Is It Legal to Use ChatGPT at Work in India? Rules and Risks

Is it legal to use ChatGPT at work in India? Yes: no Indian law bans employees from using ChatGPT, Gemini, Copilot or similar AI tools for office work. What decides whether you may use it is your employer’s AI policy, your employment contract and confidentiality duties, and laws such as the Digital Personal Data Protection Act, 2023 that bind your employer. Breaking a workplace AI rule, especially by pasting confidential or personal data, can lead to disciplinary action, even though using the tool itself is not a crime.

Is it legal to use ChatGPT at work in India? The short legal answer

Using an AI tool to draft an email or suggest an Excel formula is lawful. The government’s November 2025 India AI Governance Guidelines, issued by MeitY, take the view that India does not need a standalone AI law at this stage and that existing laws can handle most risks. Those guidelines are a policy framework and do not create duties for employees.

So the real question is “what did you put into it, and what did you do with the output?” Three sets of rules answer that: your employer’s AI, IT or service rules; your contract (almost every appointment letter has a confidentiality clause, and client NDAs bind you through the company); and general law, such as the DPDP Act, the Information Technology Act, 2000, the Copyright Act, 1957 and the defamation provision in the Bharatiya Nyaya Sanhita, 2023 if AI output is published carelessly.

ChatGPT at office rules: what a company AI policy usually says

Most workplace AI policies cover the same ground:

1. Approved tools: only listed tools or the company’s enterprise account. Using a personal free account for office material is a common breach.
2. Prohibited data: no personal data of customers, staff or students, no client documents, unpublished financials, passwords or source code.
3. Human review and disclosure: you are responsible for every output, and must disclose AI use where a client or manager requires it.
4. Incident reporting: report accidental data sharing the same day.

Government offices are stricter. On 29 January 2025, the Department of Expenditure in the Union Ministry of Finance told its staff not to use AI tools such as ChatGPT and DeepSeek on office devices, citing confidentiality of government data.

Can I get fired for using ChatGPT at work?

Not simply for using an allowed tool. The risk comes from how you use it: pasting a client list or salary sheet into a personal account, sending AI output with invented figures to a client, ignoring an express ban, or letting AI decide on hiring or appraisal without human review.

The consequence depends on your contract, the company’s rules and the seriousness of the breach: from a warning to disciplinary proceedings and, for serious leaks of confidential data, termination. Establishments with 300 or more workers have standing orders under the Industrial Relations Code, 2020, listing misconduct and procedure. Freelancers risk the client ending the contract or claiming damages. Prompt self-reporting is usually treated far more leniently than concealment.

Confidentiality and data protection: why employers worry

What you type goes to the provider’s servers and may be stored or, depending on your account and settings, used for training. Treat the prompt box like an email to an outside company.

Under the DPDP Act your employer is the Data Fiduciary. From 13 May 2027 it must take reasonable security safeguards and report personal data breaches; failure on safeguards can cost up to ₹250 crore. The fine falls on the organisation, which is exactly why employers discipline staff who paste personal data into unapproved tools.

Example: Neha, an HR executive in Pune, describes a rejection email without names in the approved tool and adds the name herself. Lawful. Her colleague uploads 40 candidate CVs with salaries to a free personal account. That is a policy breach and a data incident. No policy at your office? Ask in writing which tool and tasks are allowed; a written yes protects you.

Frequently asked questions

Is it legal to use ChatGPT at work in India?

Yes. There is no Indian law that bans employees from using ChatGPT or similar AI tools. Your employer’s policy, your contract and data protection law decide how you may use it, and breaking those rules can lead to disciplinary action.

Can my company stop me from using ChatGPT?

Yes. An employer can restrict or ban AI tools for work through its policies or service rules, just as it can restrict USB drives. If the policy says no, using the tool for office work is a breach.

Can I get fired for using ChatGPT?

It depends on what you did and on your contract and company rules. Using an approved tool properly is not misconduct, but leaking confidential or personal data, or ignoring an express ban, can lead to warnings, disciplinary proceedings or, in serious cases, termination.

Do I have to tell my boss I used AI?

Only if your policy, your manager or a client requires it, or if the reader would reasonably assume a human wrote it and it matters to them. A one-line note of what you used AI for and what you checked is a good habit.

Quick quiz

Sources

• Digital Personal Data Protection Act, 2023 (Data Fiduciary duties; Schedule of penalties) and Digital Personal Data Protection Rules, 2025
• Information Technology Act, 2000
• Industrial Relations Code, 2020 (standing orders)
• Department of Expenditure, Ministry of Finance, advisory dated 29 January 2025 on use of AI tools on office devices
• MeitY, India AI Governance Guidelines, 5 November 2025

To build safe AI habits with a certificate, see the AI at Work certificate course.

This page is for education and general information, not legal advice for a specific case. Law as on 29 October 2026.