India’s Deepfake Rules: The New Compliance Challenge for Big Tech and AI Startups
REGULATION & BUSINESS | DEEP
DIVE

India’s 2026 IT Rules amendments bring realistic synthetic media into a stricter compliance framework. For technology platforms and AI businesses, the challenge is balancing user protection, operational demands and innovation.
|
KEY FACTS •
Notification: 10 February 2026 (G.S.R. 120(E)). • Effective
date: 20 February 2026. • Core focus:
realistic synthetic audio-visual content, including qualifying deepfakes,
with platform due-diligence obligations, labelling and traceability
requirements. • Important
distinction: the three-hour removal timeline applies to unlawful information
following a valid court order or reasoned government intimation; it is not a
blanket rule that every AI-generated post must be removed within three hours. |
The news behind the headline
India’s synthetic-media rules are not a
brand-new announcement dated 22 October. The Ministry of Electronics and
Information Technology notified the Information Technology (Intermediary
Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 on 10 February,
with the amendments taking effect on 20 February. Government statements in
March and later updates have continued to describe the framework and related
advisories. The editorial story, therefore, is about what the rules mean for
business—and whether any later announcement changes the obligations—not a claim
that the rules were passed today.
What counts as synthetic media?
The amended framework defines
“synthetically generated information” (SGI) around audio, visual or
audio-visual material created, generated, modified or altered using a computer
resource so that it appears real or authentic and portrays a person or event in
a way likely to be perceived as indistinguishable from reality. Depending on
the facts, this can include deepfake video, realistic AI-generated images and
voice cloning.
The definition is not intended to sweep in
every routine use of software. The Ministry’s explanatory FAQ describes
exclusions for good-faith editing and enhancement that does not materially
distort meaning, document or presentation preparation that does not create a
false document, and accessibility or quality improvements that do not
manipulate material parts of the underlying content. The legal test and the
specific facts matter.
What platforms must do
The amendments strengthen intermediaries’
due-diligence obligations. Among other things, platforms must use reasonable
and appropriate technical measures to address unlawful synthetic content;
clearly label permissible synthetic material and support traceability through
associated metadata; and take steps to inform users of relevant restrictions
and legal consequences. The framework specifically addresses risks including
impersonation, misleading content, child sexual exploitation material and
non-consensual intimate imagery.
The rules also shorten certain response
timelines. Government explanations state that unlawful information must be
removed within three hours after a qualifying court order or reasoned
intimation from the appropriate government or its agency. This should not be
described as an automatic three-hour takedown clock for every complaint, nor as
a requirement to remove all AI-generated content.
The compliance challenge for Big Tech
Large social platforms will need dependable
workflows across detection, labelling, metadata, user reporting, escalation and
legal review. Automated detection can help at scale, but synthetic media
changes quickly and tools can produce false positives and false negatives. A
platform must be able to respond rapidly without treating every edited image,
parody, accessibility feature or clearly fictional work as a harmful deepfake.
The commercial burden will vary by platform
size, product design, user volume and the content it hosts. Rather than assume
a uniform cost, businesses should assess staffing, tooling, vendor contracts,
incident records, escalation procedures and the ability to preserve relevant
metadata.
What AI startups, brands and publishers should consider
AI startups should map where their products
generate or modify realistic audio-visual material, identify which legal role
they perform, and review product labels, provenance information, user terms and
abuse-reporting channels. The rules do not mean that every developer or every
AI tool has identical obligations; applicability depends on the service, role
and relevant provisions.
Brands and agencies should review campaigns
that use synthetic presenters, cloned voices or realistic AI-generated scenes,
especially where a real person could be impersonated or audiences could be
misled. Publishers should strengthen verification and disclosure practices,
preserve source records and avoid presenting synthetic material as documentary
evidence without appropriate checks.
Innovation versus accountability
The policy objective is to make harmful
deception harder while preserving legitimate uses of generative AI. That
balance will depend on implementation: clear labels and traceability can help
users assess content, while vague processes or overly aggressive filtering can
suppress lawful material. Businesses should monitor official clarifications and
relevant legal developments rather than rely on summaries alone.
A practical checklist for businesses
☐ Map where
realistic synthetic audio, images or video enter your products and workflows.
☐ Define who
owns detection, labelling, metadata, complaints and urgent legal escalations.
☐ Document how
you respond to valid orders and government directions, including the applicable
deadlines.
☐ Review user
disclosures, vendor contracts, retention practices and incident-response
procedures.
☐ Train
marketing, editorial, trust-and-safety and customer-support teams on
impersonation and synthetic-media risks.
☐ Seek
qualified legal advice for obligations specific to your role, product and
content.
BIZ MASALA TAKEAWAY
|
The rules turn synthetic-media
governance into an operational business issue—not just a content-policy
debate. Companies should move from ad hoc deepfake responses to documented
systems for labelling, verification, escalation and legal compliance, while protecting
legitimate AI use. |
Verification note
As checked for this article on 22 October
2026, official government material confirms the 10 February notification and 20
February commencement date, and also records subsequent government advisories
and explanatory updates. We found no basis in the checked official sources to
describe the amendments themselves as newly passed on 22 October. The story is
therefore framed as a business explainer on the existing framework.
Sources & further reading
Ministry of Electronics and Information Technology — FAQ on
the 2026 Amendment Rules (including commencement date and definition of SGI)
https://www.meity.gov.in/static/uploads/2025/10/065b6deb585441b5ccdf8be42502a49c.pdf
Press Information Bureau — Government has issued multiple
advisories emphasizing due diligence obligations (25 March 2026)
https://www.pib.gov.in/PressReleasePage.aspx?PRID=2245053&lang=1®=1
Press Information Bureau — Government strengthens regulatory
framework to address AI-generated deepfakes (6 August 2026)
https://www.pib.gov.in/PressReleasePage.aspx?PRID=2295500&lang=1®=1
Official MeitY amendments and policy documents page
https://www.meity.gov.in/documents/act-and-policies/amendments-to-the-information-technologyintermediary-guidelines-and-digital-media-ethics-code-rules-2021-it-rules-2021-IjN4QjMtQWa?pageTitle=Amendments-to-the-Information-Technology-

BIZ MASALA
Business. Markets. People. Insight.
Comments
Post a Comment