IT Act Section 79 and the IT Rules: making platforms act
Safe harbour explained for course owners: when a platform loses protection, what actual knowledge means after Shreya Singhal and Myspace, and grievance deadlines.
On this page 8 sections
Section 79 of the Information Technology Act, 2000 gives platforms such as Telegram, YouTube and WhatsApp a "safe harbour": they aren't liable for what their users post, as long as they observe due diligence and act once they have actual knowledge of unlawful content. For course owners, that duty is enforced through the IT Rules, 2021, which require every platform to have a grievance officer who must acknowledge your complaint within 24 hours and, since February 2026, resolve it within seven days.
Safe harbour in one paragraph
An "intermediary" is a service that carries or hosts other people's content: messaging apps, video sites, cloud storage, search engines, internet providers. Section 79(1) says an intermediary is not liable for third-party information it hosts or transmits, provided it meets the conditions in Section 79(2): its role is limited to providing access to a system where others' content is transmitted, stored or hosted, or it doesn't start the transmission, pick the recipient or change the content; and it observes due diligence and the government's guidelines. Section 79(3) takes the protection away if the platform conspired in or abetted the unlawful act, or failed to remove content after gaining actual knowledge of it.
Section 79(3)(b): actual knowledge and takedown
Section 79(3)(b) says the safe harbour doesn't apply if, on receiving actual knowledge, or on being notified by the government or its agency, that material on its system is being used to commit an unlawful act, the platform fails to remove or disable access to it expeditiously, without vitiating the evidence.
Two judgments shape what "actual knowledge" means:
- Shreya Singhal v. Union of India (Supreme Court, 24 March 2015) read the clause down: actual knowledge means a court order or a government notification, and the unlawful acts must relate to the grounds for restricting speech in Article 19(2) of the Constitution. The court's concern was that platforms receiving millions of requests couldn't be asked to judge each one.
- Myspace Inc. v. Super Cassettes Industries (Delhi High Court, 23 December 2016) held that for copyright it is sufficient for a platform to receive specific knowledge of the infringing works from the owner, without a court order. General awareness that some content infringes isn't enough; the notice must point to the actual works and locations.
Section 81 of the IT Act adds that nothing in the Act restricts rights under the Copyright Act, though the Delhi High Court held in Myspace that platforms can still rely on safe harbour in copyright cases. For how DMCA-style notices fit in, see DMCA and Indian takedown law.
The IT Rules, 2021: grievance officers and timelines
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules were notified on 25 February 2021 and have been amended several times since, including in October 2025 and February 2026. Among other things, they require platforms to make reasonable efforts not to host content that "infringes any patent, trademark, copyright or other proprietary rights", and to run a grievance system. These are the deadlines that matter to a course owner, from MeitY's consolidated text as of 10 February 2026:
| What | Deadline | Rule |
|---|---|---|
| Acknowledge a grievance | 24 hours | 3(2)(a)(i) |
| Resolve a grievance, including copyright complaints | 7 days (15 days before February 2026) | 3(2)(a)(i) |
| Fast-track removal requests for certain content; excluded are complaints about copyright and other proprietary rights, content that "belongs to another person" and content that "violates any law" | 36 hours (72 before February 2026) | Proviso to 3(2)(a)(i) |
| Intimate images and impersonation of an individual | 2 hours (24 before February 2026) | 3(2)(b) |
| Remove content after a court order, or an authorised government or police intimation | 3 hours (36 before February 2026) | 3(1)(d) |
| Provide information to lawfully authorised agencies on a written order | 72 hours | 3(1)(j) |
| Preserve removed content and related records | 180 days | 3(1)(g) |
| Appeal to a Grievance Appellate Committee | Within 30 days of the grievance officer's decision; the committee aims to decide within 30 days | 3A |
Government and police intimations under Rule 3(1)(d) have their own safeguards since November 2025: they must come from a specially authorised senior officer (at least Joint Secretary rank, or Director where no Joint Secretary is appointed, and at least Deputy Inspector General for the police), name the legal basis and give the exact URLs.
How to write to a grievance officer
Every platform must publish its grievance officer's name and contact details prominently on its website or app, along with how to complain. Telegram's FAQ, for example, gives grievance-in@telegram.org for India, and WhatsApp's help centre has a grievance form. A grievance that gets results is short and specific:
- State that it is a grievance under Rule 3(2) of the IT Rules, 2021.
- Identify yourself and your institute, and your authority to act for the copyright owner.
- Describe the work and attach proof of ownership.
- List every infringing URL, post link or account, with dates.
- Refer to Rule 3(1)(b)(iv): the content infringes copyright.
- Ask for removal, action against repeat accounts and preservation of records.
- Give your contact details and keep proof of sending.
Diary the deadlines: an acknowledgement within 24 hours and a resolution within seven days. If you get no resolution, or disagree with it, appeal to the Grievance Appellate Committee through its portal at gac.gov.in within 30 days. For platform specifics, see our guides to Telegram copyright reports and reporting WhatsApp groups.
Significant social media intermediaries
Platforms with more than 50 lakh registered users in India, the threshold notified in February 2021, are "significant social media intermediaries" with extra duties:
- a Chief Compliance Officer, a nodal contact person for law enforcement and a Resident Grievance Officer, all resident in India;
- monthly compliance reports on complaints received and action taken;
- technical measures to proactively identify content exactly identical to content already removed under a court order or government intimation;
- for messaging services, identifying the "first originator" of a message when a court or competent authority orders it, but only for serious offences punishable with at least five years in prison. Copyright offences, with a three-year maximum, don't qualify.
The proactive-identification duty matters after a court order: large platforms are expected to spot exact copies of content removed under it, not only the copy the order named.
Where this route stops working
- Encrypted and private spaces. Platforms can't see inside end-to-end encrypted groups, and Telegram doesn't process requests about private chats.
- Offshore sites. Many pirate sites have no grievance officer and ignore Indian rules. For them, search delisting and hosting complaints are the practical levers.
- Disputes over ownership. A grievance officer won't decide a genuine dispute about who owns a work; that needs a court.
- Repeat channels. Each new channel needs a new grievance. When copies keep coming back, court orders against the channels and their mirrors are the stronger tool; see court orders against pirate channels.
Key takeaways
- Section 79 protects platforms only while they observe due diligence and act on actual knowledge.
- For copyright, a specific notice from the owner can supply that knowledge (Myspace, 2016).
- Grievance officers must acknowledge in 24 hours and resolve in seven days; copyright isn't in the 36-hour fast track.
- A court order triggers a three-hour removal duty under Rule 3(1)(d).
- Appeal unresolved grievances to the Grievance Appellate Committee within 30 days.
This is general information, not legal advice. For your situation, speak to a lawyer.
Frequently asked questions
What is Section 79 of IT Act?
Section 79 of the Information Technology Act, 2000 exempts intermediaries such as messaging apps, video platforms and hosts from liability for content their users post, provided they don't initiate or modify it, observe due diligence and the government's guidelines, and remove unlawful material promptly once they have actual knowledge of it. The protection is lost if the platform conspires in the unlawful act or ignores such knowledge.
Who is a grievance officer?
A grievance officer is the person a platform must appoint under the IT Rules, 2021 to receive and resolve complaints from users and affected people, including complaints about copyright infringement. The platform must publish the officer's name and contact details prominently. Large platforms, the significant social media intermediaries, must have a Resident Grievance Officer who lives in India.
What is the role of grievance officer?
The grievance officer receives complaints about content and about the platform's duties under the IT Rules, acknowledges each within 24 hours and resolves it within seven days, or within shorter windows for some categories. The officer also receives orders and notices from courts and government. If a complainant is unhappy with the decision, they can appeal to the Grievance Appellate Committee within 30 days.
What is safe harbour protection in India?
Safe harbour is the legal shield Section 79 of the IT Act gives intermediaries against liability for third-party content. It isn't absolute: a platform keeps it only while it acts as a neutral carrier, follows the due diligence in the IT Rules and removes unlawful content after actual knowledge. For copyright, the Delhi High Court has held that a specific notice from the owner can supply that knowledge.