The IT (Intermediary Guidelines) Rules 2021 mandate a 24-hour response window for specific content categories: content that violates privacy, exposes intimate imagery without consent, and content that poses a threat to public order or national security. For these categories, platforms have no discretion to delay — the 24-hour window begins from receipt of a valid complaint addressed to the designated Grievance Officer.
Content Categories with 24-Hour Legal Timelines
DMCA-eligible content on US-hosted platforms — YouTube, Instagram, Facebook, Twitter/X — can achieve removal in 24 to 48 hours where a valid copyright claim exists. DMCA operates on a notice-and-takedown model where the platform must act promptly or face liability under US copyright law. Indian victims of content on US platforms increasingly use DMCA as a parallel route alongside IT Act notices, particularly where the offending content incorporates the complainant own images or video.
Coordinated campaigns — where the same defamatory content is published simultaneously across multiple platforms to maximise damage — require simultaneous multi-platform emergency notices rather than sequential single-platform notices. Waiting for one platform to act before approaching the next extends the window of maximum exposure. An emergency legal strategy must cover all active URLs in parallel from the first hour.
The distinction between content that qualifies for a 24-hour emergency response under the IT Rules 2021 and content that falls within the standard 15-day timeline is not always obvious. Experienced legal counsel applies the correct classification — misclassifying an emergency matter as a standard matter causes it to be processed on the slower timeline, multiplying the harm during the delay.
What Constitutes a Reputation Emergency in Indian Law
Not every piece of harmful content qualifies as a legal emergency. A reputation emergency, in the legal sense, is a situation where the harm caused by the content is irreversible, escalating rapidly, and cannot be adequately compensated by a monetary award after the fact. Indian courts assess emergency status primarily through two lenses: the velocity of the harm — how fast the content is spreading — and the specific high-stakes event or proceeding that the content threatens to affect.
Going viral is the most common trigger. A defamatory post, video, or image that is being shared at scale — generating thousands of shares, comments, and media attention — causes exponentially greater harm with each passing hour. By the time standard 15-day notice procedures are completed, the content may have been seen by millions of people, cached across hundreds of sites, and incorporated into news reports that independently survive even if the original post is removed. The viral threshold matters legally because it directly affects the emergency relief arguments presented to the court.
Specific high-stakes events create their own emergency category. A company in its IPO blackout period faces SEBI scrutiny if defamatory content circulates about its promoters or financials during this period. A board vote or shareholder meeting that is proximate to a defamatory campaign may justify emergency relief on the ground that the campaign is designed to influence the vote outcome. Regulatory proceedings — such as a National Medical Commission hearing for a doctor, or a Bar Council proceeding for a lawyer — that are affected by online defamation similarly justify emergency legal action.
Criminal proceedings where the complainant is a named accused are a further category of emergency. Where defamatory content specifically rehearses allegations that mirror pending charges, or where it is published with the apparent purpose of poisoning the jury pool or influencing witnesses, emergency injunctive relief is justified on grounds that go beyond personal reputation to the integrity of the legal process itself.
The 36-Hour Platform Response Obligation Under IT Rules 2021
Rule 3(2)(b) of the IT Rules 2021 imposes a 36-hour resolution obligation on significant social media intermediaries for content in specific categories. These categories include: content that affects the sovereignty or integrity of India, defence of India, security of the state, friendly relations with foreign states, public order; content that relates to sexual abuse or exploitation of children; and content that violates the privacy of an individual — including the non-consensual publication of intimate images or videos.
The 36-hour clock starts from receipt of the complaint by the Grievance Officer — not from the time the complaint is submitted through the platform user interface. A complaint submitted through a generic web form may sit in a queue for hours before reaching the Grievance Officer. An emergency legal notice addressed directly to the named Grievance Officer — by email to their designated address and simultaneously by courier to the registered address — starts the clock immediately upon delivery and creates a verifiable timestamp.
Platforms that are bound by the 36-hour obligation include Meta (Facebook and Instagram), Alphabet (YouTube and Google), Twitter/X, Snapchat, LinkedIn, and any other platform with more than 5 million registered users in India. Smaller platforms are not bound by the 36-hour window but remain subject to general IT Act obligations. For content on smaller platforms, IT Act Section 79 notice combined with a court application is typically the most effective route.
When a platform misses the 36-hour deadline, the consequences are immediate and legally significant. The platform loses the ability to argue that it was unaware of the content or that it was still processing the complaint. Non-compliance with the 36-hour obligation is a breach of the IT Rules 2021 due diligence requirements, stripping safe harbour protection and creating grounds for both a civil injunction application and a regulatory complaint to the Ministry of Electronics and Information Technology.
RepuLex Legal Services
Ex Parte Interim Injunctions in India: Getting Court Relief in 48 Hours
An ex parte interim injunction is a court order obtained without prior notice to the defendant. The term "ex parte" — from the Latin meaning "on one side only" — describes proceedings where the applicant presents arguments to the court in the absence of the opposing party. In Indian practice, ex parte orders are granted where giving advance notice to the defendant would defeat the very purpose of the relief — such as where the defendant might destroy evidence or accelerate the harm before the court can act.
The threshold for an ex parte interim injunction in online defamation cases requires the applicant to demonstrate three elements. First, a prima facie case that the content is defamatory or otherwise unlawful — meaning the court is satisfied, on the material placed before it, that there is a real and not merely fanciful legal claim. Second, irreparable harm — the harm caused by continued publication of the content cannot be compensated in money alone. Third, that the balance of convenience favours granting the injunction — that the harm to the applicant from denial outweighs any harm to the defendant from grant.
Indian High Courts — particularly the Delhi High Court and the Bombay High Court — regularly schedule emergency hearing applications in online defamation cases within 24 to 48 hours of filing. The Delhi High Court has a dedicated intellectual property and information technology division that is familiar with urgent digital defamation matters. Filing a well-prepared emergency application — with a concise memo of facts, exhibit bundle including screenshots, and a prayer specifically tailored to the harm — substantially improves the prospects of a same-day or next-day hearing.
Once granted, the ex parte interim injunction order must be served on the platforms. Service is effected by delivering the order to the Grievance Officer designated address, to the platforms legal team by email, and where necessary through the Registry. Platforms that are served with a High Court interim injunction order — even an ex parte one — are obliged to comply within the time specified in the order, which is typically 24 to 48 hours from service. Non-compliance constitutes contempt of court.
The Duty to Preserve Evidence Before Filing Emergency Notices
The first action in any content removal emergency is not the legal notice — it is evidence preservation. Platforms routinely remove content in response to legal notices, and when content is removed, the ability to later prove what it said, how widely it was shared, and when it appeared is permanently lost unless the evidence was captured before removal. Evidence preservation must therefore precede every other step in the emergency process.
A legally admissible screenshot requires more than a phone photograph of a screen. It must capture the complete URL of the page, the timestamp of the observation, the username or handle of the account that published the content, the full text of the defamatory statement, any visible share or like counts, and if available the date of original publication. Each screenshot should be taken from a device with accurate date and time settings, and the device used should be documented.
For court proceedings, screenshots must be certified as true copies and may need to be accompanied by a certificate under Section 65B of the Indian Evidence Act — which governs the admissibility of electronic evidence. A Section 65B certificate must be provided by the person who produced the electronic record, attesting that the printout was produced from a device that was in regular use, that the device was operating properly, and that the information contained in the printout reproduces or is derived from the information in the device.
Where the content is on a platform that timestamps its own content — which most platforms do — the platform timestamp must be captured in the screenshot. Where the content has been shared and reshared, screenshots of all instances should be captured, not just the original. Archive services such as web.archive.org and archive.ph can create independent third-party captures of web pages, which carry greater evidential weight in court than screenshots captured by the complainant alone.
Emergency IT Act Notice vs Standard Notice: Key Differences
A standard IT Act notice under Section 79 and the IT Rules 2021 is addressed to the Grievance Officer, cites the unlawful content by URL, invokes the applicable legal provisions, and requests removal within 15 days. This is the appropriate format for most content removal situations where the matter is serious but not acutely time-sensitive. A standard notice initiates the mandatory 15-day processing timeline and provides the foundation for court proceedings if the platform fails to comply.
An emergency IT Act notice differs in framing, routing, and urgency specification. The notice must explicitly invoke Rule 3(2)(b) of the IT Rules 2021 if the content falls within the 36-hour categories — privacy violation, threat to public order, or the other specified categories. It must be addressed not only to the Grievance Officer but also to the Chief Compliance Officer by name, creating dual-accountability at senior level. It must state the specific emergency circumstances — the ongoing viral spread, the proximate high-stakes event, or the irreversible harm in progress — that justify emergency treatment.
Emergency notices should also bypass standard submission mechanisms. Rather than submitting through the platform web form, an emergency notice is sent by email directly to the Grievance Officer designated email address and the Chief Compliance Officer designated email address, simultaneously, with read receipts requested. The notice is also sent by WhatsApp to any available contact number for the platform legal team in India, and by registered post with acknowledgement due to the registered office address in India. This multi-channel delivery creates multiple timestamps and demonstrates that the notice was received.
The content of the emergency notice must reflect the urgency without being vague. It should specify the number of shares or views visible at the time of the notice, identify the high-stakes event or proceeding that is affected, and state explicitly that the applicant will approach the High Court for an ex parte interim injunction on a named date — typically within 48 to 72 hours — if the platform does not comply. This converts the notice from a request into a legal ultimatum with a specified consequence, which is treated with greater urgency by platform legal teams.
High Court Emergency Benches in India: How to Access Them
The Delhi High Court, Bombay High Court, Madras High Court, and Karnataka High Court all have mechanisms for filing urgent matters and seeking urgent hearing dates. The specific procedure differs between High Courts, but the common thread is that urgency must be demonstrated in writing to the Court through a "mentioning" — a brief oral or written application to the presiding judge or the Chief Justice requesting that the matter be listed at the earliest possible date.
The Delhi High Court has an Urgent Mentioning mechanism administered through the Court Master of the presiding judge or the Division Bench. An urgent matter — with a brief written note explaining the nature of the emergency, the irreversible harm being suffered, and the relief sought — can be mentioned on any working day and may be listed within 24 to 48 hours if the urgency is accepted. The Delhi High Court IP and IT division judges are experienced with digital defamation matters and the harm that viral content causes during the delay.
The Bombay High Court has a similar urgent mentioning procedure. For matters affecting ongoing corporate transactions, IPO processes, or public market-sensitive information, the Commercial Division of the Bombay High Court is the appropriate forum and has jurisdiction to pass urgent interim orders in commercial defamation cases. The Madras and Karnataka High Courts serve as the appropriate forums for matters arising from content targeting individuals or businesses in Tamil Nadu and Karnataka respectively.
Accessing an emergency bench requires a filed application — not merely a draft. The petition, the vakalatnama, the exhibit bundle (including evidence preservation screenshots), and a concise note of urgency must all be filed with the Registry before mentioning. Experienced digital defamation counsel maintain court-ready emergency filing templates that can be populated and filed within hours of instruction. The practical advantage of working with specialists in this area is the ability to compress what would otherwise be a two-day drafting process into a matter of hours.
When the Content Is on a Non-Compliant Foreign Platform: Emergency Cross-Border Strategy
Not all platforms comply with Indian court orders or IT Act notices. Some foreign-hosted platforms — particularly smaller forums, international news sites, and offshore domain registrants — may ignore Indian legal process entirely, whether through ignorance of their obligations or a deliberate decision to treat Indian law as unenforceable against them. An emergency strategy for content on such platforms requires a different approach from the standard IT Act notice.
The first option is geographic access restriction. Under Section 69A of the IT Act, the Ministry of Electronics and Information Technology can block access to specific URLs or domains from within India. While a private individual cannot directly invoke Section 69A, a lawyer can approach the Ministry with a formal complaint demonstrating that the content falls within the Section 69A categories — threat to public order, security of the state, or the other specified grounds — and request emergency blocking. The Ministry has an expedited 48-hour procedure for emergency blocking requests.
The second option is Google de-indexing as an interim measure. Even where the source content cannot be removed immediately from a non-compliant foreign platform, a successful de-indexing application to Google removes the content from Indian search results, which is where most people will discover it. A court order directing Google to de-index specific URLs can be obtained through Indian court proceedings even where the foreign source platform is not before the court. De-indexing does not remove the content from the internet, but it dramatically reduces its discoverability.
The third option is to trace the domain registrant and hosting provider and pursue emergency action through those parties. Most domain registrars and hosting providers are US companies with their own Terms of Service that prohibit hosting defamatory content. A formal legal notice to the hosting provider — invoking the Terms of Service violation and attaching the evidence — sometimes achieves removal faster than pursuing the platform itself, particularly where the registrant contact is anonymised through a privacy protection service and cannot be separately identified.
The 24-Hour Timeline: What RepuLex Does in the First Day
Hour 0 to 2: Initial consultation and evidence preservation. The matter is reviewed by a senior advocate, the evidence preservation checklist is completed, all visible URLs are archived using web.archive.org and archive.ph, screenshots with Section 65B certification are prepared, and the emergency strategy — notice track, court track, or both — is confirmed with the client. A monitoring alert is set up to track new instances of the content appearing on other platforms or being shared.
Hour 2 to 6: Parallel notice dispatch. Emergency IT Act notices are prepared and dispatched to the Grievance Officer and Chief Compliance Officer of each relevant platform simultaneously. For content on US platforms where a DMCA claim is available, DMCA notices are prepared and submitted to the platform DMCA agent in parallel. The notices are sent by email with read receipts, WhatsApp where available, and registered post to the Indian registered address. Evidence of dispatch is preserved.
Hour 6 to 18: Court application preparation if required. Where the matter warrants parallel court action — either because the content is escalating rapidly or because platform compliance within 24 hours cannot be relied upon — the emergency application for an ex parte interim injunction is prepared. This includes drafting the petition, preparing the exhibit bundle, drafting the urgency note, and coordinating with the client to complete the vakalatnama and affidavit. The application is filed with the Registry and the mentioning note is prepared for the earliest available bench.
Hour 18 to 24: Platform follow-up and court mentioning. Platforms that have received emergency notices are followed up for acknowledgement. Any platform that acknowledges removal escalates the matter internally and typically provides an update within hours. If court mentioning is required, it is conducted at the earliest opportunity on the next working day. The client is updated at each stage with documented records of all actions taken, creating an audit trail that is relevant both for the proceedings and for the client internal governance needs.
Post-Emergency: Permanent Removal After Interim Relief
An interim injunction — whether obtained ex parte or on notice — is not a final order. It is a temporary measure that prevents the continuation of the harm while the main case is pending. Converting interim relief into permanent removal requires either a final court order after a full hearing on the merits, or — more commonly in practice — a negotiated settlement with the original poster that includes both removal and an undertaking not to repost.
Where the original poster is identified — either because the post was made from a non-anonymous account or because a John Doe disclosure order has subsequently revealed the identity — a settlement approach is frequently available. The poster, now aware that they face a defamation suit with damages, an injunction, and potentially a criminal complaint under IPC 499/500, often agrees to remove the content voluntarily and execute a written undertaking. The written undertaking, if breach occurs, supports an application for contempt of court.
Where the original poster remains anonymous or is located outside India, the permanent removal strategy relies primarily on the court order directing the platform to keep the content removed. A platform that has complied with an interim order typically extends that compliance indefinitely — particularly where the content has been removed and there is no pending application from the original poster to restore it. However, a final consent order or a decree on the merits provides stronger protection against future reposting than an interim order alone.
Post-emergency, the reputation management strategy must address the search engine residue. Even after content is removed from a platform, Google may retain a cached version in its index. A formal de-index request — using the URL removal tool and citing the court order — is submitted immediately after each platform removal. Monitoring continues for 30 to 60 days post-removal to detect any reposting by the original poster or others who may have saved and reuploaded the content before the original removal.
Emergency ORM for Specific Situations: IPO, Election, Board Vote, NMC Hearing
IPO blackout periods create specific legal vulnerabilities. SEBI regulations prohibit certain communications about a company during the period immediately before and after its IPO. A defamatory campaign targeting a company promoter or its financials during this window creates dual jeopardy — reputational harm to the company combined with potential SEBI scrutiny of the company response. Emergency content removal during an IPO blackout period must be handled in a manner that does not itself constitute a public communication that breaches SEBI regulations, requiring coordination between the content removal counsel and the company SEBI compliance team.
Election periods and candidate reputation attacks have specific provisions under the Representation of the People Act, 1951, which creates electoral offences including promoting enmity between classes and making false statements about candidates. False online content targeting a political candidate during an election period can be reported to the Election Commission of India and to the State Cyber Crime Cell simultaneously with IT Act notice to the platform. The Election Commission has the authority to direct content removal on electoral grounds through its own channels, which operates as an additional lever independent of the standard IT Act notice route.
Board votes and shareholder meeting disruptions by online defamation are increasingly litigated as commercial disputes. Where a defamatory campaign is timed to coincide with a board vote — for example, allegations designed to undermine the credibility of a resolution or a director appointment — the matter falls within the jurisdiction of the Commercial Court for urgent interim relief. Commercial Courts in India have demonstrated willingness to pass emergency orders in cases where the defamatory campaign is coordinated and timed to affect specific corporate governance events.
National Medical Commission proceedings require a separate handling approach. A doctor facing an NMC inquiry who is simultaneously targeted by an online defamatory campaign must ensure that the content removal proceedings do not conflict with the NMC process. Evidence preserved for content removal purposes may also be relevant to the NMC proceedings. RepuLex coordinates with the client legal team in the NMC matter to ensure that the online reputation strategy and the regulatory proceeding strategy are aligned, and that emergency content removal is pursued on a timeline that serves both objectives.
RepuLex Editorial
Legal Researcher · IT Law & Defamation Practice
RepuLex's editorial team is composed of practising advocates and senior legal researchers specialising in IT Act 2000, defamation law, and digital content enforcement across Indian High Courts. All articles are reviewed for legal accuracy before publication. Nothing in this article constitutes legal advice — consult a qualified advocate for your specific situation.