Author : Rubalpreet Kaur from University Institution of Legal Studies , Panjab University, Chandigarh
Abstract
This article critically examines the rapidly evolving paradigm of platform governance in
India, analysing the delicate balance between state- driven regulatory oversight and the
constitutional guarantee of free speech and privacy. By evaluating the shift from traditional safe harbour immunities to the ex-ante due diligence mandates, the piece highlights systematic frictions with Article 19 (1) (a) and the privacy standards established in K.S. Puttaswamy. Drawing a comparative analysis between the market driven approach of the United States and the co-regulatory framework of the European Union’s Digital Services Act, this article advocates for a comprehensive model of digital constitutionalism for India, anchored to independent multi- stakeholder oversight, algorithmic accountability and robust digital due process.
I. INTRODUCTION
“In the architecture of the digital age, platforms are no longer merely mirrors of society, they are its principal architects “1. This contemporary reformulation of cyber libertarian theory underscores the profound existential dilemma confronting modern jurisprudence. Digital intermediaries like Meta, Alphabet and X have mutated from passive, neutral conduits of data into hyper- potent arbiters of public discourse, economic transaction and democratic integrity. As India cements its status as a hyper connected digital economy, boasting over 1.02 billion
active internet and broadband subscribers according to a recent data from the Telecom
Regulatory Authority of India (TRAI)2 the traditional boundaries of state regulation and corporate sovereignty have blurred. The core tension no longer merely concerns technical content moderation; rather, it strikes at a foundational constitutional paradox: how can a democratic state enforce platform accountability without inadvertently weaponizing regulatory architecture to stifle the fundamental right to free expression?When billions of conversations, political debates, and economic transactions happen entirely within spaces owned by private tech giants, the law cannot afford to look away. This article critically analyses the domestic statutory matrix governing Indian intermediaries, evaluates prevailing global paradigms, and advocates for a structural shift from state centric policing to transparent, systematic accountability.
II. THE EVOLUTION OF STATE HARBOUR: FROM PROTECTION
TO POLICING
To understand how we arrived at our current legal crossroad, we have to look at the historical foundation of cyber law in India. The regulatory baseline for digital intermediaries in India remains anchored to Section 79 of the Information Technology (IT) Act, 20033 .In the early days of the internet, this provision served as a classic “safe harbour” mechanism. The philosophy behind safe harbour was simple yet elegant; a postal service cannot be held legally responsible for the contents of a defamatory letter sent through its mail, and a telephone company cannot be sued if someone plans a crime over a phone call. Similarly, internet platforms were viewed as passive, neutral conduits of data. They were granted sweeping immunity from third – party liability, provided they maintained a hand – off approach and expeditiously compiled with state mandated takedown orders upon acquiring “actual knowledge”,
However, this baseline underwent a tectonic shift with the promulgation of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 20214 .By introducing tier-based compliance thresholds for “Significant Social Media Intermediaries “(SSMIs), the state effectively replaced the traditional ex- post immunity framework with a rigorous, ex- ante due diligence mandate. These rules enforce strict obligations that transformed platforms from passive bulletin boards into active internet police. Intermediaries are now mandated to appoint domestic grievance and compliance officers who face personal criminal liability if the platform fails to cooperate with government directives. Furthermore, the rules introduced rapid 36 – hour content eradication windows and, most controversially, automated traceability requirements for encrypted messaging applications. The policy goal was to combat the viral spread of fake news and harmful content. Yet, by forcing private entities to constantly monitor and filter user speech under the threat of losing their legal shield, the state fundamentally rewrote the social contract of the internet.
III. THE CONSTITUTIONAL FRICTION: FREE SPEECH AND THE CHILLING EFFECT
From a constitutional standpoint, this tightening of administrative oversight creates severe, systematic frictions with Article 19 (1) (a)5of the Constitution of India, which guarantees the fundamental right to freedom of speech and expression. When the state forces an
intermediary to take down content within a hyper compressed 36 – hour window under the penalty of losing its safe harbour protection, it sets a dangerous trap. Digital platforms are profit centric corporations, not constitutional courts. They don’t have the time, resources or legal expertise to carefully evaluate whether a controversial post constitutes fair political commentary or illegal hate speech. To mitigate the existential threat of losing their immunity and facing endless lawsuits, private corporations are systematically incentivized to engage in “Over censorship”, They pre-emptively flag, suppress and delete legitimate, constitutionally protected dissent just to be safe.
This administrative overreach directly invokes the judicial warnings articulated by the
Supreme Court of India in the landmark case of Shreya Singhal v. Union of India6
. In that historic judgement, Justice R.F. Nariman struck down Section 66A of the IT Act, which had criminalized sending “offensive” messages through computers. The Court rightly observed that vague, overbroad phrasing in laws regulating online speech creates a profound “chilling effect”. When citizens don’t know where the legal line is drawn, they choose to remain silent out of fear of arrest or censorship.
By transferring the quasi-judicial function of content adjudication away from independent courts and into the hands of automated corporate algorithms and private compliance officers, the current regulatory framework effectively bypasses the strict, narrow exceptions enumerated under Article 19(2)7 of the Constitution. The public constitutional standards of free speech are being quietly replaced by privatized, opaque corporate terms of service.
IV. THE SURVEILLANCE DILEMMA AND THE PRIVACY STANDARD
The issue becomes even more acute when we look at the mandatory traceability requirements imposed on messaging platforms. Under the Intermediary Guidelines, platforms are required to identify the “first originator” of the message when legally ordered to do so. On the surface, this sounds like a reasonable tool to track down creators of child sexual abuse material or instigators of communal riots. However, from a technical perspective, enforcing traceability effectively forces platforms to re-engineer their entire system and break end-to-end encryption protocols. You cannot break encryption for a “bad actor” without breaking the security mechanism for every single innocent citizen on the platform. This requirement shatters user anonymity and directly threatens the digital privacy standards
codified by a nine judge bench of the Supreme Court in the historic K.S. Puttaswamy v.
Union of India case8. The Court unequivocally ruled that the right to privacy is an intrinsic part of the right to life and personal liberty under Article 21. This judgement established a strict three-fold test for any state action that infringes upon privacy, which includes, legality, necessity and proportionality.
Enforcing blanket message traceability fails the proportionality test completely. It is a blunt instrument that compromises the data security of over a billion citizens to solve localized crimes. When the state demands a backdoor into encrypted chats, it creates an environment of pervasive surveillance , shifting the presumption of innocence from the citizen to the state.
V. THREE STRUCTURAL PATHOLOGIES IN PLATFORM GOVERNANCE
To build a better legal framework, we must look past superficial legislative fixes and confront three deep rooted structural realities that define the modern internet.
The Economy of Algorithmic Amplification:
Modern intermediaries are not neutral, passive archives. They are hyper commercialized attention economies powered by highly sophisticated algorithms. These algorithms are engineered with a singular corporate objective , which is to maximize user engagement to sell targeted advertisements. Because human psychology is naturally drawn to the sensational, the controversial, divisive inflammatory content and fake news inherently yield the highest engagement. Platforms now don’t just hist content but also actively amplify it. Research from digital collectives underscores that a vast majority of domestic internet users routinely encounter structural misinformation. The core threat to public order is often not the user generated content but the opaque corporate algorithms that accelerate its viral speed across
millions of screens in seconds.
The Privatization of Judicial Power:
By forcing platforms to act as frontline judges of speech under tight statutory timelines, our legal framework has given rise to a shadow judiciary. When a normal citizen’s account is suspended, banned or deleted, they are rarely given a clear reason, let alone a fair trial. The system completely lacks the core procedural protections of natural justice, due process and the right to be heard. We have outsourced the protection of our fundamental rights to private entities whose ultimate loyalty is to their shareholders, not to the Indian Constitution.
The Jurisdictional Vacuum:
Digital platforms operate on trans-border, cloud based, decentralised architectures. In stark contrast, regulatory laws remain strictly territorial and bound by geographical borders. A content ban or restriction enforced by a domestic court can frequently be circumvented through minor network modifications, mirror sites, or Virtual Private Networks (VPNs). This reality exposes the systemic limits of traditional, Westphalian state sovereignty within a borderless digital ecosystem.
VI. COMPARATIVE PARADIGMS: THE GLOBAL HORIZONS
As India looks to reform its laws, it stands at a geopolitical crossroads between two
fundamentally opposite global models of digital governance.
The United States represents the market driven, libertarian extreme, defined by Section 230 of the Communications Decency Act9. This doctrine grants near absolute civil immunity to platforms for user-generated content, while simultaneously protecting their right to moderate content in good faith, often referred to as the “Good Samaritan” provision. While this laissez- faire approach catalysed unprecedented technological innovation and allowed Silicon Valley to conquer the global market, it has drawn fierce criticism. Critics argue that this section has acted as a shield for misinformation giants, allowing hate speech, foreign election interference, and corporate negligence to run virtually unchecked in the name of absolute free market.
Conversely, the European Union has pioneered a radically different path through its landmark Digital Services Act10(DSA). Abandoning the blunt, reactive instrument of state directed content bans, the DSA focuses heavily on structural risk management, algorithmic transparency and mandatory independent audits for Very Large Online Platforms (VLOPs). The enforcement capability of this framework was vividly demonstrated in early 2026, when European regulators leveraged the DSA’s potent financial penalty mechanisms against cross border digital platforms for systemic failures in mitigating consumer fraud and illegal content distribution. The EU model demonstrate that effective governance does not require the state to act as a heavy-handed censor of individual speech. Instead, it requires the state to strictly audit the systemic infrastructure, risk assessments, and design choices of the platforms themselves.
THE WAY FORWARD: CULTIVATING DIGITAL CONSTITUTIONALISM
To resolve the gridlock between liberty and liability, India must urgently transition away from its current trajectory of ad-hoc , executive-driven interventions and embrace a comprehensive framework of digital constitutionalism. We need a model that reflects our unique socioeconomic reality while holding power accountable.
First, the state must replace the direct oversight of executive line ministries with an
independent, co-regulatory or multi stakeholder authority. Modelled loosely on successful independent regulators like the TRAI or financial watchdogs, this body should comprise judicial minds, civil society advocates, academic researchers and technical experts. By insulating content moderation and regulatory enforcement from shifting political expectations, we can ensure that platform governance remains neutral, fair and objective. Second, the legislative focus must pivot away from enforcing invasive message traceability and towards establishing true algorithmic accountability. Instead of forcing platforms to break encryption, the law should mandate comprehensive, independent third-party audits of their recommendation engines and content moderation workflows. Intermediaries must be legally compelled to publish clear, mathematically auditable parameters regarding how their systems Prioritize public interest data over divisive content. If a platform’s algorithm deliberately amplifies hate speech to boost profits, the platform should be held legally accountable for that design choice.
Finally, the regulatory framework must codify a robust, statutory “Digital Bill of Rights” for the everyday internet user. If an intermediary restricts, flags or removes user-generated speech, the affected individual must possess an enforceable right to immediate notification,a clear and reasonable statement of administrative action and access to an independent appellate mechanism. Digital due process must become as sacrosanct with the digital public square as procedural due process is within a physical court of law.
CONCLUSION
Digital platforms can no longer masquerade as mere neutral intermediaries, nor can they be permitted to operate as unchecked gatekeepers of public discourse. They have evolved into the vital connective tissue of modern democratic societies. The regulatory challenge ahead is ultimately less technical than it is philosophical as it demands that we conceptualize a framework capable of preserving the democratic essence of free expression within an ecosystem dominated by concentrated corporate power.
As the Supreme Court profoundly observed in Puttaswamy judgement, that, privacy and
individual autonomy constitute the indispensable core of human dignity. Extending this
profound constitutional truth to the digital frontier requires that India reject both the
unregulated corporate passivity of the American model and the state-centric overreach of executive censorship. By anchoring platform governance to independent oversight ,
algorithmic transparency and rigorous procedural due process , India can construct a
pioneering legal model for the Global South, one that transforms digital intermediaries from unpredictable gatekeepers into accountable guardians of a vibrant constitutional democracy.
- LAWRENCE LESSIG, CODE AND OTHER LAWS OF CYBERSPACE 5 (Basic Books 1999) ↩︎
- Telecom Regulatory Authority of India, The Indian Telecom Services Performance Indicators October –
December 2025, at 12 (2026) ↩︎ - Information Technology Act , 2000, Section.79, No.21, Acts of Parliament, 2000 (India) ↩︎
- Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, The Gazette of India ,pt.II sec.3(i) (Feb.25, 2021) ↩︎
- INDIA CONST. art.19, cl. 1(a) ↩︎
- Shreya Singhal v. Union of India, (2015) 5 S.C.C.1 (India) ↩︎
- INDIA CONST. art.19, cl.2 ↩︎
- K.S. Puttaswamy v. Union of India, (2017) 10 S.C.C.1 (India) ↩︎
- Communications Decency Act, 47 U.S.C. sec. 230 (2018) ↩︎
- Regulation 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market for Digital Services (Digital Services Act) , 2022 O.J. (L277)1 (EU) ↩︎