Intermediary Rules and the Content Takedown Process in India
How content takedown in India works under the IT Rules 2021: the 24-hour rule for intimate images, grievance officers, the GAC appeal and court orders.

In short
- Intermediaries keep their legal immunity under section 79 only if they follow the due-diligence duties in the IT Rules 2021.
- A complaint about nudity, sexual content or morphed images of a person must be acted on within 24 hours; other grievances must be acknowledged in 24 hours and resolved within 15 days.
- If the grievance officer fails or refuses, appeal to the Grievance Appellate Committee within 30 days; it is free and online.
- Government blocking under section 69A and court orders are the other two routes; the Supreme Court limited takedown-on-demand to those in Shreya Singhal (2015).
- Report to the platform in parallel with cybercrime.gov.in, keep the complaint ticket number, and preserve the content before it disappears.
Who this is for: People trying to get morphed photos, impersonation accounts, defamatory posts or leaked content removed, and the lawyers helping them.
A morphed photo on Instagram, a fake profile on Facebook, a leaked video on Telegram: the first question is always "how do I get it taken down?" The honest answer is that content takedown India-wide runs on three separate tracks. The one you use decides whether it takes a day, a month or never.
This guide explains those tracks. The first is the platform's own duty under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, usually shortened to the IT Rules 2021. The second is a government blocking order under section 69A of the IT Act. The third is a court order. We also cover the appeal body most people have never heard of, which is free and often works.
Why platforms have takedown duties at all
Section 79 of the IT Act gives intermediaries (social networks, messaging apps, hosting providers, marketplaces) immunity from liability for what their users post. That section 79 safe harbour is conditional. The intermediary must observe "due diligence" prescribed by the government. It must also act when it receives actual knowledge of unlawful content through a court order or a government notification.
In Shreya Singhal v. Union of India (2015), the Supreme Court struck down section 66A and, in the same judgment, read down section 79(3)(b). After that ruling a platform is not required to remove content merely because a private person demands it; "actual knowledge" means a court order or a notification from the appropriate government agency. That is why your email to a platform, on its own, has no legal force.
The IT Rules 2021 change this in a targeted way. They list the due-diligence steps a platform must take to keep its immunity, and among them are specific obligations to act on user complaints within fixed time limits. Fail those, and the platform risks losing section 79 protection for the content concerned.
The content takedown India rules that have deadlines
Three timelines in the Rules matter to a victim. Keep the Rule numbers; quoting them in your complaint gets attention.
| Rule | What triggers it | Deadline |
|---|---|---|
| Rule 3(2)(b) | Complaint by a person (or someone on their behalf) about content showing them in full or partial nudity, in a sexual act, or impersonating them, including artificially morphed images | Remove or disable access within 24 hours of the complaint |
| Rule 3(2)(a) | Any other grievance sent to the grievance officer | Acknowledge within 24 hours; resolve within 15 days |
| Rule 3(1)(d) | Court order, or notification by the appropriate government or its agency, that content is unlawful | Remove within 36 hours of receiving it |
The 24-hour removal rule is the one that matters for sextortion, revenge content and deepfakes. It does not require a court order or a police complaint. It requires a complaint from the person depicted, through the platform's grievance mechanism, identifying the content. Our guide to reporting on Instagram, WhatsApp, Facebook, X and Telegram shows where that mechanism sits on each app.
The Rules were amended in 2022 and 2023, and MeitY has notified further amendments since covering synthetically generated content and labelling. Timelines for specific categories may be tighter than the table above under the latest text; check the current version on the MeitY website before quoting a deadline in a legal notice.
What to put in the complaint
A grievance that gets acted on
- The exact URL of each post, profile or message, not a screenshot alone
- A one-line statement that you are the person depicted or impersonated
- The Rule you are relying on (3(2)(b) for intimate or morphed images; 3(2)(a) for everything else)
- A request for the ticket or reference number and the 24-hour or 15-day deadline in writing
- Your cybercrime.gov.in acknowledgement number if you have one
When the grievance officer stalls: the GAC appeal
Every intermediary must appoint a grievance officer and publish their contact details. Significant social media intermediaries, those above the user threshold notified by the government, must also have a resident grievance officer, a chief compliance officer and a nodal contact in India, and must publish monthly compliance reports.
If the grievance officer rejects your complaint or does nothing within 15 days, the 2022 amendment gives you an appeal to the Grievance Appellate Committee. There are several committees, each with a chairperson and members appointed by the Union government. You file online through the GAC portal within 30 days of the grievance officer's decision, attach the ticket number and the content URLs, and the committee is expected to dispose of the appeal within 30 days. Its order binds the platform.
Section 69A blocking and court orders
The second track is government blocking. Under section 69A of the IT Act and the Blocking Rules of 2009, the Union government can direct intermediaries to block access to content. The grounds include sovereignty, security, public order and prevention of incitement to a cognisable offence. Requests come through a designated officer and a committee. An individual cannot invoke it directly, though state police and nodal agencies can refer content. It is used for large-scale fraud apps, fake loan apps and coordinated harassment more than for one person's photo.
The third track is a court. A civil suit for defamation or a petition before a High Court can produce an interim order directing specific URLs to be taken down, and platforms generally comply within the 36-hour window. Courts have also issued "dynamic" injunctions that cover re-uploads of the same material. The cost is a lawyer and some weeks; the benefit is an order that covers mirror sites and future copies, which a platform complaint does not.
Whichever track you use, preserve the content first. Take screenshots with the URL visible, the date and time, and the profile details. Save them before the takedown. That is what the police and any later court will need. Our guide to preserving digital evidence explains the section 63 certificate for anything that may be produced in court.
Takedown is not the same as prosecution
Getting content removed does nothing to the person who posted it. For that you need a complaint on cybercrime.gov.in and, for anything serious, an FIR. The sections depend on the content: IT Act section 66E for private images, 67 and 67A for obscene and sexually explicit material, 66C and 66D for impersonation, and BNS section 356 for defamation. The crime-type page on social media hacking and impersonation sets these out, and the sextortion page covers extortion with images.
Platforms are also required under the Rules to preserve removed content and the associated user information for 180 days, longer if a court or agency asks. That preserved data is what lets police identify an anonymous account. Mention in your police complaint that the content has been reported and removed, with the ticket number, so the investigating officer can send the preservation and disclosure request in time.
What to do today
Here is the content takedown India checklist in one line: file the platform grievance under the correct Rule, note the ticket number and the deadline, file on the national portal in parallel, and set a reminder for day 16 to escalate to the Grievance Appellate Committee. If the content is spreading across several platforms, or you need a court order to cover re-uploads, our content removal service handles the grievance filings, GAC appeals and legal notices together. For someone being actively harassed, the National Commission for Women and the 181 helpline can push platforms and police in parallel.
Frequently asked questions
Can I force a platform to remove a post that insults me?
Not directly. Ordinary defamation or abuse is not in the 24-hour category. You can complain to the grievance officer under the platform's own terms, appeal to the Grievance Appellate Committee, file an FIR under the BNS, or seek a civil injunction. For intimate or morphed images, the 24-hour rule applies and the position is much stronger.
Who is the grievance officer, and where do I find them?
Every intermediary operating in India must publish a grievance officer's name and contact details on its website or app. Large platforms also keep a resident grievance officer in India. Search the platform's help centre for "grievance officer India"; the page is usually in the legal or safety section.
What is the Grievance Appellate Committee?
The GAC is a set of government-appointed committees created by a 2022 amendment to the IT Rules. If you are unhappy with a grievance officer's decision, or get none, you can appeal online within 30 days. The committee is expected to decide within 30 days. There is no fee and you do not need a lawyer.
Does a court order work faster?
Sometimes, especially for defamation or copyright, where a civil court can grant an interim injunction and the platform must act within 36 hours of receiving the order under the Rules. A court order costs money and time to obtain; for sexual or morphed content the free 24-hour route is usually faster.
Will reporting the content get the person who posted it punished?
Takedown and prosecution are separate. Removal is a platform duty; punishment needs an FIR and investigation under the IT Act or BNS. File both. Platforms must preserve removed content and user data for 180 days, which gives the police time to ask for it.
If you want help with this
- Content removal and online reputation · Private images, defamatory posts, fake reviews or doxxed details about you are online. We get them removed through platforms, Google and, where needed, a court order, and document everything.
- Cyber law: IT Act 2000, BNS 2023, DPDP 2023, BSA 2023 · training · A two-day course for lawyers, compliance officers, HR and police on the four statutes that govern cyber crime and data in India, taught through cases, drafting exercises and the questions each profession actually faces.
Keep reading
Report Scams on Instagram, WhatsApp, Facebook, X, Telegram
Every platform has a report button and, in India, a grievance officer who must act within fixed timelines. Here is the route on each app and...
Punishment for Cyber Crime in India: A Section-Wise Table
Every section that appears on a cyber crime FIR in India, with its maximum sentence, in one table. Plus the regulatory penalties that apply...
BSA 2023 and Electronic Evidence: The Section 63 Certificate
Screenshots are not evidence until the law says they are. The section 63 certificate under the BSA is how a printout of a chat or a bank SMS...
Cyber Insurance in India: What Is Covered and What Is Not
A cyber policy is not a refund guarantee. It pays for some things quickly, refuses others by design, and depends on you having reported in t...