Authored By: Sahibpreet Singh
Rayat Bahra University, Mohali
Introduction
Artificial Intelligence (AI) has transformed the creation and dissemination of digital content, offering unprecedented opportunities for innovation across sectors. Among its most controversial developments is the emergence of deepfakes—highly realistic audio, image, and video content generated or manipulated using deep learning algorithms. While such technology has legitimate applications in education, entertainment, healthcare, and accessibility, it has increasingly been misused to spread misinformation, commit financial fraud, facilitate identity theft, produce non-consensual intimate imagery, and manipulate public opinion. The rapid proliferation of deepfake content poses significant legal and ethical challenges, particularly in jurisdictions where specific legislative frameworks are yet to evolve.
India has witnessed a sharp increase in the circulation of AI-generated deceptive content through social media platforms and digital communication channels. Incidents involving fabricated videos of public personalities, celebrities, and ordinary citizens have highlighted the inadequacy of existing legal mechanisms in effectively addressing the unique harms caused by deepfakes. Although several statutory provisions under the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 provide indirect remedies, they were enacted before the widespread adoption of generative AI and therefore fail to comprehensively regulate this emerging technology.
This article argues that India’s existing legal framework is fragmented and insufficient to address the complex challenges posed by deepfakes. It examines the present legal position, identifies regulatory gaps, and proposes legislative and policy reforms necessary to balance technological innovation with the protection of individual rights, democratic values, and public trust.
Existing Legal Framework Governing Deepfakes in India
Unlike several jurisdictions that are actively developing AI-specific legislation, India currently lacks a dedicated statute regulating deepfake technology. Consequently, legal disputes involving AI-generated deceptive content are addressed through a combination of constitutional principles, criminal law, information technology legislation, intellectual property law, and intermediary liability provisions.
The Information Technology Act, 2000 remains the principal legislation governing cyber-related offences. Section 66C criminalises identity theft through the fraudulent use of another person’s electronic signature, password, or unique identification feature. Section 66D penalises cheating by personation using computer resources, while Section 67 and Section 67A prohibit the electronic publication or transmission of obscene and sexually explicit material. These provisions may apply where deepfakes are used for impersonation, fraud, or the circulation of manipulated intimate content. Nevertheless, these offences were not drafted with AI-generated synthetic media in mind and therefore address only specific consequences rather than the creation and dissemination of deepfakes themselves.
The Bharatiya Nyaya Sanhita, 2023 further strengthens criminal liability by penalising cheating, forgery, defamation, criminal intimidation, and offences affecting the reputation and dignity of individuals. Deepfake videos intended to deceive the public, extort victims, or damage reputations may fall within these provisions. However, the absence of an express statutory definition of deepfakes creates uncertainty regarding investigation, prosecution, and evidentiary standards.
Constitutional protections also play a significant role. Article 21 of the Constitution guarantees the right to life and personal liberty, which the Supreme Court has interpreted to include the right to privacy. In Justice K.S. Puttaswamy (Retd.) v. Union of India, the Court recognised informational privacy as an intrinsic component of Article 21. Deepfake technology directly threatens this constitutional guarantee by enabling the unauthorised manipulation and dissemination of an individual’s likeness without consent.
Similarly, Articles 19(1)(a) and 19(2) require a careful balance between freedom of speech and reasonable restrictions. While AI-generated content may constitute protected expression in certain contexts, deliberate fabrication intended to deceive the public, incite violence, or violate individual rights cannot claim absolute constitutional protection. Consequently, regulation must carefully distinguish between legitimate creative expression and malicious synthetic media.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 impose due diligence obligations upon intermediaries, requiring them to remove unlawful content upon receiving valid legal notice and to cooperate with law enforcement agencies. Although these rules strengthen platform accountability, they primarily operate after harmful content has already circulated rather than preventing its creation or rapid dissemination.
The fragmented nature of these legal provisions demonstrates that India’s current regulatory approach remains reactive rather than preventive. As AI technologies become increasingly sophisticated, reliance upon scattered statutory provisions is unlikely to provide an effective legal response to the growing threat posed by deepfakes.
III. Challenges, Comparative Perspectives, and the Need for Reform A. Regulatory Challenges in India
The absence of a comprehensive legal framework specifically governing deepfakes presents several practical and legal challenges. First, existing legislation does not define “deepfake” or distinguish between harmless AI-generated content and malicious synthetic media. This ambiguity often complicates criminal investigations and judicial interpretation.
Secondly, the speed at which manipulated content spreads on social media significantly exceeds the pace of legal intervention. Even when unlawful content is eventually removed, the reputational, emotional, and financial harm suffered by victims may be irreversible. Women, journalists, political leaders, and public figures are particularly vulnerable to AI-generated impersonation and non-consensual explicit content.
Another challenge concerns evidentiary issues. As AI-generated media becomes increasingly realistic, courts and investigating agencies may encounter difficulties in determining authenticity. The burden of proving digital manipulation frequently requires specialised forensic expertise, which remains limited within many investigative agencies.
Further, intermediary liability remains uncertain. While social media platforms are required to exercise due diligence under the Information Technology Rules, 2021, there is no statutory obligation requiring proactive detection or labelling of AI-generated content. Consequently, harmful deepfakes often remain publicly accessible for extended periods before appropriate action is taken.
Comparative International Approaches
Several jurisdictions have begun adopting AI-specific regulatory frameworks that may offer valuable guidance for India.
The European Union AI Act adopts a risk-based regulatory approach by imposing transparency obligations on providers of AI systems. Certain AI-generated content must be clearly labelled to ensure that users are informed whenever they are interacting with synthetic media. The legislation also establishes compliance obligations for developers and deployers of high-risk AI systems.
China has introduced detailed regulations governing deep synthesis technologies. Service providers are required to verify user identities, implement security assessments, and prominently identify AI-generated content. The regulations also impose significant responsibilities on digital platforms to prevent misuse.
In the United States, although there is no comprehensive federal legislation, several states have enacted laws addressing deepfakes, particularly in relation to elections and non-consensual intimate imagery. These measures recognise that AI-generated deception may threaten democratic processes as well as individual privacy.
These comparative developments demonstrate a growing international consensus that traditional cyber laws alone are insufficient to regulate rapidly evolving AI technologies.
Recommendations for India
India should adopt a comprehensive statutory framework specifically regulating AI-generated synthetic media. Such legislation should clearly define “deepfakes,” classify prohibited uses, and distinguish malicious manipulation from legitimate artistic, educational, research, and satirical expression.
Secondly, mandatory disclosure requirements should be introduced for AI-generated audiovisual content. Visible labels or digital watermarking would significantly reduce public deception while preserving legitimate innovation.
Thirdly, intermediary obligations should be strengthened by requiring major digital platforms to deploy AI-based detection mechanisms, establish expedited grievance redressal procedures, and remove harmful deepfakes within prescribed timelines after verification.
The Government should also establish specialised digital forensic laboratories equipped to authenticate AI-generated evidence. Simultaneously, law enforcement agencies, prosecutors, and judicial officers should receive continuous training regarding emerging AI technologies and digital evidence.
Finally, public awareness campaigns are equally important. Citizens should be educated about identifying manipulated media, verifying digital information, and reporting suspicious content. Legal regulation alone cannot eliminate the risks associated with deepfakes without improving digital literacy among users.
Conclusion
Artificial Intelligence has become an integral component of contemporary digital society, but its misuse through deepfake technology presents unprecedented legal challenges. India’s existing legal framework provides only fragmented remedies through cyber laws, criminal law, constitutional protections, and intermediary regulations. While these provisions may address certain consequences of deepfake misuse, they fail to comprehensively regulate the creation, dissemination, and governance of AI-generated synthetic media.
This article has argued that India requires a dedicated legislative framework capable of balancing technological innovation with constitutional rights, privacy, dignity, and freedom of expression. International developments, particularly within the European Union and China, illustrate that proactive regulation can coexist with responsible technological advancement.
A future-ready legal framework should define deepfakes, impose transparency obligations, strengthen intermediary accountability, enhance digital forensic capacity, and promote public awareness. Such reforms would not only protect individuals from emerging digital harms but also reinforce public confidence in digital communication and democratic institutions. As Artificial Intelligence continues to evolve, Indian law must evolve alongside it to ensure that technological progress remains consistent with constitutional values and the rule of law.
Bibliography
Legislation
Constitution of India.
Bharatiya Nyaya Sanhita, 2023.
Information Technology Act, 2000.
Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
European Union Artificial Intelligence Act, 2024.
Cases
Justice K.S. Puttaswamy (Retd.) v Union of India (2017) 10 SCC 1.
Shreya Singhal v Union of India (2015) 5 SCC 1.
Books and Articles
Russell S and Norvig P, Artificial Intelligence: A Modern Approach (4th edn, Pearson 2021).
Citron DK, ‘Deep Fakes: A Looming Challenge for Privacy, Democracy and National Security’ (2019).
NITI Aayog, National Strategy for Artificial Intelligence (Government of India, 2018).
Reports and Online Sources
Ministry of Electronics and Information Technology (MeitY), Government of India.
European Commission, Artificial Intelligence Act.
World Economic Forum reports on Artificial Intelligence and Digital Governance.
