The MeitY Draft Digital India Act 2023 proposes a comprehensive intermediary liability framework replacing the Information Technology Act 2000, introducing a three-tier classification of intermediaries (publisher, significant social media intermediaries, and online gaming). It mandates enhanced due diligence, algorithmic transparency, grievance redressal mechanisms within strict timelines, and user verification for specified platforms. The framework shifts from safe harbour immunity to conditional liability, requiring platforms to proactively identify and remove prohibited content while maintaining traceability of message originators. Significant intermediaries must appoint India-resident compliance officers and undergo periodic audits, with penalties up to ₹500 crore or 2% of global turnover for non-compliance.

• Creates legal certainty for platforms like Google, Meta, and Twitter through clearly defined compliance tiers based on user base and content type, reducing ambiguity in intermediary obligations
• Mandates algorithmic accountability and transparency requirements enabling users to understand content ranking, recommendation systems, and automated decision-making processes affecting them
• Establishes time-bound grievance redressal mechanisms (24-72 hours for specific content categories) providing faster recourse to Indian users against harmful content and platform decisions
• Introduces user verification and KYC requirements for verified accounts, enabling better traceability for law enforcement while potentially reducing anonymous abuse and misinformation
• Provides proportionate liability framework where smaller startups and emerging platforms face lighter compliance burden compared to significant social media intermediaries like WhatsApp and YouTube

• Vague definitions of 'harmful content', 'misinformation', and 'national security' create subjective compliance challenges, as seen in Twitter blocking farmer protest accounts in 2021 under government pressure
• Traceability requirements for encrypted messaging platforms like WhatsApp and Signal fundamentally conflict with end-to-end encryption principles, forcing platforms to choose between compliance and user privacy
• Absence of independent judicial oversight before content takedown enables potential government overreach, unlike GDPR's data protection authorities providing checks and balances
• Algorithmic transparency mandates lack technical specifications on disclosure depth, audit methodology, and protection of proprietary technology, creating implementation uncertainty for firms like ShareChat and Koo
• Grievance redressal timelines of 24-72 hours are operationally challenging for regional language platforms with limited content moderation resources covering 22+ official Indian languages

• Twitter (now X) faced repeated notices from MeitY in 2021-2022 for non-compliance with IT Rules regarding appointment of resident grievance officers, removal of accounts critical of government's COVID-19 response, and farmer protest content, resulting in temporary loss of safe harbour protection and criminal cases against executives.
• WhatsApp challenged the 2021 traceability requirements in Delhi High Court arguing it would break encryption architecture serving 500+ million Indian users; similar provisions in Digital India Act draft could force platform exits or architecture changes affecting privacy of Indian businesses and citizens.
• ShareChat and Moj faced enforcement actions in 2022-2023 for delayed content moderation of regional language deepfakes and misinformation during state elections, highlighting capacity gaps in compliance with proposed 24-hour takedown timelines for platforms serving tier-2 and tier-3 Indian cities.

• Implement robust content classification taxonomy with clear definitions, automated content tagging systems, and multi-layered review workflows combining AI-based detection with human oversight for nuanced context, especially for Indic languages and cultural references
• Establish independent Digital Regulatory Authority modeled on TRAI with technical expertise, quasi-judicial powers, and representation from civil society to review takedown orders, algorithmic audits, and platform grievances before enforcement action
• Develop transparent compliance dashboards publishing government takedown requests, platform response times, content restoration appeals, and compliance metrics enabling public accountability similar to Google and Meta transparency reports
• Invest in localized content moderation capabilities with trained reviewers for all 22 official languages, cultural context experts, and regional legal advisors to meet 24-72 hour timelines while minimizing false positives and over-blocking legitimate speech