How to Comply with Digital Advertising & Influencer Rules in India (2026): Disclosure, ASCI Guidance, Liability & Enforcement

Digital advertising compliance india has moved from a back-office concern to a board-level priority in 2026, as AI-generated creative, undisclosed influencer content and platform accountability converge under heightened regulatory scrutiny. Self-regulator ASCI, the Ministry of Electronics & Information Technology (MeitY) and the Central Consumer Protection Authority (CCPA) are each sharpening their focus on synthetic advertising and transparent disclosure. This guide is a practitioner’s operational playbook, checklists, model clauses, timelines and an enforcement-response framework, built for legal and compliance teams who must translate regulatory text into working governance. It is written to be used, not merely read.

Overview: scope and who should read this

India regulates advertising through a layered framework: ASCI’s self-regulatory code sets advertising standards and influencer disclosure expectations; the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, administered principally by MeitY and the Ministry of Information and Broadcasting, impose statutory duties on intermediaries and digital media; the Consumer Protection Act, 2019 and the CCPA provide consumer remedies and penalties for misleading advertising; and the Digital Personal Data Protection Act, 2023 governs the data that powers targeting. Effective digital advertising compliance india means operating across all four at once.

What this guide covers

This guide addresses the ASCI Code and its influencer endorsement guidance, the statutory duties under the IT Rules, 2021 and the Consumer Protection Act, data obligations under the DPDP Act, and the practical platform policies that sit on top of them. It converts those sources into checklists, contract clauses, document-retention rules and a step-by-step workflow for 2026, including controls for AI-generated creative.

Who needs to act now

Several categories of actor carry distinct, overlapping obligations:

• Brands and advertisers. Ultimately responsible for the truthfulness of claims and, in practice, often the deepest pocket in an enforcement action. Brands must own the compliance governance and bake disclosure into every campaign brief.
• Platforms and intermediaries. Subject to statutory intermediary duties, grievance redressal, takedown on notice and due-diligence obligations, under the IT Rules, 2021.
• Agencies and media buyers. Frequently the operational author of creative and placement, and therefore a key contractual counterparty for warranties and indemnities.
• Influencers and content creators. Directly within scope of ASCI’s influencer endorsement guidance and exposed to ASCI rulings and consumer action for undisclosed material connections.
• Legal and compliance functions. Responsible for building the policy, the contract templates and the enforcement-response playbook described below.

Eligibility: when these rules apply

The rules bite whenever a commercial message is published to an Indian audience across a digital channel, regardless of whether the creative was produced by a human or a model. Scope is defined by the nature of the message and the existence of a material connection, not by format.

Types of digital ads covered

The framework reaches social media posts and stories, OTT and connected-TV inventory, programmatic display, native and in-feed advertising, search and shopping ads, affiliate links and influencer endorsements. A paid partnership on a short-form video platform is treated as advertising just as a banner is; the common trigger is a commercial intent communicated for consideration, whether monetary or in kind.

Who is liable, brand, agency, influencer, platform?

Liability is rarely singular. Under the Consumer Protection Act and CCPA practice, a misleading advertisement can expose the brand (as the entity behind the claim), the endorser (where they knew or should have known the claim was false or failed to disclose a material connection) and, depending on contract, the agency. The Consumer Protection Act and the CCPA’s guidelines on prevention of misleading advertisements and endorsements set out due-diligence expectations for endorsers. Platforms occupy a distinct position: their exposure is primarily through intermediary duties under the IT Rules, 2021, grievance handling and takedown, rather than through authorship of the claim itself.

The practical consequence is that liability allocation must be settled by contract before a campaign runs, not after a complaint lands.

Step-by-step compliance checklist for digital advertising compliance india

Use this checklist as a repeatable governance cycle rather than a one-off project. Assign a single accountable owner, typically a compliance lead or general counsel’s delegate, and name responsible functions for each step. Every step below ends in a recorded artefact, because evidence of the process is itself part of digital advertising compliance india. Treat all sample wording as a starting point to be adapted and signed off by counsel.

Step 1: Map your ad ecosystem (who, what, where) including data flows and AI pipelines

Before you can govern advertising, you must inventory it. Document every channel, every third party that touches creative or placement, and every data flow that feeds targeting. In 2026, the inventory must explicitly capture AI pipelines, which tools generate copy, images, voice or video, who holds the prompts and outputs, and where synthetic assets enter the publication workflow.

• Channels and inventory. List social, OTT, programmatic, native, search and affiliate placements, with the owning team for each.
• Third parties. Record agencies, influencer networks, ad-tech vendors and platforms, with the contract reference governing each relationship.
• Data flows. Map what personal data is used for targeting and profiling, aligning the inventory with DPDP Act obligations on lawful processing and consent.
• AI pipelines. Identify every generative tool in use, the logging available, and the point at which a human reviews synthetic output.

Step 2: Review creative and disclosure rules (ASCI influencer code and sponsored content rules)

ASCI’s influencer endorsement guidance requires that any material connection between an advertiser and an endorser be disclosed in a manner that is clear, prominent and hard to miss. A disclosure buried in a wall of hashtags, placed below the fold, or expressed in ambiguous shorthand will not satisfy the standard. For video, the disclosure should be both visible and, where practical, audible; for images, it should appear as a label the viewer sees without tapping “more”.

Beyond disclosure, review the substantive claim itself. Comparative claims, health and wellness representations, financial-product promotions and “free” or discount messaging attract additional scrutiny. Document the substantiation for every objective claim before publication, the absence of substantiation is a common basis for an adverse finding. Good disclosure does not cure a false claim; both limbs must be satisfied for sound sponsored content compliance in India.

Step 3: Contractual allocation of liability (model clauses, warranties, indemnities, audit rights)

Contracts are where liability is actually distributed. Influencer and agency agreements should carry disclosure obligations, provenance warranties for AI content, indemnities for misleading claims and audit rights. The following are short model clauses, offered as sample wording to be adapted and reviewed by counsel.

Set out the indemnity so that the party best placed to prevent the harm bears it. For influencer agreements, the creator should indemnify for non-disclosure within their control; for agency agreements, the agency should warrant substantiation of claims it drafts. Strong contracting is one of the most effective levers for influencer marketing compliance in India.

Step 4: Platform policy alignment and upload/workflow controls

Platform operators carry statutory intermediary duties under the IT Rules, 2021, including grievance redressal and acting on takedown notices. Advertisers, for their part, must align campaign workflows with each platform’s paid-partnership tooling. Where a platform offers a native “paid partnership” label, use it in addition to on-post disclosure, it is a supplementary control, not a substitute. Platform operators should implement upload-gating so that commercial content cannot go live without the required disclosure fields completed, and should maintain a documented grievance officer and timelines consistent with the IT Rules, 2021.

Step 5: AI and synthetic content controls (prompt provenance, watermarking, pre-release review)

Generative AI is the defining compliance variable of 2026. AI-generated advertising is not banned in India, but it must meet the same truthfulness and disclosure standards as any other creative, and emerging expectations point toward provenance and labelling of synthetic media. Build controls that make provenance auditable and misuse detectable.

• Prompt and output logging. Retain the prompts, source assets and generated outputs for every synthetic asset, so provenance can be reconstructed.
• Watermarking and labelling. Where an ad depicts a person, voice or scene that is wholly or partly synthetic, label it clearly and apply technical provenance markers where available.
• Pre-release human review. No AI-generated asset should publish without a named human reviewer confirming claims are substantiated and no deceptive synthetic likeness is used.
• Prohibited uses. Expressly bar synthetic endorsements that imply a real person’s approval without consent, and deepfake-style depictions of identifiable individuals.

Step 6: Pre-publication compliance checks and sign-offs

The final gate is a documented sign-off capturing who approved what, when and on what basis. Build a short checklist into the campaign workflow and require evidence capture, screenshots, approval emails, substantiation files, before go-live. This is the step that turns policy into a defensible record. In an enforcement inquiry, the existence of a timestamped sign-off trail is often the difference between a swift resolution and a prolonged dispute.

Required documents and evidence to maintain

Compliance that cannot be evidenced is compliance that cannot be defended. Maintain a structured document set for every campaign so that, on receipt of an ASCI query or a CCPA notice, the relevant artefacts can be produced within hours rather than days.

What to retain and retention periods

Retain signed contracts, final creative masters, approval checklists, disclosure screenshots, AI generation logs and placement invoices. Retention periods should reflect both limitation periods for consumer claims and the practical reality that enforcement inquiries can arrive long after a campaign closes. The ranges below are practitioner best-practice suggestions; align them with your organisation’s wider records policy and any DPDP Act minimisation requirements for personal data.

Timeline and deadlines

Two clocks run in parallel: external regulatory timelines and your internal service-level agreements for incident response. The faster and more consistent your internal SLAs, the less likely a complaint escalates into a formal order.

ASCI complaint process and typical case timeline

An ASCI complaint typically proceeds from intimation to the advertiser, through a response window, to a decision by the relevant committee, and, where upheld, a direction to modify or withdraw the advertisement. Advertisers should be ready to respond substantively, with substantiation, within the window ASCI specifies in its communication, and should take immediate voluntary mitigation where the content is clearly non-compliant. Confirm the applicable timelines against ASCI’s current complaint procedure.

Internal SLAs for incident response

Define SLAs for takedown, remediation and legal review so that teams act without waiting for escalation. A clear 24–72 hour takedown target for notified content, coupled with a 48–72 hour pre-launch review, forms the backbone of a credible digital advertising compliance india operating model.

Note: statutory grievance-handling and takedown timelines applicable to intermediaries are set out in the IT Rules, 2021 and should be confirmed against the current text of those Rules for any platform-facing obligation.

Costs and fees: budgeting for compliance and remediation

Budgeting for compliance is cheaper than budgeting for enforcement. The figures below are indicative planning estimates in Indian rupees; they are not quotes and will vary significantly with scope, scale and adviser rates.

One-off compliance implementation costs

Initial implementation covers policy and playbook drafting, contract and template redlines, and engineering work for watermarking and upload-gating. Engineering is the most variable line item because it depends on the number of platforms, the volume of synthetic content and the degree of system integration required.

Potential enforcement costs

Enforcement exposure spans takedown and refund costs, penalties under the Consumer Protection Act, the cost of defending or responding to an ASCI complaint, and reputational remediation. Penalties for misleading advertisements are determined by the CCPA under the Consumer Protection Act, 2019, and vary with the nature and gravity of the contravention; consult the current statutory provisions rather than assuming a fixed figure. At the upper end, remediation scales with campaign spend and the severity of any penalty, which is why prevention through process consistently represents the better investment.

What changes in 2026: AI, platform policy trends and regulatory focus

The direction of travel in 2026 is unmistakable: more synthetic creative, more platform accountability and sharper regulatory attention on transparency. Compliance teams that treat older playbooks as adequate will find gaps around AI provenance in particular.

AI-generated creative, provenance and watermarking expectations

Industry observers expect provenance and labelling of synthetic media to become a default expectation rather than a differentiator. The likely practical effect is that brands will need to demonstrate, on request, how a synthetic asset was produced and reviewed. Building prompt-and-output logging now is the lowest-cost way to meet that expectation later, and it is central to credible readiness for AI-related advertising rules.

Greater platform accountability and faster takedowns

Early indications suggest continued emphasis on intermediary duties under the IT Rules, 2021, with platforms expected to act on notified content and to maintain robust grievance mechanisms. ASCI’s focus areas are likely to include undisclosed influencer content, misleading health and financial claims, and synthetic endorsements.

Practical implications for contracts and compliance checks

The practical response is to add AI-specific warranties and provenance obligations to every creator and agency contract, and to insert a synthetic-content review gate into the pre-publication checklist. These two changes carry much of the 2026 risk-reduction benefit.

Common pitfalls and how to avoid them

• Relying on influencer good faith without contract protections. Verbal assurances do not survive an enforcement inquiry. Require signed disclosure warranties, indemnities and audit rights before any content goes live.
• Generic disclosures that do not meet ASCI guidance. Shorthand tags buried in hashtags fail the clear-and-prominent standard. Mandate approved disclosure wording placed at the start of captions and visible in video.
• Missing AI-provenance records. Without prompts, source assets and outputs, you cannot evidence how synthetic creative was made. Log provenance by default for every AI-assisted asset.
• Failing to align platform upload workflows. If disclosure is optional in the upload flow, non-compliant content will slip through. Gate uploads so disclosure fields are mandatory.
• Slow incident response after complaints. Delay turns a correctable issue into an escalated one. Pre-agree takedown and remediation SLAs and rehearse the response path.

Comparison: ASCI Code vs statutory and platform rules

Understanding which regime drives which obligation prevents both over- and under-compliance. ASCI governs advertising standards and disclosure through self-regulation; the IT Rules, 2021 impose statutory intermediary duties; and the Consumer Protection Act and CCPA deliver consumer remedies and penalties. They operate concurrently, not in substitution.

Practical annexes and templates

The following short annexes consolidate the operational building blocks referenced above. All wording is sample wording, adapt and run by counsel before use.

• Disclosure snippets. “Paid partnership with [Brand]”, “#Ad”, “Sponsored by [Brand]”, “[Brand] gifted me this product”, placed at the start of captions and visible in video.
• Sample influencer clause. A disclosure warranty, AI provenance and indemnity clause, and audit-and-takedown clause, as set out in Step 3.
• Sample pre-publication checklist. Claims substantiated; disclosure wording approved and placed; AI provenance logged; synthetic content reviewed by named human; sign-off captured and dated.
• Sample ASCI response timeline. Day 0 intimation received; Day 1 internal triage and voluntary mitigation if needed; subsequent days substantiation gathered and response drafted; response filed within the window ASCI specifies.

If you need counsel to translate these into binding documents, see our resource on TMT law firms: How to Choose in India. You can also review the contributor profile at our contributor page.

Conclusion

Digital advertising compliance india in 2026 is an operational discipline, not a document. The organisations that fare best will inventory their ad ecosystem, embed disclosure and substantiation into every brief, allocate liability by contract, control AI provenance by default and respond to complaints within tight, rehearsed SLAs. Anchor each step to its primary source, ASCI’s code, the IT Rules, 2021, the Consumer Protection Act and the DPDP Act, and keep the evidence to prove you did so. Treat this guide as a living playbook, review it periodically as the AI and regulatory landscape shifts, and have counsel validate your templates before they go live.

Sources

1. ASCI, Code for Self-Regulation of Advertising Content in India
2. ASCI, Guidelines for Influencer Advertising in Digital Media and Rulings
3. Ministry of Electronics & Information Technology (MeitY), Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
4. Digital Personal Data Protection Act, 2023
5. Department of Consumer Affairs, Consumer Protection Act, 2019
6. Central Consumer Protection Authority (CCPA), Guidelines for Prevention of Misleading Advertisements and Endorsements, 2022