Government Action Against Social Media Platforms in India

Why in News?

The Government of India has intensified regulatory action against major social media platforms such as Meta (WhatsApp and Instagram), Telegram, and Signal over concerns relating to digital fraud, online piracy, Child Sexual Exploitation and Abuse Material (CSEAM), AI-generated harms, privacy, and intermediary accountability. The developments have reignited the debate on intermediary liability, algorithmic accountability, privacy versus traceability, and the need for a comprehensive digital platform law.

Overview

The rapid expansion of digital platforms has transformed communication, commerce, governance, and access to information. However, the growing influence of these platforms has also increased concerns regarding cyber fraud, misinformation, copyright infringement, online child abuse, algorithmic manipulation, and synthetic media. As social media platforms evolve from passive intermediaries into active curators of online content, the Government has sought stronger regulatory oversight while balancing privacy, innovation, freedom of speech, and public safety.

Major Concerns Regarding the Growing Power of Social Media Platforms

Rise in Digital Fraud and Online Impersonation

The Government has expressed concern over proposed features such as WhatsApp usernames, which allow communication without revealing mobile numbers. Although intended to enhance privacy, such features may facilitate identity theft, phishing attacks, digital arrest scams, and name-squatting. While Meta has clarified that mobile numbers will remain linked internally and usernames of verified institutions will be protected, the Ministry of Electronics and Information Technology (MeitY) remains concerned about potential misuse.

Privacy Versus Traceability

Modern platforms increasingly employ End-to-End Encryption (E2EE) and privacy-enhancing technologies that protect users' personal information. While these features strengthen digital privacy, they also complicate criminal investigations by making it difficult for law enforcement agencies to trace offenders involved in cybercrime, identity theft, and financial fraud.

The Government has classified WhatsApp as a Significant Social Media Intermediary (SSMI) under the Information Technology Act, 2000 and the IT Rules, 2021, thereby imposing enhanced due diligence obligations. However, civil society organisations argue that the Government's powers remain limited by the conditional safe harbour provisions under Section 79 of the IT Act.

Growing Challenge of Online Piracy

The Government has identified over 3,100 Telegram channels allegedly distributing pirated films, OTT content, and copyrighted material. Traditional notice-and-takedown mechanisms have proved inadequate because infringing content quickly reappears under new channels and identities.

Consequently, the Government has urged Telegram to proactively detect, report, and disable access to pirated content rather than relying solely on reactive content removal. The issue reflects a broader shift towards preventive due diligence by digital intermediaries.

Algorithmic Promotion of Child Sexual Exploitation Material

Investigations have revealed instances where Instagram advertisements allegedly promoted access to Child Sexual Exploitation and Abuse Material (CSEAM) and redirected users to Telegram channels.

Although Meta maintains a zero-tolerance policy towards such content, sophisticated criminal networks have exploited weaknesses in automated advertising systems and recommendation algorithms. The Government has therefore directed Meta to remove such content immediately and submit an Action Taken Report (ATR). These incidents highlight the limitations of AI-driven content moderation systems operating at massive scale.

Threat from AI-Generated Synthetic Content

The emergence of Artificial Intelligence has enabled the creation of deepfakes, synthetic identities, voice cloning, and non-consensual intimate imagery, collectively referred to as Synthetically Generated Information (SGI).

Such technologies threaten individual dignity, electoral integrity, cybersecurity, and public trust, making AI governance an increasingly important regulatory priority.

Algorithmic Amplification of Harmful Content

Social media platforms increasingly function as active content curators rather than passive hosts. Their recommendation engines often amplify misinformation, hate speech, piracy, extremist content, and fraudulent material, thereby increasing their societal impact.

In several instances, viral misinformation circulating through social media has contributed to communal violence, riots, and public disorder, raising demands for greater platform accountability.

Cross-Border Enforcement Challenges

Most major digital platforms operate across multiple jurisdictions, making investigation, evidence collection, prosecution, and content removal significantly more complex. Differences in legal systems and data protection laws often hinder effective international cooperation against cybercrime.

Important Supreme Court Judgments

Shreya Singhal vs Union of India (2015)

The Supreme Court upheld the constitutional validity of Section 69A of the IT Act while striking down Section 66A. The Court held that blocking orders under Section 69A contain adequate procedural safeguards and judicial oversight.

Tehseen Poonawalla vs Union of India (2018)

The Court directed governments to take strong action against the spread of fake news and inflammatory social media messages capable of inciting mob violence and lynching.

Anuradha Bhasin vs Union of India (2020)

The Supreme Court recognised access to the Internet as an essential component of the Fundamental Rights under Article 19, subject to reasonable restrictions.

Ajit Mohan vs Delhi Legislative Assembly (2021)

The Court observed that platforms like Facebook (Meta) are no longer merely passive intermediaries because their algorithms actively influence public opinion. Consequently, such platforms carry greater societal responsibility.

Important Cybersecurity Concepts

Border Gateway Protocol (BGP)

BGP is the core routing protocol of the Internet that determines how data travels across interconnected networks. However, it lacks built-in authentication mechanisms, making it vulnerable to BGP hijacking, where attackers reroute Internet traffic for malicious purposes.

Resource Public Key Infrastructure (RPKI)

RPKI is a cryptographic framework designed to secure BGP by verifying the legitimacy of Internet routing information and reducing the risk of route hijacking.

DNS Hijacking

DNS Hijacking involves manipulating the Domain Name System (DNS) to redirect users from legitimate websites to fraudulent websites without their knowledge.

Zero Trust Architecture (ZTA)

Zero Trust Architecture follows the principle of "Never Trust, Always Verify." Every user and device must continuously authenticate itself before accessing digital resources, regardless of its location inside or outside the network.

Splinternet

Splinternet, also known as Cyber Sovereignty, refers to the fragmentation of the global Internet into multiple nationally controlled digital ecosystems governed by different regulatory standards.

Challenges in Regulating Digital Platforms

Ambiguity in Intermediary Liability

As digital platforms increasingly recommend, promote, and monetise content using sophisticated algorithms, the distinction between a neutral intermediary and an active publisher has become blurred. Determining when platforms should lose their safe harbour protection remains a major legal challenge.

Reactive Rather Than Preventive Regulation

India's current regulatory framework largely follows a notice-and-takedown model, responding only after harmful content has already circulated. Preventive, risk-based regulation remains underdeveloped.

Opaque Algorithms

Recommendation systems and content moderation algorithms function largely as black boxes, limiting regulatory oversight, transparency, and independent auditing of harmful outcomes.

Fragmented Legal Framework

Digital platforms are governed by multiple laws, including the IT Act, 2000, Digital Personal Data Protection Act, 2023, Copyright Act, 1957, POCSO Act, 2012, and Competition Act, 2002, resulting in overlapping jurisdictions and regulatory uncertainty.

Balancing Fundamental Rights

Regulation must carefully balance privacy, freedom of speech, innovation, child safety, copyright protection, and national security, ensuring that legitimate rights are not undermined.

Institutional Capacity Constraints

Effective regulation increasingly requires expertise in AI governance, digital forensics, cryptography, algorithm auditing, and cybersecurity, capacities that are still evolving within India's regulatory institutions.

Measures Needed to Strengthen Digital Platform Regulation

Comprehensive Digital Platform Law

India should establish a dedicated legal framework for AI and Digital Platforms, moving beyond piecemeal amendments to the Information Technology Act, 2000.

Transparent and Fair Takedown Procedures

Content removal mechanisms should comply with the principles of natural justice, ensuring users receive reasoned decisions and adequate opportunities to appeal.

Mandatory Algorithm Audits

Large digital platforms should be required to conduct annual public-interest algorithmic audits to evaluate their impact on elections, public health, child safety, and social harmony.

Comprehensive AI Governance Framework

India should operationalise the IndiaAI Safety Institute and develop robust standards governing deepfakes, synthetic media, AI-generated content, and algorithmic transparency.

Lawful Traceability Mechanisms

Judicially supervised traceability should be introduced for serious offences such as terrorism, organised cybercrime, and child sexual exploitation, while preserving strong encryption for ordinary users.

Strengthening Child Online Protection

Digital platforms should adopt Safety-by-Design, mandatory CSAM detection technologies, age-appropriate platform design, and faster compliance with lawful takedown requests in accordance with POCSO Act, 2012 and the IT Rules, 2021.

Conclusion

The recent controversies involving WhatsApp, Telegram, and Meta demonstrate that digital platforms have evolved into powerful actors capable of shaping public discourse, economic activity, and democratic processes. India therefore requires a balanced, rights-based, technology-neutral regulatory framework that preserves privacy, innovation, and freedom of expression while ensuring platform accountability, child protection, cybersecurity, due process, and effective enforcement in the rapidly evolving digital ecosystem