India’s Deepfake Rules: The New Compliance Challenge for Big Tech and AI Startups

 

REGULATION & BUSINESS  |  DEEP DIVE

India’s 2026 IT Rules amendments bring realistic synthetic media into a stricter compliance framework. For technology platforms and AI businesses, the challenge is balancing user protection, operational demands and innovation.

KEY FACTS

• Notification: 10 February 2026 (G.S.R. 120(E)).

• Effective date: 20 February 2026.

• Core focus: realistic synthetic audio-visual content, including qualifying deepfakes, with platform due-diligence obligations, labelling and traceability requirements.

• Important distinction: the three-hour removal timeline applies to unlawful information following a valid court order or reasoned government intimation; it is not a blanket rule that every AI-generated post must be removed within three hours.

The news behind the headline

India’s synthetic-media rules are not a brand-new announcement dated 22 October. The Ministry of Electronics and Information Technology notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 on 10 February, with the amendments taking effect on 20 February. Government statements in March and later updates have continued to describe the framework and related advisories. The editorial story, therefore, is about what the rules mean for business—and whether any later announcement changes the obligations—not a claim that the rules were passed today.

What counts as synthetic media?

The amended framework defines “synthetically generated information” (SGI) around audio, visual or audio-visual material created, generated, modified or altered using a computer resource so that it appears real or authentic and portrays a person or event in a way likely to be perceived as indistinguishable from reality. Depending on the facts, this can include deepfake video, realistic AI-generated images and voice cloning.

The definition is not intended to sweep in every routine use of software. The Ministry’s explanatory FAQ describes exclusions for good-faith editing and enhancement that does not materially distort meaning, document or presentation preparation that does not create a false document, and accessibility or quality improvements that do not manipulate material parts of the underlying content. The legal test and the specific facts matter.

What platforms must do

The amendments strengthen intermediaries’ due-diligence obligations. Among other things, platforms must use reasonable and appropriate technical measures to address unlawful synthetic content; clearly label permissible synthetic material and support traceability through associated metadata; and take steps to inform users of relevant restrictions and legal consequences. The framework specifically addresses risks including impersonation, misleading content, child sexual exploitation material and non-consensual intimate imagery.

The rules also shorten certain response timelines. Government explanations state that unlawful information must be removed within three hours after a qualifying court order or reasoned intimation from the appropriate government or its agency. This should not be described as an automatic three-hour takedown clock for every complaint, nor as a requirement to remove all AI-generated content.

The compliance challenge for Big Tech

Large social platforms will need dependable workflows across detection, labelling, metadata, user reporting, escalation and legal review. Automated detection can help at scale, but synthetic media changes quickly and tools can produce false positives and false negatives. A platform must be able to respond rapidly without treating every edited image, parody, accessibility feature or clearly fictional work as a harmful deepfake.

The commercial burden will vary by platform size, product design, user volume and the content it hosts. Rather than assume a uniform cost, businesses should assess staffing, tooling, vendor contracts, incident records, escalation procedures and the ability to preserve relevant metadata.

What AI startups, brands and publishers should consider

AI startups should map where their products generate or modify realistic audio-visual material, identify which legal role they perform, and review product labels, provenance information, user terms and abuse-reporting channels. The rules do not mean that every developer or every AI tool has identical obligations; applicability depends on the service, role and relevant provisions.

Brands and agencies should review campaigns that use synthetic presenters, cloned voices or realistic AI-generated scenes, especially where a real person could be impersonated or audiences could be misled. Publishers should strengthen verification and disclosure practices, preserve source records and avoid presenting synthetic material as documentary evidence without appropriate checks.

Innovation versus accountability

The policy objective is to make harmful deception harder while preserving legitimate uses of generative AI. That balance will depend on implementation: clear labels and traceability can help users assess content, while vague processes or overly aggressive filtering can suppress lawful material. Businesses should monitor official clarifications and relevant legal developments rather than rely on summaries alone.

A practical checklist for businesses

☐ Map where realistic synthetic audio, images or video enter your products and workflows.

☐ Define who owns detection, labelling, metadata, complaints and urgent legal escalations.

☐ Document how you respond to valid orders and government directions, including the applicable deadlines.

☐ Review user disclosures, vendor contracts, retention practices and incident-response procedures.

☐ Train marketing, editorial, trust-and-safety and customer-support teams on impersonation and synthetic-media risks.

☐ Seek qualified legal advice for obligations specific to your role, product and content.

BIZ MASALA TAKEAWAY

The rules turn synthetic-media governance into an operational business issue—not just a content-policy debate. Companies should move from ad hoc deepfake responses to documented systems for labelling, verification, escalation and legal compliance, while protecting legitimate AI use.

Verification note

As checked for this article on 22 October 2026, official government material confirms the 10 February notification and 20 February commencement date, and also records subsequent government advisories and explanatory updates. We found no basis in the checked official sources to describe the amendments themselves as newly passed on 22 October. The story is therefore framed as a business explainer on the existing framework.

Sources & further reading

Ministry of Electronics and Information Technology — FAQ on the 2026 Amendment Rules (including commencement date and definition of SGI)
https://www.meity.gov.in/static/uploads/2025/10/065b6deb585441b5ccdf8be42502a49c.pdf

Press Information Bureau — Government has issued multiple advisories emphasizing due diligence obligations (25 March 2026)
https://www.pib.gov.in/PressReleasePage.aspx?PRID=2245053&lang=1&reg=1

Press Information Bureau — Government strengthens regulatory framework to address AI-generated deepfakes (6 August 2026)
https://www.pib.gov.in/PressReleasePage.aspx?PRID=2295500&lang=1&reg=1

Official MeitY amendments and policy documents page
https://www.meity.gov.in/documents/act-and-policies/amendments-to-the-information-technologyintermediary-guidelines-and-digital-media-ethics-code-rules-2021-it-rules-2021-IjN4QjMtQWa?pageTitle=Amendments-to-the-Information-Technology-

BIZ MASALA

Business. Markets. People. Insight.

Comments

Popular posts from this blog

THE GREAT INDIAN CINEMA RESET

SINGARENI COAL PUZZLE : THE CONTRACT QUESTION

WHO TESTS THE MEDICINES INDIA MAKES?