Author: Ayushi Kacher B.A.LL.B. (Hons.), Faculty of Law, University of Allahabad
Introduction
We all live in an era where social media platforms are accessed by all individuals without restrictions. Thinking about this, imagine an e-commerce website where counterfeit products are promoted using manipulated listings and fake seller accounts. Despite the deceptive and manipulative content being created by third parties, the social media platform acts as the medium through which millions of users access it. Now such situations raise a very important legal question: whether digital platforms only provide the medium to communicate, or should they also bear responsibility for the unlawful content they facilitate?
The unprecedented growth of the digital economy has transformed the role of social media in dynamic ways, specifically the role of intermediaries such as search engines, online marketplaces, and online applications. Everyday millions of users come across distinctive applications and these social media platforms host huge amount of user-generated content, which is practically impossible to monitor or examine each post, advertisement, or transaction before disseminating it to public. So, recognizing all these issues and to give practical solutions to these problems, the Information Technology Act, 2000 grants intermediaries a conditional protection from theses liability through the principle of ‘safe harbor’, provided they follow the prescribed due diligence and procedures.
However, with time digital platforms are misused for cyber offences, disseminating misinformation, and other unlawful activities which have intensified a debate about the liabilities of intermediaries. The principle of safe harbor was introduced to encourage the growth of digital services, but it poses challenges regarding the excessive protection provided to online intermediaries. Therefore, striking a balance between protecting intermediaries and on other hand ensuring accountability of social media platforms has become a growing concern under Indian Cyber Law.
The article examines the concept of safe harbor under Information Technology Act, 2000, also analyses the framework governing intermediary liability, also assess whether the existing legal system adequately addresses the challenges posed by digital environment.
Understanding the Principle of SAFE HARBOUR
The concept of safe harbour is one of the principles governing intermediary liability under Indian cyber law. It is based on the idea that digital intermediaries should not be held legally responsible for every piece of information that was created or uploaded by their users, as they only act as neutral facilitators, so they must comply with the conditions prescribed by law. As an enormous volume of user-generated content published every second, reviewing before it appears online would be practically impossible. The principle of safe harbour was therefore introduced to encourage the growth of digital services while balancing innovation with legal accountability.
In India, intermediaries protection is provided under Section 79 of the Information Technology Act, 2000, which grants conditional immunity to intermediaries from liability for third-party information hosted or transmitted through their platforms. The protection, however, is not absolute. An intermediary can claim safe harbour only when it functions as a facilitator and observes the due diligence requirements prescribed under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. If the intermediary actively participates in creating unlawful content or knowingly allows illegal content to remain available on its platform even after receiving a lawful government or court order, the protection under Section 79 may no longer be available. These rules demonstrate that a safe harbour is not a blanket of exemption, but a conditional legal protection that is given when there is responsible conduct of intermediaries. Thus, the principle seeks to balance two objectives—promoting the growth of the digital economy and ensuring that online platforms do not become a space where unlawful activities can continue without accountability.
Evolution of Safe Harbour in India
1. Shreya Singhal v. Union of India (2015)
This case is widely known for striking down Section 66A of the IT Act; the Supreme Court also interpreted Section 79 of the IT Act in this case. The Court clarified that an intermediary is required to remove unlawful content only after receiving a court order or a notification from the appropriate Government. Private complaints alone do not amount to “actual knowledge” under Section 79. This is the most significant judgment on safe harbour in India. It protected intermediaries while ensuring that unlawful content still be removed through lawful procedures. So, every discussion on intermediary liability in India begins with this case.
2. MySpace Inc. v. Super Cassettes Industries Ltd. (2016)
In this case, Super Cassettes (T-Series) alleged that copyrighted songs were uploaded on MySpace without permission and claimed that MySpace should be held liable for copyright infringement. The Delhi High Court held that intermediaries cannot automatically claim safe harbour merely because they are platforms. They could only avail the protection under Section 79, when they comply with due diligence requirements like taking action when they receive knowledge of unlawful content. However, the Court also recognized that intermediaries cannot actively monitor every piece of user-generated content. This judgment was important as it attempts to explain that safe harbour is conditional, not absolute.
3. Kent RO Systems Ltd. v. Amit Kotak (2017)
Here there is a dispute involving trademark infringement through online listings on an e-commerce platform. The Court observed that intermediaries cannot completely ignore when they receive specific information or lawful notice regarding infringing content. They must act within the framework of law and comply with their due diligence obligations. This judgment emphasized that safe harbour comes with responsibility. Although intermediaries are not expected to monitor all content, they cannot ignore specific instances of unlawful content being disseminating in their online platforms.
Intermediary Liability under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 marked a significant shift in India’s approach towards intermediary liability. As Section 79 of the Information Technology Act, 2000 provides intermediaries with conditional immunity from liability for third-party content, the 2021 Rules explained that intermediaries must fulfil due diligence obligations in order to continue enjoying this statutory protection. Thus, these Rules transformed safe harbour into conditional protection with accountability.
The Rules require every intermediary to prominently publish its terms of service, privacy policy, and user agreements, also inform users not to host, upload, publish, or transmit information that is unlawful, defamatory, misleading, or otherwise prohibited by law. They further mandate intermediaries to establish an effective grievance redressal mechanism, appoint a Grievance Officer, and resolve user complaints within the prescribed timelines. All these provisions were there to ensure that intermediaries do not only act as passive digital platforms but also help in maintaining a safer and more accountable online environment. The Rules further impose responsibilities on Significant Social Media Intermediaries (SSMIs), recognizing their wider reach to a large number of publics. Such intermediaries are required to appoint a Chief Compliance Officer, a Nodal Contact Person, and a Resident Grievance Officer, all of them must be based in India. Then they are required to publish periodic compliance reports detailing the action taken against unlawful content and user grievances.
The Ministry of Electronics and Information Technology (MeitY) has clarified that the objective of the IT Rules, 2021 is to promote an “Open, Safe and Trusted Internet” and ensuring greater accountability of intermediaries without undermining innovation. Still, the implementation of these obligations has generated an increasing burden on intermediaries and affects the balance between preserving safe harbour and imposing greater platform responsibility.
Intermediary Liability Beyond India
The regulation of intermediary liability is not new in India. There are several other countries that have adopted different legal approaches to balance digital platform immunity with their accountability, depending on their legal framework. While India provides conditional protection to intermediaries under Section 79 of the Information Technology Act, 2000 other countries have developed distinct regulatory models that either strengthen the platform responsibility or provide them broader legal immunity.
The European Union has adopted a stricter approach through the Digital Services Act (DSA), 2022. Unlike Indian framework, they primarily focus on due diligence obligations. The DSA requires digital platforms to conduct risk assessments, maintain transparency regarding content moderation, cooperate with regulatory authorities, and implement effective mechanisms to address illegal content. Very Large Online Platforms are also subject to additional obligations because of their influence on the public at large and digital markets.
In contrast, the United States follows comparatively a liberal approach under Section 230 of the Communications Decency Act, 1996. The provision grants broad immunity to intermediaries for third-party content while allowing them to moderate objectionable material in good faith. Their approach has significantly enhanced the growth of online platforms but has also attracted criticism for providing excessive protection to intermediaries, which often results in circulating harmful content.
Now India’s legal framework lies somewhere between these two models because it does not provide the broad immunity given under the American approach, it also does not impose the strict compliance obligations found in the European Union. Therefore, the Indian approach attempts to strike balance between intermediary protection and statutory or public accountability. However, the effectiveness of this middle-path approach still remains a subject of legal and public debate.
Critical Analysis: Safe Harbour or Safe Haven?
The principle of safe harbour has played an important role in the development of India’s digital ecosystem. Without such legal protection, intermediaries would face constant risk of being held liable for every action of their users, which makes it extremely difficult for digital platforms to function efficiently. Considering the amount of user-generated content published every day, also becomes difficult for intermediaries to monitor each post, message, or transaction before making it available for public online. Therefore, the protection granted under Section 79 of the Information Technology Act, 2000 remains significant in the digital era. However, nowadays digital platforms are no longer confined to only hosting or transmitting information because of recommendation algorithms, personalized advertisements, and AI-driven moderation systems, intermediary platforms can influence what users see and interact with. In such circumstances, treating all intermediaries as only passive facilitators may not be the right approach.
The main concern is that the existing legal framework solely focuses on the removal of unlawful content only when they receive a lawful order rather than encouraging stronger preventive measures. Although the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 have introduced additional due diligence obligations, but they do not comprehensively address the issues such as algorithmic amplification, AI-generated content, coordinated misinformation campaigns, or sophisticated cyber fraud. As a result, it raises challenges that are becoming increasingly difficult to regulate those intermediaries through traditional legal frameworks, thus an inefficient legal framework creates a safe haven for them. But, if we impose excessive liability upon intermediaries then this may also create problems, as such approach could adversely affect the freedom of speech and expression and also would cause significant compliance burdens, particularly for smaller intermediaries.
In my opinion, the objective should not be to eliminate the principle of safe harbour but to reintroduce it by removing the inefficiencies of legal frameworks which transform safe harbour into safe haven. Legal protection should continue to be available to only those intermediaries that genuinely comply with their statutory obligations and act responsibly and guard proactively against unlawful activities. At the same time, those platforms that possess the technological capability to detect, or prevent the widespread dissemination of harmful content but they still fail to exercise reasonable diligence, they should not be permitted to avail the safe harbour as a shield against accountability. Thus, safe harbour should remain a legal protection for responsible intermediaries rather than gradually evolving into a safe haven for digital negligence.
Conclusion
The principle of safe harbour has a crucial role in shaping India’s digital ecosystem by protecting intermediaries and encouraging the growth of online platforms. Through Section 79 of the Information Technology Act, 2000, judicial interpretation, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, India has tried to establish a framework that balances intermediary protection with legal accountability. However, digital platforms have significantly changed the manner in which online content is created and disseminated, which makes the traditional understanding of intermediary liability more complex.
Therefore, the main issue is not about whether intermediaries should enjoy safe harbour protection, but about the extent to which such protection should continue even in conditions when platforms possess greater control over online content and user engagement. Rather than abolishing safe harbour, the need is to ensure that it remains a conditional legal safeguard for responsible intermediaries that comply with their statutory obligations and exercise reasonable diligence. Thus, the needed balanced regulatory framework will not only strengthen digital accountability but also preserve innovation, freedom of expression, and public confidence in India’s evolving cyber law.
