AI regulation in India 2026 works without a single AI law. There is no AI Act; instead, MeitY’s India AI Governance Guidelines (5 November 2025) direct that existing laws apply to AI: the DPDP Act, 2023 and Rules, 2025 for personal data, the IT Act and the IT Rules as amended from 20 February 2026 for deepfakes and synthetic content, the Copyright Act, the Consumer Protection Act, and sector rules from RBI and SEBI. A business using AI in India is therefore already regulated, law by law.
| Point | Position |
|---|---|
| Is there an AI Act in India? | No, as on 31 October 2026; MeitY’s Guidelines chose not to propose one for now |
| Personal data in AI | DPDP Act, 2023; DPDP Rules, 2025 notified 13 November 2025; main duties from 13 May 2027 |
| Deepfakes and synthetic content | IT Rules amended, in force 20 February 2026: labelling, provenance, 3-hour and 2-hour takedowns |
| Copyright and training | Copyright Act, 1957; ANI v OpenAI interim injunction refused 24 July 2026; appeal pending |
| AI ads and chatbots | Consumer Protection Act, 2019; Dark Patterns Guidelines, 2023 |
| Finance | RBI FREE-AI report (13 August 2025); SEBI rule of 6 February 2025 making intermediaries responsible for AI outputs |
| Courts | Supreme Court draft Regulations for Use of AI in Courts, 2026 (3 June 2026), still a draft |
Is there an AI law in India?
No single statute regulates AI in India. The India AI Governance Guidelines released by MeitY on 5 November 2025 considered the question and concluded that a separate, comprehensive AI law is not needed at this stage. Existing laws should be applied to AI, with targeted amendments where gaps appear. The Guidelines themselves are a policy framework with no penalties of their own.
For AI regulation in India 2026, that choice cuts both ways. No AI licence is needed to build or deploy a tool. But every existing law applies to your AI use from day one, and nobody can argue that “the software did it”.
AI regulation in India 2026: the laws that apply
| Law | How it reaches AI |
|---|---|
| DPDP Act, 2023 and Rules, 2025 | Consent and notice, purpose limits, accuracy of data used for decisions (s.8(3)), security safeguards (s.8(5)), breach reporting, children’s data (s.9); penalties up to ₹250 crore |
| IT Act, 2000 and IT Rules, 2021 | Safe harbour for platforms (s.79); synthetic content labelling; s.66D (cheating by personation), ss.67 and 67A (obscene and sexual content) |
| Copyright Act, 1957 | Reproduction includes electronic storage (s.14); fair dealing (s.52(1)(a)); author of computer-generated work (s.2(d)(vi)) |
| Consumer Protection Act, 2019 | Misleading AI claims and synthetic endorsements (s.21 penalties up to ₹10 lakh, ₹50 lakh for repeats); 13 dark patterns |
| Code on Wages, 2019, s.3 | No gender discrimination in recruitment or wages, including through AI screening |
| IT Act, s.43A and CERT-In Directions (28 April 2022) | Compensation for negligent security of sensitive data (until 13 May 2027); incidents reported within 6 hours |
Learn this properly, with a certificate. This course maps every Indian law that touches AI, from the DPDP Act and the 2026 IT Rules to copyright, consumer law, RBI and SEBI rules and vendor contracts, and ends with a ready governance toolkit. AI Law and Governance in India, ₹599: self-paced lessons, module quizzes and a 30-question final test; pass at 60% for a verifiable Lexfolio certificate.
What changed in 2025 and 2026
- 6 February 2025: SEBI made registered intermediaries and market infrastructure institutions solely responsible for data, outputs and legal compliance of AI tools they use, including third-party tools.
- 13 August 2025: RBI’s FREE-AI committee report: seven sutras, six pillars, 26 recommendations, including a board-approved AI policy and human override. A report, not itself a binding direction.
- 5 November 2025: MeitY’s India AI Governance Guidelines.
- 13 November 2025: DPDP Rules, 2025 notified, with phased commencement.
- 8 December 2025: DPIIT committee working paper proposing a mandatory licence with royalties for AI training. A proposal only.
- 20 February 2026: IT Rules amendment on synthetically generated information in force.
- 3 June 2026: Supreme Court publishes draft Regulations for Use of AI in Courts, 2026.
- 2 July 2026: Supreme Court, Pooja Ramesh Singh v. J&K Bank: citing unverified AI-generated precedent is advocate misconduct.
- 24 July 2026: Delhi High Court refuses ANI an interim injunction against OpenAI on prima facie grounds; the appeal is listed for 8 December 2026.
India and the EU AI Act compared
The EU took the opposite route: the EU AI Act (Regulation (EU) 2024/1689) is a single law with risk tiers, in force since 1 August 2024 and applying in stages. It can reach Indian companies whose AI systems or outputs are used in the EU. Its high-risk obligations for standalone systems were postponed to 2 December 2027. For purely Indian operations it does not apply, but its list of high-risk uses (hiring, education, credit, essential services) is a useful guide to where Indian businesses should take most care.
Example: Neha, product head at a Chennai HR-tech startup with clients in India and the Netherlands, designs her screening product with logging, human review and bias testing. One control set satisfies Indian enterprise clients asking about DPDP and fairness, and her European clients too.
Frequently asked questions
What is the state of AI regulation in India 2026?
India has no dedicated AI law. AI regulation in India 2026 runs through existing laws (DPDP Act, IT Act and the February 2026 IT Rules amendment, Copyright Act, Consumer Protection Act), sector regulators such as RBI and SEBI, and MeitY’s November 2025 Guidelines, which are a non-binding policy framework.
Is India planning a separate AI Act?
Not at present. MeitY’s Guidelines say a comprehensive AI law is not needed at this stage, while keeping the framework under review and allowing targeted amendments to existing laws as gaps appear.
Which law applies to deepfakes in India?
The IT Rules as amended from 20 February 2026 require labelling of synthetic content and removal of impersonation or intimate deepfakes within 2 hours of a complaint. Criminal provisions such as s.66D of the IT Act and the Bharatiya Nyaya Sanhita, 2023 can also apply.
Does the DPDP Act apply to AI?
Yes. Any AI system processing digital personal data is covered, with no exemption for AI or for small companies. Most obligations, including notice, consent, security and breach reporting, apply from 13 May 2027.
Quick quiz
Q1. India’s approach to regulating AI as on 31 October 2026 is:
- A single AI Act
- Existing laws plus policy guidelines and sector rules
- A licensing regime
- No regulation at all
Show answer
Answer: B. MeitY’s Guidelines chose to apply existing laws.
Q2. From when do most DPDP obligations apply?
- 11 August 2023
- 1 July 2024
- 13 May 2027
- 2 December 2027
Show answer
Answer: C. 18 months after the Rules were notified on 13 November 2025.
Q3. SEBI’s February 2025 amendment says intermediaries using third-party AI tools are:
- Exempt if the vendor is liable
- Solely responsible for data, outputs and compliance
- Responsible only for in-house tools
- Banned from using AI
Show answer
Answer: B. “The vendor’s model did it” is no defence.
Get the full map in AI Law and Governance in India, ₹599, and go deeper on privacy with Data Protection Law: DPDP Act 2023 and DPDP Rules 2025, ₹599.
Sources
- MeitY, India AI Governance Guidelines, 5 November 2025
- Digital Personal Data Protection Act, 2023; DPDP Rules, 2025
- Information Technology Act, 2000, ss.43A, 66D, 67, 67A and 79; IT Rules, 2021 as amended by notification of 10 February 2026; CERT-In Directions, 28 April 2022
- Copyright Act, 1957, ss.2(d)(vi), 14 and 52(1)(a); ANI Media v. OpenAI, Delhi High Court, 24 July 2026
- Consumer Protection Act, 2019, s.21; Guidelines for Prevention and Regulation of Dark Patterns, 2023; Code on Wages, 2019, s.3
- SEBI amendments of 6 February 2025; RBI FREE-AI report, 13 August 2025; Regulation (EU) 2024/1689
This page is for education and general information, not legal advice for a specific case. Law as on 31 October 2026.
Useful books for this topic
- Bare acts of the new criminal laws (BNS, BNSS, BSA)
- Code of Civil Procedure bare act
- Legal drafting and conveyancing books
- Constitution of India (coat pocket edition)
As an Amazon Associate, Lexfolio earns from qualifying purchases. Prices and availability are shown on Amazon.
Leave a Reply