IT Act, 2000
India's foundational internet law. It is the base layer that later rules build on, including the Intermediary Rules, 2021.
The IT Act, 2000 did two big things for you as a founder or platform operator. Together, they still shape how the Indian internet works.
First, it made electronic transactions and contracts legally valid. That is why online shopping counts in the eyes of the law. E-signatures count too, as do other everyday digital agreements.
Second, it set a rule for any intermediary (a platform that hosts or carries other people's content). An intermediary is not automatically liable for what users post. It just has to meet certain conditions. This is the safe-harbour idea. The Intermediary Rules, 2021 build on it, as do later amendments.
In plain English: almost every platform-facing rule in India today amends the IT Act. Or it is a rule made under it. Read this page to understand that base layer.
Key sections in plain words
- Section 79 — safe harbour. A platform is not liable for what users post, if it only passes content on, does not pick or change it, and follows due diligence rules.
- Section 66C — identity theft. Using someone else's password, e-signature or other unique ID dishonestly. Up to three years in jail and a fine of up to ₹1 lakh.
- Section 66D — cheating by pretending to be someone. Using a phone or computer to cheat by personation. Up to three years in jail and a fine of up to ₹1 lakh.
- Section 67 — obscene material. Publishing or sending obscene material online. On a first conviction, up to three years in jail and a fine of up to ₹5 lakh.
- Section 69A — blocking. The government can order a platform to block content, for listed reasons such as security of the State or public order. It must record its reasons in writing.
What the DPDP Act changes, and when
Section 44(2) of the DPDP Act removes Section 43A of the IT Act. It also removes the rule-making power in Section 87(2)(ob), and adds the DPDP Act to the proviso in Section 81. These changes start on 13 May 2027 (G.S.R. 843(E)(c)). Until then, Section 43A and the SPDI Rules still apply.
Official text — DPDP Act, 2023, Section 44(2)
Opened India Code's updated PDF on 5 Oct 2026 (Sections 66C, 66D, 67, 69A, 79 read).
Am I a Data Fiduciary?
If you also handle user data as an intermediary, check whether DPDP obligations apply to you alongside these platform rules.
Run it now