Media & Social Networking in Internal Security

Role of Media · Impact of Social Media on National Security · Fake News, Deepfakes & Disinformation · Regulation: IT Act, IT Rules 2021, DPDP Act · Social Media in Policing

📄 GS Paper 3🎯 Mains Focus⏱ 14 min read📅 Updated June 2026

Role of Media in India — The Fourth Pillar

The media is widely regarded as the "fourth pillar of democracy", complementing the legislature, executive and judiciary. By informing citizens, holding power to account and shaping public opinion, it is indispensable to a functioning republic. In the context of internal security, however, the media is a profoundly double-edged sword — it can strengthen the state's hand or actively undermine it.

Watchdog function: Exposing corruption, custodial abuse, security lapses and policy failures, enforcing accountability on the security establishment.
Agenda-setting: Deciding which security issues (terrorism, naxalism, border tensions) reach public consciousness and how they are framed.
Public communication channel: Disseminating advisories, alerts and official messaging during crises and disasters.
Forming public opinion: Building national resolve and societal resilience — or, conversely, spreading panic and polarisation.

Double-edged nature: The same reach that lets media mobilise relief during a flood can also broadcast a terrorist's live operation (as during 26/11 Mumbai, when live TV inadvertently aided the handlers in Pakistan), spread communal rumours, or amplify enemy propaganda. Security policy must therefore treat media as both an asset and a vulnerability.

Figure 1: Social media simultaneously enables and endangers internal security — outcomes hinge on governance and literacy.

Impact of Social Media on National Security

Social networking platforms (WhatsApp, X/Twitter, Facebook, Instagram, YouTube, Telegram) have transformed how information flows in India — now home to over 800 million internet users. Their security impact is dual.

Positive Contributions

Information & awareness: Instant dissemination of advisories, weather warnings and official clarifications to vast populations.
Mobilisation for good: Coordinating volunteers, blood donors and relief during emergencies (e.g., COVID-19 oxygen SOS networks).
E-governance & grievance redress: Citizens reach agencies directly; platforms like X are used for real-time complaint resolution.
Disaster response: Crowd-sourced mapping, locating stranded people, and NDMA/state coordination during floods and cyclones.
Transparency: Citizen journalism and viral footage can surface misconduct and force accountability.

Threats to National Security

Radicalisation & recruitment: ISIS, Al-Qaeda and Khalistani networks use encrypted channels and slick online propaganda to radicalise youth and recruit "lone wolves."
Fake news & rumours triggering violence: The 2012 North-East exodus (panic flight of thousands from Bengaluru/Pune after doctored images circulated) and recurrent WhatsApp-rumour lynchings demonstrate the lethal potential of viral misinformation.
Coordinated disinformation: Bot armies and "coordinated inauthentic behaviour" manipulate narratives and inflame communal/regional fault lines.
Deepfakes & AI-generated content: Synthetic audio/video of leaders or false "war footage" can spark panic or diplomatic crises.
Adversary propaganda: Pakistan and China run information-warfare campaigns, especially around J&K, the LAC and military operations.
OPSEC leaks & doxxing of forces: Soldiers' geotagged posts reveal positions; doxxing of personnel/officers endangers them and their families.

Exam hook: The single most-quoted Indian case is the 2012 North-East exodus — link it to fake news → fear → mass movement → communal flashpoint → internet/SMS restrictions imposed in response.

Figure 2: The disinformation-to-violence chain and the points at which the state can intervene to break it.

Threats Posed by Social Media — A Closer Look

The threats demand a structured treatment, as exam answers reward categorisation across the security spectrum.

Benefit (Asset)	Corresponding Threat (Vulnerability)
Rapid information dissemination	Equally rapid spread of fake news & rumours
Mass mobilisation for relief/causes	Mobilisation of mobs, riots, anti-national movements
Free flow of ideas & expression	Radical/extremist propaganda & recruitment
Citizen journalism & transparency	OPSEC leaks, doxxing of security personnel
Global connectivity	Cross-border adversary information warfare
Authentic real-time reporting	Deepfakes & AI-generated false content
Direct citizen-government dialogue	Coordinated inauthentic behaviour / bot manipulation

Framework tip: Present every threat as the "dark twin" of a benefit. This balanced structure signals analytical maturity and earns marks on questions phrased as "double-edged sword" or "boon and bane."

Issues with Regulation of Social Media

Regulating social media is genuinely hard — it sits at the collision of fundamental rights, technology and global jurisdiction.

Free speech vs security: Article 19(1)(a) protects free expression; restrictions under 19(2) must be reasonable. Over-zealous regulation risks chilling legitimate dissent (Shreya Singhal v. Union of India, 2015, struck down Sec 66A of the IT Act).
Encryption & traceability: End-to-end encryption (WhatsApp, Signal) protects privacy but frustrates tracing the "first originator" of harmful content. Mandated traceability may break encryption and threaten privacy (Puttaswamy, 2017).
Jurisdiction of foreign platforms: Most major platforms are foreign-headquartered, complicating enforcement, data access and accountability.
Scale: Billions of posts daily make manual moderation impossible; automated filters err and lack context (sarcasm, local languages, dialects).
Over-censorship risk: Vague standards or excessive takedown power can be misused to suppress criticism, harming democracy.
Intermediary liability: Defining how far platforms are responsible for user content (the "safe harbour" under Sec 79 IT Act) is contested and evolving.

Government Initiatives to Regulate Social Media

India's regulatory architecture has matured into layers — statutory, subordinate (rules) and judicial — balancing security with liberty.

1. Information Technology Act, 2000

Section 69A: Empowers the government to block public access to online content in the interest of sovereignty, integrity, defence, security, friendly relations or public order. Upheld in Shreya Singhal (2015) with procedural safeguards.
Section 79: Grants intermediaries "safe harbour" provided they exercise due diligence.
Section 66A struck down (2015) for being vague and over-broad — a key free-speech milestone.

2. IT (Intermediary Guidelines & Digital Media Ethics Code) Rules, 2021

Due-diligence obligations: Intermediaries must remove unlawful content within set timelines.
Grievance Officer: India-based Grievance Officer, plus Chief Compliance Officer and Nodal Officer for "significant social media intermediaries."
Traceability of first originator: Significant messaging platforms may be required to identify the first originator of a message (contested on privacy grounds).
Grievance Appellate Committees (GACs): Established via 2022 amendment, operational since 2023, to hear appeals against platform content decisions.
Fact-check provision: Later amendments empowered a fact-check unit to flag "fake or misleading" content about government business (under judicial scrutiny).

3. Digital Personal Data Protection (DPDP) Act, 2023

India's first comprehensive data-protection law, governing processing of personal data, consent and the rights of "Data Principals," with security and national-interest exemptions for the state.

4. Internet Shutdowns & the Anuradha Bhasin Judgment

Internet shutdowns under the Temporary Suspension of Telecom Services Rules, 2017 are a frequently used tool during unrest.
Anuradha Bhasin v. Union of India (2020): The Supreme Court held that access to the internet is integral to free speech and trade (Art 19), shutdowns must be temporary, proportionate, necessary and subject to judicial review, and all orders must be published.

5. Other Institutions

Press Council of India: Statutory self-regulatory body for print media ethics.
PIB Fact Check Unit: Government's fact-checking arm countering misinformation about official policy.
CERT-In & I4C: Coordinate on cyber and online-harm incidents.

Figure 3: The statutory (IT Act), subordinate (IT Rules 2021), data-protection (DPDP) and judicial layers of India's regime.

Regulatory Tools at a Glance

Tool / Instrument	Year	Core Function
IT Act — Section 69A	2000	Blocking access to unlawful online content
IT Act — Section 79	2000	Intermediary safe harbour with due diligence
Temporary Suspension of Telecom Rules	2017	Legal basis for internet shutdowns
IT Rules (Intermediary Guidelines)	2021	Grievance Officer, takedown timelines, traceability
Grievance Appellate Committees	2022/23	Appeals against platform content decisions
DPDP Act	2023	Personal data protection & consent framework
PIB Fact Check Unit	2019	Counter misinformation on government policy

How Media Misleads — Ethics of Coverage

Beyond malicious actors, mainstream and digital media can themselves degrade the information ecosystem.

Paid news: Disguised advertisements or political payments presented as editorial content, distorting public choice.
Fake news: Deliberately false stories crafted for virality, profit or political gain.
TRP race: Competition for Television Rating Points drives sensationalism over accuracy; the 2020 TRP scam exposed manipulation.
Sensationalism: Trial-by-media, breach of sub-judice norms, and live coverage of operations that aids adversaries (lesson of 26/11).
Communal coverage: Inflammatory framing of riots/communal incidents that deepens polarisation.

Self-regulation: Bodies like the Press Council of India, the News Broadcasting & Digital Standards Authority (NBDSA) and editorial codes are the preferred path — government regulation of content risks press-freedom violations. The exam-balanced position favours strengthened self-regulation backed by light-touch statutory oversight.

Use of Social Media in Policing

Police forces increasingly leverage social media as a force-multiplier for prevention, investigation and public trust.

Applications

Crowd-sourcing intelligence: Citizens report incidents, traffic, missing persons and suspicious activity in real time.
Alerts & advisories: Rapid public warnings during unrest, disasters or to quash rumours.
Investigation: Open-source intelligence (OSINT), tracking offenders, and digital evidence in cyber-crime cases.
Public communication & image: Humanising the force, building community rapport and countering misinformation (e.g., proactive police handles on X).

Challenges in Adopting Social Media into Policing

Verification: Distinguishing genuine tips from hoaxes and deliberate misdirection.
Manpower & skills: Shortage of trained personnel for 24x7 monitoring, OSINT and analytics.
Privacy concerns: Surveillance and data-gathering must respect Puttaswamy privacy rights and due process.
Misinformation risk: An official error or premature post can itself spread panic or prejudice cases.
Resource & infrastructure gaps: Uneven digital capacity across states and lower-tier units.

Way Forward

Balanced regulation: Rights-respecting, proportionate rules that protect security without chilling free speech — consistent with Anuradha Bhasin and Puttaswamy.
Digital & media literacy: Mass campaigns so citizens can identify fake news, deepfakes and manipulation — the most durable defence.
Platform accountability: Transparent moderation, rapid grievance redress, algorithmic transparency and cooperation with lawful requests.
Counter-narratives: Government and civil society proactively countering extremist and adversary propaganda rather than only reacting.
Fact-checking ecosystem: Independent fact-checkers, PIB Fact Check and platform partnerships, with safeguards against state overreach.
Capacity-building in policing: Trained cyber/OSINT cells, clear SOPs and privacy-by-design protocols.

Best conclusion line: The goal is not to silence social media but to build a resilient information society — through literacy, accountability and proportionate law — so that the medium's democratic promise outweighs its security perils.

Current Affairs Snapshot (up to June 2026)

Deepfake & AI-disinformation surge: Generative-AI tools have made synthetic videos of public figures cheap and convincing, prompting advisories to platforms on labelling AI-generated content.
IT Rules amendments: Continued tightening of due-diligence, fact-check and traceability provisions, several under active judicial review.
DPDP Act, 2023 rollout: Phased operationalisation with draft rules and the establishment of the Data Protection Board shaping platform compliance.
Info-war during 2025 escalation: Around the India-Pakistan escalation and Operation Sindoor (May 2025), the government and PIB Fact Check moved aggressively against fake "war footage," doctored videos and adversary propaganda; numerous handles and posts were flagged or blocked.
Grievance Appellate Committees functioning: GACs continue to adjudicate user appeals against platform takedown/retention decisions, institutionalising user redress.

Previous Year Questions — Mains with Model Answer Structures MAINS

Mains-only — PYQs up to UPSC Mains 2025. Each model answer is a structured outline; flesh out every point into 2–3 sentences in the exam. This is a Mains-only subject.

UPSC GS3 2016 12.5 marks · 200 words

Q. "Use of internet and social media by non-state actors for subversive activities is a major concern. How have these been misused in the recent past? Suggest effective guidelines to curb the above threat."

Model Answer Structure

Intro: Non-state actors exploit the open, borderless and anonymous nature of cyberspace and social media.
Modes of misuse: Radicalisation & recruitment (ISIS, AQIS), propaganda, fund-raising, encrypted coordination, fake news inciting communal violence.
Recent instances: 2012 North-East exodus, WhatsApp-rumour lynchings, Khalistan "Referendum 2020" online campaigns, deepfake disinformation.
Challenges: Encryption, attribution difficulty, foreign jurisdiction, free-speech balance, scale.
Guidelines — tech & legal: IT Act Sec 69A, IT Rules 2021 (due diligence, traceability, takedown timelines), CERT-In coordination.
Guidelines — institutional & social: Counter-narratives, digital literacy, platform accountability, public-private cooperation.
Conclusion: Balance security with civil liberties through a calibrated, rights-respecting framework.

UPSC GS3 2020 15 marks · 250 words

Q. "What is the CyberDome project? Explain how it can be useful in controlling internet crimes against women and children."

Model Answer Structure

Intro: CyberDome is a Kerala Police technological research-and-development / public-private partnership centre against cyber crime, including social-media-enabled offences.
Features: Collaboration with ethical hackers, academia and industry; threat intelligence, monitoring and capacity-building.
Use against crimes on women/children: Detecting child sexual abuse material, online stalking/harassment, sextortion and trafficking facilitated via social media.
Investigation support: OSINT, takedown coordination with platforms, victim support and awareness drives.
Link to broader policing: A model for integrating social media intelligence into policing with privacy safeguards.
Conclusion: Such tech-policing models, scaled nationally with the I4C, can curb social-media-driven crimes while protecting rights.

UPSC GS3 2018 15 marks · 250 words

Q. "Data security has assumed significant importance in the digitized world due to rising cyber-crimes. The Justice B. N. Srikrishna Committee Report addresses issues related to data security. What, in your view, are the strengths and weaknesses of the Report relating to protection of personal data in cyber space?"

Model Answer Structure

Intro: Frame data security and personal data as central to social-media-driven internal-security risks (profiling, doxxing, manipulation).
Context: Srikrishna Committee (2018) followed the Puttaswamy privacy judgment; led to the data-protection legislative journey culminating in the DPDP Act, 2023.
Strengths: Consent-based processing, data-fiduciary duties, rights of individuals, data-localisation push, accountability framework.
Weaknesses: Broad state exemptions, surveillance concerns, compliance burden, ambiguity in cross-border data flows.
Security linkage: Strong data protection limits adversary exploitation of personal data for targeting and disinformation.
Conclusion: A balanced regime must protect privacy and security simultaneously — a principle carried into the DPDP Act, 2023.

⚡ Quick Revision

Media: fourth pillar · watchdog · double-edged in security
Benefits: info, mobilisation, e-gov, disaster, transparency
Threats: radicalisation, fake news, deepfakes, propaganda, OPSEC leaks
Regulation issues: free speech vs security, encryption, jurisdiction, scale
Way forward: literacy + accountability + proportionate law

📌 Must-Know — IT Rules 2021

India-based Grievance Officer, CCO & Nodal Officer
Traceability of first originator (contested)
Takedown timelines & due diligence
GACs (2022/23) for appeals
Fact-check unit provision (under review)

⚖️ Key Law & Cases

Sec 69A IT Act: blocking content (upheld 2015)
Sec 66A: struck down — Shreya Singhal (2015)
Anuradha Bhasin (2020): shutdowns must be temporary, proportionate, reviewable
Puttaswamy (2017): right to privacy
DPDP Act 2023: data protection

✍️ Answer Keywords

Double-edged sword / boon & bane
Fourth pillar of democracy
Disinformation-to-violence chain
Free speech vs national security
Proportionality & safe harbour
Resilient information society