DIGITAL DEFAMATION IN INDIA:NAVIGATING FREE SPEECH AND ONLINE HARM UNDER THE INFORMATION TECHNOLOGY ACT

ABSTRACT

The proliferation of social media platforms, instant messaging applications, and digital news ecosystems has fundamentally transformed the landscape of defamation law in India. Traditional defamation doctrine, rooted in colonial-era provisions of the Indian Penal Code, 1860, was conceived for a world of finite print runs and localised audiences. It was not designed to address the velocity, permanence, and borderless character of online harm, where a defamatory statement may be shared across continents within minutes and may remain indexed by search engines indefinitely. This paper undertakes a systematic examination of the legal framework governing digital defamation in India, with particular focus on the constitutional interplay between Article 19(1)(a) and Article 21, the rise and fall of Section 66A of the Information Technology Act, 2000, intermediary liability under Section 79 and the 2021 Intermediary Guidelines, and the treatment of online defamation by Indian courts. The paper also draws upon comparative insights from the United Kingdom and the United States to identify structural gaps in Indian law and to propose a calibrated legislative response — one that gives equal weight to the protection of individual reputation and the preservation of a robust, democratic digital public sphere.

Keywords: Digital Defamation, Information Technology Act, Section 66A, Free Speech, Intermediary Liability, Bharatiya Nyaya Sanhita, Article 19, Online Harm, Right to Reputation.

I. INTRODUCTION

In contemporary India, the internet is no longer a fringe medium; it is the primary arena of public discourse. With over nine hundred million active internet users and the world's highest rate of social media engagement per capita, the country presents a vivid illustration of the ways in which digital communication both empowers and endangers. A single tweet carrying a false allegation of corruption can derail a career in hours. A fabricated screenshot, doctored to suggest criminal conduct, can travel from a WhatsApp group of thirty to a national news cycle within a day. Yet the law that governs these harms remains, in its essential architecture, the product of the nineteenth

century.

India's defamation law is a hybrid system. Civil defamation is governed by common law tort principles inherited from English law and applied by Indian courts with minimal statutory modification. Criminal defamation is codified — originally under Sections 499 and 500 of the Indian Penal Code, 1860, and now under Section 356 of the Bharatiya Nyaya Sanhita, 2023 — and remains one of the very few democracies in the world that continues to treat defamation as a penal offence. The Information Technology Act, 2000 was enacted to provide a framework for electronic commerce and cyber offences, but its attempt to regulate online speech through Section 66A ended in judicial annulment.

The landmark Supreme Court judgment in Shreya Singhal v. Union of India 2 struck down Section 66A as unconstitutional, holding that its vague and overbroad language impermissibly chilled free expression. While the judgment was widely celebrated as a victory for civil liberties, it left a significant regulatory vacuum: the most commonly invoked provision against online speech was removed without replacement, and the alternative regime of criminal defamation under the penal code — never designed for the digital context — was left to fill the gap.

This paper proceeds in five parts. Part II surveys the existing legal framework — constitutional, statutory, and regulatory — that governs digital defamation in India. Part III analyses how Indian courts have engaged with the unique features of online defamatory speech, including questions of jurisdiction, anonymous defendants, intermediary liability, and the weaponisation of criminal process. Part IV draws comparative insights from the United Kingdom and the United States. Part V offers conclusions and concrete legislative reform proposals. The paper ultimately argues that India requires a standalone digital defamation statute that is attentive to constitutional values, technically informed, and procedurally balanced.

II. LEGAL FRAMEWORK GOVERNING DIGITAL DEFAMATION IN INDIA

A. Constitutional Foundations: Article 19 and Article 21 in Tension

The constitutional architecture of free speech in India is distinctively different from liberal democracies like the United States. Article 19(1)(a) of the Constitution guarantees every citizen the right to freedom of speech and expression, but this right is not absolute. Article 19(2) empowers the State to impose reasonable restrictions on this right on grounds that include the sovereignty and integrity of India, security of the State, public order, decency or morality, contempt of court, and —

most pertinently for present purposes — defamation. The inclusion of defamation as a permissible ground for restriction is itself constitutionally significant: it places the protection of individual reputation on a par with national security and public order as justifications for limiting speech.

The Supreme Court has interpreted the word 'reasonable' in Article 19(2) as incorporating a proportionality standard. A restriction is reasonable only if it is not excessive, if there is a rational nexus between the restriction and the objective pursued, and if the restriction does not render the fundamental right illusory. In Shreya Singhal, 4 the Court applied this standard to hold that Section 66A — which criminalised the transmission of electronic messages that were 'grossly offensive, 'menacing' or calculated to cause 'annoyance' 'inconvenience' or 'danger' — was void for vagueness and overbreadth. The terms used were subjective and incapable of objective determination, creating a realistic risk that the provision would be deployed against political dissent and legitimate criticism. Critically, the Court reaffirmed the tripartite distinction between discussion, advocacy, and incitement, holding that only incitement to a definite illegal act falls outside constitutional protection.

On the other side of the constitutional ledger stands Article 21, which guarantees the right to life and personal liberty. The Supreme Court in Subramanian Swamy v. Union of India 5 unanimously held that the right to reputation is a component of the right to life under Article 21. Drawing on its earlier privacy jurisprudence, the Court reasoned that a person's reputation is integral to their dignity, and that an attack on reputation through a false statement of fact injures not merely economic interests but the very core of personhood. This holding confirmed that the protection of reputation against defamatory statements is a constitutionally legitimate aim — indeed, one grounded in a fundamental right rather than merely a policy preference.

The tension between Article 19(1)(a) and Article 21 is thus constitutionally live and irreducible. Any statutory framework governing digital defamation must navigate between them: it must be robust enough to provide meaningful remedies for reputational harm while remaining calibrated enough not to suppress legitimate expression. It is the thesis of this paper that existing Indian law fails on both counts — it offers inadequate remedies suited to the speed and scale of online harm, while simultaneously retaining criminal defamation provisions that are disproportionately restrictive in the digital context.

B. Criminal Defamation: From the IPC to the Bharatiya Nyaya Sanhita

Section 499 of the Indian Penal Code, 1860 defined defamation as the making or publishing of an imputation concerning any person intending to harm, or knowing or having reason to believe that such imputation will harm, the reputation of that person. The section contained ten explanations and four exceptions — including truth published for public good and fair comment on public conduct of public servants — that imported, in codified form, much of the common law defamation doctrine.

Section 500 prescribed punishment of simple imprisonment for a term up to two years, or fine, or both. The Bharatiya Nyaya Sanhita, 2023, which came into force in July 2024 replacing the IPC, preserves the offence of defamation substantially intact under Section 356. The essential elements remain: a false statement of fact, published or communicated to a third party, with the intention or knowledge that it will harm reputation. The exceptions are similarly carried forward. The continuity of criminal defamation in the BNS — despite the recommendations of several law reform bodies to abolish or decriminalise the offence — reflects a legislative choice to prioritise the protection of reputation over the liberalisation of speech.

Applied to the digital context, these provisions raise several unresolved difficulties. First, the concept of 'publication' — traditionally understood as communication to at least one person other than the subject — is enormously amplified online, where a post may be seen by thousands before any legal intervention is possible. Second, the attribution of authorship is complicated by anonymity and pseudonymity: a defamatory post made under a fake account requires forensic processes — subpoena to the platform, IP address tracing, and device identification — that are time-consuming and technically demanding. Third, the extraterritorial reach of the provision is uncertain: where the defendant is located in a foreign jurisdiction, Indian courts face acute enforcement difficulties.

C. The Information Technology Act, 2000: Section 66A and Section 79

The Information Technology Act, 2000 was India's principal legislative response to the challenges of the digital age. Section 66A, inserted by the Information Technology (Amendment) Act, 2008, made it a criminal offence to send electronic communications that were grossly offensive,menacing, persistently annoying, or designed to cause; inconvenience. Though not expressly a defamation provision, Section 66A was routinely invoked by police and complainants in cases involving allegedly defamatory online posts, given the ease with which such posts could be characterised as ''offensive'' or ''annoying''. Its mandatory arrest powers and the threat of imprisonment made it a potent instrument of harassment before its annulment in Shreya Singhal.

Section 79 of the IT Act, by contrast, survives and continues to govern the liability of online intermediaries. It provides that an intermediary shall not be liable for any third-party information, data, or communication link made available or hosted by it, provided that it does not initiate the transmission, does not select the receiver, and does not select or modify the information contained in the transmission; that it observes due diligence in the performance of its duties; and that it acts upon actual knowledge — typically through a court order or government notification — that the content in question is being used to commit an unlawful act.

The 2021 Intermediary Rules, made under the IT Act, significantly deepened the compliance obligations of significant social media intermediaries — those with over five million registered users in India. These include appointing a Chief Compliance Officer, a Nodal Contact Person, and a Resident Grievance Officer, all of whom must be resident in India; publishing periodic compliance reports; and implementing proactive content moderation mechanisms. The Rules also require platforms to remove flagged content within specified time limits 8 and, controversially, to enable the traceability; of the originator of encrypted messages — a requirement that has drawn criticism from privacy advocates and technologists alike as incompatible with end-to-end encryption.

III. JUDICIAL ENGAGEMENT WITH DIGITAL DEFAMATION

A. Early Recognition and Foundational Cases

Indian courts recognised the potential of digital media as a vehicle for defamation relatively early. In SMC Pneumatics (India) Pvt. Ltd. v. Jogesh Kwatra, the Delhi High Court — in what is widely regarded as the first Indian case specifically addressing online defamation — granted an ex parte injunction restraining the defendant from sending defamatory emails to the plaintiff's employer and business associates. The court held, without extended analysis, that the principles governing defamation in traditional media applied equally to electronic communications, and that the injunctive jurisdiction of civil courts was not displaced merely because the medium was digital rather than print.

Similarly, in Ram Jethmalani v. Subramanian Swamy, 10 the Delhi High Court acknowledged the distinctive character of online publication — its instantaneous reach, the ease with which it may be reproduced and forwarded, and the practical impossibility of recalling a published electronic statement — as factors that may aggravate the quantum of damages in defamation proceedings.

These early cases established the baseline proposition that defamation law is technology-neutral: the wrong consists in the false and injurious statement, not in the medium through which it is communicated.

B. Constitutional Limits on Public Figures

A significant development in Indian defamation jurisprudence was the recognition, influenced by common law, of differential standards for public figures and public officials. In Rajagopal v. State of Tamil Nadu, the Supreme Court held that a public official cannot maintain a suit for damages in relation to his official duties unless he proves actual malice — that is, knowledge of falsity or reckless disregard for the truth. This standard, broadly analogous to the American New York Times v. Sullivan doctrine, has been applied in subsequent cases to limit the chilling effect of defamation law on political commentary and investigative journalism. Its application in the digital context, where the line between 'official conduct' and 'private life' is frequently blurred on social media, remains a matter of ongoing judicial elaboration.

The recognition of a fundamental right to privacy under Article 21 in K.S. Puttaswamy v. Union of India has added a further dimension to the defamation landscape. Online defamation frequently involves not only the publication of false statements but also the non-consensual dissemination of private information — photographs, personal communications, location data — that injures reputation by association. The intersection of privacy and defamation in the digital context is an area that Indian law has yet to fully theorise, and courts have generally addressed the two claims independently rather than as aspects of a unified reputational harm.

C. Jurisdictional Complexity and Procedural Abuse

One of the most practically significant challenges posed by online defamation is the question of jurisdiction. Under Section 19 of the Code of Civil Procedure, 1908, a suit for wrong may be instituted either where the wrong was committed or where the defendant resides or works for gain. In online defamation, however, the 'place of the wrong' is notoriously difficult to determine: the statement may be made in one city, published from a server in a second, read by the plaintiff in a third, and cause economic damage in a fourth. Courts have generally favoured the place where the plaintiff resides and where the defamatory material is accessed as the relevant forum, but the absence of statutory guidance has produced inconsistent outcomes and significant opportunities for forum shopping.

A related concern is the weaponisation of criminal defamation proceedings. The low threshold for filing a complaint — which requires no more than an allegation that a statement was made with the intention to harm reputation — combined with the power of magistrates to issue summons and, in some cases, warrants, has made criminal defamation a potent tool of strategic litigation against public participation, commonly known as a SLAPP suit (Strategic Lawsuit Against Public Participation). Journalists, activists, and opposition politicians have been subjected to multiple simultaneous criminal defamation complaints in different states, creating an effective instrument of harassment that does not require proof of any underlying falsehood.

IV. COMPARATIVE PERSPECTIVES AND REFORM LESSONS

A. The United Kingdom: Serious Harm and Operator Liability

The United Kingdom's Defamation Act, 2013 represents the most comprehensive legislative response to online defamation in the common law world. 14 Section 1 of the Act introduced a serious harm threshold, requiring claimants to demonstrate that the publication has caused or is likely to cause serious harm to their reputation. For companies, the threshold is further elevated: a corporate claimant must show that the statement has caused or is likely to cause serious financial loss. This threshold was designed to filter out trivial claims that consumed disproportionate judicial resources and deterred public debate, and it has been interpreted by English courts as requiring evidence of actual impact rather than mere potential for harm.

Equally significant is the UK Acts treatment of website operators under Section 5, which provides a defence to operators who can identify the author of a defamatory post, enabling claimants to pursue the individual author rather than the platform. The Act also addresses the multiple publication rule; by providing, under Section 8, that for limitation purposes a statement is treated as having been published once — on the date of its first publication — rather than afresh each time it is accessed, thereby limiting the indefinite extension of limitation periods that the rule would otherwise produce in the digital context. These provisions together offer a coherent, technology-aware framework that Indian law presently lacks.

B. The United States: First Amendment Absolutism and Section 230

The United States approach to online defamation is shaped by two countervailing forces: the stringent free speech protections of the First Amendment, and the near-absolute immunity conferred on internet platforms by Section 230 of the Communications Decency Act, 1996. The actual malice' standard established in New York Times Co. v. Sullivan 15 requires public figures to prove not merely that a statement was false and injurious, but that the defendant knew it was false or acted with reckless disregard for its truth. This sets an exceptionally high bar and has been criticised for leaving public figures with few effective remedies against even egregious online falsehoods.

Section 230 immunity, which shields platforms from liability for user-generated content regardless of notice, has enabled the explosive growth of social media but has simultaneously allowed platforms to profit from the viral spread of defamatory and harmful content without bearing any of its costs. The European Union, by contrast, has taken a more interventionist approach: the General Data Protection Regulation and the right to be forgotten established in Google Spain SL v. Agencia Española de Protección de Datos 16 permit individuals to demand the erasure of search results linking to outdated or irrelevant personal information — a form of reputational remedy that has no direct

equivalent in Indian law.

C. Lessons for Indian Reform

Neither the American nor the European model is directly transplantable to India. The American model is too speech-protective: India's constitutional framework expressly permits restrictions on speech on grounds of defamation, and there is no First Amendment analogue that would render criminal defamation facially unconstitutional. The European model is too focused on data rights: India's own digital ecosystem has different structural features, including a large proportion of users accessing the internet through mobile-only connections and platforms that are dominated by a handful of global intermediaries.

A reform framework adapted to Indian conditions might incorporate the following elements. First, a substantial harm threshold for civil defamation suits modelled on the UK's serious harm test, designed to filter trivial claims without eliminating meaningful remedies. Second, a statutory codification and limitation of criminal defamation as it applies to online speech: the offence should require proof of actual malice when the complainant is a public official or public figure, and the power to issue process should be subject to judicial scrutiny at the admission stage to prevent SLAPP suits. Third, a clearer statutory regime for intermediary liability that distinguishes between passive hosting of user content and active algorithmic amplification, with proportionate liability imposed on platforms that profit from the amplification of content that they have been notified is defamatory. Fourth, a right to erasure or correction for demonstrably false statements, enforceable against both authors and platforms, modelled on the GDPR but adapted to Indian constitutional norms.

V. CONCLUSION

Digital defamation in India is not merely a technical legal problem — it is a crisis of institutional design. The harms are real and rapidly escalating: reputations destroyed by viral falsehoods, journalists silenced by serial criminal complaints, private individuals subjected to coordinated online

abuse with no swift legal remedy. Yet the legal framework available to address these harms is a patchwork of colonial-era penal provisions, underspecified intermediary regulations, and judge- made doctrine that has evolved incrementally in the absence of legislative guidance.

The fall of Section 66A in Shreya Singhal was constitutionally correct and necessary. But it did not resolve the underlying problem; it merely removed the most overbroad instrument of state response. The judiciary has done remarkable work in adapting traditional doctrine to digital facts — recognising online publication as equivalent to print publication, acknowledging the aggravated harm caused by the permanence and reach of online statements, and beginning to develop standards for public figures — but judicial case-by-case development is an inadequate substitute for a comprehensive statutory framework.

Any effective reform must be grounded in a serious engagement with the constitutional tension between Article 19(1)(a) and Article 21. It must resist both the temptation to criminalise broadly in the name of protecting reputation — which chills legitimate public discourse and enables state and powerful private actors to weaponise defamation law against critics — and the temptation to immunise platforms entirely in the name of innovation, which allows those platforms to profit from the spread of harmful falsehoods at the expense of individual dignity. The Digital Personal Data Protection Act, 2023 18 signals that Parliament is prepared to engage with novel digital harms through legislation rather than leaving them entirely to judicial development. Extending that legislative attention to the specific domain of reputational injury online, through a standalone digital defamation statute that is constitutionally grounded, technically informed, and procedurally balanced, is the most urgent pending task of Indian media law reform.

References

1. Indian Penal Code, 1860, §§ 499–500 (criminal defamation; since replaced by Bharatiya Nyaya Sanhita, 2023, § 356). Civil defamation in India is governed by common law tort principles as applied by Indian courts.

2. Information Technology Act, 2000, § 66A (struck down as unconstitutional); Shreya Singhal v. Union of India, (2015) 5 SCC 1.

3. Constitution of India, art. 19(1)(a) (freedom of speech and expression); art. 19(2) (reasonable restrictions in interests of sovereignty, security of the State, friendly relations with foreign States, public order, decency or morality, or in relation to contempt of court, defamation or incitement to an offence).

4. Shreya Singhal v. Union of India, (2015) 5 SCC 1, ¶¶ 85–95 (Nariman J.). The Court distinguished, discussion andadvocacy from incitement, holding that only the last category may be constitutionally curtailed.

5. Subramanian Swamy v. Union of India, (2016) 7 SCC 221, ¶ 167 (Dipak Misra J.) Reputation of an individual is a fundamental

   right under Art. 21 of the Constitution … It is an inherent right).

6. Information Technology Act, 2000, § 79; Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules,

   2021 (hereinafter 2021 Rules).

7. Intermediary Guidelines and Digital Media Ethics Code, 2021, r. 3(1)(b)(iii) (intermediaries must not host content that is defamatory or harmful to the sovereignty and integrity of India; r. 4(1)(a) (appointment of Chief Compliance Officer); r. 4(1)(b) (appointment of Nodal Contact Person); r. 4(1)(c) (appointment of Resident Grievance Officer).

8. 2021 Rules, r. 4(2) (significant social media intermediaries must remove; unlawful content' within 24 hours of receipt of court order or government notification, and within 36 hours for content relating to sexual violence).

9. SMC Pneumatics (India) Pvt. Ltd. v. Jogesh Kwatra, CS(OS) No. 1279/2001 (Del. HC) (first Indian case recognising online

   defamation in the employment context); see also Kalandi Charan Lenka v. State of Odisha, 2017 SCC OnLine Ori 975 (WhatsApp-

   based defamation).

10. Ram Jethmalani v. Subramanian Swamy, (2006) 132 DLT 190 (Del. HC).

11. Rajagopal v. State of Tamil Nadu, (1994) 6 SCC 632, ¶ 26 (A public official cannot maintain a suit for damages for defamation in

    relation to the discharge of his official duties … unless he proves actual malice.

12. K.S. Puttaswamy (Privacy-9J.) v. Union of India, (2017) 10 SCC 1 (recognising a fundamental right to privacy under Art. 21 of the

    Constitution).

13. Noopur Tiwari, Jurisdiction in Online Defamation: The Indian Conundrum (2021) 13 NUJS Law Review 44; see Code of Civil

    Procedure, 1908, § 19 (suits for tort may be filed where the wrong was committed or where the defendant resides or works for gain).

14. Defamation Act, 2013 (UK), § 1(1) ('A statement is not defamatory unless its publication has caused or is likely to cause serious harm to the reputation of the claimant.); New York Times Co. v. Sullivan, 376 U.S. 254 (1964) (requiring public officials to prove actual malice— knowledge of falsity or reckless disregard for truth — to recover in defamation).

15. European Union, General Data Protection Regulation (GDPR), art. 17 (right to be forgotten); Google Spain SL v. Agencia Española de Protección de Datos, Case C-131/12 (ECJ, 2014) (recognising the right to erasure of search results linking to outdated or irrelevant personal information).

16. Law Commission of India, Report No. 267, Hate Speech (2017) (recommending a proportionality-based approach to online speech

    restrictions); Justice B.N. Srikrishna Committee, A Free and Fair Digital Economy: Protecting Privacy, Empowering Indians (2018).

17. Digital Personal Data Protection Act, 2023. Though primarily a data protection statute, its framework of data principals having rights over personal information — including the right to correction and erasure — has potential relevance to the remediation of false statements that constitute personal data.