[Answered] Examine the challenges in enforcing platform compliance on Big Tech. How can India balance digital sovereignty, platform accountability, and user rights?

Introduction

India’s 900-million-plus internet ecosystem is entering an era of active platform governance: the IT Rules, DPDP framework and recent Big Tech scrutiny increasingly make accountability a condition for digital-market access.

Why platform compliance is increasingly difficult

1. Safe Harbour Immunity Abuse: Section 79 of the IT Act protects intermediaries, but algorithmic curation and targeted advertising blur the line between passive conduit and active platform. Example: Meta algorithms.
2. Encryption vs. Traceability Friction: Platforms utilizing End-to-End-Encryption (E2EE), resist requirements to trace the “first originator”, citing systemic cybersecurity vulnerabilities and breaches of individual privacy rights. Example: Signal.
3. Jurisdictional & Structural Extraterritoriality: Global firms, foreign servers and multinational corporate structures complicate enforcement of Indian orders. Example: Telegram.
4. Dark Patterns & Algorithmic Harms: Platforms can amplify deepfakes, scams and polarising content without transparent accountability mechanisms. Example: AI deepfakes.
5. Rapid technological change: Regulation often follows innovations such as AI agents, synthetic media and new platform architectures. Example: AI governance.

Comparative Regulatory Matrix

Recent Interventions Reveal The Changing Regulatory Approach

1. Scrutiny of Meta, Google, Telegram and Signal illustrates a transition from regulating content alone towards examining platform architecture and design.
2. Telegram’s restrictions concerning examination-paper circulation demonstrate preventive platform intervention. Example: NEET controversy.
3. Concerns over WhatsApp usernames illustrate regulation of potentially harmful design features, not merely posts. Example: Identity spoofing.
4. Meta’s controversies over moderation and AI-generated misinformation highlight the need for demonstrable compliance rather than post-facto apologies. Example: Deepfake videos.
5. Thus, India is gradually moving from “intermediary responsibility” to “systemic platform responsibility.”

International lessons

Way Forward

1. Enacting the Digital India Act (DIA): Replace outdated IT Act, 2000 with a modern framework that categorizes intermediaries by risk and function rather than applying blanket rules. Example: Risk-based classification.
2. Algorithmic Transparency & Co-Regulation: Establish statutory auditing frameworks for algorithmic recommendations and dark patterns while involving tech platforms in formulating technical standards. Example: Accountability-by- Design.
3. Harmonizing Security with Fundamental Rights: Implement privacy-preserving compliance tools, metadata analysis and hash-matching, to combat illegal content without compromising E2EE or fundamental rights under Article 21. Example: Whole-of-stakeholder-Approach.
4. Regulatory Coordination: Create interoperability among MeitY, CCI, CERT-In and sectoral regulators. Example: Joint oversight.
5. AI-content Provenance: Encourage watermarking and content credentials for synthetic media. Example: Deepfake detection.
6. International Cooperation: Strengthen MLATs and cross-border data-access mechanisms. Example: Cybercrime cooperation.
7. Regulatory Sandboxing: Allow startups to innovate under proportionate compliance regimes. Example: AI sandbox.

Conclusion

Digital sovereignty cannot mean state overreach, nor can platform autonomy mean lawlessness. By building transparent, rule-based accountability frameworks, India can protect user safety and national security while maintaining an open, innovative digital economy.