Why Is India’s New IT Rules 2021 Causing Ruckus Among Social Media Giants?

In February 2021, the Government of India notified Information Technology (IT) (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021.[1] These Rules instructs the sizeable social media companies with over 50 lakh users to comply with the new regulations or they risk losing their legal status. They were provided with a three-month timeline to comply with the Order which ended on May 26, 2021. Establishments like Facebook, WhatsApp, Instagram and even Twitter are yet to comply. This article will critically analyze and provide an in-depth analysis about the new Rules, answer some common doubts, and how it affects the Indian users and big businesses established in India.

• What is the new IT Rules all about?

The notification issued by the Government,[2] states that the social media platform are absolutely welcome to conduct their business in India, but such platforms will have to follow the laws and regulations of India accordingly.

• Can the Indian Government enforce such Rules?

Yes, Section 87 of IT Act 2000, empowers the government to enforce such rules. Similar provisions were prevalent under IT (Intermediary Guidelines) Rules 2011 which now stands replaced. The new Rules intends to balance the regulation of internet platforms.

• Reasons cited for enforcing the new Rules:

The disturbing developments that have taken place on the rampant abuse of social media platforms, some of which include:

1. Circulation of bogus news,
2. Abuse of social media,
3. Circulation of obscene content,
4. Cyberbullying,
5. Contents that threatens the dignity of a woman,
6. Anti-national activities,
7. Committing financial fraud,
8. Any content harming communal harmony,
9. Digital Users are numerous to name a few.

Social media regulations are not just a debate in India but worldwide. Since nobody seems to do anything about it the Indian Government deemed it right to overstep in this regard. In the landmark case of Prajwala vs Union of India,[3] the Supreme Court stated that “the Government of India may frame the necessary Guidelines/ Standard Operating Procedure and implement them within 2 weeks to eliminate child pornography, rape and gang rape imageries, videos and sites in content hosting platforms and other applications.” The Supreme Court also specifically stated that the Ministry of Electronics and Information Technology to appraise the timeline in respect of completing the process of notifying new Rules.[4]

• What is an intermediary?

An intermediary is a third party that offers intermediation services between two parties.[5] For example:

1. Facebook (intermediary) – provides services – to its user.
2. Netflix (intermediary) – provides services (series, movies, etc.) – to its users.

Now, these intermediaries will be divided into two categories under the Rules:

1. Social media intermediaries – “means an intermediary which primarily or solely enables online interaction between two or more users and allows them to create, upload, share, disseminate, modify, or access information using its services.
2. Significant social media intermediaries – means a social media intermediary having the number of registered users in India above such threshold as notified by the Central Government.”[6]

Further, the Rules asserts:

1. Due diligence needs to be followed by companies,
2. Each intermediary will have to set up a Grievance Redressal Mechanism,
3. Intermediaries must ensure online safety and dignity of users – especially women users,
4. Intermediaries shall remove or disable access within 24 hours of receipt of complaints,
5. Voluntary verification of each user – that way no bogus accounts are created,
6. Intermediaries are required to remove any unlawful information, and not to publish any information that is prohibited by law.

The Rules that apply to Significant Social Media Intermediaries (SSMI):

1. Intermediaries are supposed to appoint a Chief Compliance Officer – who will be the resident of India and ensures that the Rules have been complied after,
2. The next step is to appoint a nodal contact person – 24/7 in respect to the law enforcement agency,
3. They will further publish a monthly compliance report, which mentions: the details of the complaints and action so taken as well as details of contents removed proactively by the SSMI,
4. Appoint Resident Grievance Officer.

CONTROVERSIAL TOPIC:

A contentious clause in the IT Act Rules 2021, additionally mandates companies that provide messaging services to identify the first originator of the information.

Why is this problematic?

WhatsApp contains end-to-end encryption, meaning that even WhatsApp cannot and does not have the authority to access the user’s personal messages. The “First Originator or Traceability” provision under the Rules suggests that the “end to end encryption” be removed. This way the necessary authorities know exactly who, when, and where is propagating false news along with which they will also be able to track the originator of the message.

• “Traceability” Provision read as:

“Rule 4 (2) of the Rules 2021, mandates a ‘significant social media intermediary’ providing services primarily like messaging to enable identification of the first originator of the information on a computer source, as required by a judicial order or order passed under S. 69 of the Information Technology Act, 2000 as per the Information Technology (Procedure and Safeguards for the interception, monitoring, and decryption of information) Rules, 2009.”[7]

• Ethics Code relating to Digital Media Platforms and OTT Platforms:

They are required to self-classify appropriate content based on the required age criteria as listed below:

Universal, U/A 7 +, U/A 13 +, U/A 16, A – Adult.

Platforms are required to implement parental locks, which compulsorily implemented,

Reliable Age Verification mechanism for adults,

Publisher of any news will have to abide by the Norms of Journalistic Conduct of the Press Council of India[8] and the Programme Code under the Cable Television Networks Regulations Act.[9]

A three-tier Self Grievance Redressal Mechanism initiative by the Government of India:

1. Level 1 Self-Regulation by the publisher: The user registers their complaints by themselves which will be acknowledged within twenty-four hours. Such complaints will be rectified and disposed of within a period of fifteen days from the date of its receipt.
2. Level 2 Self-Regulation by Self-Regulating bodies of the publishers: meaning a body will be internally set up to review content. As such the body will be headed by a retired judge of the Supreme Court or High Court or an independent eminent person.
3. Level 3 Oversight Mechanism: The authorities get involved here wherein The Ministry appoints a committee if the user’s concerns are not solved through the first two mechanisms.

Is freedom of speech and expression, violated? Yes, to some extent. Will “privacy” be a major concern to users across the country? Yes. How? One being the traceability clause and breaking the encryption clause. Second, is the unwarranted involvement of the Ministry in the internet regulations platforms. Whilst the new IT Rules seems to be improving the much-needed comprehensibility in regulating cyber activities. For example, content that threatens the security of India, or any other content that might be racially or ethically objectionable. The other part is the proposed framework that provides the Ministry with enormous powers. One to name would be the “emergency blocking powers” (not enforced) which means blocking the platform altogether.

 

[1]https://mib.gov.in/sites/default/files/IT%28Intermediary%20Guidelines%20and%20Digital%20Media%20Ethics%20Code%29%20Rules%2C%202021%20English.pdf

[2] Ibid.

[3] https://www.livelaw.in/pdf_upload/pdf_upload-370126.pdf

[4] Vide Order dated 24/09/2021.

[5] Wikipedia.

[6] https://mib.gov.in/sites/default/files/IT%28Intermediary%20Guidelines%20and%20Digital%20Media%20Ethics%20Code%29%20Rules%2C%202021%20English.pdf

[7] https://sflc.in/what-originator-or-traceability-provision-information-technology-intermediary-guidelines-and

[8] https://presscouncil.nic.in/OldWebsite/NORMS-2010.pdf

[9] https://www.indiacode.nic.in/bitstream/123456789/1928/1/A1995-07.pdf