The New Rules of the Road
In response to a surge in viral deepfakes targeting celebrities and politicians, India has significantly tightened its Information Technology (IT) Rules. As of early 2026, social media platforms and other intermediaries are now under immense pressure
to control AI-generated content. The rules mandate that any permissible AI-generated, or “synthetic,” content must be clearly and persistently labeled as such, often with traceable metadata to show its origin. More critically, platforms are required to proactively prevent users from creating or sharing unlawful content. This includes deepfakes used for impersonation, misinformation, creating non-consensual intimate images, or content that could disrupt public order. Users must be explicitly informed of these prohibitions and the legal consequences of violating them.
So, What's the Penalty?
The consequences in India are twofold, targeting both the platforms that host the content and the individuals who create or share it. For platforms like X (formerly Twitter), Facebook, and YouTube, the biggest change is a drastically shortened takedown window. They must now remove illegal AI content within three hours of receiving a valid order from the government or a court, down from the previous 36-hour deadline. Failure to comply can result in the loss of “safe harbor” protections, which normally shield them from liability for user-generated content, potentially exposing them to prosecution. For individuals, the stakes are also high. While India doesn't have one single “deepfake law,” authorities use existing provisions in the IT Act and Indian Penal Code. Creating or sharing deepfakes can be treated as identity theft, forgery, defamation, or public mischief. Penalties can include imprisonment for up to three years and significant fines, depending on the nature of the offense. For example, offenses involving obscene or sexually explicit material carry some of the harshest consequences.
Why India Is Cracking Down
India's aggressive stance isn't happening in a vacuum. The country has seen high-profile cases where deepfake videos of prominent actresses went viral, sparking public outrage and calls for action. With a massive internet user base and hundreds of millions of people on social media, the potential for AI-generated misinformation to cause social unrest or influence elections is a major concern for the government. Officials have explicitly stated that the safety of citizens, particularly women who are often targeted by malicious deepfakes, is a top priority. The new rules are designed to force a higher level of accountability onto tech giants, shifting the burden from reactive takedowns to proactive prevention and rapid response.
A Different Path Than the U.S.
India’s centralized, top-down approach offers a stark contrast to the legal landscape in the United States. In the U.S., there is no single federal law that comprehensively bans or regulates deepfakes. Instead, America has a patchwork of state laws and narrowly focused federal legislation. The federal TAKE IT DOWN Act, passed in 2025, specifically criminalizes non-consensual intimate deepfakes. Beyond that, regulation is fragmented. As of mid-2026, a growing number of states have laws targeting the use of deepfakes in political advertising or to protect a person's likeness, but the rules vary widely. This state-by-state approach is slower and leaves significant gaps compared to India's broad mandate, which applies nationwide and covers a wider range of content under the umbrella of misinformation and public harm.
