Deepfake and AI-manipulated media: the 2026 playbook

The IT Amendment Rules of 20 February 2026 gave India its first serious deepfake regime, with a three-hour takedown clock for unlawful AI content and a two-hour clock for non-consensual intimate imagery. This lesson translates the framework for an IC that finds itself with a manipulated exhibit in its hands.

Free preview 11 min read Verified

Legal basis

POSH Act+Rules 2013; BSA 2023 Sec 63; Pune Bar Assn (2026); Kailash Pawar (2025); IT Amdt Rules 2026; SHe-Box 2.0 (2026); DPDP Rules 2025; BNS 2023 Sec 75,79

Two years ago, the deepfake question in a POSH inquiry was a theoretical one. In 2026 it is not. In the last twelve months I have seen ICs deal with three flavours of AI-manipulated media. A complainant produces a video that the respondent immediately claims is deepfake. A respondent finds his face and voice pasted onto content he did not create. A malicious third party circulates a synthetic image of the complainant that has nothing to do with the underlying complaint but ends up in the record because it is…

Free The rest of Module 1 is free with your email

Keep reading, free

Add your name and email. We send a one-click link that brings you straight back to this lesson, signed in. No password, no payment.

We use your name and email only to send your access link and course emails. Unsubscribe from any email at any time. Privacy notice.

Already signed up? Get a fresh link.

Every claim in this lesson is cited. Yellow markers like [L1-C1] are clickable. Click any to see the verbatim text of the Section, Rule or judgment we're relying on. Learn how we verify content ›

Citations

IT Rules 2021, IT Amdt Rules 2026 (IT (Intermediary Guidelines) Amendment Rules 2026 — Deepfake & SGI) L4-C1

The Ministry of Electronics and Information Technology notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 on 10 February 2026, with effect from 20 February 2026. The amendment introduces the concept of "synthetically generated information" (SGI) and imposes obligations on intermediaries. Unlawful AI-generated content must be taken down within three hours. Non-consensual intimate imagery, including deepfake intimate content, must be taken down within two hours. Intermediaries must ensure SGI carries a "continuous and clearly visible label" throughout the duration of the content. Reliance on user self-reporting is insufficient; automated detection tools are required.

BSA 2023, Section 63 (Admissibility of electronic records (post 1 July 2024)) L4-C2

Section 63 of the Bharatiya Sakshya Adhiniyam 2023 came into force on 1 July 2024, replacing Section 65B of the Indian Evidence Act 1872. Any information contained in an electronic record which is printed on paper, stored, recorded or copied in optical or magnetic media or semiconductor memory produced by a computer or communication device shall be deemed to be a document, and is admissible without further proof or production of the original, if the conditions in sub-sections (2) to (4) are satisfied. Sub-section (4) requires a certificate — Part A signed by the person in charge of the device, and Part B signed by an expert — that identifies the electronic record, describes the manner of production, gives device particulars, and discloses the hash value of the record (SHA-1, SHA-256 or MD5).

POSH Case Law, Pune Bar Assn 2026 (Pune Bar Association v. Union of India, WP(C) 599/2026 (SC, 22 May 2026)) L4-C3

A three-judge Bench of the Supreme Court dismissed a constitutional challenge to Section 63(4) BSA and the accompanying Schedule. The Court held that the certificate requirement — including dual signatures by the person in charge of the device and an expert, and the mandatory disclosure of the hash value — is constitutional and has a legitimate objective of ensuring authenticity and integrity of electronic records. The Court clarified that "expert" in Part B is not restricted to examiners notified under Section 79A of the IT Act. Any individual possessing special skills and expertise in computer science and cyber forensics may validly sign Part B, provided the Court trying the case is satisfied on the expert's credentials.

Free preview

The first lesson is open. Add your email to read the rest of Module 1 free.

Module 1: Digital Evidence and Forensics for the POSH IC

Module 2: Complaints Against Senior Leadership

When the respondent is the employer under Section 2(g)
Conflict of interest and IC recusal
Independent external inquiry
Board governance safeguards: Section 177, 178 and the SEBI LODR interface
The politics of the senior-leadership complaint

Module 3: LGBTQIA+ and Gender-Neutral Complainants

The Section 2(a) boundary and the trans-woman doctrine
Navtej Johar and Supriyo: the constitutional overlay
The Transgender Persons Act 2019 as amended in 2026
Designing the employer's parallel anti-harassment policy
Best-practice handling of male, non-binary, trans and same-sex complaints

Module 4: Anonymous and Third-Party Complaints

The Section 9 written-complaint gate after Abraham Mathai
Section 9(2) representative filings: family, co-worker, NCW, and Rule 6
The IC suo-motu question: can the Committee initiate on its own motion?
Whistleblower channels and their POSH intersection
The practitioner's threshold-decision framework

Module 5: Criminal Parallel Proceedings under BNS

Section 19(g) and 19(h): the employer's criminal-assistance duties
BNS 74, 75, 79 and IPC 354, 354A, 509: the 2026 mapping
The standard-of-proof gap and why divergent outcomes are legitimate
Evidence sharing between the IC and the police
Divergent outcomes: what each combination means for the employer

Module 6: Cross-Examination and Inquiry Technique

Written versus oral cross-examination: reading Rule 7 properly
Witness protection during cross: Section 16 in the hearing room
Reluctant, hostile and adverse witnesses
Marshalling documentary and electronic evidence
Building the Section 18 appellate record from Day 1

Module 7: Post-Inquiry Reintegration and the Retaliation Protocol

The X v. Akademi retaliation doctrine
Managed return-to-work: sequencing and role separation
Role redesign, team restructuring, and location transfer
The 12-month retaliation-monitoring plan
Managed separation under the IR Code 2020

Module 8: Section 15 Compensation Advanced

The Section 15 five factors: a deep dive with three worked cases
Reading the quantum anchors: Global Health Indore and LNIPE 2026
Three compensation models: lost-earnings, career-impairment, dignity-harm
Insurance and civil damages: set-off and the no-double-recovery rule
Payment structuring and the honest reading of the tax question

Module 9: The IC Report Drafting Workshop

What a defensible IC report actually looks like
Eight defects that survive appeal
Fact, evidence, law, conclusion: the four-step drafting technique
Drafting the Section 15 compensation recommendation
Drafting the Section 14 false-complaint finding: the narrow gate

Module 10: Insurance, D&O and Regulated-Industry Interfaces

D&O insurance and POSH claims: what it covers and what it does not
Employment Practices Liability Insurance (EPLI) in India
The RBI, SEBI and IRDAI fit-and-proper regime
Sectoral secondary exposures: CDSCO, FSSAI, DoT, DGCA and others
Disclosure reconciliation: Section 22, insurance and regulator streams

Module 11: Case Management Systems and IC Tooling

The IC tooling landscape in 2026
DPDP-compliant document management: Rule 6 and Rule 8 in practice
Workflow automation and the statutory clock
Analytics dashboards and reporting reconciliation
Vendor selection: the 15-criteria rubric and pilot design

Module 12: Case-Law Tracker and Practice Foundations

Reading a POSH judgment as a practitioner
Building and maintaining a personal case-law index
The Aureliano enforcement layer: district survey, SHe-Box, MCA
The POSH Amendment Bill 2024 watchlist
The Lead Practitioner community and the 12-month protocol