click below
click below
Normal Size Small Size show me how
Master India IT Rule
Reinforce your understanding of IT Rules 2021 compliance using concise flashcard
| Question | Answer |
|---|---|
| What is the primary threshold of registered Indian users that triggers Significant Social Media Intermediary (SSMI) obligations? | 5 million users. |
| Under the IT Rules 2021, what is the maximum deadline for acknowledging a user complaint? | 24 hours. |
| What is the standard resolution deadline for most user complaints under the Grievance Officer framework? | 15 days. |
| Which compliance layer must be operational before a digital platform allows its very first user to register? | Layer 1: Policy and Documentation. |
| Which compliance layer must be live before a platform enables user-generated content (UGC) capabilities? | Layer 3: Content Moderation. |
| According to Rule 3(1)(b), name one specific category of content that Terms of Service must explicitly prohibit. | Content that is defamatory of another person. |
| Rule 3(1)(b) prohibits content that encourages self-harm or suicide in accordance with which specific Act? | The Mental Healthcare Act. |
| Apart from English, in what other languages must a platform's Terms of Service be published? | At least one language listed in the 8th Schedule of the Constitution (e.g., Hindi). |
| How often must users be notified of changes to the Terms of Service or Privacy Policy under Rule 3(1)(d)? | At least annually. |
| Under the DPDP Act 2023, what is the requirement for processing children's personal data? | Verifiable parental consent is required. |
| How long must records of removed content be retained under the IT Rules 2021? | 180 days. |
| What is the suggested retention period for platform usage logs according to the compliance framework? | 90 days. |
| What specific action is required for a Grievance System to meet the 24-hour acknowledgement SLA reliably? | Full automation of the acknowledgement workflow triggered by case creation. |
| Which types of content complaints carry a mandatory 24-hour removal SLA? | Non-consensual intimate images (NCII) and impersonation with sexual intent. |
| What is the mandatory reporting requirement for Child Sexual Abuse Material (CSAM) discovery? | Report to the CyberTipline (NCMEC) and local law enforcement via cybercrime.gov.in. |
| The Grievance Officer appointed by a digital platform must be a resident of which country? | India. |
| Where must the name and contact details of the Grievance Officer be published on the platform? | On the contact or grievance page, accessible even to non-logged-in or blocked users. |
| Define 'Pre-Upload Hash Matching' in the context of content moderation. | A technology that compares content against databases like PhotoDNA to block known prohibited material before it is hosted. |
| Why is English-only moderation considered insufficient for platforms targeting Indian users? | It misses a large proportion of prohibited content in regional languages like Hindi, Tamil, or Bengali. |
| What is the primary role of the Nodal Contact Person for SSMIs? | To provide 24/7 coordination with law enforcement agencies and officers. |
| Under which section of the IT Act are government blocking orders issued by MeitY? | Section 69A. |
| What is the confidentiality requirement for a Section 69A government blocking order? | The platform is prohibited from disclosing the existence or contents of the order to the public or users. |
| What is the residency requirement for the Chief Compliance Officer (CCO) of an SSMI? | They must be a resident of India. |
| In terms of liability, how does the role of CCO differ from other corporate roles under Rule 4? | The CCO is personally liable for the platform's wilful non-compliance. |
| How frequently must an SSMI publish its compliance report? | Monthly. |
| Within how many days of the month-end must an SSMI publish its monthly compliance report? | 7 days. |
| What are the two mandatory data categories that must be included in an SSMI monthly compliance report? | Complaints received and actions taken. |
| At what user milestone should a platform begin recruiting its India-based Chief Compliance Officer? | 3 million registered Indian users. |
| Name the five age classification tiers for OTT platforms in India. | U, U/A 7+, U/A 13+, U/A 16+, and A (Adult). |
| What technical access control is mandatory for OTT content rated U/A 16+? | A PIN-based parental lock. |
| Which verification mechanism is recommended for accessing 'A' (Adult) rated OTT content? | Age verification such as OTP to a verified mobile number or official ID upload. |
| In the three-tier grievance mechanism for OTT, who handles Tier 2 appeals? | The Self-Regulatory Body (SRB) of publishers. |
| In the three-tier grievance mechanism for OTT, who handles Tier 3 appeals? | The Ministry of Information and Broadcasting (MIB) / Inter-Departmental Committee. |
| What is the requirement for online real-money games under the April 2023 amendments? | They must be registered with an authorized Self-Regulatory Organization (SRO). |
| Under the online gaming framework, what type of wagering is strictly prohibited? | Wagering on outcomes based purely on chance. |
| How long must records of government order compliance be retained in a secure archive? | 5 years. |
| Upon receiving an account deletion request, within how many days must a platform begin erasure? | 30 days. |
| What is the retention period for complaint records to support regulatory audits? | 12 months from the date of resolution. |
| In a compliance calendar, which task is categorized as a 'Daily' requirement? | Monitoring the grievance system for complaints approaching SLA breach. |
| What annual task is required per Rule 3(1)(d) to maintain transparency with users? | User notification of any changes to Terms and the Privacy Policy. |
| True or False: Global platforms headquartered outside India are exempt from the IT Rules 2021. | False; the rules apply if they provide services to users located in India. |
| What is the consequence for an SSMI that fails to implement required Rule 4 obligations the day they cross 5 million users? | They face safe harbour risk and potential regulatory notices from MeitY. |
| What is the 'Reasonable Efforts' standard under Rule 3(1)(c)? | The requirement that platforms have systems proportionate to their scale designed to prevent prohibited content. |
| Which specific law makes the reporting of CSAM mandatory in India? | Section 20 of the POCSO Act. |
| For high-volume platforms, what technology is recommended for complaint categorization? | NLP-based (Natural Language Processing) classification. |
| What must be included in the notification sent to a content creator when their content is removed? | The specific rule cited for removal and an option to appeal the decision. |
| How does 'Perceptual Hashing' assist in content moderation? | It detects near-duplicate images that have been slightly cropped or resized. |
| What is the 'GAC' mentioned in the context of user appeals for SSMIs? | Grievance Appellate Committee. |
| For SSMIs, what proactive measure is required under Rule 4(4)? | Continuous scanning of hosted content against prohibited content classifiers. |
| What is the recommended seniority level for a Chief Compliance Officer in a large tech company? | Equivalent to a Vice President (VP) or Senior Vice President (SVP). |
| What is the purpose of 'Cooling-off periods' in online gaming compliance? | To protect users from excessive or compulsive play patterns. |
| Which OTT age rating requires a mandatory PIN-based parental lock by default for child profiles? | U/A 16+. |
| What determines if an online real-money game is permissible under the IT Rules? | Whether it has a meaningful skill element rather than being based purely on chance. |
| Why must a physical India address be established for SSMIs? | It is a mandatory requirement for service of legal notices and regulatory accountability. |
| Which compliance record must be restricted to only the CCO, Nodal Officer, and legal counsel due to confidentiality? | Section 69A blocking orders and their compliance records. |
| When should a platform ideally appoint its Resident Grievance Officer? | At the 4 million user milestone, as part of the transition to SSMI status. |
| Name one automated tool used for malicious URL detection on digital platforms. | Google Safe Browsing API. |
| What is the 'Safe Harbour' risk in the context of the IT Rules 2021? | The loss of legal immunity for user-generated content if a platform fails to meet due diligence or timeline obligations. |