Role of Media & Social Networking in Internal Security — Fake News, Cyber Propaganda & Regulation

Media and Internal Security — The Dual Role

Media and social networking platforms play a dual role in internal security — they can both strengthen and threaten it.

Social Media — Scale and Security Implications

India's Digital Landscape

India has 90+ crore internet users (2025) — the largest online population after China. This massive digital presence creates both opportunities and vulnerabilities for internal security.

Threats from Social Media

1. Fake News and Misinformation

WhatsApp Lynchings (2018): A spate of mob killings swept India in 2018 after fake messages about child kidnappers and organ harvesters went viral on WhatsApp. At least 24 people were killed in mob attacks in 2018 alone. The incidents began in Jharkhand in May 2017 but escalated nationally by mid-2018. In response, WhatsApp launched a newspaper advertising campaign warning against fake news in July 2018, labelled forwarded messages, and disabled the "quick forward" button in India.

For Mains: Fake news is not just a law-and-order problem — it is a national security threat. During India-Pakistan tensions (Pulwama/Balakot, 2019), fake images and videos circulated widely, inflaming public sentiment and complicating government communication. Hostile state actors can weaponise fake news to destabilise society without a single soldier crossing the border. This is hybrid warfare.

2. Radicalisation and Recruitment

Case: NIA investigations have found that over 100 Indians who attempted to join ISIS were radicalised primarily through social media content. Encrypted messaging apps (Telegram, Signal) make it difficult for intelligence agencies to monitor communications.

Global scale of online radicalisation: ISIS mobilised an estimated 40,000 foreign nationals from 110 countries, largely through social media. Over 40,000 Twitter accounts actively supported ISIS, with approximately 2,000 tweeting in English. The dark web and encrypted platforms (Telegram channels, Signal groups) serve as secondary recruitment layers where operatives share operational manuals and coordinate logistics beyond the reach of law enforcement.

3. Information Warfare and Hybrid Threats

Hybrid warfare blends conventional military operations, cyberattacks, information operations, and economic pressure to destabilise a target state without a formal declaration of war. The information warfare component uses troll farms — organised groups of paid operatives and automated bots — to create fake social media accounts, amplify divisive content, and manipulate public opinion. State-sponsored troll farms have been documented in Russia, China, and several other countries. During the 2016 US presidential election, Russian troll farms flooded social media with polarising content to deepen societal divisions — a textbook hybrid warfare operation.

Relevance for India: Pakistan-based accounts routinely amplify separatist narratives during Kashmir incidents. China has been linked to influence operations through media investments and data harvesting via apps. The challenge of attribution — proving state sponsorship — makes countering information warfare particularly difficult.

4. Cyber Propaganda by Hostile States

5. Impact on Law Enforcement

Legal Framework

Information Technology Act, 2000

Landmark: Shreya Singhal v. Union of India (2015): The Supreme Court struck down Section 66A as unconstitutional — it was vague ("grossly offensive", "menacing character") and chilled free speech. However, Section 69A (government blocking orders) was upheld as having sufficient procedural safeguards. This is a must-know case for both GS2 and GS3.

IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021

First originator controversy: WhatsApp challenged the tracing requirement, arguing it would require breaking end-to-end encryption. The case is sub judice. The tension: government needs tracing for crime investigation (fake news, terrorism); privacy advocates argue mass tracing undermines encrypted communication for all users.

Other Relevant Laws

Digital Personal Data Protection Act, 2023 — Key Features

Traditional Media vs Social Media Regulation — A Comparison

Internet Shutdowns

India leads the world in internet shutdowns.

For Mains: Internet shutdowns are a blunt tool with enormous economic cost (~$1.9 billion per year). They prevent violence in the short term but also disable emergency communication, healthcare, banking, and livelihood for millions. The Anuradha Bhasin ruling established proportionality requirements, but implementation remains inconsistent. Discuss alternatives: targeted content blocking (Section 69A), platform cooperation, digital literacy programmes.

Case Studies — Social Media and Security

Positive Role of Media in Security

Balancing Security and Freedom

For Mains framework: The ideal answer acknowledges that social media is BOTH a threat and a tool for security. Recommend: (1) strengthen digital literacy to build citizen resilience against fake news, (2) platform accountability under IT Rules with independent oversight, (3) proportionate content regulation with judicial safeguards, (4) international cooperation on cross-border cyber threats, (5) invest in OSINT capabilities for intelligence agencies. Avoid binary positions — neither "ban social media" nor "leave it unregulated" is a good answer.

Key IT and Cyber Laws at a Glance

UPSC Relevance

Prelims Focus Areas

• IT Act 2000 — Section 66A (struck down), Section 69A (blocking), Section 79 (safe harbour)
• IT Rules 2021 — first originator tracing, significant intermediary threshold (5 million users)
• Shreya Singhal v. Union of India (2015) — Section 66A struck down as unconstitutionally vague; Section 69A upheld
• Anuradha Bhasin v. Union of India (2020) — internet access is a fundamental right; shutdowns must be proportionate
• Digital Personal Data Protection Act, 2023 — Data Protection Board, consent framework, Significant Data Fiduciaries
• Telecommunications Act, 2023
• Press Council of India — established under Press Council Act, 1978; advisory powers only

Mains Focus Areas

• Social media as a tool for radicalisation and recruitment (ISIS, Maoist, separatist groups)
• Fake news and its impact on communal harmony and public order (WhatsApp lynchings 2018)
• Internet shutdowns — necessity vs proportionality (Anuradha Bhasin framework)
• Balancing free speech with national security
• Role of social media in hybrid warfare and information operations
• Platform regulation — IT Rules, Section 69A, and the safe harbour debate
• Deepfakes and AI-generated misinformation — emerging challenges
• Positive use of media in disaster management and community policing
• Cambridge Analytica and data sovereignty concerns
• Traditional media vs social media regulation — gaps and challenges

Recent Developments (2024–2026)

Internet Shutdowns — India 2024 Data and New Legal Framework

India recorded 84 internet shutdowns in 2024 — the highest among democratic countries globally (Access Now annual report), though Myanmar topped the global list (85) for the first time in six years. In 2024, shutdowns totalled 3,381 hours of disruption, down from 96 shutdowns / 6,841 hours in 2023. The states with most shutdowns in 2024: Haryana (12), Manipur (11), Rajasthan (6), Punjab (5), and Odisha (4). Significantly, the legal framework for internet shutdowns was updated: the Temporary Suspension of Telecommunication Services Rules, 2024 (notified 22 November 2024) replaced the 2017 Rules under the Telecommunications Act, 2023. These new Rules require a written order by a competent authority, a review committee, and proportionality documentation — incorporating Anuradha Bhasin principles into statutory form.

UPSC angle: India's 84 shutdowns in 2024 (2nd globally), Telecom Suspension Rules 2024 as the statutory codification of Anuradha Bhasin principles — are the most current data points for the internet shutdown debate.

Pakistan's Information Warfare — Operation Sindoor Disinformation Campaign (2025)

During the India-Pakistan crisis of April–May 2025 (Pahalgam attack + Operation Sindoor), Pakistan's state-backed information warfare apparatus launched a coordinated disinformation campaign: fake videos of "downed Indian aircraft" were rapidly seeded across X (Twitter), Telegram, and YouTube; Pakistani ISI-linked networks amplified "false flag" narratives; Khalistani diaspora accounts in UK, Canada, and USA amplified anti-India content. India invoked IT Rules 2021 emergency takedown provisions — requiring platforms to remove content within 24 hours — for hundreds of accounts and posts. Meta, X, and YouTube received emergency government orders. The intensity of the disinformation campaign during Operation Sindoor demonstrated that information warfare is now an integral, simultaneous dimension of kinetic conflict in South Asia.

UPSC angle: Pakistan's Operation Sindoor disinformation campaign (fake aircraft videos, false flags, Khalistani diaspora amplification), India's emergency IT Rules 2021 takedowns — are the most exam-relevant recent example of social media as an internal security threat.

DPDP Act Rules Notified — November 2025

The Digital Personal Data Protection Act Rules were formally notified on 13 November 2025, operationalising the DPDP Act 2023 which had lacked subsidiary rules. The Rules established: the Data Protection Board of India (quasi-judicial body); consent mechanism requirements for platforms; Significant Data Fiduciary (SDF) classification criteria (based on data volume, sensitivity, and national security risk); and a phased compliance timeline with full compliance required for all entities by May 2027. For social media platforms specifically, the Rules impose obligations on consent, transparency, and grievance redressal. Critically, the Rules contain state security exemptions — allowing government agencies to process data without consent for national security purposes — which civil liberties groups argue creates a broad carveout that could shield surveillance operations from DPDP oversight.

UPSC angle: DPDP Act Rules (November 2025), Data Protection Board establishment, state security exemption debate — connect media regulation, data protection, and the social media-security nexus for GS-III.

Fact-Check Unit (FCU) — Struck Down; Government's Next Steps (2024–2025)

Following the Bombay High Court's striking down of the IT Rules 2023 Amendment FCU provisions (ruling delivered in late 2024, with the tie-breaking judge Chandurkar siding with the majority against constitutionality), the government indicated it would pursue alternative mechanisms for government-related disinformation countering. The PIB Fact Check Unit and Deepfakes Analysis Unit (DAU) — which operate without the coercive IT Rules authority — have been scaled up as non-coercive alternatives. By 2025, PIB's fact-checking unit had processed over 2,500 government-related fact checks. The FCU episode remains a case study in the tension between state counter-disinformation powers and constitutional free speech protections — particularly Article 14 (equality), Article 19(1)(a) (speech), and the prohibition on government being the sole judge of truth about its own conduct.

UPSC angle: FCU struck down (constitutional violation), PIB Fact Check Unit and Deepfakes Analysis Unit as alternative, 2,500+ PIB fact checks — are post-2024 developments on the regulatory dimension of social media and security.

Vocabulary

Deepfake

• Pronunciation: /ˈdiːpˌfeɪk/
• Definition: A convincingly realistic but fabricated image, video, or audio recording created using artificial intelligence — particularly deep learning techniques — that superimposes one person's likeness onto another or generates entirely synthetic media.
• Origin: A blend of deep learning + fake; coined in 2017 by a Reddit user who demonstrated face-swapping technology using deep neural networks.

Disinformation

• Pronunciation: /dɪsˌɪnfərˈmeɪʃən/
• Definition: False or misleading information that is deliberately created and disseminated with the intent to deceive, manipulate public opinion, or cause harm — distinct from misinformation, which is spread without deliberate intent.
• Origin: From dis- ("negation, reversal") + information; attested in English from 1939, modelled on Russian dezinformatsiya, a term used by Soviet intelligence for coordinated propaganda campaigns.

Censorship

• Pronunciation: /ˈsɛnsərʃɪp/
• Definition: The suppression or restriction of speech, publication, or other forms of expression by a government, regulatory body, or institution, typically on grounds of national security, public order, morality, or political control.
• Origin: From censor (Latin censor, a Roman magistrate responsible for public morals and the census) + -ship; the Roman censorship dates to 443 BCE.

Key Terms

Fake News

• Pronunciation: /feɪk njuːz/
• Definition: Fabricated or misleading content deliberately designed and disseminated under the guise of legitimate news reporting in order to deceive readers, manipulate public opinion, inflame communal or political tensions, generate advertising revenue through clickbait, or advance specific political agendas — often amplified virally through social media platforms and encrypted messaging services like WhatsApp, where content verification before forwarding is minimal.
• Context: The term gained global prominence during and after the 2016 US presidential election, with Collins Dictionary naming it Word of the Year in 2017 after its usage surged 365% year-on-year. In India, fake news became a lethal internal security concern during the 2017-2018 WhatsApp lynchings — a spate of mob killings triggered by fabricated rumours about child abduction and organ harvesting spread via WhatsApp, commencing with seven men killed in Jharkhand in May 2017 and resulting in over a dozen deaths across multiple states. These incidents prompted WhatsApp to limit message forwarding to five chats at a time (July 2018) and India to strengthen intermediary obligations under the IT (Intermediary Guidelines) Rules, 2021. The British government has criticised "fake news" as a "poorly defined" term that conflates genuine error with deliberate fabrication, preferring "disinformation" (deliberate) and "misinformation" (unintentional).
• UPSC Relevance: GS3 Internal Security — Mains asks about the role of social media in spreading fake news, its impact on communal harmony (WhatsApp lynchings 2018), and government measures (IT Rules 2021 — SSMI obligations, first originator tracing; Section 69A content blocking). Also tested as a hybrid warfare dimension — hostile state actors weaponising misinformation and deepfakes for information operations. Links to GS2 (free speech under Article 19(1)(a) vs regulation under 19(2)), GS4 (media ethics, paid news, trial by media), and the emerging challenge of AI-generated deepfakes that make fake news harder to detect.

Social Media Regulation

• Pronunciation: /ˈsoʊʃəl ˈmiːdiə ˌrɛɡjuˈleɪʃən/
• Definition: The body of laws, rules, and institutional mechanisms that govern the conduct of social media platforms and their users, addressing content moderation, data privacy, platform accountability, intermediary liability, and the balance between free expression and public safety. In India, the regulatory framework primarily comprises the IT Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the Digital Personal Data Protection Act, 2023, and the Telecommunications Act, 2023 — supplemented by landmark judicial decisions that define the boundaries of online free speech.
• Context: Emerged as a distinct policy domain in the 2010s as the scale and influence of social media platforms grew to billions of users globally; between 2011 and 2022, 78 countries enacted laws targeting the spread of false or harmful content on social media. India's IT (Intermediary Guidelines) Rules, 2021 introduced the category of Significant Social Media Intermediaries (SSMIs) — platforms with 50 lakh (5 million) or more registered users in India — imposing enhanced obligations including appointment of a Chief Compliance Officer, Nodal Contact Person, and Resident Grievance Officer (all based in India), content takedown within 36 hours of government/court order, and enabling identification of the first originator of information on messaging platforms (a requirement that clashes with end-to-end encryption on WhatsApp and Signal). Key judicial landmarks include Shreya Singhal v. Union of India (2015, struck down Section 66A as unconstitutionally vague while upholding Section 69A) and Anuradha Bhasin v. Union of India (2020, held that internet access is a fundamental right and shutdowns must be proportionate and time-bound).
• UPSC Relevance: GS3 Internal Security — Mains asks "How should India balance free speech with social media regulation?" and tests knowledge of IT Rules 2021 (SSMI obligations, first originator tracing, 36-hour content takedown), Section 79 safe harbour (conditional on due diligence compliance), and the Shreya Singhal and Anuradha Bhasin judgments. Prelims tests SSMI threshold (5 million users), content takedown timelines, and the fact-check unit provision (2023 amendment, challenged in courts). A cross-cutting topic spanning GS3 (internal security, cyber security), GS2 (governance, fundamental rights), and GS4 (media ethics, information ethics).