BANGALORE • Platforms such as Facebook, YouTube, Twitter and TikTok will have to reveal users' identities if Indian government agencies ask them to, according to the country's controversial new rules for social media companies and messaging apps expected to be published this month.
The requirement comes as governments around the world are trying to hold social media companies more accountable for the content that circulates on their platforms, whether it is fake news, child porn, racist invective or terrorism-related content.
India's new guidelines go further than most of those in other countries by requiring blanket cooperation with government inquiries, with no warrant or judicial order required. India proposed these guidelines in December 2018 and asked for public comment.
The Internet and Mobile Association of India, a trade group that counts Facebook, Amazon.com and Alphabet's Google among its members, responded that the requirements "would be a violation of the right to privacy recognised by the Supreme Court".
But the Ministry of Electronics and Information Technology is expected to publish the new rules later this month without major changes, according to a government official familiar with the matter.
"The guidelines for intermediaries are under process," said Mr N.N. Kaul, the media adviser to the minister of electronics and information technology. "We cannot comment on the guidelines or changes till they are published."
The provisions in the earlier draft had required platforms such as Google's YouTube, ByteDance's TikTok, Facebook or its Instagram and WhatsApp apps, to help the government trace the origins of a post within 72 hours of a request.
They would also have to preserve their records for at least 180 days to aid investigators, establish a brick-and-mortar operation within India and appoint both a grievance officer to deal with user complaints and a government liaison.
The rules cover all social media and messaging apps with more than five million users. India, with 1.3 billion people, has about 500 million Internet users. It is not clear whether the identities of foreign users would be subject to the government's inquiries.
Fake news law enforcement agencies around the world have been frustrated by technology companies that have refused to identify users, unlock devices or generally cooperate with government investigations, particularly in cases relating to terrorism.
In India, where fake news is still a relatively new phenomenon, a false report of rampant child abduction and organ harvesting circulated widely via WhatsApp led to mob violence and over three dozen fatal lynchings in 2017 and 2018.
WhatsApp refused a request from the government to reveal the origins of the rumours, citing its promise of privacy and end-to-end encryption for its 400 million Indian users. It instead offered to fund research into preventing the spread of fake news and mounted a public education campaign in the country, its biggest global market.
WhatsApp will "not compromise on security because that would make people less safe", it said in a statement on Wednesday, adding that its global user base had reached more than two billion.
"For even more protection, we work with top security experts, employ industry-leading technology to stop misuse as well as provide controls and ways to report issues - without sacrificing privacy."
Technology firms and civil rights groups say the new rules are an invitation to abuse and censorship, as well as a burdensome requirement on new and growing companies.
In an open letter to to Mr Ravi Shankar Prasad, the minister overseeing IT matters, executives from Mozilla, GitHub and Cloudflare said the rules could lead to "automated censorship" and "increased surveillance".
In order to be able to trace the originator of content, platforms would basically be required to surveil their users, undermine encryption and harm the fundamental right to privacy of Indian users, they said.
Firms like Mozilla and Wikipedia would not fall under the new rules, the government official said.
Browsers, operating systems, online repositories of knowledge and software development platforms are all exempt. Only social media platforms and messaging apps will be covered.
BLOOMBERG
