India hosts more than 850 million internet users and the world's third-largest startup ecosystem, yet the legal architecture that determines what platforms must do with user content—the doctrine of intermediary liability—remains in flux. As consultations on the long-promised Digital India Act continue and courts test the constitutional limits of the 2021 IT Rules, policymakers face a defining choice between proportionate, evidence-based regulation and an expansive compliance regime that risks chilling speech and entrepreneurship alike.
The Section 79 Bargain
India's safe harbour framework rests on Section 79 of the Information Technology Act, 2000, which grants intermediaries conditional immunity for third-party content provided they exercise "due diligence" and act expeditiously on actual knowledge of unlawful material. In Shreya Singhal v. Union of India (2015), the Supreme Court read down this provision to require either a court order or a government notification before takedown obligations are triggered—a foundational free speech ruling that prevented private intermediaries from being deputised as content censors.
The bargain was simple and economically consequential. Platforms, hosts and ISPs would not face liability for every user post, in exchange for cooperation with lawful process. That clarity helped India become a hub for consumer internet companies, fintech, and a thriving creator economy.
The 2021 Rules and Compliance Creep
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, layered substantive obligations on top of Section 79: traceability for "significant social media intermediaries," local grievance officers, automated proactive monitoring of certain content, and short takedown timelines. Subsequent 2022 and 2023 amendments added Grievance Appellate Committees and—most controversially—empowered a government Fact Check Unit to flag content about the Union government as false, with consequences for platforms that failed to act.
The compliance burden has been uneven. Large platforms have absorbed it; small startups, open-source projects, and Wikipedia-style non-profits cannot comply meaningfully without overbroad takedowns. That asymmetry tilts the market toward incumbents and away from the next generation of Indian innovators.
Constitutional Guardrails Reasserted
In September 2024, the Bombay High Court struck down the Fact Check Unit amendment in Kunal Kamra v. Union of India, holding that vesting an executive body with the power to declare online content "fake" or "misleading" violated Articles 14, 19(1)(a) and 19(1)(g) of the Constitution. The tie-breaking opinion emphasised that vague terms like "misleading" cannot support intermediary obligations because they invite over-removal.
The ruling matters beyond its facts. It signals that courts will scrutinise rules that effectively conscript platforms into government messaging, and that intermediary obligations must be tethered to clearly defined unlawful content—not policy disagreement.
The Digital India Act Opportunity
The Ministry of Electronics and Information Technology (MeitY) has previewed a Digital India Act intended to replace the 2000-vintage IT Act. Early consultations have floated risk-based, differentiated obligations across categories of intermediaries—e-commerce, search, social media, AI services, and online gaming. Differentiation is welcome in principle: a search engine, a courier marketplace, and a generative AI provider raise distinct harms and require distinct duties.
But differentiation can become a vector for over-regulation if categories proliferate, definitions are vague, or duties are imported wholesale from the EU's Digital Services Act without regard to India's enforcement capacity and developmental priorities. The challenge is to borrow what works—transparency reporting, independent audits for the largest platforms, user redress—while resisting features that fit poorly: prescriptive risk assessments, ex ante content rules, and broad ministerial powers untempered by judicial review.
Five Principles for Proportionate Reform
- Preserve the Shreya Singhal standard. Takedown obligations should follow a court order or a properly framed government notification, not a private fact-check designation.
- Tier obligations by user reach and risk, not revenue. Threshold-based duties should kick in only at scale, with carve-outs for non-profits, encyclopaedias, and developer infrastructure.
- Define unlawful content narrowly. Replace open-textured categories—"misleading," "harmful," "anti-national"—with offences already defined in statute, to give platforms and users predictable notice.
- Mandate transparency, not traceability. Public takedown reports, appeal statistics, and algorithmic disclosures advance accountability without breaking end-to-end encryption that protects journalists, activists and ordinary users.
- Build independent oversight. Grievance Appellate Committees should be staffed by retired judges and domain experts insulated from the executive, with reasoned orders subject to judicial review.
A proportionate intermediary liability framework—anchored in safe harbour, narrow in scope, and tiered by risk—will let Indian founders build for 1.4 billion users without forcing them to litigate every line of code.
The Stakes
India is positioning itself as the digital public infrastructure capital of the world. That credibility depends on a domestic regulatory regime that protects rights as forcefully as it protects markets. The alternative to proportionate reform is a compliance moat that benefits the largest incumbents and the most cautious lawyers, while the next Flipkart, Razorpay or Sarvam AI is built somewhere else. The Digital India Act is the rare opportunity to recalibrate—Parliament and MeitY should take it.