Author: Shilpa Satish Agrawal
Lala Lajpat Rai College of Law
Artificial Intelligence (AI) has transformed the digital ecosystem by enabling the creation of highly realistic images, videos, and audio recordings that are almost impossible to distinguish from genuine content. These AI-generated manipulations, popularly known as deepfakes, have emerged as a double-edged sword. While they have legitimate applications in education, entertainment, healthcare, and filmmaking, they also facilitate identity theft, financial fraud, cyberbullying, misinformation, political propaganda, and violations of privacy. India has witnessed a significant increase in the circulation of manipulated videos involving celebrities, politicians, journalists, and ordinary citizens, exposing serious gaps in the country’s legal framework.
At present, India does not have a dedicated legislation regulating deepfake technology. Victims are compelled to rely on provisions of the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023, the Digital Personal Data Protection Act, 2023, and constitutional protections relating to privacy and dignity. Although these laws provide partial remedies, they fail to comprehensively address the unique challenges posed by AI-generated synthetic media. This article analyses the existing legal framework, discusses relevant judicial precedents, and argues that India requires specialized legislation to effectively regulate deepfakes while maintaining a balance between technological innovation and the protection of fundamental rights.
The rapid development of generative artificial intelligence has fundamentally changed the way digital content is created and consumed. Today, anyone with access to AI software can produce convincing videos or audio recordings that portray individuals saying or doing things that never actually occurred. These manipulated creations, known as deepfakes, are becoming increasingly sophisticated and difficult to detect.
The misuse of deepfakes extends far beyond entertainment. They have been used to impersonate business executives, create non-consensual intimate images, manipulate political campaigns, spread fake news, and commit online fraud involving enormous financial losses. The viral nature of social media further amplifies the damage, often causing irreversible harm before authorities can intervene.
Indian law currently addresses these issues through a combination of cyber laws, criminal provisions, and constitutional principles rather than through a dedicated statute. This fragmented approach creates uncertainty regarding liability, victim protection, intermediary responsibility, and enforcement mechanisms. As artificial intelligence continues to evolve, an important legal question arises: Is the existing Indian legal framework sufficient to regulate deepfake technology, or has the time come for comprehensive legislative reform?
Artificial Intelligence (AI): A branch of computer science that enables machines to perform tasks requiring human intelligence, including learning, reasoning, and content generation.
Deepfake: AI-generated synthetic media that realistically imitates a person’s facial expressions, voice, or actions using machine learning algorithms.
Synthetic Media: Digitally generated or manipulated content created wholly or partially through artificial intelligence.
Identity Theft: The unauthorized use of another person’s personal information, image, or identity for fraudulent or deceptive purposes.
Right to Privacy: A fundamental right under Article 21 of the Constitution protecting an individual’s dignity, autonomy, and informational privacy.
Defamation: The publication or communication of false statements that harm the reputation of an individual.
Consent: Voluntary, informed, and specific permission granted by an individual before the use or processing of their personal data.
Cybercrime: Criminal activity committed through computers, electronic devices, or digital communication networks.
Intermediary: A digital platform or service provider that hosts, stores, or transmits electronic information created by users.
Due Diligence: The legal obligation requiring intermediaries to take reasonable steps to prevent unlawful activities and remove illegal content upon receiving notice.
Deepfake technology illustrates how rapidly artificial intelligence has advanced beyond the pace of legal regulation. Powered by deep learning algorithms and neural networks, AI systems can analyze thousands of images and voice samples to create highly convincing synthetic media. Unlike traditional editing software, modern deepfake applications require minimal technical expertise, making them accessible to the general public.
This accessibility has significantly increased the misuse of digital technology. Fake videos portraying celebrities endorsing products, fabricated speeches attributed to political leaders, and manipulated recordings designed to extort money have become increasingly common across social media platforms.
The Constitution of India provides the first layer of protection against such misuse. Article 21 guarantees every individual the Right to Life and Personal Liberty, which has been judicially interpreted to include privacy, dignity, and autonomy. Deepfake content created without consent directly violates these constitutional values by exploiting a person’s identity and damaging their reputation.
The Information Technology Act, 2000, though enacted before the emergence of generative AI, contains provisions that may be applied to deepfake-related offences. Identity theft, cheating by personation using computer resources, and publication of objectionable electronic material can all attract liability under the Act. However, these provisions address the consequences of deepfake misuse rather than regulating the technology itself.
Similarly, the Bharatiya Nyaya Sanhita, 2023 provides criminal remedies where deepfake content amounts to cheating, forgery, criminal intimidation, defamation, or publication of false information causing public harm. While these provisions punish offenders after an offence has occurred, they do not establish preventive mechanisms or impose specific responsibilities on AI developers and online platforms.
Another significant development is the Digital Personal Data Protection Act, 2023, which strengthens the principle of consent-based processing of personal data. Facial images, biometric identifiers, and voice recordings constitute personal information that should not be processed without lawful authorization. The unauthorized creation of deepfakes using such data can therefore amount to a violation of privacy and data protection principles.
Despite these legal safeguards, enforcement remains challenging. Deepfakes can be generated anonymously, distributed across multiple jurisdictions within seconds, and viewed by millions before removal. Victims frequently encounter procedural delays while identifying perpetrators and obtaining relief.
The commercial implications are equally significant. Businesses increasingly rely on digital communication, and deepfake technology has enabled sophisticated scams involving cloned executive voices instructing employees to transfer funds or disclose confidential information. Such incidents demonstrate that deepfakes are no longer merely social media pranks but serious threats to cybersecurity and economic stability.
Political misuse presents another pressing concern. AI-generated campaign speeches, manipulated interviews, and fabricated news clips have the potential to influence public opinion and undermine democratic processes. During elections, even temporary circulation of false information may have irreversible consequences despite subsequent corrections or removals.
Internationally, regulators have begun recognizing these risks. Several jurisdictions have introduced transparency obligations requiring AI-generated content to be clearly labelled, while others have enacted laws specifically targeting malicious deepfakes and non-consensual intimate imagery. These developments acknowledge that conventional cyber laws alone are insufficient to address the unique characteristics of synthetic media.
India must adopt a forward-looking regulatory framework that balances innovation with accountability. Mandatory digital watermarking, disclosure requirements for AI-generated content, expedited takedown procedures, platform due diligence obligations, specialized cyber investigation units, and enhanced civil remedies would collectively provide a stronger legal response.
Such reforms would not prohibit technological advancement but instead encourage responsible AI development while safeguarding constitutional rights, personal dignity, and public confidence in digital information.
Another important issue concerns the liability of intermediaries such as social media platforms and AI service providers. These entities act as facilitators by hosting or generating content uploaded by users. Under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, intermediaries are expected to exercise due diligence and remove unlawful content upon receiving actual knowledge or a lawful order. However, deepfakes spread at an extraordinary speed, often reaching millions of viewers before any complaint is processed or content is taken down. This significantly reduces the effectiveness of existing mechanisms.
The absence of a statutory definition of “deepfake” further complicates enforcement. Law enforcement agencies are forced to rely on general offences such as cheating, forgery, impersonation, obscenity, or defamation instead of prosecuting the creation or distribution of malicious synthetic media itself. Consequently, victims often pursue multiple legal remedies simultaneously, increasing litigation costs and delaying justice.
Deepfakes also pose a substantial threat to the administration of justice. AI-generated videos or audio recordings may be produced to falsely implicate individuals or create fabricated evidence. As courts increasingly rely on electronic evidence, the authenticity and integrity of digital material become crucial. This requires stronger forensic capabilities and standardized verification procedures to distinguish genuine recordings from AI-generated manipulations.
The economic impact of deepfakes cannot be ignored. Financial institutions face increased risks of AI-enabled fraud, while content creators and artists encounter unauthorized cloning of their voices and likenesses. The rapid commercialization of generative AI therefore raises significant questions regarding intellectual property rights, personality rights, and commercial exploitation.
At the same time, regulation should not discourage innovation. Deepfake technology has legitimate uses in cinema, education, accessibility, historical reconstruction, language translation, and medical research.
India can draw inspiration from international developments. The European Union’s regulatory approach emphasizes transparency and accountability by requiring disclosure when content is AI-generated. Several jurisdictions in the United States have enacted laws targeting election-related deepfakes and non-consensual intimate imagery. These models demonstrate that AI-specific legislation can protect individual rights without hindering technological progress.
A comprehensive Indian framework should include:
● A statutory definition of deepfake and synthetic media.
● Mandatory disclosure and watermarking of AI-generated content.
● Civil compensation for victims of malicious deepfakes.
● Criminal penalties for intentional creation or dissemination of harmful deepfakes.
● Time-bound takedown obligations for intermediaries.
● Public awareness campaigns promoting digital literacy and responsible AI usage.
Such measures would strengthen legal certainty while encouraging ethical innovation and protecting public trust in digital communications.
1. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1
The Court held that informational privacy, dignity, and personal autonomy are integral to constitutional protection. Since deepfakes exploit an individual’s image, voice, or identity without consent, they directly interfere with these protected interests. The judgment provides a constitutional foundation for regulating malicious AI-generated content.
2. Shreya Singhal v. Union of India, (2015) 5 SCC 1
When striking down Section 66A of the Information Technology Act, the Supreme Court said that restrictions on online speech must see the constitutional standards of reasonableness. The decision is significant because any future legislation regulating deepfakes must carefully balance freedom of speech with the need to prevent fraud, misinformation, and violations of privacy.
3. Anvar P.V. v. P.K. Basheer, (2014) 10 SCC 473
The Supreme Court clarified the evidentiary requirements for electronic records and stressed the importance of authenticity and reliability before digital evidence can be admitted in court. In the era of AI-generated synthetic media, this principle becomes increasingly relevant, as courts must ensure that manipulated recordings are not treated as genuine evidence.
Deepfake technology represents one of the most complex legal challenges of the artificial intelligence era. Although existing Indian laws provide remedies through constitutional protections, cyber legislation, criminal law, and data protection principles, these provisions were enacted without anticipating the emergence of highly sophisticated AI-generated synthetic media. As a result, the present framework addresses only fragments of the problem rather than offering a comprehensive regulatory solution.
The increasing use of deepfakes for financial fraud, identity theft, political manipulation, cyber harassment, and reputational harm demonstrates the urgent need for legislative intervention. At the same time, artificial intelligence continues to contribute significantly to education, entertainment, healthcare, and scientific research. The objective of the law should therefore be regulation rather than restriction.
India should introduce dedicated legislation defining deepfakes, establishing platform accountability, protecting personality and privacy rights, strengthening digital forensic infrastructure, and providing effective remedies for victims. Such reforms would enhance legal certainty, encourage responsible innovation, and preserve public confidence in digital communication.
1. Constitution of India.
2. Information Technology Act, 2000.
3. Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
4. Bharatiya Nyaya Sanhita, 2023.
5. Digital Personal Data Protection Act, 2023.
6. Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1.
7. Shreya Singhal v. Union of India, (2015) 5 SCC 1.
8. Anvar P.V. v. P.K. Basheer, (2014) 10 SCC 473.
9. National IPR Policy, 2016.
10. World Intellectual Property Organization (WIPO), publications on Artificial Intelligence and Intellectual Property.
