India introduces AI oversight and elevated compliance standards for online platforms



India has taken a decisive step in regulating its burgeoning digital landscape. With the implementation of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, the nation has established its first major framework for the oversight of Artificial Intelligence (AI) and has significantly raised the bar for compliance for all online platforms. Effective as of February 20, 2026, these new rules amend the existing IT Rules from 2021, signaling a new era of digital governance.

The final rules are considerably more comprehensive than the initial draft released for public consultation in late 2025. While that draft centered primarily on AI, the enacted regulations also introduce stricter compliance standards and much shorter timelines for action across the board. This move, announced just ahead of the AI Impact Summit in New Delhi, underscores India’s commitment to shaping the future of AI governance and ensuring a safer, more transparent online environment for its citizens.

This article will break down the essential components of the Amendment Rules. We will explore the new legal definitions for AI-generated content, the due diligence responsibilities placed on platforms, the special obligations for large social media companies, and the accelerated timelines that are set to reshape how online intermediaries operate in India.

Defining the Digital Landscape: New Statutory Terms

To effectively regulate a new frontier, you must first define it. The Amendment Rules introduce clear legal definitions for content created or altered by technology, providing a foundation for all subsequent obligations.

Audio, Visual or Audio-Visual Information

This is a broad but crucial definition. It covers any content, including audio clips, images, graphics, or videos, that has been “created, generated, modified, or altered through a computer resource.” This wide net ensures that nearly any form of digital media manipulated by software falls under the purview of these rules.

Synthetically Generated Information (SGI)

This is where the rules specifically target advanced AI creations. SGI is defined as any audio, visual, or audio-visual information that has been “artificially or algorithmically created, generated, modified or altered” to the point where it appears authentic and can realistically depict an individual or event in a way that is “indistinguishable” from reality.

This definition directly addresses the challenge posed by “deepfakes” and other sophisticated AI-generated media. However, the rules provide a practical exception. Content that undergoes “routine” or “good faith” processing, such as AI-assisted document editing or basic audio enhancement for clarity, is not classified as SGI. This distinction ensures that the regulations target potentially deceptive content without stifling beneficial and commonplace uses of AI tools.

The New Standard: Due Diligence for SGI

The rules place significant new responsibilities on any online platform that provides tools enabling the creation, modification, or sharing of Synthetically Generated Information. These platforms are now mandated to exercise a higher degree of diligence.

A central requirement is the deployment of “reasonable and appropriate technical measures,” including automated tools, to proactively prevent users from creating and spreading unlawful SGI. The regulations are specific about what constitutes unlawful content. This includes, but is not limited to:

  • Child sexual abuse material (CSAM)
  • Non-consensual intimate imagery
  • Obscene or pornographic content
  • Content that violates personal privacy
  • Falsified information or forged documents
  • Material related to procuring weapons or explosives
  • Deepfakes intended to deceive or harm

Beyond prevention, platforms must also focus on transparency. They are now obligated to clearly label all SGI, using methods like prefixed text and audio disclosures, to ensure that users are immediately aware that the content is not authentic. Furthermore, platforms must embed unique identifiers within the SGI to trace it back to the computer resource used in its creation or alteration, creating a trail for accountability.

Heightened Responsibility for Major Platforms (SSMIs)

The regulations recognize that not all platforms have the same scale of influence. “Significant Social Media Intermediaries” (SSMIs) — social media platforms with a user base above a specified threshold — are subject to even more stringent due to diligence obligations.


These major players must not only label SGI but also actively verify its nature. SSMIs are required to:

  1. Mandate User Declarations: Ensure that users who upload content declare whether it is SGI.
  2. Implement Technical Verification: Deploy “appropriate technical measures,” including automated tools, to check the accuracy of these user declarations.

If a user declares their content is SGI, or if the platform’s verification system identifies it as such, the SSMI must ensure it is clearly and prominently displayed with a visible label or notice. This two-step process of user declaration and platform verification aims to create a more robust system for identifying and flagging AI-generated content on platforms with the widest reach.

Enhanced Reporting, Disclosure, and Grievance Redressal

The Amendment Rules extend beyond SGI, heightening general compliance and reporting obligations for all online platforms.

Platforms must now periodically and clearly inform their users about the platform’s rules and policies. This includes notifying them of the platform’s right to suspend or terminate access for non-compliance. Users must also be made aware of their potential legal liability for sharing unlawful information and the platform’s own legal duty to report certain violations to law enforcement authorities.

For platforms offering SGI tools, there is an additional layer of disclosure. They must explicitly inform users about the specific legal consequences and penalties associated with creating and circulating unlawful SGI.

The rules also strengthen the grievance redressal process. Platforms are required to take “expeditious and appropriate action” when they become aware of unlawful SGI, whether through their own detection or a user-filed grievance. This action can include the immediate removal of the content and the suspension of the offending user’s account, all while ensuring crucial evidence is preserved for potential legal proceedings.

The Clock is Ticking: Shortened Compliance Timelines

Perhaps one of the most impactful changes introduced by the Amendment Rules is the significant reduction in compliance timelines. These new deadlines demand a level of responsiveness that will require many platforms to overhaul their internal processes.

The key changes are:

  • Timeline for removal of specified unlawful information: Platforms must now remove certain types of unlawful information within just 3 hours of receiving “actual knowledge,” such as a court order or a notification from a government agency.
  • Timeline for Grievance Redressal: The window for resolving general user grievances has been shortened to 7 days from the date of receipt. Certain requests, like those concerning intellectual property infringement, are exempted from this tight deadline.
  • Timeline for removing information based on a complaint: For complaints regarding highly sensitive content, such as nudity or sexual acts, platforms have a mere 2 hours to remove or disable access to the material.

These aggressive timelines underscore the government’s push for rapid action against harmful content, forcing platforms to be more agile and efficient in their moderation and compliance efforts. By introducing these comprehensive changes, India is not just reacting to the rise of AI but is proactively building a regulatory framework designed to foster a more accountable and secure digital ecosystem.

Comments

Post a Comment

Popular posts from this blog

Why Governing Law Is Critical For Commercial Agreements

Image
When businesses engage in cross-border transactions, the primary focus is often on the commercial terms: pricing, delivery schedules, and performance obligations. While these elements are undoubtedly crucial, a seemingly minor clause, often relegated to the back pages of a contract, holds the power to define the entire legal relationship. This is the governing law clause. When deals proceed without issue, its importance is rarely considered. However, when a dispute arises, this clause becomes the strategic centerpiece, dictating how rights are interpreted, obligations are enforced, and conflicts are resolved. In an increasingly interconnected global economy, where transactions span multiple countries and legal systems, understanding governing law is no longer a technical formality but a critical business imperative. The choice of which country's laws will apply to an agreement can significantly influence risk allocation, compliance burdens, and the overall cost and efficiency of di...
Read more

Compliance Requirements for Corporates Under the POSH Act: Key Policies and Regulations

  Overview of the POSH Act, 2013 The Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act, 2013 (“POSH Act”) is India’s first comprehensive legislation aimed at preventing sexual harassment at the workplace and safeguarding the dignity of working women. Enacted pursuant to India’s obligations under the Vishaka Guidelines and international conventions, the POSH Act creates a binding compliance framework for all covered establishments. Beyond being a statutory requirement, POSH compliance is now a critical governance issue. Non-compliance can expose organisations to regulatory penalties, reputational damage, labour disputes, and operational risk. For this reason, organisations increasingly rely on an experienced employment labour law firm India to design, audit, and implement POSH frameworks that are both legally compliant and operationally effective. This article outlines the key policies, structures, and obligations that every establishment must impl...
Read more

India's Push for Self-Reliance in Defence: What It Means for Businesses and Partners

Image
For decades, India found itself in an uncomfortable position — one of the world's largest military spenders, yet heavily reliant on foreign suppliers for the equipment its armed forces depended on. Fighter jets, submarines, artillery systems, helicopters: a significant portion of what India's defence forces used came from abroad. The strategic and economic consequences of this dependence were hard to ignore. Every major procurement deal meant billions of dollars flowing out of the country, limited technology absorption at home, and a nagging vulnerability that came with relying on external suppliers for critical national security assets. That picture has been changing, and quite deliberately so. Over the past several years, the Government of India has made indigenous defence manufacturing a cornerstone of national policy. The logic is straightforward: a country of India's size, ambition, and security requirements cannot remain a perpetual importer of defence technology. It ...
Read more