Online platforms operating in India get conditional "safe harbor" protection from liability for user content under Section 79 of the IT Act, 2000, provided they meet due-diligence obligations under the IT Rules, 2021 (as amended) -- including a mandatory India-based Grievance Officer, and, for larger platforms, additional compliance and traceability requirements.
Section 79 -- the safe harbor
Section 79 of the Information Technology Act, 2000 exempts an intermediary -- a platform hosting
third-party content -- from liability for that content, provided the intermediary does not initiate the
transmission, select the receiver, or modify the information, observes the due diligence prescribed by rules,
and, on receiving actual knowledge of unlawful content (including through a court or government order),
expeditiously removes or disables access to it. This remains the foundational legal basis on which platforms
operating in India host user-generated content without being treated as the publisher of everything users
post.
Due diligence under the IT Rules, 2021
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended,
require every intermediary to publish a privacy policy and terms of service, inform users of prohibited
content categories, and appoint an India-based Grievance Officer who must acknowledge complaints within 24
hours and resolve most of them within 15 days (with shorter windows for specific categories like non-consensual
intimate imagery). For an NRI targeted by impersonation, a fake profile, or non-consensual content on an Indian
or India-facing platform, filing a formal complaint with the platform’s Grievance Officer -- rather than
only using the platform’s general in-app reporting tool -- creates a documented timeline that becomes
important if the matter later needs to be escalated to the Grievance Appellate Committee or to a police
complaint.
Enhanced obligations for large platforms
“Significant Social Media Intermediaries” -- platforms above a government-notified user
threshold -- face additional obligations: an India-based Chief Compliance Officer, Nodal Contact Person, and
Resident Grievance Officer, monthly transparency reports, and the traceability requirement under Rule 4(2),
which obliges messaging platforms to be able to identify the “first originator” of specific
unlawful content upon a valid judicial or government order. This traceability rule has been the subject of
ongoing constitutional litigation by messaging platforms and remains an actively contested, not fully settled,
area of law. A Grievance Appellate Committee mechanism, introduced by a 2022 amendment, allows users to appeal
an intermediary’s grievance-officer decision to a government-constituted body rather than only to court.
Is a website automatically liable for defamatory content posted by a user?
Generally not, if it qualifies as an intermediary under Section 79 and observes the due-diligence
requirements -- but the safe harbor is conditional, not absolute, and the platform must expeditiously remove
unlawful content once it has actual knowledge of it, including through a valid court or government order.
What is the traceability requirement and why is it controversial?
It requires large messaging platforms to be able to identify the first originator of specific unlawful
content when ordered to by a court or the government -- messaging platforms have challenged this in court on
privacy and encryption grounds, and the issue remains subject to ongoing litigation rather than being fully
and finally resolved.
Can I appeal a platform’s decision on my content-removal complaint without going to court?
Yes -- the Grievance Appellate Committee mechanism, introduced in 2022, lets a user appeal an
intermediary’s grievance-officer decision to a government-constituted appellate body, offering a route
short of full civil litigation.
