Deepfakes and the Law: Protecting Digital Identity in India’s 2026 Legal Landscape
By: Kanak Purohit Digital Policy Strategist
We have entered the era of the "Synthetically Altered Self." In early 2026, the line between an authentic video and an algorithmically generated masterpiece has not just blurred—it has vanished. As deepfake technology moves from "fun filters" to tools for deceptive impersonation and forensic fraud, India’s legal system has been forced into a radical reset.
The notification of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 on February 10th marks the end of the "reactive" era. Today, your digital identity is your most valuable asset, and the law is finally catching up.
1. The IT Amendment Rules 2026: Proactive, Not Reactive
The February 2026 amendments introduce a seismic shift in platform accountability.
The 3-Hour Takedown: If a court or government notice identifies unlawful SGI, platforms (like Instagram or X) now have only 3 hours to remove it—down from the previous 36-hour window.
The 2-Hour Emergency: For the most sensitive violations, such as non-consensual intimate imagery (NCII) or artificially morphed nudes, the window is even tighter: 2 hours.
Mandatory Labelling: Any "permitted" SGI (like AI-generated marketing) must be clearly and prominently labelled.
If you see an AI influencer today, they are legally required to tell you they aren't real.
2. The Personality Rights Boom: Celebrities and Beyond
2026 has become the year of Personality Rights Litigation. Following landmark wins by icons like Amitabh Bachchan and Kajol, the Delhi High Court recently extended these protections to any individual with field-specific recognition.
The Right to Voice: Voice cloning has become a major litigation point.
Courts now recognize that a signature cadence or tone is a protectable element of your persona. Dynamic Injunctions: High Courts are increasingly granting "John Doe" dynamic injunctions, allowing lawyers to add new mirror websites and social media handles to a takedown order in real-time as deepfakes go viral.
3. Evidence in Crisis: Section 63 of the BSA, 2023
The transition from the Indian Evidence Act (IEA) to the Bharatiya Sakshya Adhiniyam (BSA) has redefined how digital identity is proven in court.
The Metadata Mandate: Under Section 63 BSA, a simple video isn't enough. Courts now demand Hash Value Analysis and Source Metadata.
Digital Fingerprints: The 2026 Rules require platforms to embed "permanent metadata" or digital fingerprints into SGI.
This allows forensic auditors to trace a deepfake back to the specific AI tool used to generate it.
4. Checklist: Protecting Your Digital Identity in 2026
If you or your brand is hit by a deepfake, follow this "Legal First-Aid" protocol:
Immediate Capture: Document the URL, the timestamp, and the metadata (if available) before the content is deleted or moved.
The 2-Hour Grievance: File a complaint with the platform’s Resident Grievance Officer.
Under the 2026 Rules, they must prioritize NCII and impersonation complaints. The Cyber Cell Report: File a formal report at
cybercrime.gov.in. This is necessary to trigger the "actual knowledge" requirement for platform liability.Forensic Certification: Engage a digital forensic expert to provide a Certificate under Section 63 BSA, proving the content is synthetic.
The "Know Thy Case" Perspective:
"In my experience navigating Mumbai’s tech-litigation space, I’ve seen the 'Liar's Dividend' become a real defense strategy. Defendants are now claiming that authentic evidence is actually a deepfake to create reasonable doubt. This is why the Certificate of Integrity is the most important document in your case file. In 2026, the case isn't won by the one who has the video; it's won by the one who can prove the video's provenance."
Comments
Post a Comment