Abstract
Deepfakes represent a fundamental challenge to the assumptions underlying traditional privacy, reputation and speech law. They blur the distinction between genuine and fabricated reality while enabling individuals and organisations to manipulate identity at unprecedented speed and scale.
India's constitutional framework provides significant foundations for responding to this challenge. Article 21, as interpreted through Puttaswamy, protects privacy, dignity and autonomy. Article 19(1)(a) protects expression, while Article 19(2) permits constitutionally defined restrictions. Indian defamation law protects reputation, and the IT Act, BNS, DPDP Act and IT Rules provide multiple statutory mechanisms relevant to deepfake-related conduct.
The development of the 2026 IT Rules concerning synthetically generated information represents an important step towards a more structured regulatory response. Nevertheless, regulatory expansion must remain constitutionally disciplined.
The future of deepfake regulation should therefore be built around four principles:
legality, proportionality, accountability and effective remedy.
The objective should not be to create a legal system in which every artificial representation is treated as unlawful. Rather, the law should distinguish between legitimate synthetic expression and synthetic content that causes identifiable and substantial harm.
Ultimately, the constitutional question is not whether artificial intelligence should be permitted to create representations of reality. It is whether the law can preserve human dignity and democratic discourse while allowing technological innovation and freedom of expression to continue.
A rights-based, harm-sensitive and procedurally fair regulatory framework offers the most constitutionally sustainable path for India in the generative AI era.