Authored By: Aqsa Choudhry
Lloyd Law College
Introduction
Artificial Intelligence has transformed the digital landscape, making the creation of digital content significantly easier than before. One of its most controversial developments is deepfake technology, which uses machine learning to generate highly realistic but fabricated images, videos, and audio recordings. While the technology has legitimate applications in education, entertainment, and accessibility, it has increasingly been exploited for fraud, political misinformation, identity theft, and the creation of non-consensual intimate content. These developments pose significant challenges to the administration of justice and the protection of individual rights.
This article argues that although India’s existing legal framework offers partial protection against offences involving deepfakes, it does not adequately address the unique risks created by this technology. A dedicated legal framework, supported by stronger enforcement mechanisms and technological safeguards, is necessary to effectively combat deepfake-related crimes.
Existing Legal Framework
Currently, India regulates offences related to deepfakes through a combination of criminal and information technology laws rather than a specific statute dedicated to artificial intelligence. The Information Technology Act, 2000,1 contains provisions relating to identity theft, cheating by personation through computer resources, and the publication or transmission of obscene material in electronic form. These provisions can be invoked when deepfake content is used to deceive individuals or circulate unlawful material online.
Similarly, the Bharatiya Nyaya Sanhita, 2023,2 provides remedies for offences such as cheating, forgery, criminal intimidation, defamation, and the publication of false information causing harm. Depending on the facts of each case, these provisions may be applied to individuals responsible for creating or distributing manipulated digital content.
The Digital Personal Data Protection Act, 2023,3 also contributes to the legal framework by recognizing the importance of protecting personal data and requiring the lawful processing of such information. Since deepfakes frequently involve the unauthorized use of a person’s image, voice, or personal data, the legislation strengthens privacy protection.4 However, it primarily governs data processing rather than the criminal misuse of artificial intelligence.
Although these laws collectively provide certain remedies, they were enacted without specifically anticipating the sophisticated capabilities of modern generative AI. As a result, several legal and practical gaps remain.
Challenges in Addressing Deepfake Crimes
The absence of a statutory definition of “deepfake” under Indian law is the most immediate challenge. Without a clear legal definition, investigating agencies and courts must rely on existing offences that were drafted for conventional forms of cybercrime. This approach often creates uncertainty regarding the appropriate legal provisions applicable to AI-generated content.
Another significant concern relates to the rapid dissemination of deepfake content through social media platforms. A manipulated video can reach millions of users within hours, causing irreversible damage to an individual’s reputation before authorities are able to respond. Existing legal remedies generally become effective only after harm has already occurred, making them largely reactive instead of preventive.5
Deepfakes also threaten democratic processes. Fabricated speeches or videos of political leaders circulated during election periods may influence public opinion, reduce trust in institutions, and encourage the spread of misinformation. Although the Election Commission and other regulatory bodies monitor digital campaigns, AI-generated misinformation presents challenges that existing mechanisms are not fully equipped to address.
Furthermore, victims of deepfake pornography, particularly women, often suffer severe emotional distress, reputational damage, and violations of privacy. While criminal provisions relating to obscenity, harassment, and privacy may be invoked, the absence of specific procedures for the immediate removal of such content frequently prolongs victimization.
The Need for Legal Reform
India should adopt a comprehensive legal framework specifically regulating the malicious uses of deepfake technology. Such legislation should define deepfakes, distinguish legitimate creative applications from harmful misuse, and prescribe proportionate penalties for offences involving fraud, impersonation, electoral manipulation, and non-consensual intimate content.
Social media intermediaries should also be required to implement effective AI-detection tools and establish prompt mechanisms for removing verified deepfake content. Greater transparency regarding AI-generated media would help users distinguish authentic material from manipulated content. The Ministry of Electronics and Information Technology (MeitY) has, through its advisories to intermediaries, already urged proactive measures to detect and remove AI-generated harmful content, signalling the government’s growing concern regarding deepfakes.6
In addition, law enforcement agencies require specialized training in artificial intelligence, cyber forensics, and digital evidence collection. Public awareness campaigns should educate citizens about identifying suspicious content and reporting potential misuse before it spreads widely.
Finally, international cooperation will become increasingly important, because deepfake crimes frequently involve cross-border digital platforms and anonymous online actors. Collaborative investigations and information-sharing agreements can strengthen enforcement efforts against transnational cybercrime.
Conclusion
Deepfake technology represents one of the most significant legal challenges emerging from advances in artificial intelligence. Although existing Indian laws provide limited remedies through the Information Technology Act, the Bharatiya Nyaya Sanhita, and data protection legislation, these statutes were not designed to regulate sophisticated AI-generated manipulation. Consequently, important legal gaps remain in defining offences, preventing misuse, and ensuring swift remedies for victims.
A dedicated legal framework, combined with stronger technological safeguards, platform accountability, and improved investigative capacity, would enable India to respond more effectively to the growing threat posed by deepfakes. As artificial intelligence continues to evolve, the law must develop at a similar pace to preserve privacy, protect democratic values, and maintain public confidence in digital information.
Bibliography
Legislation
- Bharatiya Nyaya Sanhita 2023.
- Digital Personal Data Protection Act 2023.
- Information Technology Act 2000.
Cases
- Justice K.S. Puttaswamy (Retd) v Union of India (2017) 10 SCC 1.
- Shreya Singhal v Union of India (2015) 5 SCC 1.
Government Documents
- Ministry of Electronics and Information Technology, Advisory to Intermediaries on AI and Deepfakes (2024).
Books
- Avtar Singh, Introduction to Cyber Law (4th edn, Lexis Nexis 2023).
Journal Articles
- Apar Gupta, ‘Artificial Intelligence, Deepfakes and the Future of Indian Cyber Law’ (2024) Indian Journal of Law and Technology.
