Medicine · India IT Rules (SGI)

India IT Rules (SGI) for clinical AI workflows

India IT Rules (SGI) in clinical AI workflows: what compliance requires, who asks for evidence, and the records to keep.

Legal forceBinding on intermediaries; non-compliance removes the section 79 safe harbour
Applies from20 Feb 2026
SectorMedicine
Checked21 Oct 2026

01 / The rule

What India IT Rules (SGI) requires

Intermediaries whose services can be used to create or share synthetic content; significant social media intermediaries carry the declaration and verification duties.

  1. 01Services that can create or share synthetic content must label it prominently; for audio, a prominently prefixed disclosure. No label size is set.
  2. 02Embed permanent metadata or other provenance with a unique identifier where technically feasible, and not enable removal of the label or metadata.
  3. 03Significant social media intermediaries must collect each user's declaration on whether content is synthetic, verify it with technical measures, and label confirmed synthetic content.
  4. 04Remove content within 3 hours of a court order or reasoned government intimation.
  5. 05Remove intimate or impersonation content within 2 hours of an individual's complaint; specified categories within 36 hours, other grievances within 7 days.

02 / In this sector

In a clinical AI workflow

Covers AI-made or AI-altered audio, images and video that appear real and could be mistaken for a real person or event. Pure text output is excluded, as are routine good-faith edits that do not materially change meaning.

Usually asked by

Clinical committees and health system AI governance.

Named alongside

HHS §1557 · HIPAA · FDA PCCP.

Sector pagePlanisphere for medicine

03 / Records

Records to keep

  1. 01Label specifications per surface and format, with prominence rationale
  2. 02Provenance metadata standard and embedding test results
  3. 03User declaration records and verification results
  4. 04Takedown notice log with class, receipt time and removal time

Optional evidence · where Planisphere fits

Keep a record anyone can check

When your team meets a duty, Planisphere can seal the event it reports as a receipt.

01 · Your teamRecord the event

A disclosure shown, a review signed, a model change approved: the event your system reports.

02 · PlanisphereSeal it

The event becomes a sealed receipt, dated and attributed to whoever is signed in.

03 · AnyoneCheck it

Paste the receipt into Verify. No account or key.

A record supports your compliance evidence process. It is not a legal finding or a certification. Systems that call Planisphere's gate API can also hold or refuse an action before it runs.

SOURCES

Go back to the source

GUIDANCE
Consolidated IT Rules and ministry questions and answers

Ministry of Electronics and Information Technology

RELATED

Related: India IT Rules (SGI): the full guide · India IT Rules (SGI) for defense · India IT Rules (SGI) for law · India IT Rules (SGI) for education