Internet & Online Safety · India
Online safety & content laws in India (2026)
India shaded by its internet & online safety status
Online safety rules in India: heavy restriction.
FrameworkInformation Technology Act, 2000 (Sections 69A blocking, 79 intermediary safe harbour) + IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (amended through 2025 and 2026), administered by the Ministry of Electronics and Information Technology (MeitY) and the Ministry of Home Affairs' Sahyog portal; Digital Personal Data Protection Act, 2023 covers child data; the proposed Digital India Act to replace the IT Act remains not enacted.
India regulates online content through the IT Act 2000 and the IT Rules 2021, which impose safe-harbour, grievance and due-diligence obligations on intermediaries and a three-tier code for digital news/OTT publishers. In practice the regime has tilted heavily toward state-directed content restriction: MeitY issued around 24,300 blocking orders in 2025 (nearly double 2024), the Home Ministry's Sahyog portal enables bulk takedown requests, and 2025-2026 amendments have compressed takedown timelines and formalised officer-issued removal notices. A more comprehensive Digital India Act (modelled partly on the EU DSA / UK OSA) has been under consultation since 2023 but has not been introduced as legislation.
Key points
Section 69A empowers the Union government to order blocking of online content on grounds including sovereignty, security, public order and decency; Section 79 provides conditional safe harbour to intermediaries provided they observe due-diligence duties and comply with lawful orders. These provisions remain the operative legal basis for content restriction and platform liability.
The IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 mandate grievance officers, compliance personnel, originator traceability for messaging platforms and a three-tier ethics-code mechanism for digital news and OTT content. The 2025 amendment to Rule 3(1)(d) (in force 15 November 2025) restricts takedown notices to senior officials, and the 2026 amendment (in force 20 February 2026) shortens takedown timelines to as little as three hours.
Operational since October 2024 and formalised by the Sahyog Rules 2025, the Ministry of Home Affairs' Sahyog portal (run by the Indian Cyber Crime Coordination Centre) lets central and state agencies issue Section 79(3)(b) takedown notices to intermediaries at scale; roughly 24,300 blocking orders were recorded in 2025 (about one every 68 seconds), and X Corp is litigating the portal's constitutionality.
The Digital Personal Data Protection Act, 2023 treats everyone under 18 as a child and requires verifiable parental consent before processing their personal data, while prohibiting tracking, behavioural monitoring and targeted advertising to minors. Draft DPDP Rules 2025 propose age verification via Aadhaar-linked DigiLocker or an encrypted token; the Act and Rules are being brought into force in phases through 14 May 2027.
India continues to rely on app-store removals and network-level restrictions alongside content takedowns — for example Telegram was blocked and removed from app stores in June 2026 — and remains among the world's most frequent imposers of internet shutdowns, generally executed under Temporary Suspension of Telecom Services Rules and, for content, under Section 69A/79 mechanisms.
MeitY has publicly consulted on a Digital India Act to replace the IT Act 2000 with a modernised online-safety regime (classifying intermediaries, criminalising doxxing/cyberbullying/impersonation, and imposing age-gating and 'do-not-track' duties for minors, broadly modelled on the EU DSA and UK OSA), but as of 2026 no bill has been introduced in Parliament and the IT Act framework remains in force.
Timeline - major decisions & events
The IT (Intermediary Guidelines) Amendment Rules, 2025 restrict content-takedown orders to senior officers (Joint Secretary/DIG level or above), require reasoned orders, and mandate monthly Secretary-level review, adding accountability to government removal directions.
PIB / MeitY ↗MeitY amended the 2021 Intermediary Rules (notified 22 Oct 2025, in force 15 Nov 2025) to define 'synthetically generated information,' mandate AI-content labeling, and require platforms to remove such content on reasonable efforts. India's first explicit statutory framework for AI/deepfake content.
MeitY ↗India's first comprehensive data-protection statute received Presidential assent, setting obligations for data fiduciaries, rights for data principals, and penalties up to ₹250 crore, forming a core pillar of online safety regulation.
MeitY ↗MeitY amended the Intermediary Rules to regulate online real-money gaming and empower a government fact-check unit to flag 'fake or misleading' content about government business, which platforms must act on to retain safe harbour; the fact-check provision was later struck down by the Bombay High Court.
PIB / MeitY ↗MeitY and the Ministry of I&B notified sweeping rules imposing due-diligence duties, grievance officers, traceability of 'first originator' for messaging apps, and a code of ethics for digital news and OTT platforms, the central framework governing online content today.
MeitY ↗Citing sovereignty, security and data-privacy concerns amid border tensions, MeitY blocked 59 Chinese-origin apps including TikTok, UC Browser and ShareIt, a landmark use of Section 69A blocking powers against entire platforms.
MediaNama ↗The Court struck down Section 66A (criminalizing 'offensive' online messages) as unconstitutionally vague and overbroad under Article 19(1)(a), read down the Section 79 intermediary-liability framework, and upheld Section 69A blocking, the foundational free-speech ruling for the Indian internet.
Supreme Court of India (via Indian Kanoon) ↗The first dedicated intermediary rules under Section 79 set out due-diligence and notice-based content-takedown obligations for platforms, establishing the safe-harbour framework later replaced by the 2021 Rules.
MeitY ↗The IT (Procedure and Safeguards for Blocking for Access of Information by Public) Rules, 2009 created the formal, confidential process for the government to order blocking of online content, the legal basis for later app and website bans.
Centre for Internet & Society ↗Major overhaul of the IT Act adding Section 66A (offensive messages), Section 69A (blocking powers), Section 69 (interception/monitoring), and a revised Section 79 intermediary safe-harbour, the architecture that defines online content control in India.
India Code (Govt. of India) ↗India's foundational cyber-law gave legal recognition to electronic records and digital signatures and first introduced intermediary liability concepts, providing the statutory base on which all later online-safety regulation is built.
India Code (Govt. of India) ↗India - other topics
Internet & Online Safety in other countries
Last verified 9/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Methodology & how to cite · State of Technology Regulation 2026 · Explore the full world map →