Regulating the Algorithm: India's Approach to AI Governance Amidst Global Debates

The Main Story

As Artificial Intelligence integrates into the economy and society, governments worldwide are grappling with how to regulate a technology that is powerful, opaque, and evolving at an unprecedented pace. India, with its billion-plus population and ambition to be a leading digital nation, finds itself at a critical juncture, navigating a complex path between fostering innovation and mitigating significant risks.

### What is the core challenge in regulating AI?

The central challenge stems from a deep structural imbalance in the global AI ecosystem. The development and control of advanced AI models are concentrated in a handful of highly capitalised firms, primarily in the Global North, as noted in the UN’s Preliminary Report of the Independent International Scientific Panel on AI (July 2026). This creates a stark divide where countries like India face a choice between making massive capital investments to compete or becoming rule-takers dependent on foreign technology. The resources required—abundant electricity, scarce talent, and immense capital—are significant barriers to entry, according to the same report.

This dynamic was illustrated when the U.S. government restricted access to advanced models like Anthropic’s Mythos and Fable, forcing Indian firms to confront the geopolitical risks of relying on foreign-developed AI (Source: The Hindu, July 2026). The pace of AI development far outstrips that of previous technological shifts, leaving little time for regulators to adapt. The harms are already tangible, ranging from the proliferation of deepfakes that undermine public trust to AI-driven systems creating parasocial relationships with potentially fatal consequences.

### What is India's official stance on AI regulation?

India's official position has undergone a significant evolution. Initially, the government adopted an innovation-centric approach, with NITI Aayog's 2018 'National Strategy for Artificial Intelligence' framing AI as an engine for economic growth under the motto '#AIforAll'. As late as early 2023, MeitY's public stance was that existing laws were sufficient. However, this position shifted decisively later that year. Citing the rapid emergence of generative AI and the potential for user harm, MeitY Minister Ashwini Vaishnaw stated in October 2023 that a new legal framework was necessary.

The government's current thinking, reflected in ministerial statements and consultations for a new Digital India Act, is coalescing around a 'risk-based framework'. This approach, also recommended by TRAI in its July 2023 report, avoids a one-size-fits-all regulation. It proposes to classify AI applications based on the level of risk they pose, imposing stricter obligations on 'high-risk' systems while allowing 'low-risk' applications to innovate with minimal friction. The stated objective is to create a framework that ensures safety, trust, and accountability without stifling the startup ecosystem.

### What are the key elements of the proposed framework?

While a final bill is yet to be tabled, discussions around the forthcoming Digital India Act, intended to replace the Information Technology Act, 2000, indicate a regulatory architecture resting on several pillars. A central component is a risk-based classification, where uses in critical sectors like healthcare and autonomous vehicles would be designated 'high-risk' and subject to pre-deployment testing and human oversight. Another key element is accountability, which shifts the onus of responsibility onto developers and platforms, potentially through mandatory impact assessments and clear grievance redressal mechanisms. The framework is also expected to target AI-generated misinformation with rules for mandatory labelling of synthetic content, building on a MeitY advisory from March 2024. Finally, echoing a key recommendation from the TRAI report, the framework will likely establish a dedicated regulatory body to oversee enforcement.

### What are the primary concerns and critiques?

Despite the government's stated intent to strike a balance, civil society organisations have raised concerns. The Internet Freedom Foundation (IFF) has cautioned that a poorly designed framework could grant excessive power to the government, potentially leading to censorship under the guise of preventing harm. There is also a concern that compliance costs associated with a stringent risk-based framework could disproportionately burden smaller Indian startups, thereby cementing the dominance of large corporations. For instance, requirements for extensive data audits and algorithmic explainability demand significant resources. Critics like the Centre for Internet and Society (CIS) have pointed out the difficulty in legally defining 'risk' and 'harm', arguing that vague definitions could lead to arbitrary enforcement. The UN report highlights a further challenge: robust domestic regulations may not be enough to hold global AI firms accountable when their core development lies outside Indian jurisdiction.

### How does India's approach compare globally?

India's pursuit of a risk-based framework positions it between the two dominant global models. The European Union's AI Act, passed in 2024, adopts a comprehensive, rights-based legalistic approach. The EU Act creates a pyramid of risk, banning certain AI uses like social scoring and imposing strict obligations on high-risk systems. In contrast, the United States has largely pursued a sector-specific, pro-innovation approach, relying on existing regulators and voluntary industry standards, as outlined in President Biden's 2023 Executive Order on AI. The United Kingdom has also opted for a non-statutory, context-based approach, empowering existing regulators to develop rules for AI in their respective domains. India's proposed 'third way' attempts to borrow from the EU's risk-based logic but implement it through a more agile framework that provides more concrete guardrails than the US model without the EU's perceived rigidity.