India's AI Regulatory Landscape in 2025
Artificial intelligence is transforming Indian businesses at a pace the regulatory system is struggling to keep up with. But the absence of a standalone "AI law" does not mean AI businesses operate in a legal vacuum. Multiple existing laws apply to AI systems — and the regulatory framework is evolving rapidly.
If you are building, deploying, or selling AI products or services in India, here is what you need to understand in 2025.
The Current Legal Framework for AI in India
No Standalone AI Act — Yet
Unlike the European Union's AI Act (which took effect in 2024), India has not yet enacted AI-specific legislation. The Ministry of Electronics and Information Technology (MeitY) has issued advisories and the NITI Aayog has published AI ethics principles, but these are not legally binding.
However, the government has signalled that sector-specific AI regulations are coming, and several regulatory bodies have already begun issuing AI-related guidance.
The DPDP Act and AI Systems
India's Digital Personal Data Protection Act 2023 is directly relevant to AI businesses. Any AI system that processes personal data of Indian individuals — which includes most AI applications involving user data, recommendations, predictions, or content generation — must comply with the DPDP Act's consent, security, and data management requirements.
AI businesses using personal data to train models face particular scrutiny over lawful basis and data minimisation requirements.
IT Act and Intermediary Liability
The Information Technology Act, 2000 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 apply to AI platforms that host or transmit user-generated content. Generative AI platforms that allow user interaction are likely to qualify as intermediaries, with corresponding obligations around content moderation and grievance handling.
Sector-Specific Regulations
Several Indian regulators have already begun addressing AI:
- RBI: Guidelines on algorithmic lending, AI in credit decisioning, and model risk management for regulated financial entities
- SEBI: Guidance on AI use in investment advisory, algorithmic trading, and investor protection
- IRDAI: Emerging guidance on AI in insurance underwriting and claims processing
- MeitY: Advisories on responsible AI deployment and deepfake regulation
Key Legal Risks for AI Businesses in India
AI Liability
When an AI system causes harm — a wrong medical diagnosis, a discriminatory credit decision, an autonomous vehicle accident — who is legally liable? Indian law does not yet have clear answers, but existing tort law, consumer protection law, and product liability frameworks will be applied by courts. AI companies should proactively address liability through terms of service, insurance, and system design.
Algorithmic Discrimination
AI systems trained on biased data can produce discriminatory outcomes. In regulated sectors like banking and insurance, discrimination on grounds of gender, religion, or caste is prohibited. AI businesses must ensure their models are tested for bias and that decision-making processes can be explained.
Intellectual Property and AI-Generated Content
The Copyright Act, 1957 does not currently recognise AI as an author. AI-generated content may not be protected by copyright. Businesses building products on top of generative AI must carefully consider IP ownership, licensing of training data, and the risk of generating infringing content.
Deepfakes and Synthetic Media
MeitY has specifically called out deepfakes as a priority concern. Using AI to generate synthetic media of real individuals without consent can attract liability under IT Act provisions, and criminal liability under IPC provisions relating to defamation, fraud, and identity theft.
What Should AI Businesses Do Now?
- Map all AI systems to applicable regulatory frameworks (DPDP Act, IT Rules, sector regulators)
- Build AI governance frameworks with documented risk assessments
- Implement model documentation and audit trails
- Review training data sourcing for IP and consent compliance
- Prepare for upcoming AI-specific regulation
Clawrity's AI law advisory team works with AI startups, technology companies, and enterprises to navigate India's evolving AI regulatory environment. Contact us to discuss your AI governance and compliance needs.
