Introduction
Deepfake technology is an emerging form of Artificial Intelligence (AI) that enables the creation of highly realistic but manipulated audio, video, and image content. The term “deepfake” is derived from the words “deep learning” and “fake,” referring to the use of AI techniques to generate synthetic media that appears authentic. while this technology has several beneficial applications entertainment, education, and digital communication, its misuse has raised serious concerns regarding privacy,consent, reputation, misinformation, and cybercrime.[1]
The relevance of this topic has increased significantly in recent years due to the growing use of social media and AI-powered tools, which have made the creation and dissemination of deepfakes easier and more accessible.[2] In India, incidents involving manipulated content have highlighted the need for effective legal safeguards to address the challenges posed by synthetic media.
The purpose of this study is to examine the concept of deepfakes, analyse the existing legal framework in India, identify the challenges associated with regulating deepfake technology, and suggest measures for preventing its misuse while ensuring the protection of individual rights and public interest.
Background
The emergence of Artificial Intelligence (AI) and machine learning technologies has significantly transformed the creation and dissemination of digital content. One of the most notable developments in this field is deepfake technology, which refers to AI-generated synthetic media capable of realistically manipulating a person's face, voice, expressions, or actions. Deepfakes are created using advanced deep learning models and are often difficult to distinguish from authentic content.[3]
Initially, synthetic media was developed for legitimate purposes such as entertainment, filmmaking, education, and digital accessibility. However, the rapid advancement and accessibility of generative AI tools have led to the widespread misuse of deepfakes. These technologies are increasingly being used to create non-consensual intimate content, spread misinformation, impersonate individuals, influence public opinion, and commit financial and cyber fraud. Such misuse raises serious concerns regarding privacy, consent, reputation, and digital security.[4]
In India, the growing number of deepfake incidents involving celebrities, public figures, and ordinary citizens has highlighted the challenges posed by synthetic media. The circulation of manipulated content on social media platforms has demonstrated how deepfakes can undermine public trust and cause significant personal and societal harm. Despite the existence of legal provisions under the Information Technology Act, 2000, the Bharatiya Nyaya Sanhita, 2023, and the Digital Personal Data Protection Act, 2023, there is currently no comprehensive legislation specifically regulating deepfakes and synthetic media.[5]
Legal Framework
India does not currently have a dedicated statute specifically governing deepfakes or synthetic media. However, various constitutional provisions, statutory enactments, and regulatory measures provide legal remedies against harms caused by the misuse of such technologies.
1 Indian . Constitutional 1950 Framework
The Constitution of India offers protection against several harms associated with deepfakes. Article 21 guarantees the right to life and personal liberty, which has been interpreted by the Supreme Court to include the rights to privacy, dignity, and reputation.[6] The unauthorized manipulation of an individual's image, voice, or personal identity through deepfake technology may therefore infringe these constitutionally protected interests.Further, while Article 19(1)(a) guarantees freedom of speech and expression, Article 19(2) permits reasonable restrictions in matters concerning defamation, public order, and morality.[7]
2. Information Technology Act, 2000
The Information Technology Act, 2000 serves as the principal legislation dealing with cyber-related offences in India. Section 66C penalizes identity theft involving the misuse of another person's identifying information, while Section 66D addresses cheating by personation through electronic means. These provisions may be invoked where deepfakes are used to impersonate individuals or facilitate fraudulent activities.[8]
Additionally, Sections 67 and 67A prohibit the publication or transmission of obscene and sexually explicit content in electronic form. These provisions may apply where deepfake technology is used to create and distribute non-consensual intimate or sexually explicit material.[9]
3. Bharatiya Nyaya Sanhita, 2023
The Bharatiya Nyaya Sanhita, 2023 contains several provisions that may be relevant to deepfake-related offences. These include offences relating to cheating by personation, defamation, forgery, obscenity, and harassment. Although these provisions can address certain consequences arising from the misuse of synthetic media, the legislation does t specifically recognise deepfake creation or dissemination as a separate offence.[10]
4. Digital Personal Data Protection Act, 2023
The Digital Personal Data Protection Act, 2023 establishes a consent-based framework for the processing of personal data. The Act requires that personal data be collected and processed only with valid consent. Since deepfake technologies frequently rely on facial images, voice recordings, and other biometric information, the Act may offer protection against the unauthorized collection and use of such data.[11]
5. Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
The Information Technology Rules, 2021 impose obligations upon intermediaries and digital platforms to address unlawful online content and respond to user grievances. These rules, along with governmental advisories concerning AI-generated content, provide an additional regulatory mechanism for addressing the circulation of harmful deepfakes on digital platforms.[12]
Analysis and Discussion
Deepfake technology poses serious challenges to India's legal system. Although existing laws provide protection against identity theft, defamation, obscenity, and privacy violations, there is no specific legislation dealing exclusively with deepfakes. This creates uncertainty regarding liability and enforcement.[13]
The major challenges include difficulties in detecting deepfake content, lack of specialized forensic infrastructure, anonymity of offenders through VPNs, and cross-border jurisdictional issues. Deepfakes also threaten privacy, consent, reputation, and public trust by facilitating misinformation, impersonation, and digital fraud. [14]
Case laws
1.Gaurav Bhatia v. Naveen Kumar & Ors.2024.[15]
The Delhi High Court restrained the circulation of defamatory deepfake videos and emphasized the protection of reputation and personality rights.
2.National Stock Exchange v. Meta Platforms & Ors.2024.[16]
The Bombay High Court directed the removal of deepfake videos that misled investors through false stock recommendations.
3.Suniel Shetty v. John Doe2025.[17]
The Court granted protection against the unauthorized digital use of the actor's identity and personality rights.
4.Karan Johar v. Ashok Kumar & Ors. 2025.[18]
The Delhi High Court restrained the misuse of Karan Johar's persona through AI-generated and deepfake content.
These cases demonstrate the judiciary's growing recognition of the risks posed by deepfakes and the need to protect privacy, reputation, and personality rights in the digital age.⁷
Conclusion
Deepfake technology represents one of the most significant challenges emerging from the rapid development of Artificial Intelligence. While it has several positive applications, its misuse has created serious concerns relating to privacy, consent, digital autonomy, reputation, and cybercrime. The existing legal framework in India, including the laws provides certain remedies against deepfake-related harms; however, these laws do not specifically address the unique challenges posed by synthetic media.
The analysis shows that difficulties such as identifying perpetrators, proving criminal intent, authenticating digital evidence, and dealing with cross-border cyber offences make the prosecution of deepfake cases challenging. Judicial responses in cases demonstrate the growing importance of protecting personality rights and digital identity in the AI era.
Therefore, India requires a comprehensive legal framework specifically dealing with deepfakes, along with stronger digital forensic infrastructure, effective detection mechanisms, and greater public awareness. A balanced approach involving legislation, technological solutions, and responsible use of AI is essential to protect individual rights while encouraging technological innovations .
Reference
[1] Samantha Cole, Deepfakes and the New Disinformation War (2023) 12 Journal of Cyber Policy 45..
[2] UNESCO, Guidance for the Governance of Digital Platforms (2023).
[3]Henry Ajder, The State of Deepfakes (Deeptrace Labs 2019).
[4] World Economic Forum, Global Risks Report 2024.
[5]Ministry of Electronics and Information Technology, Government of India, 'Advisory on Deepfakes and AI Generated Content' (2024).
[6] Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) 10 SCC 1.
[7]Constitution of India, arts 19(1)(a) and 19(2).
[8] Information Technology Act 2000, ss 66C and 66D.
[9] Information Technology Act 2000, ss 67 and 67A.
[10] Bharatiya Nyaya Sanhita 2023.
[11] Digital Personal Data Protection Act 2023.
[12] Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021.
[13] Apar Gupta and Rohan Chawla, 'Regulating Deepfakes in India' (2024) Indian Journal of Law and Technology
[14] World Economic Forum, Global Risks Report 2024.
[15] Gaurav Bhatia v. Naveen Kumar Ors. CS(OS) 247/2024.
[16] National Stock Exchange v. Meta Platforms Ors:
Interim Application (L) No. 21456 of 2024 in COM
IPR Suit (L) No. 21111 of 2024.
[17] Suniel Shetty v. John Doe 2025 SCC OnLine Bom
3918
[18] Karan Johar v Ashok Kumar, John Doe and Ors
CS(COMM) 974/2025.