India - Digital Media Ethics Code (2021)

Overview

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 ("IT Rules, 2021") were notified by the Ministry of Electronics & Information Technology (MeitY) on 25 February 2021 (G.S.R. 139(E)). The instrument is framed under section 87(2) of the Information Technology Act, 2000 and supersedes the Information Technology (Intermediaries Guidelines) Rules, 2011. The Rules are structured in parts: Part II (due diligence and grievance redressal obligations for intermediaries) is administered by MeitY; Part III (Code of Ethics and procedure for digital media, online news and online curated content/OTT) is administered by the Ministry of Information & Broadcasting (MIB). The Rules update intermediary due-diligence obligations, introduce special obligations for 'significant social media intermediaries' and create a three‑tier Code of Ethics and grievance redressal framework for digital news and OTT (online curated) content.

Definitions

Key definitions used in the Rules include: Intermediary — as defined in the Information Technology Act, 2000 (entities that host, transmit or provide access to third‑party content); Social Media Intermediary and Significant Social Media Intermediary (SSMI) — defined by function and user threshold (SSMI = social media intermediary above a notified user threshold, the Central Government notified 50 lakh registered users); Publisher / Publisher of news and current affairs content / Publisher of online curated content — defined for Part III (digital news portals, OTT and curated catalogs respectively); Grievance Officer, Chief Compliance Officer, Nodal Contact Person, Resident Grievance Officer — specified officer roles with in‑India residency requirements for certain roles; First originator — the user within India who first originated information on an intermediary’s resource (subject to judicial/safeguard limits for disclosure).

Governance and Institutional Framework

Part II (intermediary due diligence and grievance redressal) is overseen by the Ministry of Electronics & Information Technology (MeitY). Part III (Code of Ethics and grievance architecture for digital news and online curated content/OTT) is administered by the Ministry of Information & Broadcasting (MIB). The Rules require intermediaries to designate officers and contact points in India (including for SSMIs: a Chief Compliance Officer, a Nodal Contact Person for 24x7 coordination with law enforcement, and a Resident Grievance Officer). MeitY has also established mechanisms for grievance appeal and administrative guidance (including a Grievance Appellate Committee portal and related communications). Relevant central government agencies and the judiciary issue orders and directions under statutory powers (e.g., orders under section 69 of the IT Act) that interact with the Rules.

Key Focus Areas

• Due diligence obligations for intermediaries: publish and follow terms of service, privacy policies and community standards; adopt reasonable measures to prevent hosting and dissemination of unlawful information; provide notice/opportunity to be heard and dispute mechanisms where removals are taken on the intermediary’s own accord.
• Grievance redressal: intermediaries must publish Grievance Officer contact details; acknowledge complaints within 24 hours and dispose of grievances within 15 days; urgent removal (within 24 hours) for private sexual content, impersonation/morphed images; other specified unlawful content to be acted upon as expeditiously as possible and in any case within 72 hours where applicable.
• Enhanced obligations for Significant Social Media Intermediaries (SSMIs): appoint in‑India officers (Chief Compliance Officer, Nodal Contact Person, Resident Grievance Officer), publish monthly compliance reports, maintain a physical contact address in India, implement mechanisms for Indian users (including voluntary account verification marks), and comply with staged compliance deadlines following notification of user thresholds.
• First‑originator identification: for SSMIs providing messaging services, enable identification of the "first originator" of information when ordered by a court or under section 69, subject to statutory safeguards and limits (identification permitted only for specified serious offences; message content disclosure is not required under this provision).
• Code of Ethics and three‑tier grievance architecture for digital news and online curated content/OTT: publishers must self‑classify and age‑rate content, implement parental locks/age verification where required, follow journalistic norms/programme codes as applicable, and submit to Level I (publisher) → Level II (self‑regulatory body) → Level III (MIB oversight) grievance escalation.
• Online gaming and other sectoral additions: later amendments included provisions addressing online gaming intermediaries (including special obligations for real‑money games), grievance appellate committees and fact‑checking mechanisms.

Implementation Framework

The Rules set out specific operational requirements and timelines: intermediaries must make available terms of service, privacy policies and user agreements in English and in the relevant languages of user choice (languages included in the Eighth Schedule where applicable). Grievance redressal processes must be published with contact details and timelines (acknowledgement within 24 hours; disposal within 15 days). SSMIs are subject to additional compliance layers including monthly transparency reporting and in‑India officer appointments. MeitY staged certain obligations (for SSMIs) to come into effect three months after notification of the applicable registered user threshold. Part III requires publishers of news and online curated content/OTT to adopt self‑classification and age‑rating frameworks (U, U/A 7+, U/A 13+, U/A 16+, A), parental controls, and the three‑tier grievance mechanism with registration/engagement with MIB where applicable. The Rules also require reasonable and proportionate deployment of technical measures (for example, for detection of child sexual abuse material) with human oversight and periodic review of automated tools.

Monitoring and Evaluation

Monitoring mechanisms include mandatory monthly compliance reports for SSMIs, publication of transparency reports, and administrative oversight by MeitY and MIB in their respective domains. Enforcement actions and compliance assessments may be triggered by government removal/disablement orders, judicial orders, or findings that an intermediary has not observed due diligence (which can affect safe‑harbour immunity under section 79 of the IT Act). MeitY and MIB issue guidance, formats (including Rule 18 formats for digital publishers/OTT), and clarifications to assist implementation; periodic amendments and notifications (including those of 28 October 2022 and 6 April 2023) have refined processes and added mechanisms such as grievance appellate committees.

Penalties, Liability, and Appeals

Non‑compliance with the Rules can lead to loss of intermediary safe‑harbour protections under section 79 of the Information Technology Act, 2000, thereby exposing intermediaries to civil and criminal liability for third‑party content. Enforcement mechanisms include removal/disablement orders issued under the IT Act, oversight and directions by appropriate government agencies, judicial orders, and administrative consequences under the Rules. The Rules and subsequent administrative arrangements provide for grievance appeal mechanisms (including the Grievance Appellate Committee portal) and staged compliance deadlines; intermediaries are required to maintain records and demonstrate due diligence to preserve legal protections.

Relationship to Other Instruments

The IT Rules, 2021 operate under and alongside the Information Technology Act, 2000 (notably Sections 69, 79 and 87). They interact with other rules such as the Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Rules, 2009 (which relate to orders under section 69). Subsequent amendment notifications that modify or add procedures include G.S.R. 794(E) dated 28 October 2022 and G.S.R. 275(E) dated 6 April 2023. The Rules must be read in the broader context of Indian law and administrative guidance applicable to digital media, content moderation, privacy, and law enforcement requests.

International Alignment

Globally, the IT Rules reflect regulatory trends toward platform accountability, transparency reporting, age‑gating and content classification, comparable in emphasis to certain international approaches (EU, UK and some regional frameworks) while retaining India‑specific measures (in‑India officer requirements, court/order‑based first‑originator identification, and a statutory Code of Ethics for digital news/OTT). The Rules intersect with international debates on intermediary liability, end‑to‑end encryption, privacy concerns arising from tracing mechanisms, and balancing harmful content removal with fundamental rights. They also echo global regulatory focus on transparency reports and content classification/age ratings for online content.

Implementation Timeline

Date	Event
2021-02-25	Principal Rules notified (G.S.R. 139(E)) — IT (Intermediary Guidelines & Digital Media Ethics Code) Rules, 2021 published in the Official Gazette.
2021-02-26	Central Government notification specifying threshold of 50 lakh registered users for 'significant social media intermediary' (public communications and consequential staging of SSMI obligations followed).
2021-05-26	Approximate three‑month compliance window referenced for additional SSMI due‑diligence obligations to come into effect (staged compliance in practice across 2021).
2021-05-26	Public notices and Rule 18 formats published/communicated for digital publishers/OTT (MIB communications and administrative formats circulated).
2022-10-28	Government notified amendments to the 2021 Rules (G.S.R. 794(E) dated 28 October 2022) introducing additional procedures and provisions, including grievance appellate committees and related changes.
2023-04-06	Further amendments notified (G.S.R. 275(E) dated 6 April 2023) introducing additional procedures and provisions, including online gaming provisions and other refinements.
2021-2025	Ongoing litigation, administrative clarifications and subsequent advisories; draft amendments on issues such as synthetically generated content (AI/deepfakes) published for stakeholder comment in 2025.

Compliance Checklist

Requirement	Description
Publish terms/privacy policies	Make terms of service, privacy policy and community standards available to users in English and in user‑relevant languages (Eighth Schedule languages where applicable).
Grievance redressal	Publish Grievance Officer contact details; acknowledge complaints within 24 hours; dispose of grievances within 15 days; urgent removal within 24 hours for private sexual content/impersonation/morphed images; act on other specified unlawful content within 72 hours where applicable.
SSMI officer appointments	Significant Social Media Intermediaries must appoint in‑India: Chief Compliance Officer, Nodal Contact Person (24x7 coordination), and Resident Grievance Officer; maintain a physical contact address in India.
Monthly compliance reports	SSMIs must publish monthly compliance reports and transparency disclosures as specified by MeitY.
First‑originator traceability	SSMIs providing messaging services must enable identification of the "first originator" when ordered by a court or under section 69, subject to statutory safeguards and limits (only for specified offences and without requiring disclosure of message content).
Publishers (news/OTT) obligations	Adopt self‑classification and age‑rating frameworks (U, U/A 7+, U/A 13+, U/A 16+, A); implement parental locks and age verification for adult content; comply with three‑tier grievance mechanism and liaison with MIB.
Technical measures and oversight	Deploy reasonable and proportionate technical measures (e.g., detection mechanisms for CSAM) with human oversight, periodic review of automated tools and record‑keeping to demonstrate due diligence.

Sources and References

Source	Type
Gazette Notification - Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021	Official Gazette
Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (updated 22.10.2025)	Government Website
IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 English	Government Website
Information Technology (Guidelines for Intermediaries and Digital Media Ethics Code) Rules, 2021	Government Website