing their personal identity — a provision designed to lower barriers for victims of online abuse.
Capacity Building and State-Level Rollout
The Centre has released ₹132.93 crore under the Cyber Crime Prevention against Women and Children (CCPWC) Scheme to states and Union Territories for capacity building. This includes setting up cyber forensic-cum-training laboratories, hiring junior cyber consultants, and training law enforcement personnel.
So far, cyber forensic-cum-training laboratories have been commissioned in 33 States and UTs, and more than 24,600 law enforcement personnel, judicial officers, and prosecutors have received training in cybercrime awareness, investigation, and forensics.
With deepfake technology growing increasingly accessible, the government's enforcement posture will be tested by how swiftly platforms implement the mandated technical measures — and whether the amended rules translate into verifiable compliance on the ground.
Point of View
Yet the rules do not define what those measures must be, leaving platforms room to interpret compliance minimally. The withdrawal of Section 79 safe harbour is a genuine threat, but Indian regulators have historically been slow to invoke it against large global platforms. The real test is whether the Ministry of Electronics and Information Technology (MeitY) will pursue consequential action against a major platform — or whether this remains a deterrence framework that deters only smaller actors.
NationPress
6 Aug 2026
Frequently Asked Questions
What happens to social media platforms that fail to comply with India's IT Rules on deepfakes?
Platforms that fail to meet their obligations under the IT Rules, 2021 lose the liability protection granted under Section 79 of the IT Act and become subject to prosecution under applicable Indian laws. This safe harbour loss is the primary legal consequence for non-compliant intermediaries.
What did the February 2026 amendment to IT Rules change?
The amendment, notified on 10 February 2026, introduced specific obligations for intermediaries to deploy technical measures against synthetically generated information (SGI), including deepfakes and AI-generated content that is obscene, misleading, impersonates individuals, or harms children. Platforms must also report related offences to authorities under laws such as POCSO Act, 2012.
What is the National Cyber Crime Reporting Portal and how does it help victims?
The National Cyber Crime Reporting Portal (NCRP), operated under the Indian Cyber Crime Coordination Centre (I4C), allows citizens to report all types of cybercrime online. It includes an anonymous reporting option specifically for crimes against women and children, enabling victims to file complaints without revealing their identity.
How much has the government spent on cybercrime capacity building for states?
The Centre has released ₹132.93 crore under the Cyber Crime Prevention against Women and Children (CCPWC) Scheme to states and Union Territories. The funds support cyber forensic-cum-training laboratories, junior cyber consultants, and training programmes for law enforcement personnel, prosecutors, and judicial officers.
How many states have cyber forensic labs and how many officials have been trained?
Cyber forensic-cum-training laboratories have been commissioned in 33 States and Union Territories. More than 24,600 law enforcement personnel, judicial officers, and prosecutors have been trained in cybercrime awareness, investigation, and digital forensics.
