India's Digital Platform Opportunity — And Its Regulatory Complexity
Under India's FDI policy, non-news social media and content platforms -- gaming apps, video-sharing platforms, social networking sites, and content creation tools -- qualify for 100% foreign investment through the automatic route, with no prior government approval required. Platforms that upload or stream news and current affairs instead face a 26% FDI cap under Press Note 4 of 2019, and even that limited stake requires prior government approval.
India's active internet user base reached 886 million in 2024 and was projected by the IAMAI-Kantar Internet in India report to cross 900 million during 2025, making it the world's second-largest online market after China. Global platforms such as YouTube, Instagram, Facebook and WhatsApp, and homegrown platforms like ShareChat and Moj, each serve Indian user bases running into the hundreds of millions. Entering and operating in India requires navigating a regulatory framework that sits across at least five distinct regulatory domains: FDI policy, the Information Technology Act 2000 and its intermediary rules, the Digital Personal Data Protection Act 2023, content regulation and censorship rules, and entity structuring requirements under the Companies Act.
This guide covers each regulatory layer with specific thresholds, compliance deadlines, and structural recommendations current as of September 2026.
FDI Policy for Digital Media Platforms
The FDI treatment of digital platforms in India depends critically on the nature of content the platform hosts or distributes. India distinguishes between platforms that handle news and current affairs and those that do not.
Non-News Platforms: 100% FDI Permitted
Social media platforms, user-generated content platforms, entertainment streaming services, and e-commerce marketplaces that do not engage in uploading or streaming news and current affairs content are eligible for 100% FDI under the automatic route. This covers platforms like gaming apps, video-sharing platforms (non-news), social networking sites, and content creation tools. No prior government approval is required, and the investment flows through the standard FC-GPR reporting process.
Digital News and Current Affairs: 26% FDI Cap
Press Note 4 of 2019 introduced a 26% FDI cap for entities engaged in uploading or streaming of news and current affairs through digital media, mirroring the restriction applicable to print media. This cap applies under the government approval route, meaning even investment up to 26% requires prior approval from the relevant ministry.
The October 2020 Clarification expanded the scope to cover three categories of entities:
- Digital media entities: Companies that upload or stream news and current affairs content on websites, apps, or other digital platforms
- Digital news agencies: Entities that gather, write, and distribute news directly or indirectly to digital media entities or news aggregators
- News aggregators: Entities that use software or web applications to aggregate news content from various sources for distribution
The Grey Zone: User-Generated News Content
The most significant challenge for social media platforms is the treatment of user-generated news content. A general-purpose social media platform (like Twitter/X or Facebook) is not primarily a news platform, but users routinely share, discuss, and comment on current affairs. The FDI policy does not clearly define the threshold at which user-generated news content transforms a general social media platform into a "digital media entity" subject to the 26% cap.
The practical position adopted by most foreign-owned social media platforms operating in India is that the 26% restriction applies only to entities whose primary business purpose is news uploading/streaming — not to platforms that incidentally host user discussions about current events. However, this position has not been formally confirmed by the government, and the regulatory ambiguity remains a risk factor for platform operators.
Additional FDI Conditions for Digital Media
Entities that fall within the 26% FDI restriction must also comply with these conditions:
- Majority of the board of directors must be Indian citizens
- The CEO must be an Indian citizen
- Prior security clearance is required for any foreign personnel likely to be engaged for more than 60 days
- The entity must furnish information about itself and its digital media platform to the Ministry of Information and Broadcasting and comply with the Code of Ethics in Part III of the IT Rules, 2021

Entity Structure for Platform Companies
Foreign social media and content platform companies entering India typically choose between two structures:
Option 1: Indian Subsidiary (Private Limited Company)
A private limited company is the most common structure for platform companies. It provides limited liability, accepts 100% FDI (for non-news platforms), and allows the foreign parent to maintain full ownership and operational control. Incorporation takes 10-15 days via the SPICe+ form. The subsidiary must have at least one resident director who has stayed in India for at least 182 days in the financial year.
Option 2: Branch Office or Liaison Office
A branch office can conduct limited activities including providing IT services and acting as a buying/selling agent. A liaison office is restricted to communication and coordination activities — it cannot earn revenue in India. For platforms intending to generate advertising revenue, sell subscriptions, or conduct commercial operations in India, the subsidiary model is the only viable option.
For a detailed structural comparison, see our branch office vs subsidiary analysis.
Information Technology Act 2000: Intermediary Compliance
The IT Act 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 (as amended in 2022, 2023, 2025 and 2026) form the primary regulatory framework for platform operations in India.
What Is an "Intermediary"?
Section 2(1)(w) of the IT Act defines an intermediary as any person who, on behalf of another person, receives, stores, or transmits an electronic record or provides any service with respect to that record. Social media platforms, content hosting services, messaging apps, and search engines all qualify as intermediaries.
Safe Harbour Protection Under Section 79
Section 79 provides intermediaries with safe harbour from liability for third-party content, subject to meeting due diligence obligations. An intermediary that observes the prescribed due diligence and removes content within the mandated timeframes is protected from prosecution for user-generated content. This safe harbour is the legal foundation on which platform businesses operate in India.
The 2025 and 2026 Amendments: Three-Hour Takedowns and Deepfake Labelling
Two amendments in quick succession reshaped this framework, and the second one overwrote parts of the first. Anything written before February 2026 about a 36-hour takedown window is now out of date.
- Takedown authority (G.S.R. 775(E), 22 October 2025, in force 15 November 2025): a government intimation must be a reasoned intimation in writing, issued by an officer not below the rank of Joint Secretary or equivalent, or a Director where no officer of that rank is appointed. Where the intimation comes from the police administration, the authorised officer must not be below the rank of Deputy Inspector General of Police, and all such intimations are subject to monthly review by an officer not below the rank of Secretary
- Content removal timeline (G.S.R. 120(E), 10 February 2026, in force 20 February 2026): the window in Rule 3(1)(d) was cut from 36 hours to three hours from actual knowledge through a court order or a government intimation. The 36-hour figure applied only between 15 November 2025 and 19 February 2026
- Synthetically generated information: the draft published on 22 October 2025 was notified by the same G.S.R. 120(E). It inserts a definition of "synthetically generated information" in Rule 2(1)(wa), a due-diligence regime in Rule 3(3) for any intermediary whose service can generate or alter such content, and Rule 4(1A) for significant social media intermediaries — which must require users to declare synthetic content before publication, deploy technical measures to verify that declaration, and display a clear and prominent label on content confirmed to be synthetic. These are live obligations, not proposals
Significant Social Media Intermediary (SSMI) Obligations
Platforms with 5 million or more registered users in India are classified as Significant Social Media Intermediaries (SSMIs) and must comply with enhanced obligations:
| Requirement | Details | Deadline |
|---|---|---|
| Chief Compliance Officer (CCO) | Must be a senior employee resident in India | Ongoing |
| Nodal Contact Person | For 24/7 coordination with law enforcement; must be resident in India | Ongoing |
| Resident Grievance Officer | Must acknowledge complaints within 24 hours and dispose of them within 7 days; 36 hours for complaints seeking removal of prohibited content under Rule 3(1)(b), and 2 hours for complaints about non-consensual intimate imagery or impersonation (timelines shortened by G.S.R. 120(E) with effect from 20 February 2026) | Ongoing |
| Monthly compliance reports | Published publicly showing complaint volumes, takedown actions, and proactive monitoring data | Monthly |
| First originator traceability | SSMIs providing services primarily in the nature of messaging must enable identification of the first originator of information upon government or court order | Ongoing |
| Synthetic-content labelling | Require a user declaration on whether uploaded content is synthetically generated, verify it by technical means, and label confirmed synthetic content prominently (Rule 4(1A)) | Ongoing |
| Physical contact address | Must publish physical office address in India on website/app | Ongoing |

Digital Personal Data Protection Act 2023 & DPDP Rules 2025
The Digital Personal Data Protection Act, 2023 (DPDP Act), brought into force in phases through the DPDP Rules notified on November 13, 2025, introduces comprehensive data protection obligations for all entities processing personal data of individuals in India.
Applicability to Foreign Platforms
The DPDP Act applies extraterritorially to any entity processing digital personal data outside India if such processing is in connection with offering goods or services to individuals in India. This means every global social media platform with Indian users is within scope, regardless of where the company is incorporated or where its servers are located.
Key Compliance Obligations
| Obligation | Requirement | Compliance Deadline |
|---|---|---|
| Consent mechanism | Clear, specific, informed consent for each purpose of data processing | May 2027 |
| Privacy notice | Must specify purpose, categories of data, retention period, and rights of data principals | May 2027 |
| Data breach notification | Notify the Data Protection Board of India (DPBI) and affected individuals without delay | May 2027 |
| Children's data | Verifiable parental consent for processing data of individuals under 18; prohibition on targeted advertising to children | May 2027 |
| Data retention limits | Delete personal data when consent is withdrawn or purpose is fulfilled; 3-year deletion rule for large platforms | May 2027 |
| Consent managers | Must be registered with DPBI; minimum net worth INR 2 crore; must be incorporated in India | November 2026 |
Penalties
Non-compliance with the DPDP Act can result in penalties of up to INR 250 crore (approximately USD 30 million) per violation. For failures specifically related to children's data protection, the penalty cap is INR 200 crore. The Data Protection Board of India has the authority to impose penalties and conduct inquiries into non-compliance.
Content Regulation: What Platforms Must Moderate
India imposes specific content restrictions that differ significantly from Western free-speech frameworks. Platform operators must understand and operationalise these restrictions through automated and manual moderation systems.
Prohibited Content Categories
Under Rule 3(1)(b) of the IT Intermediary Guidelines, intermediaries must inform users through terms of service that the following content is prohibited:
- Content threatening the unity, integrity, defence, security, or sovereignty of India
- Content that is defamatory, obscene, pornographic, paedophilic, or invasive of privacy
- Content that promotes enmity between groups on grounds of religion, race, caste, or community
- Content that is patently false and intended to mislead or harass
- Content that infringes intellectual property rights
- Content that threatens public health or safety
Government Blocking Orders
Under Section 69A of the IT Act, the government can direct intermediaries to block content that threatens sovereignty, security, public order, or friendly relations with foreign states. These blocking orders are confidential — the intermediary cannot disclose the order's existence to the content creator or public. Non-compliance with a blocking order is a criminal offence punishable with imprisonment up to 7 years and a fine.

GST, Equalisation Levy, and Tax Considerations
Platform companies operating in India face several tax obligations beyond corporate tax:
GST Registration and Compliance
Any entity providing services in India must register for GST. For platform companies, this includes advertising revenue, subscription fees, in-app purchases, and any other consideration received from Indian users or advertisers. The standard GST rate for digital services is 18%. Non-resident platforms without an Indian entity must appoint a GST-registered representative in India.
Equalisation Levy
The Equalisation Levy at 6% previously applied to online advertising payments made by Indian businesses to non-resident platforms, even where the platform had no physical presence in India. Separately, a 2% Equalisation Levy previously applied to e-commerce supply or services by non-resident e-commerce operators where aggregate Indian revenue exceeded INR 2 crore in the financial year. Both levies have since been withdrawn — the 2% levy from August 1, 2024 and the 6% levy from April 1, 2025 — so new entrants face no Equalisation Levy, though the significant economic presence rules and ordinary PE/royalty taxation remain relevant.
Transfer Pricing
For foreign-owned platforms with Indian subsidiaries, transfer pricing compliance is mandatory. Common related-party transactions include technology licensing fees, brand licensing charges, data processing fees, and management service agreements. All transactions must be at arm's length with contemporaneous documentation.
Practical Setup Roadmap for Foreign Platform Companies
For a foreign social media or content platform company entering India, the recommended setup sequence is:
- Determine FDI applicability: Classify the platform's content — if it involves news/current affairs, the 26% cap applies under the government approval route. If not, 100% FDI via automatic route is available
- Incorporate Indian subsidiary: Register a private limited company via SPICe+. Appoint at least one resident director. Complete RBI reporting (FC-GPR) within 30 days of share allotment
- Register as intermediary: Comply with IT Intermediary Guidelines — appoint Nodal Officer, Grievance Officer, and (if SSMI) Chief Compliance Officer
- Implement DPDP compliance: Build consent management infrastructure, privacy notices, data breach notification systems, and children's data protections before the May 2027 deadline
- GST and tax setup: Obtain GST registration and establish a transfer pricing documentation framework (the Equalisation Levies were withdrawn in 2024-2025 and no longer apply)
- Content moderation: Deploy India-specific content moderation policies, train moderators on Section 69A blocking order procedures, build the synthetic-content declaration and labelling pipeline, and establish three-hour takedown workflows
For comprehensive guidance on setting up a foreign subsidiary in India, see our foreign subsidiary registration service.

Intellectual Property and Content Licensing Considerations
Foreign content platforms must navigate India's copyright framework under the Copyright Act, 1957 (as amended in 2012). Key considerations include:
- Safe harbour for user-generated content: Section 79 of the IT Act provides safe harbour for intermediaries, but the platform must not exercise editorial control over user content. If the platform curates, edits, or promotes specific content, it may lose intermediary status and assume publisher liability
- Music licensing: Platforms streaming or hosting music must obtain licences from IPRS (Indian Performing Right Society) and PPL (Phonographic Performance Limited). Statutory licensing rates, formerly set by the Copyright Board and then the IPAB, are determined through the Commercial Courts following the 2021 tribunal reforms where commercial negotiations fail
- Film and OTT content: Platforms distributing film content require rights clearances from producers and distributors. The Cinematograph Act, 1952, requires CBFC certification for theatrical release of films; online-only and short-form digital content does not require CBFC certification and is instead governed by the digital media Code of Ethics under the IT Rules, 2021
- Trademark protection: Register the platform's brand name, logo, and distinctive features with the Indian IP Office to prevent local copycats. India follows a first-to-file system, so early registration is essential
Competitor Landscape and Market Entry Timing
The Indian social media landscape is dominated by global incumbents — Meta (Facebook, Instagram, WhatsApp), Google (YouTube), and X (formerly Twitter) — alongside homegrown platforms like ShareChat and Moj (the microblogging platform Koo shut down in 2024, a reminder of the market's brutal economics). Any new entrant must evaluate not only regulatory compliance costs but also user acquisition economics in a market where average revenue per user (ARPU) for social media remains far lower than in Western markets.
Despite lower per-user monetisation, the sheer scale of India's digital population makes it a priority market, and regional language content (Hindi, Tamil, Telugu, Bengali, Marathi) is widely reported as the fastest-growing segment of usage.
For content platforms focused on entertainment, education, or professional networking — rather than news — the regulatory pathway is substantially simpler. The 100% FDI automatic route, combined with a clear intermediary compliance framework, means a well-prepared foreign platform company can go from incorporation to operational launch in 60-90 days.

Key Takeaways
- Non-news social media platforms can receive 100% FDI under the automatic route, but platforms involving news and current affairs are capped at 26% FDI under the government approval route
- The IT Act's intermediary safe harbour requires strict compliance with content removal timelines, cut from 36 hours to three hours on 20 February 2026, appointment of resident compliance officers, synthetic-content labelling, and monthly transparency reporting for SSMIs with 5 million+ users
- The DPDP Act 2023 applies extraterritorially to all platforms processing Indian users' data, with penalties up to INR 250 crore per violation and full compliance required by May 2027
- Content moderation in India requires platforms to enforce government blocking orders under Section 69A without disclosing the order's existence — a fundamentally different approach from Western transparency norms
- The entity structure choice matters significantly: a private limited subsidiary is the only viable structure for platforms generating revenue in India; branch offices and liaison offices are too restrictive
Need help with Technology Sectors? Our team handles it.
FDI AdvisoryFrequently Asked Questions
Can a foreign company own 100% of a social media platform in India?
Yes, if the platform does not primarily upload or stream news and current affairs content. Non-news social media platforms, entertainment platforms, and user-generated content sites are eligible for 100% FDI under the automatic route. Platforms that stream or upload news content are restricted to 26% FDI under the government approval route.
What is the 26% FDI cap on digital media in India?
Press Note 4 of 2019 restricts FDI in entities engaged in uploading or streaming news and current affairs through digital media to 26%, requiring government approval. This applies to digital news publishers, news agencies, and news aggregators. The restriction mirrors the FDI cap applicable to print media.
What is a Significant Social Media Intermediary (SSMI) in India?
A platform with 5 million or more registered users in India is classified as an SSMI under the IT Intermediary Guidelines. SSMIs must appoint a Chief Compliance Officer, Nodal Contact Person, and Resident Grievance Officer (all resident in India), publish monthly compliance reports, and — for messaging-focused SSMIs — enable first originator traceability upon government or court order.
When must social media platforms comply with India's DPDP Act?
The DPDP Act's administrative provisions took effect in November 2025. Consent manager registration is required by November 2026. Full substantive compliance — including privacy notices, consent systems, children's data protections, and data retention policies — must be operational by May 13, 2027. Penalties up to INR 250 crore per violation apply.
Can Indian government order content removal on social media platforms?
Yes. Under Section 69A of the IT Act, the government can direct intermediaries to block content threatening sovereignty, security, or public order. These blocking orders are confidential and the platform cannot disclose the order's existence. Non-compliance is a criminal offence punishable with imprisonment up to 7 years.
Does the Equalisation Levy apply to social media platforms?
Not any more. The 6% levy on online advertising payments to non-resident platforms was withdrawn effective April 1, 2025, and the 2% levy on non-resident e-commerce operators was withdrawn effective August 1, 2024. Platforms should still evaluate the significant economic presence rules and ordinary PE and royalty taxation.
What content moderation obligations apply to platforms in India?
Platforms must remove unlawful content within three hours of a court order or a reasoned government intimation. That window was 36 hours until G.S.R. 120(E) cut it with effect from 20 February 2026. Platforms must also prohibit content threatening India's sovereignty or promoting communal enmity, comply with Section 69A blocking orders, and label synthetically generated content. The October 2025 amendment restricted who may issue takedown intimations to officers of Joint Secretary rank and above, or Deputy Inspector General rank for the police.