Author: Chhavi Kakran
College: Rudra College Of Law
To the Point
Deepfake technology creates highly realistic synthetic audio, video, and images using Artificial Intelligence and machine learning. While it offers legitimate applications in entertainment, education, and digital innovation, its misuse presents serious legal concerns. Deepfakes can facilitate impersonation, identity theft, privacy violations, financial fraud, reputational damage, misinformation, and non-consensual exploitation.
In India, deepfake-related misconduct is not governed by one exclusive legislation. Instead, legal regulation is derived from the Information Technology Act, 2000, Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, criminal law principles, constitutional privacy jurisprudence, and evidentiary rules governing electronic records.
Abstract
Artificial Intelligence has transformed digital communication and information exchange; however, the rise of deepfake technology has introduced complex legal and ethical challenges. Deepfakes refer to AI-generated or manipulated content that realistically imitates an individual’s appearance, speech, or conduct.
The growing misuse of synthetic media has raised concerns regarding cyber fraud, electoral manipulation, online harassment, identity theft, privacy infringement, and digital exploitation. Since false content can appear authentic, deepfakes challenge public trust in digital evidence and online interactions.
India currently lacks dedicated legislation specifically regulating deepfakes. Consequently, legal enforcement relies upon existing statutory provisions concerning unauthorized access, cheating by personation, privacy violations, obscenity regulation, intermediary liability, and evidentiary authentication. This article critically examines India’s existing legal framework and judicial approach while evaluating the need for targeted regulation of synthetic media.
Use of Legal Jargon
From a legal perspective, deepfakes involve questions of mens rea, unlawful attribution of identity, evidentiary reliability, intermediary due diligence, data processing, informed consent, and proportionality.
The principal legal issue is whether AI-generated content constitutes a contravention under cyber law or a cognizable offence under criminal law where synthetic media is used for deception, defamation, voyeurism, fraud, impersonation, or sexual exploitation.
Further, legal scrutiny extends to platform accountability, lawful restrictions on speech, privacy rights, and balancing technological innovation with constitutional protections.
Understanding Deepfake Technology
The term “deepfake” combines “deep learning” and “fake.” Such technology uses neural networks and machine-learning algorithms to generate highly realistic digital media.
Common forms include:
• Face-swapped videos
• AI voice cloning
• Synthetic images
• Fabricated speeches
• Manipulated social media content
Although technologically sophisticated, malicious use transforms these tools into instruments of cyber misconduct.
Relevant Laws / Statutory Provisions
1. Information Technology Act, 2000
Section 43: Provides compensation for unauthorized access, downloading, copying, or damage to computer resources.
Section 66: Criminalizes computer-related offences committed dishonestly or fraudulently.
Section 66C: Punishes identity theft and unauthorized use of digital identity.
Section 66D: Punishes cheating by personation using computer resources and is especially relevant to deepfake impersonation and voice-cloning fraud.
Section 66E: Addresses violation of privacy involving capture or dissemination of private images.
Sections 67, 67A, and 67B: Regulate obscene, sexually explicit, and child-related electronic content.
Sections 72 and 72A: Provide protection against breach of confidentiality and unlawful disclosure of information.
Section 79: Provides intermediary safe harbour protection subject to compliance with due diligence obligations.
2. Information Technology Rules, 2021
The IT Rules impose obligations on intermediaries to establish grievance redressal mechanisms, remove unlawful content upon notice, and maintain compliance standards that become relevant in addressing harmful synthetic media.
3. Digital Personal Data Protection Act, 2023
The Act promotes consent-based processing and responsible handling of personal data. Unauthorized collection and use of personal data for generating deepfake content may attract legal consequences.
4. Section 65B of the Indian Evidence Act, 1872
Electronic evidence must satisfy authentication requirements before admissibility in judicial proceedings.
This provision becomes increasingly significant where courts are required to determine the authenticity of allegedly manipulated digital content.
5. Constitutional Framework
Article 21 – Right to Life and Personal Liberty
Includes protection of privacy and personal dignity.
Article 19(1)(a) – Protects freedom of speech while permitting reasonable restrictions.
The Proof
The necessity for regulation is evident from the growing ability of deepfakes to undermine public trust, distort public discourse, and facilitate large-scale fraud.
Synthetic media can spread misinformation rapidly, damage reputation instantly, and compromise evidentiary integrity. Indian cyber jurisprudence already recognizes the legal importance of electronic records and digital authenticity.
At a constitutional level, privacy has been recognized as a fundamental right; therefore, unauthorized synthetic media may trigger both statutory and constitutional liability.
Case Laws
1. Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) 10 SCC 1
The Supreme Court recognized privacy as a fundamental right under Article 21.
Significance: Provides constitutional protection against misuse of identity and intrusive digital practices.
2. Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473
The Court emphasized strict admissibility standards for electronic evidence under Section 65B.
Significance: Relevant where courts evaluate digitally manipulated media.
3. Shreya Singhal v. Union of India (2015) 5 SCC 1
The Supreme Court struck down Section 66A of the IT Act while discussing limits on regulating online speech.
Significance: Demonstrates the balance between freedom of expression and control of harmful digital conduct.
Challenges in Regulating Deepfake Technology
- Absence of Dedicated Legislation: Current laws address consequences rather than deepfake creation itself.
- Detection Difficulties: Advanced AI tools make identification increasingly complex.
- Cross-Border Jurisdiction: Cyber offences often involve foreign actors and platforms.
- Platform Accountability: Intermediary liability standards continue to evolve.
- Balancing Innovation and Rights: Regulation must not disproportionately restrict technological progress.
Conclusion
Deepfakes represent more than technological innovation—they create legal challenges involving identity, privacy, cyber fraud, freedom of expression, and digital evidence.
India’s existing legal framework under the Information Technology Act, IT Rules, constitutional principles, and electronic evidence provisions provides mechanisms to address many harmful consequences of deepfakes. However, the absence of dedicated legislation leaves uncertainty regarding attribution, rapid takedown obligations, and enforcement.
A stronger regulatory framework should introduce clearer labelling standards, faster content-removal procedures, improved cyber-forensic capabilities, platform accountability, and targeted penalties for malicious synthetic media. Effective governance must balance innovation with protection of dignity, autonomy, and digital trust.
FAQs
Q1. Is creating a deepfake illegal in India?
Not necessarily. Liability usually arises when deepfakes are used for fraud, impersonation, obscenity, privacy violations, or unlawful purposes.
Q2. Which provisions are most relevant to deepfake fraud?
Sections 66C and 66D of the Information Technology Act are especially relevant.
Q3. Can deepfake videos be admitted as evidence?
Yes, subject to compliance with Section 65B requirements and judicial scrutiny.
Q4. Does privacy law apply to deepfake cases?
Yes. Constitutional privacy protection strengthens legal action against non-consensual synthetic content.
Q5. Are online platforms responsible for removing deepfakes?
Intermediaries may bear responsibility depending on compliance with due diligence requirements under applicable law.
