DPDP Act, IT Act & Telegram Ban: Constitutional Boundaries of India’s Platform Regulation

Introduction

India’s recent interim ban on the Telegram messaging application sits at the intersection of technology regulation, data protection, and constitutional rights. While the legal toolkit to restrict or even prohibit a digital platform clearly exists under the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the deeper issue is whether such a ban meets the constitutional thresholds under Articles 19(1)(a) and 19(1)(g), as limited by Articles 19(2) and 19(6).

The core tension is this: the State’s capacity to regulate online intermediaries is well-established, but that power is not absolute. It must be exercised within the doctrine of reasonable restriction and the proportionality standards laid down, particularly in K.S. Puttaswamy v. Union of India. A sweeping platform ban is a blunt and disruptive remedy, with serious implications for free expression, livelihood, and privacy.

This analysis unpacks how the IT Act, the DPDP Act, and constitutional guarantees interact in the context of Telegram’s ban, and what limits they collectively impose on India’s evolving digital governance framework.

Telegram’s Role in the Digital Ecosystem

Telegram is far more than a simple chat application. With an estimated user base exceeding 950 million worldwide, it simultaneously functions as:

  • A real-time communication tool (individual and group messaging)
  • A content distribution and publishing channel (via broadcast channels)
  • A coordination platform for political and social mobilisation
  • A potential haven for unlawful conduct enabled by encryption and anonymity

The arrest of Telegram’s founder Pavel Durov by French authorities in September 2024, on allegations including complicity in offences such as drug trafficking and child exploitation, intensified global debate about encrypted platforms. In South Asia, and India in particular, this incident fed into ongoing regulatory scrutiny of Telegram’s compliance posture.

India’s short-lived ban exposed a structural problem in the country’s digital governance approach: regulatory ambitions are growing faster than the clarity on constitutional and procedural limits.

Note: A nationwide platform ban simultaneously affects speech, commerce, professional communication and privacy, and may unintentionally push illegal activity into even less visible corners of the internet.

The legal question, therefore, is not whether Telegram can be banned in theory, but whether the choice of a complete ban is constitutionally sustainable when less restrictive options exist.

Section 69A: Blocking Power and Its Safeguards

Section 69A of the Information Technology Act 2000 authorises the Central Government to block public access to information through any computer resource, including platforms and websites, if it is satisfied that such action is necessary:

  • In the interest of India’s sovereignty and integrity
  • Defence of India
  • Security of the State
  • Friendly relations with foreign States
  • Public order
  • For preventing incitement to the commission of any cognizable offence

The exercise of this power is governed by the Information Technology (Procedure and Safeguards for Blocking Access to Information by Public) Rules, 2009.

In Shreya Singhal v. Union of India (2015) 5 SCC 1, the Supreme Court struck down Section 66A as unconstitutional but deliberately upheld Section 69A and the associated Blocking Rules. The Court’s acceptance of Section 69A rested on:

  • Clearly defined grounds of restriction, unlike the vague “grossly offensive” language in Section 66A
  • The existence of procedural checks, such as review mechanisms and recorded reasons

However, judicial approval was contingent on actual implementation of these safeguards. Merely having protective procedures on paper is not enough; they must be scrupulously followed in practice.

Section 79: Intermediary Safe Harbour and Compliance Burden

Section 79 creates a safe harbour for intermediaries: platforms are exempt from liability for third-party content if they:

  1. Exercise due diligence
  2. Comply with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
  3. Act expeditiously upon gaining “actual knowledge” of unlawful content

The 2021 Rules introduced several critical obligations, including:

  • Appointment of a grievance officer
  • Time-bound takedown of illegal content
  • Traceability requirements for certain messaging services

Telegram’s reluctance, or refusal, to fully comply with content-removal and traceability demands has arguably placed it in a precarious position under Section 79. Once an intermediary fails to meet safe harbour conditions, the State gains greater latitude to initiate stronger actions—including blocking orders.

Key Point: The more an intermediary resists compliance with statutory obligations and lawful directions, the more vulnerable it becomes to coercive measures under the IT Act framework.

DPDP Act 2023: Data Protection Layer Over Platform Regulation