Internet Law in India: Digital Rights, Online Contracts, Platforms and Legal Remedies

Introduction

Internet-based activity now affects contracts, communication, commerce, intellectual property, privacy, financial transactions and access to information. Websites, social-media accounts, online marketplaces, applications and cloud systems can therefore create legal issues that involve more than one statute.

Internet law in India is best understood as a combination of legal rules. The Information Technology Act, 2000 is a central statute, but the applicable framework may also include the Bharatiya Nyaya Sanhita, 2023, Bharatiya Sakshya Adhiniyam, 2023, contract law, consumer law, intellectual-property legislation and data-protection law, depending on the facts.

What does internet law cover?

Internet law can involve:

• electronic contracts and electronic signatures;
• cybercrime and unauthorised access;
• intermediary liability and platform due diligence;
• online content and social-media disputes;
• privacy and personal-data processing;
• e-commerce and consumer disputes;
• trademark, copyright and domain-name disputes;
• online impersonation and identity theft;
• digital payments and financial fraud;
• electronic evidence; and
• cross-border online disputes.

The same incident can involve several of these areas. For example, a fake website impersonating a business may raise cybercrime, trademark, passing-off, consumer and data-protection questions simultaneously.

Information Technology Act, 2000

The Information Technology Act provides the statutory foundation for important aspects of Indian cyber and internet law. It gives legal recognition to electronic records and electronic signatures and contains provisions concerning computer-related offences, intermediary liability, blocking of information, protected systems and cyber-security institutions.

Sections 43 and 66 address specified unauthorised or dishonest and fraudulent acts involving computer resources. Sections 66C and 66D address identity theft and cheating by personation using a computer resource or communication device, subject to their statutory ingredients. Section 70B concerns the national cyber-security incident-response agency, CERT-In.

Internet offences and the Bharatiya Nyaya Sanhita

Online conduct may also constitute offences under the general criminal law. The Bharatiya Nyaya Sanhita, 2023 can become relevant where internet-enabled conduct satisfies provisions concerning cheating, personation, forgery, intimidation, criminal breach of trust or other offences.

Consequently, a cyber complaint should describe the actual conduct, the persons involved, the digital trail and the available evidence. The fact that an incident occurred online does not by itself determine which statutory provisions apply.

Electronic contracts and online transactions

Contracts can be formed through websites, applications, email exchanges and other electronic communications. Businesses should preserve the version of terms presented to a user, records of acceptance where relevant, invoices, payment records and other transaction information.

Click-wrap and other online acceptance mechanisms should be designed so that material terms are reasonably accessible. The enforceability of a particular online arrangement depends on contract law, the manner of acceptance and any applicable statutory formalities.

Electronic signatures

Electronic signatures may have legal effect when used in accordance with the Information Technology Act and applicable rules. Businesses should distinguish between ordinary electronic acceptance, electronic signatures and digital signatures, because their legal treatment can differ.

Some documents and transactions may be subject to additional statutory or formal requirements. The form of execution should therefore be considered before relying on an electronic document in a significant transaction.

Intermediaries and safe harbour

An intermediary is defined under the Information Technology Act in relation to receiving, storing or transmitting electronic records or providing specified services. Internet service providers, web-hosting services, search engines, online marketplaces and other entities can fall within the definition depending on their role.

Section 79 provides a framework for exemption from liability for third-party information in specified circumstances. Safe harbour is conditional and connected with statutory requirements, including applicable due diligence.

Intermediary due diligence

The IT Rules, 2021 prescribe due-diligence obligations for intermediaries. Depending on the category of intermediary, requirements can concern publication of rules and policies, grievance redressal, cooperation with lawful orders, preservation of information and other measures.

Businesses should identify their precise regulatory classification before determining which obligations apply. A small service provider and a significant social media intermediary may not have identical duties.

2026 changes concerning synthetically generated information

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 amended the IT Rules framework in relation to synthetically generated information. The notified amendments introduced definitions and additional due-diligence requirements concerning synthetic audio, visual and audio-visual information.

The framework requires intermediaries facilitating the creation or dissemination of specified synthetically generated information to take technical measures against unlawful categories and to label permissible synthetic information with appropriate disclosure and, where technically feasible, provenance-related metadata. Significant social media intermediaries have additional requirements concerning user declarations, technical verification and prominent labelling.

The 2026 amendments also address certain grievance and removal timelines. The precise obligation depends on the intermediary’s category and the provision involved. These requirements should be distinguished from later draft proposals that were merely placed for consultation.

Online speech and social-media disputes

Online speech can raise questions involving defamation, privacy, threats, impersonation, intellectual property or other unlawful conduct. Not every disputed or offensive statement has the same legal consequence.

Context, publication, identification of the affected person, the nature of the statement, applicable statutory provisions and available defences can all matter. A person considering action should preserve the original content and surrounding evidence before seeking removal where practicable.

Fake profiles and online impersonation

Fake social-media profiles, email accounts and websites may be used to impersonate individuals or businesses. Depending on the conduct, such activity may raise criminal, trademark, passing-off, privacy and civil-law issues.

Useful evidence can include the profile or website URL, account identifier, screenshots, messages, payment requests, emails, dates and communications with the platform. Where possible, the original electronic records should also be preserved.

Domain-name disputes

A domain name can become commercially valuable and can form part of an intellectual-property dispute when it conflicts with an established trademark or business identity. The assessment depends on the domain, the rights claimed, the nature of use and surrounding circumstances.

A domain dispute may involve trademark infringement, passing off, contractual issues or other appropriate proceedings. Domain registration by itself does not automatically confer trademark rights.

Copyright on the internet

Online photographs, videos, software, articles, graphics, music and other creative works can be protected by copyright. Copying, communicating or adapting protected material may raise infringement issues depending on the facts and statutory exceptions.

Website operators should maintain records of ownership and licences for material published online. Creators should retain original files, dated records and agreements with employees, contractors and agencies where ownership is relevant.

Online trademark use

Trademark disputes can arise through websites, domain names, marketplace listings, advertisements and social-media accounts. The legal assessment should consider the registered right, the impugned use, the relevant goods or services and the statutory tests.

Similarity is not determined merely by counting identical letters. Visual, phonetic and conceptual similarity and the surrounding commercial circumstances may all be relevant.

Privacy and personal data on the internet

Websites and applications may collect account information, contact details, device information, location information, payment information and usage data. Organisations should identify the purposes of processing, relevant legal requirements, access controls, retention periods and third-party recipients.

The Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 form an important part of the current framework, subject to the commencement provisions applicable to particular obligations. Sector-specific laws and contracts may impose additional requirements.

E-commerce and online consumer disputes

Online purchases can create disputes concerning product descriptions, pricing, payment, delivery, refunds, warranties, defective goods, deficient services and misleading representations. The Consumer Protection Act, 2019 and applicable rules may become relevant.

Consumers should retain invoices, order confirmations, payment records, product descriptions, photographs and communications. Sellers and platforms should ensure that material information presented to consumers accurately reflects the transaction.

Online advertising and digital marketing

Digital advertisements can raise consumer-protection, trademark, privacy and contractual questions. Businesses should ensure that material claims can be substantiated where required and that the manner of using another person’s trademark or content is legally appropriate.

Influencer and affiliate arrangements should also be documented appropriately. Disclosure and advertising requirements can vary according to the product, platform and relationship involved.

Online financial fraud

Phishing, impersonation, fake investment schemes, payment fraud and remote-access scams are common examples of internet-enabled financial misconduct. Prompt reporting can be important because funds may move rapidly between accounts.

Relevant evidence can include UTR numbers, bank statements, transaction IDs, beneficiary details, phone numbers, emails, messages, URLs and screenshots. Records of communications with the bank and authorities should also be retained.

Digital evidence

Digital evidence may include emails, chats, social-media posts, server logs, electronic documents, website records, device data, payment records and account information. The evidentiary value of such material depends on authenticity, integrity, source, preservation and compliance with the applicable law governing electronic records.

The Bharatiya Sakshya Adhiniyam, 2023 contains provisions governing electronic and digital records. Parties should therefore avoid unnecessarily deleting, altering or overwriting relevant information.

Recent Supreme Court guidance on electronic evidence

In 2026, the Supreme Court considered a constitutional challenge concerning the statutory requirements for electronic records under Section 63(4) of the Bharatiya Sakshya Adhiniyam, 2023. The Court upheld the validity of the provision and addressed the role of the prescribed certificate and hash values in the evidentiary framework.

The development reinforces the importance of preserving electronic records in a manner that allows their authenticity and integrity to be addressed when they are produced in legal proceedings. The exact evidentiary requirements depend on the record and the circumstances in which it is tendered.

Preserving online evidence

When a dispute arises, evidence should be preserved promptly. Depending on the issue, useful records may include:

• complete URLs and account identifiers;
• screenshots and screen recordings;
• date and time information;
• emails and message histories;
• transaction and payment records;
• website or domain records;
• server or access logs where available; and
• original electronic files and relevant metadata.

Where litigation is anticipated, forensic preservation may be appropriate depending on the nature of the evidence.

Online harassment and cyberstalking

Repeated unwanted communication, threats, impersonation or monitoring can raise legal issues depending on the conduct. Victims should preserve messages, account details, call records, URLs and dates rather than deleting the material before documenting it.

Where there is an immediate threat to physical safety, appropriate law-enforcement assistance should be sought without delay.

Artificial intelligence and internet law

AI-generated images, audio, video and text can create legal questions involving privacy, impersonation, copyright, trademark, defamation, fraud and intermediary compliance.

The 2026 IT Rules amendments are particularly relevant to intermediaries dealing with synthetically generated information. Users and businesses should distinguish between lawful synthetic content and content that falls within prohibited or restricted categories under the applicable rules.

Online business policies

Websites and applications commonly use terms of use, privacy notices, refund policies, cookie notices and other policies. These documents should accurately describe the business’s actual practices.

A policy should not promise a process that the business does not implement. Privacy notices should correspond with actual data flows, while online contractual terms should accurately reflect the transaction and applicable conditions.

Cross-border internet disputes

An online transaction can involve parties in different jurisdictions, foreign service providers and data stored outside India. Questions concerning jurisdiction, applicable law, service of process, evidence and enforcement can therefore become important.

Accessibility of a website in India does not by itself resolve every jurisdictional question. The connection between the dispute and the proposed forum should be examined under the applicable law.

Practical checklist for internet users and businesses

1. Secure important online accounts with appropriate authentication.
2. Keep ownership records for domain names and digital assets.
3. Review trademarks and copyright used online.
4. Maintain accurate website terms and privacy notices.
5. Document significant online transactions.
6. Review contracts with technology and cloud vendors.
7. Maintain an incident-response procedure.
8. Preserve electronic evidence when a dispute arises.
9. Review applicable intermediary and data-protection requirements.
10. Monitor legal changes affecting online operations.

Common mistakes in internet-related disputes

• Assuming that internet content is free to copy.
• Deleting the original evidence after taking a screenshot.
• Assuming that a domain registration creates trademark rights.
• Ignoring the applicable platform grievance process.
• Using personal data for a new purpose without reviewing the legal framework.
• Failing to preserve payment and transaction records.
• Relying on outdated versions of the IT Rules.
• Assuming that an online dispute is governed only by the Information Technology Act.
• Failing to review jurisdiction before commencing proceedings.
• Ignoring contractual and intellectual-property consequences of online activity.

Documents that may be relevant

Depending on the matter, documents may include contracts, website terms, privacy notices, emails, chats, screenshots, URLs, domain records, invoices, bank statements, transaction details, trademark certificates, copyright records, access logs, incident reports and communications with platforms or service providers.

Frequently Asked Questions

1. What is an internet law lawyer?

The expression generally refers to a lawyer dealing with legal issues arising from internet and digital activity, such as cybercrime, electronic contracts, intermediary liability, privacy, online intellectual property and digital evidence.

2. Is there one internet law in India?

No. The Information Technology Act, 2000 is a principal statute, but several other laws can apply to internet-related conduct.

3. What is Section 79 of the IT Act?

Section 79 provides a statutory framework for exemption from liability for certain third-party information handled by intermediaries, subject to the conditions prescribed by the Act and applicable due-diligence requirements.

4. Are social-media platforms intermediaries?

Platforms may fall within the statutory definition of intermediary depending on their role and the applicable law. Additional obligations can apply to specified categories of social-media intermediaries.

5. Can an online platform be required to remove content?

Removal or disabling of access can arise through statutory procedures, lawful directions and applicable intermediary due-diligence mechanisms. The precise procedure depends on the circumstances.

6. What are the 2026 IT Rules changes?

The 2026 amendments introduced additional requirements concerning synthetically generated information, including measures against specified unlawful synthetic content and labelling or provenance requirements for permissible synthetic information. Significant social media intermediaries have additional verification and disclosure duties.

7. Can AI-generated content be illegal?

AI generation does not by itself determine legality. Content can create legal issues if it satisfies applicable prohibitions concerning privacy, impersonation, unlawful sexual material, false records, fraud or other prohibited conduct.

8. Can a domain name infringe a trademark?

Yes, a domain name can form part of a trademark or passing-off dispute depending on the rights involved and the manner in which the domain is used.

9. Can I copy content from another website?

Not automatically. Text, photographs, graphics, videos, software and other material may be protected by copyright or other rights. Permission, licensing or a statutory exception may be necessary.

10. Are online contracts legally valid?

Electronic contracts can be legally valid where the requirements of contract law and applicable electronic-record provisions are satisfied.

11. Can an email be used as evidence?

Yes. An email may be relevant electronic evidence, subject to questions of authenticity, integrity, source and the statutory requirements governing electronic records.

12. What should I preserve after an online fraud?

Preserve transaction records, UTR numbers, bank statements, messages, emails, phone numbers, URLs, screenshots and communications with the bank or platform.

13. Can online statements amount to defamation?

Potentially, if the legal ingredients are satisfied. Context, publication, identification, the nature of the statement and applicable exceptions or defences are relevant.

14. Does the DPDP Act apply to websites?

It can apply where a website or associated service processes digital personal data within the scope of the Act, subject to its applicable provisions and commencement status.

15. What is digital evidence?

Digital evidence is electronically stored or transmitted information that may be relevant to a legal proceeding, including messages, emails, logs, documents and online records.

16. Should a hacked device be formatted?

Unnecessary formatting may destroy relevant evidence. Evidence preservation and appropriate forensic handling should be considered before altering the device.

17. Can online consumer disputes be taken to a consumer forum?

Consumer remedies may be available where the transaction falls within the Consumer Protection Act and applicable requirements are satisfied.

18. Can an online dispute involve criminal and civil proceedings at the same time?

Yes. The same facts may potentially give rise to criminal allegations and civil claims, although the applicable rights, forums and remedies depend on the circumstances.

19. Can an Indian court deal with a foreign online platform?

Potentially, depending on jurisdictional principles, statutory provisions, the parties and the connection between the dispute and India.

20. What is the first step in an internet-law dispute?

Identify the conduct, preserve relevant evidence and determine which legal right or obligation is involved. Jurisdiction, limitation and available remedies can then be assessed.

Key takeaways

Internet law in India is a broad field involving the Information Technology Act, intermediary rules, criminal law, electronic evidence, privacy, intellectual property, consumer protection and contract law. The legal position continues to develop as online platforms and AI-generated content create new questions. The 2026 IT Rules amendments concerning synthetically generated information and recent judicial consideration of electronic evidence are examples of this continuing development. Internet users and businesses should preserve digital evidence, maintain appropriate security and contractual controls, and assess online disputes under all relevant legal frameworks rather than assuming that one statute applies to every situation.

Important Disclaimer

This article is provided solely for general legal information and public awareness. It is not legal advice, legal opinion, or a legal solution to any specific facts or circumstances. Laws and their interpretation may change, and the application of law depends upon the facts of each individual matter. Readers should not rely upon this article as a substitute for obtaining appropriate legal advice concerning their specific circumstances. Nothing contained in this article creates, establishes or constitutes an advocate-client relationship between the reader and Trident Legal Services, Advocate Nikhil Rathod, or any other person associated with the publication.