IT rules amendments may create obligations outside law: Nasscom

The Evolving Landscape of Indian Digital Jurisprudence: Analyzing the IT Rules Amendments

As we navigate the complexities of the digital age, the legal framework governing the internet in India is undergoing a seismic shift. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and their subsequent amendments in 2022 and 2023, have sparked a profound legal debate. At the heart of this controversy is a fundamental question of constitutional and administrative law: can delegated legislation—rules framed by the executive—impose obligations that are not expressly envisioned by the parent statute? This is the core of the concern recently voiced by Nasscom (National Association of Software and Service Companies), which argues that the latest amendments to the IT Rules may create obligations that exist outside the mandate of the Information Technology Act, 2000.

From the perspective of a Senior Advocate, this is not merely a policy disagreement; it is a question of legislative competence and the doctrine of ultra vires. In our constitutional scheme, the legislature delegates the power to make rules to the executive to fill in the details of a law. However, these rules must remain within the “four corners” of the parent Act. When rules begin to carve out new legal liabilities or redefine the scope of a statute without a legislative amendment, they risk overstepping their constitutional boundaries.

Understanding the Nasscom Critique: The Scope of Delegated Legislation

Nasscom, representing the interests of India’s massive IT and BPM industry, has highlighted that the 2023 amendments to the IT Rules introduce several requirements that find no mention or support in the Information Technology Act, 2000. The primary function of an intermediary, as defined under Section 2(1)(w) of the Act, is to facilitate the transmission of information. Section 79 of the Act provides these intermediaries with “safe harbour” protection—immunity from liability for third-party content—provided they follow certain due diligence requirements.

However, the new amendments have transformed these due diligence requirements into active obligations to monitor and adjudicate content. Nasscom argues that by mandating intermediaries to remove content flagged as “fake or misleading” by a government-appointed Fact-Checking Unit (FCU), the rules are imposing a burden that the IT Act never intended. The Act was designed to regulate cybercrime and facilitate e-commerce, not to establish an executive-led censorship mechanism. When a rule creates a new class of obligations that can lead to the loss of statutory immunity (Safe Harbour), it is essentially amending the Act via the back door of the executive branch.

The Safe Harbour Doctrine and Section 79

The concept of “Safe Harbour” is the cornerstone of the global internet economy. It ensures that platforms like Google, Facebook, and Twitter are not held legally responsible for every single post made by their billions of users. In India, Section 79 of the IT Act provides this protection. The Senior Advocate’s view is that any rule that makes this protection conditional on subjective government satisfaction is a violation of the principle of legal certainty.

The 2023 amendments suggest that if an intermediary does not comply with the directions of the government’s Fact-Checking Unit, it may lose its safe harbour protection. This effectively means the executive can strip away a statutory right granted by Parliament through a mere notification. This raises a significant legal hurdle: can a rule override a statutory provision? The answer, in established Indian administrative law, is a resounding no. Subordinate legislation cannot abridge or extinguish a right conferred by the parent statute.

The Fact-Checking Unit: An Executive Overreach?

One of the most contentious aspects of the amendments is the empowerment of a Fact-Checking Unit (FCU) under the Ministry of Electronics and Information Technology (MeitY). This unit is tasked with identifying “fake, false, or misleading” information regarding the “business of the Central Government.” Once the FCU flags such content, social media intermediaries are required to take it down or face the loss of their legal immunity.

Digital rights advocates and industry bodies alike have pointed out that the term “business of the Central Government” is dangerously broad and ill-defined. From a legal standpoint, this creates a situation where the government becomes the judge, jury, and executioner in matters concerning its own reputation. This flies in the face of the principle Nemo iudex in causa sua—no one should be a judge in their own cause.

Constitutional Implications: Article 19(1)(a)

The right to freedom of speech and expression under Article 19(1)(a) of the Indian Constitution is not absolute, but it can only be restricted on the specific grounds mentioned in Article 19(2), such as the sovereignty and integrity of India, security of the state, or public order. The phrase “fake or misleading information regarding the business of the government” does not explicitly fall within these categories. By creating a new ground for content removal, the executive is arguably expanding the scope of reasonable restrictions on free speech, a power that lies solely with the Parliament and is subject to strict judicial scrutiny.

Furthermore, the “chilling effect” of such rules cannot be ignored. Intermediaries, fearing the loss of safe harbour and the resulting deluge of litigation, are likely to over-censor content. If a platform is told that it might lose its legal protection unless it removes a post critical of government policy, the platform will almost always choose the path of least resistance—removal. This undermines the democratic marketplace of ideas.

Grievance Appellate Committees (GACs): Bypassing the Judiciary?

Another significant change is the establishment of Grievance Appellate Committees (GACs). These are government-appointed bodies that hear appeals from users who are dissatisfied with the content moderation decisions of social media platforms. While the intent—to provide users with a recourse mechanism—is noble, the structure is legally problematic.

As a Senior Advocate, I must point out that the GACs effectively interpose an executive body into the dispute resolution process between private citizens and private corporations. Typically, such disputes should be resolved through internal mechanisms or the civil courts. By making the GAC an executive-appointed body, there is a risk of political interference in content moderation. If the government can decide what content stays up or comes down on a private platform via an appellate committee, the independence of digital platforms is compromised.

The Principle of Separation of Powers

The GAC mechanism raises concerns regarding the separation of powers. Adjudication is essentially a judicial function. While quasi-judicial bodies are common in administrative law, they must possess the “trappings of a court,” including independence from the executive. Since GAC members are appointed by the government, their impartiality in cases where the government might have an interest is naturally questioned. Nasscom’s concern that these rules create “obligations outside the law” extends to the fact that the IT Act did not provide for such an appellate structure overseen by the executive.

The Doctrine of Proportionality and the Test of Legality

In the landmark K.S. Puttaswamy v. Union of India judgment, the Supreme Court established the test of proportionality for any state action that interferes with fundamental rights. Any such action must:
1. Be backed by a law (Legality).
2. Serve a legitimate state aim (Need).
3. Be proportionate to the objective (Proportionality).
4. Have procedural safeguards against abuse.

The current IT Rules amendments struggle to meet the first and third prongs of this test. The “law” backing these rules—the IT Act—does not specifically authorize the creation of a Fact-Checking Unit or the GAC in the manner they have been implemented. Moreover, the remedy (stripping safe harbour for failing to remove a single piece of government-flagged “misleading” info) is arguably disproportionate to the aim of curbing fake news.

The Vagueness Doctrine

In legal theory, a law that is too vague is void because it fails to provide notice to the citizens of what is prohibited. Terms like “misleading” or “business of the government” are not defined with the precision required for a law that carries such heavy penalties as the loss of safe harbour. In the Shreya Singhal v. Union of India case, the Supreme Court struck down Section 66A of the IT Act precisely because its terms were “vague” and “overbroad.” The current amendments risk a similar fate if challenged on the grounds that they provide no clear guidelines for what constitutes “fake” news versus “opinion” or “criticism.”

Impact on Global Tech Investments and Ease of Doing Business

Beyond the constitutional arguments, we must consider the practical impact on India’s digital economy. Nasscom’s intervention is significant because it represents the voice of investors and innovators. A legal environment characterized by executive whim rather than statutory clarity is a deterrent to foreign direct investment (FDI).

Global technology companies require a predictable legal landscape. If the rules of the game can be changed overnight through executive notifications that bypass parliamentary debate, the perceived risk of doing business in India increases. The “obligations outside the law” mentioned by Nasscom refer to the compliance burden that grows with every amendment, often requiring companies to build massive local infrastructures purely for government-mandated content adjudication, which may not align with their global policies or the laws of other jurisdictions.

Comparison with International Standards

While the European Union’s Digital Services Act (DSA) also imposes strict obligations on “Very Large Online Platforms” (VLOPs), it does so through a comprehensive legislative process with built-in judicial oversight and clear definitions. The Indian approach, by contrast, has relied heavily on delegated legislation. This creates a “democratic deficit,” where significant changes to the digital rights of citizens are made without the rigor of parliamentary scrutiny.

The Road Ahead: Judicial Review and Legislative Reform

The criticisms leveled by Nasscom and digital rights groups have already led to legal challenges. The Bombay High Court’s recent split verdict in the case concerning the Fact-Checking Unit (Kunal Kamra v. Union of India) underscores the judicial complexity of these issues. As this matter moves toward a larger bench or the Supreme Court, the focus will remain on whether the executive has exceeded its mandate.

Recommendations for a Balanced Framework

To resolve the current impasse and address the concerns of stakeholders like Nasscom, a multi-pronged approach is necessary:

1. Legislative Clarity: Instead of amending rules, the government should consider a comprehensive overhaul of the IT Act, 2000. A new “Digital India Act” should be debated in Parliament, providing a clear statutory basis for modern challenges like disinformation and platform accountability.

2. Independent Fact-Checking: If a Fact-Checking Unit is necessary, it must be independent of the executive. A co-regulatory model, involving journalists, academics, and judicial members, would be more palatable than a government-controlled body.

3. Judicial Oversight: Any order to remove content should ideally come from a judicial or quasi-judicial body with demonstrated independence. The loss of Safe Harbour should be a last resort, determined by a court of law, not an administrative office.

4. Narrow Definitions: The rules must define “fake news” and “government business” with surgical precision to ensure that legitimate criticism and satire are protected.

Conclusion: Safeguarding the Rule of Law in the Digital Era

The concerns raised by Nasscom regarding the IT Rules amendments serve as a timely reminder that in a constitutional democracy, the ends do not justify the means. While the goal of curbing misinformation is legitimate, the methods used must adhere to the principles of administrative and constitutional law. Creating “obligations outside the law” undermines the legislative authority of Parliament and threatens the fundamental rights of citizens and the operational freedom of businesses.

As a Senior Advocate, I believe the judiciary will ultimately have to step in to draw the line between valid regulation and executive overreach. The digital economy is the backbone of India’s future growth, but that growth must be built on the solid foundation of the Rule of Law. Subordinate legislation must remain subordinate to the will of the people as expressed through their elected representatives in Parliament, and any deviation from this path risks constitutional invalidity.