Government Surveillance and Censorship on Social Media in India

We live our lives on social media. From a quick ‘good morning’ message on WhatsApp to sharing a news article on X (formerly Twitter) or debating politics on Facebook, our digital and real-world selves have almost merged. These platforms feel like public squares, private living rooms, and personal diaries all at once. But as these digital spaces become more powerful, a critical question arises: who controls them? In India, this question has become a flashpoint in a growing debate between the government’s push for security and accountability, and the citizens’ fundamental rights to privacy and free speech.

At the heart of this debate are new regulations, landmark court judgments, and a series of real-world events that have left many users wondering who is watching, who is listening, and who decides what they get to see. Let’s unpack the complex world of government surveillance and censorship on social media in India.

The new rulebook: a closer look at the IT Rules 2021 🔗

In 2021, the Indian government notified a new set of regulations called the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. The government stated that these rules were necessary to make social media companies more accountable to Indian laws, tackle the spread of misinformation, and provide a clear process for users to raise complaints.

On the surface, many of these measures sound reasonable. They aim to create a safer online environment. But as digital rights experts point out, some provisions grant the government unprecedented power over online conversations.

New responsibilities for platforms 🔗

The IT Rules 2021 mandate that “significant social media intermediaries” (platforms with a large user base, like Facebook, WhatsApp, and X) must appoint specific personnel based in India. This includes:

• A Chief Compliance Officer: This person is responsible for ensuring the platform follows the IT Rules.
• A Nodal Contact Person: This person is available 24/7 for “coordination with law enforcement agencies.”
• A Resident Grievance Officer: This is the most public-facing role. Platforms must set up a system where any user can file a complaint about content, and the grievance officer must acknowledge it within 24 hours and resolve it within 15 days.

Furthermore, if a court or the government issues an order to remove specific content (for reasons like public order, decency, or the security of the state), the platform must take it down within 36 hours. This creates a fast-track for content removal, but critics argue it prioritizes speed over careful deliberation, potentially leading to the silencing of legitimate speech before it can be legally challenged.

The ‘traceability’ challenge to your private chats 🔗

Perhaps the most controversial part of the IT Rules is the “traceability” requirement. This rule applies to messaging services like WhatsApp and Signal. It states that these platforms must be able to identify the “first originator” of any message if required by a court or a competent government authority. In simple terms, the government wants the ability to find out who started a specific viral message.

Why is this a problem? Because services like WhatsApp are built on end-to-end encryption. This technology ensures that only you and the person you’re communicating with can read what’s sent. Not even WhatsApp can access the content of your messages. To comply with the traceability rule, companies would essentially have to break this encryption. They would need to build a ‘backdoor’ to track every message, effectively destroying the very concept of private, secure communication for all users.

This provision is being challenged in court by digital rights groups and the platforms themselves. They argue it’s a massive overreach that violates user privacy and free speech, turning private messaging apps into potential tools for mass surveillance.

The great privacy debate: surveillance vs. your fundamental rights 🔗

The traceability rule and other surveillance measures don’t exist in a legal vacuum. They run directly into one of the most important legal decisions in modern Indian history: the Puttaswamy judgment.

What is the Puttaswamy judgment? 🔗

In 2017, in the landmark case of Justice K.S. Puttaswamy (Retd.) vs. Union of India, a nine-judge bench of the Supreme Court unanimously declared that the right to privacy is a fundamental right. The court ruled that privacy is an essential part of the right to life and personal liberty guaranteed under Article 21 of the Constitution. It’s not a separate, minor right but is intrinsic to human dignity and autonomy.

This judgment was a game-changer. It means that your personal life, your choices, and your data are not the government’s to take at will. Any government intrusion into your privacy must be justified and pass a strict test.

When is surveillance ‘allowed’? 🔗

The Puttaswamy judgment did not say the right to privacy is absolute. It can be limited, but only under very specific conditions. The court laid down a three-part test for any such intrusion:

1. Legality: There must be a clear, existing law that allows the government to do this.
2. Legitimate Aim: The government must be doing it for a legitimate state purpose, like national security or preventing crime.
3. Proportionality: This is the most crucial part. The government’s action must be “just, fair, and reasonable.” It must be the least intrusive method possible to achieve the goal, and the harm caused to individual privacy must not be excessive compared to the public good.

Critics argue that the IT Rules’ traceability requirement fails the proportionality test. They ask: to catch a few wrongdoers, is it “proportional” to create a system that compromises the privacy of all 400 million WhatsApp users in India? Many legal experts believe the answer is no.

The chilling effect of being watched 🔗

The problem with surveillance isn’t just that the government *might* read your messages. It’s the knowledge that they *can*. This creates what is known as a “chilling effect” on free expression. When people feel they are being perpetually watched, they self-censor. They become afraid to discuss sensitive political topics, criticize policies, or organize protests, even in private chats. This fear undermines the very foundation of a free and open democracy, turning surveillance from a policing tool into an instrument of state control.

Censorship in action: when posts and accounts disappear 🔗

If surveillance is the invisible hand of control, censorship is its visible fist. In recent years, India has seen a sharp increase in government-directed content takedowns and account blockings on social media platforms. The government often justifies these actions under the banner of maintaining “public order” or stopping the spread of misinformation.

Case study: the 2021 farmers’ protests 🔗

A prominent example occurred during the farmers’ protests in early 2021. The Indian government ordered Twitter to block hundreds of accounts and posts that were critical of its new farm laws. These included the accounts of journalists, news magazines (like The Caravan), activists, and the farmers’ protest group itself (Kisan Ekta Morcha).

The government’s legal basis for these orders was that the accounts were using incendiary hashtags and spreading misinformation that could lead to violence, posing a “grave threat to public order.” Twitter initially complied but later unblocked some accounts, stating that the orders were not consistent with Indian law. This led to a major standoff between the platform and the government, which threatened legal action against Twitter’s employees in India.

This event highlighted the immense pressure platforms face and the razor-thin line between regulating genuinely harmful content and suppressing legitimate political dissent. Similar takedown orders were also issued during the COVID-19 pandemic, targeting posts that were critical of the government’s handling of the crisis.

The fine line between safety and suppression 🔗

This is the central dilemma. Everyone agrees that social media should not be a platform for inciting violence, spreading hate speech, or sharing child sexual abuse material. Regulation is needed. However, critics argue that broad, vague terms like “public order,” “decency,” or “relations with friendly states” are being used to silence anyone who disagrees with the government. When a journalist’s account is blocked for reporting on a protest, is that protecting public order or is it simply censorship?

Control vs. protection: how does India compare globally? 🔗

This struggle is not unique to India, but the approach countries take reveals their priorities. The global conversation on digital regulation is broadly split between two models: one focused on user protection and the other focused on state control.

The European model: protecting the user (GDPR) 🔗

The European Union’s General Data Protection Regulation (GDPR) is considered the global gold standard for data privacy. The GDPR’s primary philosophy is that individuals own their data. It places strict limits on what companies can do with user information, requires explicit consent for data collection, and gives users strong rights, like the “right to be forgotten.” While the GDPR has provisions for law enforcement, its main thrust is protecting the citizen *from* excessive corporate and state surveillance.

The propaganda model in a digital age 🔗

Decades ago, scholar Noam Chomsky co-developed the “propaganda model” to explain how mass media can be influenced by government and corporate interests to “manufacture consent” among the public. In the 21st century, social media is the new battleground for this. By controlling the flow of information, either by promoting certain narratives or by censoring dissenting ones, a state can significantly shape public opinion. Tools like the IT Rules, which give the government power to take down content and trace messages, can be seen as modern mechanisms for this kind of information control.

India’s path: security or control? 🔗

India’s regulatory approach, including the IT Rules 2021 and the newer Digital Personal Data Protection Act (DPDPA) of 2023, is often seen as distinct from the EU’s. While India’s data protection law adopts some user-friendly concepts, it also includes wide-ranging exemptions for the government. The state can bypass many of the law’s privacy protections in the name of national security, sovereignty, or maintaining public order.

This has led to a fierce debate: is India building a framework for digital accountability and security, or is it building a legal architecture for a surveillance state? The balance between democratic freedoms and state security is a difficult one to strike, and in India’s booming digital ecosystem, the scales seem to be tilting increasingly towards control.

What do you think? In a digital world, what do you believe is more important: national security that might require surveillance, or absolute individual privacy? Have you ever thought twice about posting something for fear of how it might be interpreted, and how do these rules affect your own feeling of freedom online?

References

1. https://sflc.in/praveen-arimbrathodiyil-vs-union-india-sflcin-assists-challenging-part-ii-intermediary-rules-2021/
2. https://www.scobserver.in/reports/k-s-puttaswamy-right-to-privacy-judgment-of-the-court-in-plain-english-i/
3. https://www.theguardian.com/world/2021/feb/02/twitter-suspends-hundreds-of-indian-accounts-after-government-demand
4. https://www.networkintelligence.ai/blogs/indias-digital-personal-data-protection-act-vs-the-eus-gdpr/