TechSecure Innovations Pvt. Ltd., headquartered in Bangalore, is a fast-growring IT and cybersecurity solutions provider specializing in Al-driven security systems, digital compliance, and OTT platform support services.

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · PYQS · December 2025
TechSecure Innovations Pvt. Ltd., headquartered in Bangalore, is a fast-growring IT and cybersecurity solutions provider specializing in Al-driven security systems, digital compliance, and OTT platform support services. Its client base spans across banks, healthcare providers, e-commerce platform, and digital streaming services, making the company an integral part of India's ongoing digital transformation journey. However, the company operates in an environment where new cybersecurity challenges, evolving digital laws, and stricter regulatory frameworks are forcing it to rethink strategies and realign operations. TechSecure now faces multiple situations that test its technical capacity, legal awareness, and strategic decision-making. TechSecure recently launched an Al-based Intrusion Detection System (IDS) that processes and analyzes millions of data points every second to detect anomalies and potential threats. The positive impact is that the system has drastically reduced the number of cyberattacks targeting client networks but challenge is that it sometimes produces false positives, creating unnecessary panic and diverting resources. Some clients also fear that over-reliance on AI could compromise decision-making if human oversight is minimized and this raises the issue of how TechSecure can strike a balance between automation and human expertise in cybersecurity. India's National Cybersecurity Policy 2013 emphasizes the promotion of indigeneous research and development in cybersecurity. Currently, TechSecure imports several tools from foreign vendors. The CEO is considering investing in an in-house R&D lab in Bangalore to build homegrown Al-based security products, but this requires substantial resources and skilled manpower. The decision could either make TechSecure a leader in indigenous innovation or become a financial burden if not executed well. Recently, a ransomware attack bypassed TechSecure's automated defenses and was detected only through manual log analysis after damage had been done. This exposed the need for a proactive threat hunting team that can identify suspicious activity before it escalates. Management is debating whether to train its current workforce in advanced threat hunting techniques or hire specialized cybersecurity hunters to proactively seek anomalies and neutralize threats before they escalate. The decision will affect both the cost structure and the effectiveness of future cybersecurity strategies. One of TechSecure's OTT clients faced regulatory warnings from the Ministry of Information & Broadcasting (MIB) under the Digital Media Ethics Code 2021 for hosting "sensitive content." The OTT platform asked TechSecure to build an Al-driven compliance monitoring system. This raises a dilemma: should TechSecure stick to being a technology enabler or also act as a compliance partner by advising clients on ethical content management. This situation raises concerns about role boundaries, business diversification, and ethical responsibilities in the digital ecosystem. The Digital India Act 2023, which seeks to replace the outdated IT Act 2000, will impose new rules and obligations on digital companies. This act is expected to bring stricter cybersecurity accountability, Al governance rules, and higher penalties for data misuse. TechSecure anticipates increased compliance costs, legal liabilities, and operational challenges in adapting existing frameworks to align with new legal requirements. TechSecure must now prepare for a future where compliance is not optional but a core business strategy. In the above case scenario, answer the following questions: TechSecure faced concerns about role boundaries, business diversification, and ethical responsibilities in the digital ecosystem. In this context, what guidelines should TechSecure follow relating to social media administered by the Ministry of Electronics and IT of the Intermediary Guidelines and Digital Media Ethics Code, for regulating social media platforms.

Answer & Explanation:

Social media is administered by the Ministry of Electronics and IT through Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. The important aspects of these guidelines are discussed below: Due Diligence to be Followed by Intermediaries: Information Technology Act & Rules made thereunder prescribe due diligence that must be followed by intermediaries, including social media intermediaries. In case, due diligence is not followed by the intermediary, safe harbour provisions will not apply to them. Grievance Redressal Mechanism: The Rules seek to empower the users by mandating the intermediaries, including social media intermediaries, to establish a grievance redressal mechanism for receiving resolving complaints from the users or victims. Intermediaries shall appoint a Grievance Officer to deal with such complaints and share the name and contact details of such officer. Grievance Officer shall acknowledge the complaint within twenty-four hours and resolve it within fifteen days from its receipt. Ensuring Online Safety and Dignity of Users, especially women users: Intermediaries shall remove or disable access withing 24 hours of receipt of complaints of contents that exposes the private areas of individuals, show such individuals in full or partial nudity or in sexual act or is in the nature of impersonation including morphed images etc. Such a complaint can be filed either by the individual or by any other person on his/her behalf. Two Categories of Social Media Intermediaries: To encourage innovations and enable growth of new social media intermediaries without subjecting smaller platforms to significant compliance requirement, the Rules make a distinction between social media intermediaries and significant social media intermediaries. This distinction is based on the number of users on the social media platform. Government is empowered to notify the threshold of user base that will distinguish between social media intermediaries and significant social media intermediaries. The Rules require the significant social media intermediaries to follow certain additional due diligence.

Topics: Digital Media Ethics Code 2021

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic