Large platforms carry IT Rules 2021 duties and are prime candidates for Significant Data Fiduciary status, a distinct DPDP regime.
In short
Social media intermediaries operate under the IT Rules, 2021 and the DPDP Act. Their scale, profiling and electoral-democracy exposure make them likely to be assessed as Significant Data Fiduciaries, though none is designated yet. Note the IT Rules Significant Social Media Intermediary is not the same as a DPDP Significant Data Fiduciary. Penalties reach ₹250 crore.
What changes for this niche, and the specific rule it turns on.
The IT Rules, 2021 govern intermediary duties; the DPDP Act governs personal data. A Significant Social Media Intermediary is not automatically a DPDP Significant Data Fiduciary.
Given scale, profiling and electoral-democracy factors, large platforms are likely to be assessed as SDFs, adding a DPO, audits and algorithmic due diligence, once notified.
Behavioural profiling and targeting need consent; be transparent about how personal data feeds feeds and ads.
Where under-18s are present, Section 9 applies: verifiable parental consent and no targeted ads.
Ad-tech, analytics and moderation vendors are processors under contract.
Short, cite-able answers, mirrored in FAQPage schema.
Prepare for SDF-grade governance and fix profiling consent first.
The readiness check flags SDF-readiness, profiling and children gaps.
Take the readiness check →