AI REGULATION IN INDIA: EMERGING LEGAL FRAMEWORKS

Author- Ms. Sonali Panwar

Abstract

This blog post explores India's fresh directives and regulations concerning artificial intelligence. It examines the existing legal framework, the key hurdles the country encounters, and the most promising areas for progress. While the country has made strides in data privacy laws such as the Digital Personal Data Protection (DPDP) Act, 2023, and industry-specific guidelines, a comprehensive AI regulatory framework remains absent. This piece examines how India might tailor its regulations, seeking a middle ground between fostering innovation and ensuring ethical oversight. It does so by contrasting India's approach with global models, such as the European Union's risk-based AI Act and the United States' innovation-centric stance. Key issues like accountability, bias, privacy, and institutional capacity are examined, with a strong emphasis on the necessity of collaborative efforts. The blog also considers the real-world implications of AI legislation, drawing on examples from healthcare, fintech, education, smart cities, and agriculture. Lastly, it suggests ways to create an AI governance environment that is open, flexible, and welcoming to all, encourages innovation, and protects people’s rights and public trusts. This would make India a responsible worldwide leader in AI.

Keywords

IndiaAI Mission, Risk-based approach, Ethical Oversight, Innovation, Digital Personal Data Protection 2023

Introduction

Artificial Intelligence is no longer a thing of the future; it's already changing healthcare, finance, education, and even how governments provide services. The European Union has put in place a detailed AI Act, and the United States relies on guidelines that encourage innovation. India, on the other hand, is still figuring things out on its own. This blog looks at how India is building its AI regulatory framework, the problems it faces, and why finding the right balance between innovation and ethics is so important for the country's future.

Current Legal Landscape 

The Digital Personal Data Protection Act of 2023 represents a significant turning point for AI systems processing personal data. This law sets forth the guidelines for how data is gathered, handled, and shared. The core tenets of these regulations are user consent, the practice of collecting only what's necessary, and robust security protocols. Because artificial intelligence models often rely on large datasets, following this law is crucial for protecting individual privacy and preventing the misuse of sensitive information.

The Information Technology Act, enacted in 2000, addresses electronic transactions, cybersecurity, and data breaches. This legislation provides a framework for tackling certain AI-related concerns, particularly those involving cybersecurity and the detection of digital fraud, through its provisions on hacking, unauthorized access, and data protection.

Various sectors are beginning to formulate guidelines for artificial intelligence, though most of these initiatives are still in their infancy. Consider healthcare; they're working on regulations for AI-powered diagnostic tools, trying to protect patients and make sure the results are trustworthy. Over in the financial technology sector, the focus is on algorithmic lending and spotting fraud.

Education, too, is exploring the implications of AI, specifically in terms of fairness in testing and admissions processes.

Under the Copyright Act, 1957, protection is traditionally reserved for works of human origin;  Section 2(d) explicitly defines an "author" as a natural person, leaving the legal status of autonomous AI outputs in a state of flux. This was exemplified by the landmark RAGHAV AI case, where the Indian Copyright Office initially granted co-authorship to an AI tool before issuing a withdrawal notice, signaling a strict human-centric stance that mirrors global trends like the USCO’s refusal of the work SURYAST.  Moreover, the legality of using Indian Literary and artistic works to train Large Language Models (LLMs) is still a debated fair dealing issue. While Section 52(1)(a) provides exceptions for research and private use, it does not explicitly account for the massive, commercial-scale text and data mining (TDM) required by AI. The ongoing ANI v. OpenAI (2024) case in the Delhi High Court, the first of its kind in India, will likely decide if this type of training is transformative use or a violation of reproduction rights. To resolve this, policy discussions in 2025 and 2026, including a DPIIT working paper, have proposed a "Hybrid Model" blanket license to compensate human creators while allowing AI innovation to continue.

Challenges in Drafting AI Laws in India

The EU’s Artificial Intelligence Act (Regulation (EU) 2024/1689) is the world’s first comprehensive legal framework for AI. It employs a detailed, risk-based strategy to classify AI systems by levels of risk, imposing stricter obligations on high-risk applications. Artificial intelligence systems are categorized based on risk, with four main levels: unacceptable, high, limited, and low. High-risk entities face a set of distinct obligations. These encompass risk assessments, operational transparency, human oversight, and thorough record-keeping. The ultimate goal is to safeguard essential rights while simultaneously encouraging the advancement of trustworthy AI. The EU's regulatory framework stands out for its comprehensive guidelines on both compliance and enforcement.

The United States' approach is characterized by decentralization and sector-specificity, emphasizing innovation and voluntary guidelines over comprehensive regulatory structures. Federal agencies formulate regulations that are industry-specific, encompassing sectors such as healthcare, finance, and transportation.

China's AI regulatory framework prioritizes government control, data security, and social stability. The government has implemented stringent regulations covering data handling, algorithmic transparency, and content moderation practices. Unlike Western models focused on voluntary compliance, the Chinese approach utilizes legislative "bricks"—such as the Algorithm Recommendation Provisions—to ensure AI outputs remain consistent with state-defined social harmony and data sovereignty.

Current policy discourse in India, as highlighted by NITI Ayog and Meity, underscores the absence of a formal risk-based statutory framework similar to the European Union's AI Act, suggesting a transition from adopting the global best practices to the Indian context. A risk-based approach, tailored to India's unique social and economic context, could help create a balance between innovation, ethical considerations, and the well-being of the public. Furthermore, India's regulatory strategy could integrate the EU's emphasis on protecting rights with the United States' adaptable approach to innovation. This would also involve adhering to international standards to facilitate international trade and collaboration.

Roles and Responsibilities of Stakeholders in AI Regulation

The government should take the lead in creating clear and adaptable rules and laws for artificial intelligence. These rules should protect ethical principles while also encouraging innovation. Regulatory agencies need to improve their understanding of technology to effectively monitor companies, enforce standards, and keep up with technological changes. In addition, the government should make it easier for the public to share their opinions, ensuring that all viewpoints are considered.

AI developers and the companies that employ them bear the responsibility for creating AI systems that are open, fair, and safe. Meeting regulatory standards, having rigid testing processes, and having reliable accountability and explainability methods are the cornerstones of AI compliance. Conversely, institutions of higher education are very important in advancing AI research ethics and policy analysis. They are well-positioned to supply evidence-based opinions, create ethical codes of conduct, and train tomorrow's AI professionals. Education in digital literacy will help users learn about the abilities and limitations of AI systems; thus helping them to make informed choices regarding AI; and will help users to report any AI system misuse or damage. End-users must be informed about AI systems’ capabilities and limitations. Promoting digital literacy empowers users to make informed decisions and report misuse or harm. Consumer feedback can also help make AI governance better.

If India defines and defines these liabilities clearly, then by getting behind those liabilities and developing a culture around those liabilities, India can build an infrastructure that develops responsible innovation in AI while protecting values in society and the rights and freedoms of individuals.

Ethical and Social Consequences of AI in India

AI systems developed and trained with biased data that does not represent the full diversity of society and can exacerbate existing levels of inequality in society unintentionally. In India’s complex and diverse landscape, such biases can manifest as systemic unfairness in employment, credit scoring, and law enforcement, disproportionately impacting marginalized communities. Many AI systems operate as “black boxes,” making it difficult to understand how decisions are made. AI-driven bureaucratic systems offer efficiency and scalability, but profound concerns remain related to algorithmic transparency, perceived fairness, accountability, and institutional legitimacy. These concerns directly affect public trust.

Disparities in access to artificial intelligence and digital infrastructure could exacerbate existing socio-economic inequalities. To ensure that the benefits of AI are distributed fairly, regulatory frameworks must specifically address inequalities in education, connectivity, and digital literacy. Furthermore, to responsibly harness AI's transformative potential, India must proactively address these ethical and societal challenges. Consequently, this strategy will harmonize technological advancement with the tenets of human rights, social equity, and sustainable development.

Recent Developments and Initiatives in AI Regulation in India

India has made a number of major moves to shape its AI regulatory landscape. The National Strategy for Artificial Intelligence: #AIforAll (NITI Aayog, 2018) reflects a growing recognition of the need to balance innovation with ethical rules and public safety. The government’s premier policy think tank, NITI Aayog, released a comprehensive discussion paper outlining India’s AI vision. The plan is to accelerate AI's use in areas such as healthcare, agriculture, and education. Simultaneously, the paper recognizes the need for ethical AI research, calling for the creation of guidelines to tackle issues like bias, privacy, and responsibility.

In February 2026, the Ministry of Electronics and Information Technology (MeitY) notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026. These rules specifically target Synthetically Generated Information (SGI) defined as media created or altered by algorithms that appear realistically authentic.

Beyond regulation, India has pivoted toward a Sovereign AI strategy designed to ensure strategic autonomy and reduce reliance on foreign technology stacks. Central to this is the IndiaAI Mission, a cabinet-approved initiative with an outlay of over ₹10,300 crore. A primary pillar of this mission is the establishment of a national GPU-based compute infrastructure, aiming to provide 10,000 or more GPUs to Indian startups, academia, and public agencies. This AI-as-a-service model is intended to democratize access to high-performance computing, which is currently a bottleneck for domestic innovation. By building its own sovereign compute capacity, India seeks to ensure that the foundational models powering its economy are trained on local data and aligned with national interests, rather than being entirely dependent on proprietary models from global big-tech firms.

India’s regulatory and development approach to Artificial Intelligence is uniquely different due to India’s existing Digital Public Infrastructure (DPI) or the “India Stack.” India continues to embed AI layers into existing systems that provide services to populations at scale like UPI - for conversational payments - and Bhashini - for real time language translation, by adopting components of the Open AI stack. As such, these tools are assisting the Indian Government in providing access to its services in an equitable manner that is reflective of its diverse population. For instance, AI is being used to enhance identity verification processes and streamline social welfare delivery through data-driven insights. Unlike the Western model of private-led AI or the Chinese model of state-controlled AI, India’s DPI-led approach focuses on creating open-source, interoperable protocols that allow both public and private entities to innovate on top of a common digital layer, ensuring that AI benefits reach the last mile of the citizenry.

Regulatory bodies in sectors such as healthcare and finance are currently scrutinizing the use of artificial intelligence. The Insurance Regulatory and Development Authority of India (IRDAI), for instance, has issued guidelines concerning the deployment of AI in claims processing and insurance underwriting. These guidelines emphasize fairness and transparency. By blending high-level vision with direct input from affected communities, India is positioning itself as a leader in adaptive AI regulation. According to the Ministry of Electronics and Information Technology (2025), this strategy will result in a governance structure that is both resilient and specifically aligned with India’s unique social fabric. This ensures that the impending digital transformation upholds national values while fostering innovation.

Future Outlook and Recommendations for AI Regulation in India

With the impending digital transformation of India via AI technology, it is imperative that the country develops a thoughtful and practical regulatory framework that will maximize the benefits of AI for everyone and at the same time protect the rights of individuals and uphold societal values.

India should adopt a risk-based approach for AI regulations; one that employs a tiered classification system based upon the potential harm that AI systems present to individuals and society as a whole.  This will provide a consistent and equitable regulatory framework therefore ensuring that more harmful/high-risk applications have a greater level of oversight, while allowing lesser harmful/low-risk applications greater ability to innovate.

Effective AI governance necessitates that regulatory bodies possess personnel with specialized expertise. This means equipping regulators with thorough training in AI technologies, ethical implications, and relevant legal structures. It also involves building cooperative relationships with experts from academia and industry. Mandating transparency necessitates the disclosure of AI algorithms, the sources of data, and the justifications for decision-making procedures. Moreover, the implementation of explicit accountability mechanisms is essential to ensure that individuals involved in the development and application of AI systems are held accountable for their conduct.

India's regulatory structure ought to integrate ethical tenets, including equity, transparency, and data protection. Regular assessments and preemptive strategies designed to mitigate bias are essential for curbing discriminatory practices and safeguarding individual liberties. The successful enactment of artificial intelligence legislation necessitates the collaborative involvement of governmental bodies, industry stakeholders, academic institutions, civil society organizations, and the end-users of AI technologies. Consequently, policies formulated with inclusivity as a guiding principle will ensure the consideration of diverse perspectives. This, in turn, will enhance the process's legitimacy and foster the development of public trust.

Aligning India’s AI regulations with international standards is essential for fostering cross-border collaboration, boosting global trade, and encouraging localized innovation. By actively participating in forums like the Global Partnership on AI (GPAI) and the OECD, India contributes to the development of optimal methods for defining and measuring AI systems on a global scale. This “techno-legal” alignment ensures that Indian AI products are interoperable with international markets, reducing trade barriers and positioning India as a trusted provider of AI-native services.

To encourage innovation while still following safety rules, regulatory systems should include secure environments for testing, like regulatory sandboxes. Investment in artificial intelligence research and education will cultivate a skilled workforce, preparing it for future challenges. Initiatives such as the AICTE’s declaration of 2025 as the ‘Year of AI’ and the establishment of Centers of Excellence under NEP 2020 highlight India’s commitment to education and awareness. If India creates an AI regulatory framework that balances ethical considerations with innovation, it could position the country as a world leader in inclusive and reliable AI.

AI Use in India and Its Effects on the Law

Beyond intellectual property, AI-enabled surveillance systems deployed in smart city initiatives aim to enhance public safety and traffic management. However, these systems raise significant concerns about privacy and human rights, particularly regarding facial recognition technology.

The Indian government’s deployment of facial recognition in urban policing and railway stations is being scrutinized under the lens of the Puttaswamy judgment, which established privacy as a core right under Article 21 of the Constitution. These technological advancements often outpace existing legal safeguards, leading to concerns that mass data collection and opaque decision-making systems could undermine civil liberties and freedom of expression. Consequently, there is an urgent call for an adaptable legal system that can reconcile rapid innovation with democratic principles and individual freedoms.

The Indian judiciary itself is adopting AI to address chronic issues of efficiency and case backlogs. Automated tools are being implemented to digitize voluminous case files, provide quick summaries, and streamline workflow management. Technologies like chatbots for legal research and AI-driven document preparation are helping lawyers and judges retrieve statutes and relevant information more promptly. Furthermore, the Interoperable Criminal Justice System (ICJS) is being enhanced with AI to facilitate seamless data sharing between the police and the judiciary, aiming to reduce adjournments and improve the overall speed of the legal process.

Despite these advancements, the absence of a dedicated, comprehensive AI law in India leaves many sectors operating under  a patchwork of existing regulations, such as the Information Technology Act and the Digital Personal Data Protection Act. This lack of specific oversight is particularly concerning in sensitive areas like healthcare and finance, where algorithmic bais; often steaming from datasets that do not reflect India’s vast diversity, can lead to discriminatory outcomes. Moving forward, legal experts emphasize the need for “responsible AI” frameworks that mandate algorithmic transparency and accountability audits to ensure that technology serves as a tool for equity rather than a source of unintentional social harm.

Conclusion

India's growth in AI technology is developing quickly around the world and at home with many new technology integrations occurring across multiple sectors/industries all over India, but the existing legal structures do not give clear enough guidance to continue developing legally compliant, responsible, ethical, and reasonably homogenous risk management frameworks associated with AI technologies.

India can learn from how other countries are regulating new technologies, but because of the social and economic differences between India and most other countries around the world, it is imperative that any new regulatory framework find a way to encourage innovation while still protecting the privacy of individuals, promoting fairness in business practices, and building public confidence about the safety of AI systems.

India's path forward with artificial intelligence hinges on a regulatory framework. This framework must be built on a foundation of risk assessment, transparency, and accountability. This framework must simultaneously foster innovation and safeguard individual rights. This strategic approach will involve strengthening institutional knowledge, promoting ethical AI practices, following international standards, and building public understanding.

India's potential to lead in responsible AI development hinges on the strategic implementation of these approaches. This trajectory promises substantial advantages for both its economic landscape and societal well-being, concurrently safeguarding fundamental rights and upholding democratic principles.

Note - The information contained in this blog is for general information purposes only. We endeavour to keep all the information up to date and try our level best to avoid any misinformation or any kind of objectionable content. If you found any misinformation or objectionable contents in this website please report us at editors.ilw@gmail.com