India - Digital Media Ethics Code (2021)

Overview

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 ("IT Rules, 2021") were notified by the Ministry of Electronics & Information Technology (MeitY) on 25 February 2021 (G.S.R. 139(E)). The instrument is framed under section 87(2) of the Information Technology Act, 2000 and supersedes the Information Technology (Intermediaries Guidelines) Rules, 2011. The Rules are structured in parts: Part II (due diligence and grievance redressal obligations for intermediaries) is administered by MeitY; Part III (Code of Ethics and procedure for digital media, online news and online curated content/OTT) is administered by the Ministry of Information & Broadcasting (MIB). The Rules update intermediary due-diligence obligations, introduce special obligations for 'significant social media intermediaries' and create a three‑tier Code of Ethics and grievance redressal framework for digital news and OTT (online curated) content.

Definitions

Key definitions used in the Rules include: Intermediary — as defined in the Information Technology Act, 2000 (entities that host, transmit or provide access to third‑party content); Social Media Intermediary and Significant Social Media Intermediary (SSMI) — defined by function and user threshold (SSMI = social media intermediary above a notified user threshold, the Central Government notified 50 lakh registered users); Publisher / Publisher of news and current affairs content / Publisher of online curated content — defined for Part III (digital news portals, OTT and curated catalogs respectively); Grievance Officer, Chief Compliance Officer, Nodal Contact Person, Resident Grievance Officer — specified officer roles with in‑India residency requirements for certain roles; First originator — the user within India who first originated information on an intermediary’s resource (subject to judicial/safeguard limits for disclosure).

Governance and Institutional Framework

Part II (intermediary due diligence and grievance redressal) is overseen by the Ministry of Electronics & Information Technology (MeitY). Part III (Code of Ethics and grievance architecture for digital news and online curated content/OTT) is administered by the Ministry of Information & Broadcasting (MIB). The Rules require intermediaries to designate officers and contact points in India (including for SSMIs: a Chief Compliance Officer, a Nodal Contact Person for 24x7 coordination with law enforcement, and a Resident Grievance Officer). MeitY has also established mechanisms for grievance appeal and administrative guidance (including a Grievance Appellate Committee portal and related communications). Relevant central government agencies and the judiciary issue orders and directions under statutory powers (e.g., orders under section 69 of the IT Act) that interact with the Rules.

Key Focus Areas

• Due diligence obligations for intermediaries: publish and follow terms of service, privacy policies and community standards; adopt reasonable measures to prevent hosting and dissemination of unlawful information; provide notice/opportunity to be heard and dispute mechanisms where removals are taken on the intermediary’s own accord.
• Grievance redressal: intermediaries must publish Grievance Officer contact details; acknowledge complaints within 24 hours and dispose of grievances within 15 days; urgent removal (within 24 hours) for private sexual content, impersonation/morphed images; other specified unlawful content to be acted upon as expeditiously as possible and in any case within 72 hours where applicable.
• Enhanced obligations for Significant Social Media Intermediaries (SSMIs): appoint in‑India officers (Chief Compliance Officer, Nodal Contact Person, Resident Grievance Officer), publish monthly compliance reports, maintain a physical contact address in India, implement mechanisms for Indian users (including voluntary account verification marks), and comply with staged compliance deadlines following notification of user thresholds.
• First‑originator identification: for SSMIs providing messaging services, enable identification of the "first originator" of information when ordered by a court or under section 69, subject to statutory safeguards and limits (identification permitted only for specified serious offences; message content disclosure is not required under this provision).
• Code of Ethics and three‑tier grievance architecture for digital news and online curated content/OTT: publishers must self‑classify and age‑rate content, implement parental locks/age verification where required, follow journalistic norms/programme codes as applicable, and submit to Level I (publisher) → Level II (self‑regulatory body) → Level III (MIB oversight) grievance escalation.
• Online gaming and other sectoral additions: later amendments included provisions addressing online gaming intermediaries (including special obligations for real‑money games), grievance appellate committees and fact‑checking mechanisms.

Implementation Framework

The Rules set out specific operational requirements and timelines: intermediaries must make available terms of service, privacy policies and user agreements in English and in the relevant languages of user choice (languages included in the Eighth Schedule where applicable). Grievance redressal processes must be published with contact details and timelines (acknowledgement within 24 hours; disposal within 15 days). SSMIs are subject to additional compliance layers including monthly transparency reporting and in‑India officer appointments. MeitY staged certain obligations (for SSMIs) to come into effect three months after notification of the applicable registered user threshold. Part III requires publishers of news and online curated content/OTT to adopt self‑classification and age‑rating frameworks (U, U/A 7+, U/A 13+, U/A 16+, A), parental controls, and the three‑tier grievance mechanism with registration/engagement with MIB where applicable. The Rules also require reasonable and proportionate deployment of technical measures (for example, for detection of child sexual abuse material) with human oversight and periodic review of automated tools.

Monitoring and Evaluation

Monitoring mechanisms include mandatory monthly compliance reports for SSMIs, publication of transparency reports, and administrative oversight by MeitY and MIB in their respective domains. Enforcement actions and compliance assessments may be triggered by government removal/disablement orders, judicial orders, or findings that an intermediary has not observed due diligence (which can affect safe‑harbour immunity under section 79 of the IT Act). MeitY and MIB issue guidance, formats (including Rule 18 formats for digital publishers/OTT), and clarifications to assist implementation; periodic amendments and notifications (including those of 28 October 2022 and 6 April 2023) have refined processes and added mechanisms such as grievance appellate committees.

Penalties, Liability, and Appeals

Non‑compliance with the Rules can lead to loss of intermediary safe‑harbour protections under section 79 of the Information Technology Act, 2000, thereby exposing intermediaries to civil and criminal liability for third‑party content. Enforcement mechanisms include removal/disablement orders issued under the IT Act, oversight and directions by appropriate government agencies, judicial orders, and administrative consequences under the Rules. The Rules and subsequent administrative arrangements provide for grievance appeal mechanisms (including the Grievance Appellate Committee portal) and staged compliance deadlines; intermediaries are required to maintain records and demonstrate due diligence to preserve legal protections.

Relationship to Other Instruments

The IT Rules, 2021 operate under and alongside the Information Technology Act, 2000 (notably Sections 69, 79 and 87). They interact with other rules such as the Information Technology (Procedure and Safeguards for Interception, Monitoring and Decryption of Information) Rules, 2009 (which relate to orders under section 69). Subsequent amendment notifications that modify or add procedures include G.S.R. 794(E) dated 28 October 2022 and G.S.R. 275(E) dated 6 April 2023. The Rules must be read in the broader context of Indian law and administrative guidance applicable to digital media, content moderation, privacy, and law enforcement requests.

International Alignment

Globally, the IT Rules reflect regulatory trends toward platform accountability, transparency reporting, age‑gating and content classification, comparable in emphasis to certain international approaches (EU, UK and some regional frameworks) while retaining India‑specific measures (in‑India officer requirements, court/order‑based first‑originator identification, and a statutory Code of Ethics for digital news/OTT). The Rules intersect with international debates on intermediary liability, end‑to‑end encryption, privacy concerns arising from tracing mechanisms, and balancing harmful content removal with fundamental rights. They also echo global regulatory focus on transparency reports and content classification/age ratings for online content.

Implementation Timeline

Sources and References