Subject: Internal Security

The rise of social media platforms and encrypted messaging services has created unprecedented security challenges, with over 43,797 complaints filed against WhatsApp alone in early 2024, highlighting the urgent need for comprehensive digital security measures.

Secure Digital Ecosystem Pillar

Measures adopted at various levels

1. Telecommunications Act, 2024 Rules: Mandates that intercepted messages during public emergencies be provided to authorities in an "intelligible format," legally pressuring encrypted platforms to cooperate.
2. IT Rules 2021: Rule 4(2) demands traceability of the "first originator" of information to track terrorists, a measure currently contested in the WhatsApp vs Union of India case regarding End-to-End Encryption (E2EE).
3. MeitY Advisories (2024): Requires social media intermediaries to embed AI-generated synthetic media with permanent metadata to trace the origins of weaponised deepfakes.
4. Fact Check Units (FCU): The Centre proposed a PIB unit to flag misleading content, currently under Supreme Court review to balance national security with Article 19(1)(a) speech rights.
5. I4C Coordination: The Indian Cyber Crime Coordination Centre manages a national portal that recently processed over 2.48 lakh complaints specifically protecting vulnerable demographics.
6. CERT-In Advisories (2024): Issues active threat guidelines identifying infrastructure vulnerabilities related to weaponised AI applications.
7. State AI Monitoring: Police departments in Maharashtra and Bengaluru utilize AI tools for real-time flagging of radicalisation and communal threats.
8. Platform Self-Regulation: Applications like WhatsApp enforce message forwarding restrictions to break the viral chain of mob-lynching rumors and misinformation.
9. Bletchley Declaration (2023): India signed this global consensus to mitigate catastrophic national security risks posed by frontier AI systems.
10. Global Digital Compact (2024): Commits major platforms to share algorithmic data with independent researchers to combat cross-border hate speech.

Suggested remedies to address the problem

1. Metadata Tracing without Decryption: Adopt homomorphic hashing to track malicious originators without reading plaintext, successfully bypassing the encryption deadlock.
2. Statutory Algorithmic Audits: Emulate the EU’s Digital Services Act by mandating independent audits of platform content-recommendation engines to curb extremist amplification.
3. Strict Age Verification: Implement the 2026 Parliamentary Committee on Empowerment of Women recommendations for periodic platform re-verification to combat deepfake pornography.
4. Federated Threat-Intelligence: Create dedicated APIs where platforms push hash-sets of terrorist imagery directly to law enforcement, preventing cross-platform migration.
5. Global Extradition Treaties: Champion a UN Cybercrime Convention to ease cross-border interception and dismantle offshore "scam factories" operating via encrypted networks.
6. Phased KYC for High-Reach Accounts: Mandate digital identity verification for prominent political and influencer accounts to prevent state-sponsored botnets and electoral interference.

Balancing national security with the Right to Privacy (Article 21) requires shifting from blanket decryption to algorithmic accountability. Utilizing metadata intelligence ensures a secure digital ecosystem that remains a tool for democratic empowerment rather than subversion.