Know why your data is requested
Look for a clear explanation of what information is being collected and the purpose for using it.
Government updates · Personal safety · Cyber awareness
Digital Safety & Government Guidance
A practical, plain-language guide to protecting personal information, recognising online abuse and scams, and finding official Government of India resources.
Why this page existsIndia has a personal-data protection framework and separate laws, rules and government advisories addressing online safety, cybercrime and harmful AI-generated content. This page explains the difference and points to official sources. It is an awareness guide—not a government-issued alert and not legal advice.
1. Personal data: what should you know?
The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 establish a framework for how covered organisations handle digital personal data. The Rules were notified in November 2025 and have a phased commencement schedule, so not every provision starts on the same date.
Share only what is needed
Avoid sending passwords, OTPs, payment credentials, identity documents or extra personal details through unverified channels.
Use privacy and grievance channels
When relevant, contact the organisation using its published privacy or grievance details to ask how your data is handled or to make a request available under the law.
Organisations should prepare
Map personal data, explain purposes clearly, restrict access, set retention practices and prepare for data requests and breach response according to applicable requirements.
Read the separate Data Protection & DPDP explainer →
2. Government guidance on deepfakes and harmful AI-generated content
The Ministry of Electronics and Information Technology (MeitY) has published information about changes to the Information Technology Rules addressing harms from synthetically generated information, including deepfakes and AI-generated content. The government’s March 2026 explanation discusses safeguards relating to unlawful content, impersonation, non-consensual intimate imagery and protection of children.
- Do not create, forward or publish intimate, sexual, abusive or impersonating content involving another person without lawful basis and consent.
- If a video, voice note or image makes a surprising claim, verify it through an independent trusted channel before sharing it or sending money.
- If your image or identity is misused, preserve the URL, account name, date, messages and screenshots where safe to do so, and report through the relevant platform and official channels.
- Platforms have specific legal duties under applicable rules; the exact duty and deadline depend on the rule and circumstances. Do not assume every government advisory applies identically to every individual or business.
3. Everyday cyber-safety checklist
Stop and verify
Be cautious with urgent calls or messages asking for money, OTPs, remote access, gift cards or confidential information. Call the person or organisation using a number you already trust.
Secure your accounts
Use unique passwords, enable multi-factor authentication where available, install updates and download apps only from trusted sources.
Protect children and vulnerable people
Talk about privacy, unwanted contact, bullying and suspicious links. Save evidence and seek help through appropriate reporting channels if abuse occurs.
Do not pay to “fix” a scam
Be suspicious of anyone demanding a fee to remove a complaint, protect your data, unblock an account or guarantee that a cybercrime report will be closed.
4. If something goes wrong: where to report
- Financial cyber fraud in India: call 1930 as soon as possible and report through the official National Cyber Crime Reporting Portal.
- Other cybercrime or online abuse: use the official National Cyber Crime Reporting Portal and follow its instructions. The portal includes reporting pathways for matters involving women and children.
- Technical cyber-security guidance: consult CERT-In’s official advisories and awareness material.
- Immediate physical danger: contact local emergency services; online reporting is not a substitute for urgent safety assistance.
Before you reportUse official websites only. Never share an OTP, password or remote-access code with someone claiming to be a police officer, bank employee or government official over an unsolicited call. Keep relevant evidence, but do not repost harmful or intimate content to “prove” the incident.
5. Official Government of India resources
- PIB / MeitY — Government information on IT Rules, advisories and harmful AI-generated content (25 March 2026)
- PIB / MeitY — Government cyber-security preparedness and CERT-In role (14 August 2026)
- CERT-In — Advisory on AI-driven cyber risks (26 April 2026)
- CERT-In — Official cyber-safety awareness booklets, including AI, women’s safety and children’s safety
- National Cyber Crime Reporting Portal — report cybercrime; call 1930 for financial cyber fraud
- MeitY — Digital Personal Data Protection Rules, 2025
6. How to read this page
- Law and notified Rules: official legal instruments that create obligations according to their scope, wording and commencement dates.
- Government press releases: explain government actions and policy; they are not necessarily a replacement for the underlying legal text.
- CERT-In advisories and awareness resources: provide security advice and technical guidance. Check the advisory’s audience, date and applicability.
Vaishnora transparency statementThis page is a general public-awareness resource. Its publication does not mean Vaishnora Consulting Private Limited is government-certified, officially endorsed, or independently audited as compliant with every law or advisory mentioned here. Any specific compliance claim must be supported by a current assessment and evidence.
Page owner: Vaishnora Consulting Private Limited · Last reviewed 10 October 2026. Official sources may change; check the linked government pages for updates.