An intermediary (S.2(1)(w)) is any person who, on behalf of another, receives, stores, or transmits electronic records or provides any service with respect to that record. Internet Service Providers (ISPs) are a subset of intermediaries. S.79 provides conditional immunity ("safe harbour") to intermediaries for third-party content.
Legal Framework
| Provision | Subject |
|---|---|
| S.2(1)(w) | Definition of "intermediary" |
| S.79(1) | Safe harbour: intermediary not liable for third-party information |
| S.79(2) | Conditions: function limited to providing access; does not initiate/select/modify information |
| S.79(3) | Loss of safe harbour: actual knowledge or failure to act on government/court order |
| S.69 | Power of government to direct interception, monitoring, or decryption |
| S.69A | Power to block public access to information |
| S.69B | Power to monitor and collect traffic data |
| IT Rules 2021 | Due diligence obligations, grievance redressal, content takedown |
| S.67C | Intermediary to preserve/retain information for 180 days (or as prescribed) |
Section 79: Safe Harbour
Three-Tier Structure
| Tier | Content | Section |
|---|---|---|
| S.79(1) | General immunity: intermediary not liable for third-party content | Presumption of non-liability |
| S.79(2) | Conditions for immunity |
-
(a) Function limited to providing access to communication system
-
(b) intermediary does not initiate transmission, select receiver, or modify information |
| S.79(3) | Exceptions (when immunity lost) |
-
(a) Intermediary conspires, abets, aids, or induces commission of unlawful act
-
(b) upon receiving actual knowledge (through court order or government notification), fails to expeditiously remove/disable access |
Why: The internet cannot function if intermediaries are liable for every piece of content passing through their systems. S.79 balances free expression and internet functionality against the need to take down illegal content upon notice from appropriate authority.
Illustration: S.79 in Practice
Scenario: A user uploads a defamatory video about a politician on YouTube (Google India).
- The politician sends an email to YouTube demanding removal → YouTube is NOT obligated to remove (private complaint ≠ "actual knowledge" per Shreya Singhal)
- The politician obtains a court order directing YouTube to remove the video → YouTube MUST remove within 36 hours or loses safe harbour
- If YouTube removes voluntarily on private complaint → no legal obligation, but YouTube may do so under its own community guidelines (no penalty for over-compliance)
Key takeaway for exam: Safe harbour is lost only when: (1) court order received + (2) platform fails to act. Private demand letters alone do not create liability.
Post-Shreya Singhal Reading (2015)
| Before Shreya Singhal | After Shreya Singhal |
|---|---|
| "Actual knowledge" could arise from private complaints | "Actual knowledge" requires court order or government notification under S.69A |
| Intermediary could be forced to take down on mere complaint | Intermediary obligated to act only on court order or government order |
| Risk of private censorship | Judicial/executive oversight required before takedown |
IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
| Obligation | Applicable To | Key Requirement |
|---|---|---|
| Due diligence | All intermediaries | Terms of service, inform users of prohibited content, report cyber incidents to CERT-In within 6 hours |
| Grievance Officer | All intermediaries | Appoint officer, acknowledge complaint in 24 hours, resolve in 15 days |
| Content removal | All intermediaries | Remove unlawful content within 36 hours of court/government order |
| Significant Social Media Intermediary (SSMI) | Platform with 50 lakh+ registered users | Additional: Chief Compliance Officer, Nodal Contact Person, Resident Grievance Officer (all in India), monthly compliance reports, first originator traceability |
| Traceability | SSMI only | Identify first originator of information upon court order (Rule 4(2)) |
| Voluntary content moderation | All intermediaries | Proactive measures permissible; do not lose safe harbour for good faith efforts |
Types of Intermediaries
| Type | Example | Function |
|---|---|---|
| ISP (Internet Service Provider) | Airtel, Jio, BSNL | Provides internet connectivity |
| Web hosting provider | GoDaddy, AWS India | Hosts websites and applications |
| Search engine | Google, Bing | Indexes and retrieves information |
| Social media platform | Facebook, X (Twitter), Instagram | User-generated content hosting |
| E-commerce marketplace | Amazon India, Flipkart | Facilitates buyer-seller transactions |
| Messaging platform | WhatsApp, Telegram | Communication service |
| Cloud storage | Google Drive, Dropbox | Stores user data |
Recall Check
- What are the three conditions under S.79(2) for an intermediary to claim safe harbour?
- After Shreya Singhal, what constitutes "actual knowledge" for loss of safe harbour?
- What additional obligations do Significant Social Media Intermediaries have under 2021 Rules?
Key Cases
Shreya Singhal v. Union of India (2015) Shreya-Singhal-v-Union-of-India-2015 Issue: How should "actual knowledge" under S.79(3)(b) be interpreted? Rule: Intermediary safe harbour is lost only upon receiving court order or government notification directing removal; private complaints alone do not constitute "actual knowledge." Held: S.79 read down. Intermediaries need not act on mere user complaints; only court orders or S.69A government notifications trigger the obligation to take down content.
Christian Louboutin SAS v. Nakul Bajaj (2018) Christian-Louboutin-v-Nakul-Bajaj-2018 Issue: Whether an e-commerce platform (Darveys.com) selling luxury goods is an "intermediary" entitled to S.79 protection, or an active participant. Rule: An intermediary that actively participates in listing, advertising, guaranteeing authenticity, or selecting products goes beyond passive hosting and loses safe harbour. Held: Delhi HC held that Darveys.com was not a mere intermediary because it actively curated content, guaranteed authenticity, and promoted products. It could not claim S.79 immunity.
Myspace Inc v. Super Cassettes Industries (2017) Myspace-v-Super-Cassettes-2017 Issue: Whether a platform hosting user-uploaded music content (Myspace) is liable for copyright infringement by users. Rule: S.79 immunity applies if intermediary did not have actual knowledge and acted expeditiously upon receiving knowledge/notification. Held: Delhi HC held Myspace was entitled to safe harbour as it was not shown to have actual knowledge and had a takedown mechanism. Mere hosting of user content without editorial control preserves intermediary status.
Distinctions
| Aspect | Active Intermediary (loses S.79) | Passive Intermediary (retains S.79) |
|---|---|---|
| Role | Selects, modifies, curates content | Merely transmits, stores, hosts |
| Example | E-commerce platform with authenticity guarantee | ISP, basic hosting service |
| Knowledge | Constructive (should have known) | Only actual (court/government order) |
| Case authority | Christian Louboutin (2018) | Myspace v. Super Cassettes (2017) |
| Liability | Full liability as publisher/abettor | Immune under S.79 |
| Due diligence | Does not save from liability if active | Due diligence is sufficient |
Flashcards
Q: Who is an "intermediary" under S.2(1)(w)? A: Any person who on behalf of another receives, stores, or transmits electronic records or provides any service with respect to that record; includes ISPs, web-hosting providers, search engines, online auction sites, marketplace platforms, cyber cafes.
Q: What are the three conditions for safe harbour under S.79(2)? A:
-
(a) Intermediary's function limited to providing access
-
(b) does not initiate transmission
-
(c) does not select receiver or modify information contained in transmission.
Q: When does an intermediary lose safe harbour under S.79(3)? A:
-
(a) Conspires, abets, aids, or induces unlawful act
-
(b) upon receiving actual knowledge (court order/government notification), fails to expeditiously remove or disable access.
Q: What did Shreya Singhal establish about "actual knowledge"? A: Actual knowledge for S.79(3)(b) means knowledge through court order or government notification under S.69A; private complaints are insufficient.
Q: What is a Significant Social Media Intermediary (SSMI)? A: A platform with 50 lakh or more registered users in India, subject to additional obligations under IT Rules 2021 (compliance officer, traceability, monthly reports).
Q: What is the traceability requirement under Rule 4(2)? A: SSMI must enable identification of the first originator of information upon court order where the information threatens sovereignty, public order, or is related to offences punishable with 5+ years imprisonment.
Q: Within what time must an intermediary report cyber incidents to CERT-In? A: 6 hours (CERT-In direction, April 2022).
Q: What did Christian Louboutin (2018) establish? A: An e-commerce platform that actively participates in listing, advertising, guaranteeing authenticity, or curating products is NOT a passive intermediary and cannot claim S.79 safe harbour.
Exam Scenario
A social media platform hosts user-generated content. A user uploads defamatory content about a public figure. The public figure sends a complaint directly to the platform demanding removal. The platform does not remove it. The public figure sues the platform for defamation. Advise on the platform's liability.
After Shreya Singhal (2015), a private complaint alone does not constitute "actual knowledge" under S.79(3)(b). The platform loses safe harbour only upon receiving: (1) a court order directing removal, or (2) a government notification under S.69A. Since the public figure sent a private complaint (not a court order), the platform's failure to act does not destroy its S.79 immunity. The platform should: (1) route the complaint through its grievance officer (IT Rules 2021: acknowledge in 24 hours, resolve in 15 days), (2) inform the complainant to obtain a court order. If a court subsequently orders removal and the platform fails to comply within 36 hours, it loses safe harbour. The public figure's remedy is to first obtain a court order, then compel the platform to act. Direct suit against the platform without a prior court order will likely fail on S.79 grounds.