AI Deepfakes & Personality Rights in India (2026): Injunctions, Evidence Preservation & IP Remedies

Last updated: 18 May 2026

India’s deepfake law landscape shifted decisively in early 2026 when MeitY notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, introducing the country’s first dedicated obligations around Synthetically Generated Information (SGI), including mandatory labelling and aggressive takedown timelines. For brands and celebrities confronting AI misuse in India, the practical question is no longer whether legal remedies exist, it is how quickly rights-holders can mobilise injunctions, lock down digital evidence, and compel platform compliance before content goes viral.

This playbook maps the full litigation pathway: from the regulatory and criminal framework through interim injunction strategy, forensic evidence preservation, and platform escalation, giving general counsel, celebrity managers, and IP specialists a step-by-step action plan grounded in the 2026 rules and recent court practice.

Deepfake Law India, At-a-Glance: Key Facts

India regulates AI deepfakes through a layered statutory framework combining the amended IT Intermediary Rules, criminal statutes under the IT Act 2000 and the Bharatiya Nyaya Sanhita (BNS), the Digital Personal Data Protection Act 2023, and judicially developed personality rights. Platforms must remove highly invasive synthetic content within two hours of a grievance. Criminal penalties include up to three years’ imprisonment for identity theft and impersonation. Civil remedies encompass interim and permanent injunctions, damages, account of profits, and delivery-up orders.

• Regulatory takedown. The IT Rules amendment requires intermediaries to remove artificially morphed nude or highly invasive deepfakes within 2 hours; intimate images within 36 hours; and other SGI complaints within 7 days.
• Criminal statutes. IT Act Sections 66C (identity theft), 66D (cheating by impersonation), and 66E (capturing/publishing private images) apply directly. BNS Section 356 covers criminal defamation via deepfakes.
• Civil/IP remedies. Indian High Courts have granted ex parte interim injunctions restraining deepfake creation and distribution, combining personality-rights protection with copyright, trademark, and passing-off relief.

Regulatory & Statutory Framework, What Rights-Holders Must Know Under Deepfake Law India

IT Rules Amendment: SGI, Labelling and Takedown Timelines

The IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, notified as G.S.R. 120(E) on 10 February 2026, represent India’s first comprehensive effort to control deepfakes and AI-generated content. The rules introduce the concept of “Synthetically Generated Information” (SGI) and impose several obligations on social media intermediaries and significant social media intermediaries (SSMIs).

Platforms must ensure that AI-generated content is clearly labelled or digitally watermarked to prevent deception. Any reference to “information” under unlawful-activity provisions now explicitly includes synthetically generated content. The takedown clock starts when the government’s Sahyog portal issues notice, and intermediaries face a tiered compliance schedule: 2 hours for highly invasive deepfakes (artificially morphed nude imagery), 36 hours for general non-consensual intimate images, and 7 days for other SGI-related grievances. Failure to comply strips a platform of its safe-harbour protection under Section 79 of the IT Act, exposing it to direct legal liability.

Criminal Law Overlay: IT Act and BNS Provisions

Creating or distributing deepfakes can trigger multiple criminal provisions. Under the IT Act 2000, Section 66C targets identity theft through fraudulent use of another person’s electronic signature, password, or unique identification feature, punishable by up to three years’ imprisonment and a fine. Section 66D penalises cheating by impersonation using a computer resource. Section 66E criminalises capturing or publishing images of a person’s private area without consent. Sections 67 and 67A prohibit the publication or transmission of obscene and sexually explicit material in electronic form.

Under the Bharatiya Nyaya Sanhita, Section 356 can be invoked for criminal defamation when a deepfake is intended to damage reputation. Provisions covering impersonation and fraud also apply where AI is used to mimic a person’s voice or likeness to extract money or spread misinformation.

DPDP Act 2023: Data-Law Implications

The Digital Personal Data Protection Act, 2023 penalises the misuse of personal digital data, making it unlawful to process an individual’s biometric or visual likeness for deceptive purposes without consent. For deepfake creators, this adds a data-protection layer on top of existing criminal and IP liability, and gives rights-holders an additional statutory ground for seeking injunctive relief.

Causes of Action & Remedies, Civil and Criminal Pathways

Personality Rights and Publicity Rights in India

Indian courts have recognised personality rights as a facet of the right to privacy under Article 21 of the Constitution. Celebrity rights in the deepfake context protect a person’s name, image, likeness, and voice from commercial exploitation without consent. The Delhi High Court has been particularly active in expanding this doctrine, granting interim relief that specifically extends to AI-generated reproductions and chatbot impersonations. Industry observers expect this jurisprudence to continue expanding as AI misuse becomes more sophisticated.

IP Claims: Copyright, Trademark, Passing Off and Contract

Beyond personality rights, rights-holders can deploy multiple intellectual property causes of action against AI deepfakes:

• Copyright. A deepfake that reproduces or creates a derivative work from a copyrighted photograph, film footage, or sound recording infringes the original rights-holder’s exclusive rights under the Copyright Act, 1957.
• Trademark and passing off. Unauthorised use of a celebrity’s name, branded persona, or registered mark in deepfake-driven advertisements or endorsements constitutes passing off and, where the mark is registered, trademark infringement.
• Design rights. AI-generated deepfake merchandise that copies registered product designs creates additional grounds for relief.
• Contractual claims. Where existing endorsement or licensing agreements govern how a person’s image may be used, any deepfake reproduction outside those terms gives rise to breach-of-contract claims.

Criminal Remedies and the Complaint Process

Victims can lodge a First Information Report (FIR) with the local cybercrime cell under the relevant IT Act and BNS provisions. The national cybercrime reporting portal (cybercrime.gov.in) accepts complaints online. In parallel, rights-holders can approach the jurisdictional Magistrate for directions under Section 156(3) of the Code of Criminal Procedure (now Bharatiya Nagarik Suraksha Sanhita) to compel investigation where police are reluctant to register a case.

Interim Injunctions in Deepfake Cases, Tactical Litigation Strategy & Template

For rights-holders, the interim injunction is the most critical weapon in the deepfake law India arsenal. Speed is everything: content can reach millions within hours, and the reputational damage may become irreversible before a final hearing.

When to Seek an Ex Parte Order

Indian High Courts have demonstrated a clear willingness to grant ex parte interim injunctions in personality-rights and IP cases involving AI-generated content. The Delhi High Court granted interim relief in a personality-rights matter restraining AI chatbots, deepfakes, and unauthorised merchandise, ordering compliance without hearing the opposite party first. The legal threshold requires demonstrating a prima facie case, irreparable injury, and balance of convenience in the applicant’s favour. In deepfake cases, irreparable harm is typically easy to establish because the harm to reputation and dignity is ongoing and incapable of compensation in monetary terms alone.

The likely practical effect of 2026 developments is that courts will become even more receptive to urgent applications, given the statutory recognition of SGI as a distinct category of harmful content under the amended IT Rules.

Drafting the Injunction Application

A well-drafted interim application in a deepfake injunction India proceeding should include:

• Verified affidavit of urgency. Set out the facts of discovery, screen captures with timestamps, URLs, and a clear explanation of why delay would cause irreparable harm.
• Prima facie case. Detail each cause of action (personality rights, copyright, trademark, IT Act provisions) with supporting evidence. Attach forensic screenshots and hash-verified copies of the deepfake content.
• Specific reliefs sought. Request prohibitive relief (restraining creation, distribution, and hosting), preservation directions (ordering platforms to retain all data, logs, and metadata), disclosure orders (directing intermediaries to reveal uploader identity and IP addresses), and delivery-up of all infringing material.
• Anonymity / sealing. Where the content is sexually explicit, seek sealing of court records and anonymity for the victim.
• Interim costs. Request costs for the urgent application to deter frivolous opposition.

Sample Template, Key Injunction Clauses

Note: Adapt to jurisdiction and latest case law. Verify citations against latest government notifications.

• Clause 1, Prohibitive relief. “The Defendants, their agents, assignees, and any person acting on their behalf are restrained from creating, generating, publishing, distributing, hosting, or making available in any form whatsoever any synthetically generated or AI-manipulated content that depicts, reproduces, or imitates the Plaintiff’s name, image, likeness, or voice, pending final disposal of this suit.”
• Clause 2, Preservation direction. “All intermediaries and platforms identified in Schedule A are directed to preserve and retain, for the duration of this proceeding, all data, metadata, upload records, IP address logs, user account information, and algorithmic provenance records relating to the impugned content identified in Schedule B.”
• Clause 3, Disclosure order. “The intermediaries shall, within 72 hours of service of this order, disclose to the Plaintiff the identity, registration details, IP address, and upload timestamps of the account(s) responsible for creating or uploading the impugned content.”
• Clause 4, Delivery up. “The Defendants shall deliver up to the Plaintiff or destroy all copies, files, digital assets, and source materials used to create the impugned synthetically generated content.”

Enforcement and Cross-Jurisdictional Challenges

Where deepfake content is hosted on offshore servers, Indian courts can still issue blocking orders directed at Indian ISPs and intermediaries operating within India. For global platforms with registered offices or significant business connections in India, service of orders through the registered grievance officer is effective. Where the host is entirely overseas with no Indian nexus, rights-holders should consider concurrent applications for interim blocking orders and Norwich Pharmacal-style disclosure to trace the creator. Early indications suggest Indian courts are increasingly willing to exercise jurisdiction over foreign platforms that serve Indian users.

Evidence Preservation for Digital Content in India, Forensics, Seizure & Practice

Evidence preservation in deepfake cases is a race against deletion. Content can be removed, accounts deactivated, and metadata overwritten within minutes of the creator learning of a complaint. A structured preservation protocol is essential.

Immediate Steps at Discovery

• Screen captures with timestamps. Use browser extensions or forensic tools that embed date, time, and URL in the capture. Record the full URL, page source code, and any visible metadata.
• Video and audio downloads. Download the deepfake file directly (where possible) and compute SHA-256 hash values to establish authenticity.
• Wayback Machine archival. Submit the URL to the Internet Archive’s Wayback Machine for independent time-stamped preservation.
• Notarised attestation. Have a notary public or advocate attest the captured evidence with a contemporaneous certificate of authenticity.

Forensic Preservation Orders

When filing for an interim injunction, include a specific prayer for a forensic preservation order directed at the platform. The order should require the intermediary to preserve all upload data, user session logs, IP addresses, device fingerprints, model prompts (where AI tools are platform-hosted), and content moderation records. Sample wording: “The Respondent platform shall take immediate steps to preserve, in their original form, all data and metadata associated with the content identified in Schedule B, including but not limited to upload timestamps, source IP addresses, user authentication records, and any AI model interaction logs, for a period of 180 days or until further order of this Court.”

Preserving Model Provenance and Metadata

AI-generated content often carries provenance signals, C2PA metadata, EXIF data, or platform-specific watermarks, that can identify the model and creation parameters. Preservation notices should explicitly request these items. However, practitioners should note practical limitations: many open-source AI tools strip provenance metadata, and platforms may not retain model interaction logs beyond short retention windows. Early action is therefore critical.

Expert Evidence: Court-Ready Forensic Reports

Courts will require expert evidence to establish that the impugned content is AI-generated. A forensic report should include chain-of-custody documentation, hash verification, frame-by-frame analysis (for video), spectral analysis (for audio deepfakes), and a clear opinion on the probability that the content is synthetically generated.

Platform Takedowns & Escalation Under India Deepfake Regulation

Notice-and-Takedown Flow

The amended IT Rules create a structured escalation path. The rights-holder files a grievance with the platform’s designated grievance officer, specifying the impugned content and the legal basis for removal. For highly invasive deepfakes, artificially morphed nude or sexually explicit content, the platform must act within 2 hours. The government’s Sahyog portal serves as a centralised escalation mechanism; once a notice is issued through Sahyog, the takedown clock begins running. Non-compliance results in loss of safe-harbour protection.

Takedown Notice Template

A takedown notice for a deepfake should include: (a) identification of the complainant and their legal standing; (b) the specific URL(s) hosting the infringing content; (c) a description of the content and why it constitutes unlawful SGI; (d) the applicable legal provisions (IT Rules, IT Act sections, personality rights); (e) a demand for immediate removal and preservation of all associated data; and (f) a statement of accuracy and good-faith belief. If the platform’s grievance officer does not respond within the applicable timeline, escalate to the Nodal Contact Officer (for SSMIs) or file a complaint through the Sahyog portal.

When to Move to Litigation

If the platform fails to act within the prescribed timeline, or if the content reappears after removal, move immediately to court. File for an interim injunction IP India proceeding, combining prohibitive relief with a contempt application (where a prior order exists) and seek costs. Industry observers expect that courts will treat non-compliance with the 2026 IT Rules as a significant factor weighing in favour of granting injunctive relief.

Practical Playbook, Emergency Checklists & Templates

24–48 Hour Emergency Litigation Plan:

• Hour 0–2. Discover and document: screen-capture all deepfake content with timestamps; download files; compute hash values; submit URL to Wayback Machine.
• Hour 2–6. Issue takedown notice to platform grievance officer citing IT Rules, IT Act, and personality rights. Send parallel preservation notice requesting data retention.
• Hour 6–12. Instruct IP litigation counsel. Prepare verified affidavit of urgency, index of evidence, and draft interim injunction application.
• Hour 12–24. File ex parte application before the jurisdictional High Court. Seek prohibitive relief, preservation direction, disclosure order, and delivery up.
• Hour 24–48. Serve court order on platform through grievance officer. File FIR with cybercrime cell if criminal provisions are engaged. Coordinate client communications and reputation management.

Platform Escalation Checklist:

• Confirm platform qualifies as SSMI or general intermediary under IT Rules.
• Send takedown notice with all required particulars to the designated grievance officer.
• Log the exact time of notice delivery for compliance-timeline calculation.
• If no response within prescribed timeline, escalate to Nodal Contact Officer or Sahyog portal.
• If escalation fails, file urgent court application and cite platform non-compliance as evidence of failure to maintain safe-harbour status.

Client Communications Plan:

• Prepare a holding statement for media queries.
• Brief social media management teams to monitor for re-uploads and new variants.
• Consider applying for a dynamic injunction covering future uploads of the same or substantially similar content.

Conclusion

India’s deepfake law framework in 2026 provides rights-holders with a powerful, multi-layered toolkit, from expedited platform takedowns under the amended IT Rules, through criminal prosecution under the IT Act and BNS, to comprehensive civil remedies grounded in personality rights and intellectual property law. The key to effective enforcement is speed: preserving evidence within the first hours of discovery, issuing takedown notices to trigger statutory compliance timelines, and filing for interim injunctions before the content causes irreversible harm. Brands and celebrities who act decisively, with the right litigation strategy and the right counsel, can secure meaningful protection. To find IP lawyers in India with experience in deepfake law India disputes, explore the Global Law Experts directory.

Sources

1. Mondaq, IT Rules 2026 Deepfake Regulation: Three Hour Takedowns and AI Labelling Obligations
2. LiveLaw, Deepfakes, Due Diligence and the Good Samaritan Paradox
3. Khurana & Khurana, Deepfake Regulation India 2025: MeitY’s Comprehensive IT Rules Amendment
4. BananaIP Counsels, Personality Rights Interim Injunction: Sonakshi Sinha v. AI Chatbots
5. Vaish Associates, Regulation of AI-Generated/Deepfake Content and SGI in India
6. Ahlawat Associates, Deepfake Liability India: AI Legal Guide
7. SCC Online, Chasing Deepfakes Across Borders & Protecting Rights
8. Digital Sansad, The Deepfake Prevention and Criminalisation Bill Text