IT (Intermediary Guidelines & Digital Media Ethics Code) Amendment Rules, 2026

Two new definitions inserted in Rule 2(1). New sub-rules 1A and 1B inserted after sub-rule (1):

• Sub-rule 1A: References to "information" in rules 3(1)(b), 3(1)(d), 4(2) & 4(4) shall include synthetically generated information.
• Sub-rule 1B: Removal or disabling of SGI content by a compliant intermediary does not violate Section 79(2)(a) or (b) of the IT Act — safe-harbour protection explicitly preserved.

Clause (c) substituted — all intermediaries must now notify users at least once every 3 months of:

• Their right to terminate/suspend access for non-compliance
• User liability under IT Act and other laws for illegal content
• Mandatory reporting obligations for cognisable offences (BNSS 2023, POCSO 2012)

New clause (ca): Intermediaries offering SGI-capable platforms must additionally warn users of penalties under BNS 2023, POCSO 2012, Representation of People Act 1951, Indecent Representation of Women Act 1986, POSH Act 2013, and Immoral Traffic (Prevention) Act 1956.

Opening portion amended — response to government/court takedown orders must now occur within three hours (previously thirty-six hours). Orders from police administration must be in writing from an officer not below the rank of Deputy Inspector General of Police.

• Complaint acknowledgement: 15 days → 7 days
• First proviso response: 72 hours → 36 hours
• Clause (b) response (urgent content): 24 hours → 2 hours

A wholly new sub-rule requiring SGI-capable intermediaries to:

• Deploy automated tools to block SGI violating applicable laws — including CSAM, non-consensual intimate imagery, false documents, explosive material, and deceptive deepfakes of real persons.
• Label all other SGI with prominent visual/audio disclosure and embed permanent, tamper-proof metadata with a unique identifier.
• Prevent modification, suppression, or removal of labels or metadata by any user.

Significant social media intermediaries must — before display, upload, or publication:

• Require users to declare whether content is synthetically generated.
• Deploy technical tools to verify the accuracy of such declarations.
• Prominently label confirmed SGI content before it goes live.

Platforms that knowingly permit, promote, or fail to act on unlabelled SGI are deemed to have failed due diligence.

Language change from "endeavour to deploy technology-based measures" to "deploy appropriate technical measures" — making proactive detection of previously removed content a firm compliance obligation rather than a best-efforts standard.

"Indian Penal Code" substituted with "Bharatiya Nyaya Sanhita, 2023 (45 of 2023)" — aligning the penalty regime with India's new unified criminal law.