No, doxxing in India is not legal under multiple statutes, including the Information Technology Act 2000 (amended 2023), the Indian Penal Code 1860, and the Personal Data Protection Bill 2023 (anticipated enforcement in 2026). Unauthorized disclosure of private data—such as addresses, financial details, or personal communications—may constitute offenses under Sections 66C, 66E, 67, and 67C of the IT Act, as well as Section 354D (stalking) and Section 507 (criminal intimidation) of the IPC. The Data Protection Board of India, established under the 2023 Bill, will enforce stricter penalties for non-compliance, including fines up to ₹250 crore for severe breaches.
Key Regulations for Doxxing in India
- Section 66E (IT Act): Prohibits capturing, publishing, or transmitting private images without consent, punishable with imprisonment up to 3 years and/or fines up to ₹2 lakh.
- Section 67C (IT Act): Mandates intermediaries (e.g., social media platforms) to preserve and disclose user data to authorities within 72 hours of request, failing which they face liability under Section 79(3).
- Section 354D (IPC): Criminalizes stalking via electronic communication, including doxxing, with penalties of up to 5 years imprisonment and fines if the act causes fear of violence or severe distress.
Enforcement agencies, including the Cyber Crime Cells of state police forces and the Central Bureau of Investigation, actively monitor digital platforms for doxxing incidents. Platforms failing to remove doxxed content within 24 hours of a complaint risk intermediary liability under Rule 7 of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021. The 2023 Data Protection Bill further empowers the Data Protection Board to impose administrative penalties on both individuals and entities for unauthorized data exposure.