The Illusion of Truth: Navigating the Legal Landscape of Deepfakes in India

By- Joshua Yash Pandey

Abstract

The rapid proliferation of Artificial Intelligence (AI) has birthed 'deepfakes'—highly realistic, synthetic media capable of manipulating audio and video with alarming accuracy. In India, the malicious use of this technology has surged, targeting celebrities, politicians, and everyday citizens, thereby threatening privacy, democratic integrity, and national security. The historical premise of the internet, where seeing is believing, has been fundamentally shattered by this technology. This paper examines the current legal landscape in India concerning the creation and dissemination of deepfakes. While India currently lacks dedicated AI-specific legislation, regulatory measures are drawn from a patchwork of existing laws. The Information Technology Act, 2000, alongside the Information Technology Rules, 2021, provides primary mechanisms for intermediary liability and privacy protection. Additionally, the newly enacted Bharatiya Nyaya Sanhita, 2023, addresses traditional crimes translated into the digital sphere, such as defamation, cheating, and extortion. Furthermore, the Digital Personal Data Protection Act, 2023, offers potential safeguards against the unauthorized data scraping used to train deepfake algorithms. However, these frameworks remain largely reactive, struggling against the speed, anonymity, and cross-border nature of the internet. This article argues that to effectively combat the deepfake menace, India must transition from a reactive posture to a proactive regulatory regime. It advocates for mandatory watermarking, stringent metadata tracking, and the development of standalone AI legislation, ensuring that the law evolves concurrently with technological advancements to protect the rights of digital citizens.

Keywords: Deepfakes, Artificial Intelligence, Cyber Law, Information Technology Act, Bharatiya Nyaya Sanhita, Digital Personal Data Protection Act, Synthetic Media.

I. Introduction

Imagine waking up to a viral video of yourself saying or doing something you never did. For the average modern internet user, this sounds like an episode of a dystopian sci-fi movie. However, with the dynamic advancement of Artificial Intelligence (AI), this is our current reality. "Deepfakes"—highly realistic, AI-generated synthetic media have successfully blurred the lines between fact and fiction. Recently, India has witnessed a surge in malicious deepfakes, from morphed videos of prominent Bollywood celebrities to manipulated clips of politicians during election campaigns. Not even atrocities are spared by fake videos of “victims” asking for monetary help. While the underlying technology is fascinating, its weaponization raises severe concerns regarding privacy, defamation, and national security.

For the layman, the internet has historically operated on a very basic premise: "Seeing is believing". Deepfakes weaponize this foundational trust. The implications extend far beyond celebrity gossip. For an everyday citizen, falling victim to a deepfake can mean severe reputational damage, financial fraud (through AI voice cloning), or becoming the target of non-consensual deepfake pornography. The immediate question that arises is: If someone creates a fake video of me, does the law protect me?.

II. The Lawman’s Perspective: Existing Legal Safeguards

 While India does not currently possess a singular, dedicated "AI Act". Instead, legal professionals and law enforcement rely on a patchwork of existing statutes to tackle the issue. Jurisprudence regarding digital manipulation is still evolving, requiring courts to interpret traditional laws broadly to cover synthetic media. Here is how the current legal framework addresses deepfakes:

1. The Information Technology (IT) Act, 2000 

This remains the primary weapon against cybercrimes in India.

●      Section 66E of the IT Act penalizes the violation of privacy, specifically the unauthorized capturing or publishing of an individual's private areas.

●      Sections 67 and 67A tackle the publishing or transmission of obscene or sexually explicit material in electronic form.

●      Crucially, under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, social media platforms are mandated to remove content that violates user privacy or depicts them in partial or full nudity (which covers deepfake pornography) within 24 hours of receiving a complaint.¹

2. The Bharatiya Nyaya Sanhita (BNS), 2023

 Traditional criminal laws still apply to the digital frontier. If a deepfake is used to ruin someone's reputation, provisions related to Defamation under the Bharatiya Nyaya Sanhita (BNS) can be invoked. If the synthetic media is utilized to extort money, bypass biometric security, or commit financial fraud, provisions dealing with Cheating, Forgery, and Extortion come into active play.² The transition to the BNS reflects a modernized approach to criminal justice, yet the evidentiary burden of proving the synthetic nature of a video remains a significant hurdle for prosecutors during trial.

3. The Digital Personal Data Protection (DPDP) Act, 2023 

The recently enacted DPDP Act gives individuals greater autonomy over their personal data. Because creating a convincing deepfake requires vast amounts of a person's photos and voice samples (data) to train the AI, the unauthorized scraping and processing of this data without explicit consent could trigger stringent penalties under this legislative framework.³ The fiduciary duty imposed on data processing entities means that AI developers must establish clear, consent-driven mechanisms for acquiring their training datasets.

III. The Gap: Where the Law Lags Behind Technology 

While these legal provisions exist, applying them to deepfakes is akin to trying to catch a modern bullet train with a horse-drawn carriage. The current framework is largely reactive and legal machinery typically kicks into gear only after the damage is done and the video has gone viral. Furthermore, pinpointing the original creator of a deepfake is incredibly difficult due to the anonymous nature of the internet. By the time an intermediary platform takes down a video, it has usually been downloaded and forwarded across encrypted messaging apps, making it nearly impossible to scrub from the internet entirely.

Moreover, jurisdictional challenges further complicate the tracing of perpetrators. Deepfakes can be generated in one country, hosted on servers in a second, and circulated globally across multiple jurisdictions. This borderless nature of cybercrime renders domestic statutes somewhat toothless without robust international cooperation and streamlined Mutual Legal Assistance Treaties (MLATs). The technical asymmetry between local law enforcement agencies and malicious actors also means that digital forensics often lag behind the sophisticated generative adversarial networks (GANs) used to create this synthetic media.

IV. Conclusion

 To genuinely protect its digital citizens, India needs a proactive and highly specific regulatory approach. We require clear guidelines on AI development, mandatory visible watermarking and metadata tracking for AI-generated content (so viewers inherently know a video is synthetic), and stricter, targeted penalties for creators of malicious deepfakes. The recent advisories and proposed amendments issued by the Ministry of Electronics and Information Technology (MeitY) urging platforms to actively curb the proliferation of deepfakes establish a strong foundational step, but they must eventually evolve into concrete, standalone legislation.⁴

As AI continues to evolve at a breakneck pace, the law cannot afford to remain static. The continuous dialogue between the Layman and the Lawman has never been more critical. It is only through robust legal awareness and progressive legislative reforms that we can ensure technology remains a tool for societal empowerment, rather than an instrument of deception. Law must remain to sustain the upper hand on AI and not be crushed by it’s atrocious growth.

¹ The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, r. 3(2)(b).

² The Bharatiya Nyaya Sanhita, 2023 (Act 45 of 2023).

³ The Digital Personal Data Protection Act, 2023 (Act 22 of 2023).

⁴ Ministry of Electronics and Information Technology, "Advisory to Intermediaries on deepfakes and misinformation," Government of India (2023).

Note - The information contained in this blog is for general information purposes only. We endeavour to keep all the information up to date and try our level best to avoid any misinformation or any kind of objectionable content. If you found any misinformation or objectionable contents in this website please report us at editors.ilw@gmail.com