The Three-Hour Rule: What Exactly Changed?
The most significant change is the drastically shortened timeline for removing illegal content. Social media platforms and other online intermediaries now have just three hours to take down unlawful deepfakes or other synthetic media after receiving a valid
order from a court or government agency. This is a massive reduction from the previous 36-hour window. For sensitive complaints involving issues like non-consensual nudity or impersonation, the deadline is even tighter, shrinking to just two hours. These amendments to the country's Information Technology (IT) Rules are designed to combat the rapid, viral spread of harmful manipulated content before it can cause widespread damage.
Labels and Metadata: Making AI Visible
The new rules don't just focus on removing illegal content; they also aim to create transparency around permissible AI creations. Any AI-generated audio or video that is not otherwise illegal must now be clearly and prominently labeled as synthetic. Platforms must also ensure this content carries traceable metadata, which can help authorities and users identify that it has been created or altered by AI. The goal is to prevent deception by giving users the context they need to distinguish between real and artificial media, a critical tool in an era of rampant misinformation.
Who's on the Hook? Platforms, Creators, and Users
The primary responsibility for enforcement falls on "intermediaries"—a broad term that includes social media giants like Meta and Google, internet service providers, and other online platforms. These companies are required to update their terms of service to explicitly inform users about the rules and the legal consequences of creating or sharing unlawful deepfakes. This can include criminal penalties under existing Indian laws for offenses like identity theft, forgery, and publishing obscene material. Platforms with more than 5 million users face even stricter obligations, including the need to deploy automated, proactive tools to detect and block illegal content.
The Price of Non-Compliance
The consequences for platforms that fail to comply are severe. The most significant penalty is the potential loss of their "safe harbor" protection under Section 79 of India's IT Act. This legal shield generally protects intermediaries from liability for content posted by their users. Without it, companies could be held legally and financially responsible for deepfakes and other illegal content circulating on their platforms, opening them up to lawsuits and prosecution. This high-stakes penalty is designed to force aggressive compliance and ensure that platforms invest heavily in content moderation and rapid response systems.
A Global Test Case for AI Regulation
India's decisive move is being watched closely around the world, including in the United States and Europe, where lawmakers are debating their own approaches to AI governance. By implementing enforceable rules with such tight deadlines, India has positioned itself as a global leader in the fight against harmful synthetic media. While the European Union is working on its own AI Act and the U.S. has targeted specific harms like non-consensual intimate imagery, India's framework is one of the most aggressive and comprehensive to be put into action. The success—or failure—of this approach will likely influence how other democracies attempt to balance user safety, free expression, and technological innovation.
