· 4 min read
By Correct Editorial — Compliance Research Desk
AI Regulations Worldwide and India’s Approach
Published on: April 30, 2025
India is steadily building a regulatory ecosystem to guide AI's ethical and responsible use. The National Strategy for Artificial Intelligence (2018) laid the foundation for AI-driven societal benefits. Subsequent policies, such as the Principles for Responsible AI (2021) and Operationalizing Principles for Responsible AI (2021), highlight the importance of ethical design, capacity building, and incentivizing responsible AI practices.
Existing legal frameworks like the Digital Personal Data Protection (DPDP) Act, 2023 govern AI's use of personal data, echoing global standards like the GDPR. Sector-specific regulations also play a role. For example, the Securities and Exchange Board of India (SEBI) mandates reporting AI applications in finance, while the healthcare sector emphasizes reliability standards for AI systems under the National Digital Health Mission.
As AI adoption accelerates across industries, India has begun formulating sector-specific regulations to address unique challenges. While India does not yet have a dedicated AI law, various sectoral regulations indirectly govern AI applications, ensuring transparency, accountability, and ethical usage. Below is an elaboration on India's AI-related regulatory landscape across key sectors:
1. Consumer Protection & E-Commerce
AI-driven consumer platforms must comply with India’s Consumer Protection (E-Commerce) Rules, 2020, which mandate transparency in AI-powered decision-making, especially in:
- Personalized recommendations: Platforms using AI for product suggestions must disclose if content is promoted or paid.
- Fair treatment: AI algorithms must not unfairly discriminate against users, ensuring non-biased rankings of sellers and reviews.
- Grievance redressal: Automated customer support or chatbots should provide clear redressal mechanisms for consumers.
Additionally, the Digital Personal Data Protection (DPDP) Act, 2023 imposes obligations on AI-driven platforms to handle user data responsibly, ensuring compliance with data minimization and consent requirements.
2. Advertising & Influencer Marketing
With the rise of AI-generated advertisements and influencer marketing, the Advertising Standards Council of India (ASCI) has set guidelines to regulate:
- Deepfake and synthetic media: AI-generated content must not mislead consumers.
- Transparency in AI-driven influencer marketing: Automated content and endorsements must clearly disclose sponsorships.
- Personalized advertising compliance: AI-powered ad targeting must adhere to fairness principles and avoid deceptive practices.
3. Healthcare & AI in Diagnostics
India’s National Digital Health Mission (NDHM) and the Medical Device Rules, 2017 oversee AI applications in healthcare by ensuring:
- Accuracy and reliability: AI-driven diagnostic tools must undergo clinical validation before deployment.
- Ethical AI use in treatment decisions: Healthcare AI must supplement, not replace, human medical expertise.
- Data protection in health records: AI-powered electronic health records (EHRs) must comply with patient privacy guidelines under the DPDP Act, 2023.
4. Financial Services & Fintech
AI is increasingly used in credit scoring, fraud detection, and algorithmic trading. The Reserve Bank of India (RBI) has set regulatory expectations for AI in financial services, including:
- Fair lending practices: AI-based credit scoring must avoid biases against certain demographics.
- Transparency in automated decisions: Customers must be informed if AI is used in loan approvals.
- Cybersecurity compliance: AI-driven fraud detection must align with RBI’s digital payment security guidelines.
5. Data Localization & AI Governance
Data localization is a critical compliance issue for AI companies operating in India. Under the DPDP Act, 2023, AI firms processing sensitive personal data must comply with:
- Localization mandates for critical data: Certain categories of data may be required to be stored within India.
- Cross-border data flow restrictions: AI models relying on international datasets must align with India’s evolving data transfer policies.
- Impact on global AI firms: Companies like OpenAI and Google must navigate India's data regulations when deploying generative AI models.
6. AI in Governance & Law Enforcement
AI is being integrated into governance and law enforcement, with regulatory oversight in:
- Facial recognition systems (FRS): Used in public surveillance, requiring ethical safeguards under India's IT Rules, 2021.
- AI in judicial processes: The Supreme Court is exploring AI for legal research but emphasizes human oversight in decision-making.
- Regulation of AI-based crime detection: The use of predictive policing AI must align with privacy and civil rights considerations.
India’s robust tech ecosystem and emphasis on inclusive growth position it as a key player in global AI governance. The AI for All strategy highlights AI’s potential to address social challenges in sectors like agriculture, education, and healthcare. Participation in international platforms like GPAI reflects India’s commitment to fostering ethical AI practices. Domestic agencies such as the Ministry of Electronics and Information Technology (MeitY) and the Bureau of Indian Standards (BIS) are driving efforts to develop AI governance frameworks and standards.
- In August 2024, BIS published the IS/ISO/IEC 5339:2024 standard, titled "Information Technology Artificial Intelligence Guidance for AI Applications," providing a framework for the responsible development and deployment of AI technologies.
- In January 2025, MeitY unveiled an AI Playbook developed by the Wadhwani Centre for Government Digital Transformation. This practical guide aims to accelerate the adoption of AI in government projects, enhancing efficiency and service delivery. BIS has been proactive in developing comprehensive standards for AI applications in India.