Digital Personal Data Protection Act, 2023 (DPDP Act) — enacted; rules pending · Information Technology Act, 2000 & IT Rules, 2021 · MeitY advisories on AI, deepfakes and synthetic media (2024) · IndiaAI Mission & NITI Aayog 'Responsible AI' principles — Status: No dedicated AI Act (DPDP Act enacted; rules phasing in)
India has not enacted a standalone AI statute. AI is governed indirectly through the Digital Personal Data Protection Act, 2023 — passed in August 2023, with its implementing Rules notified in 2025 and commencing in phases — which sets consent, purpose-limitation and breach-notification duties (with penalties up to ₹250 crore) that apply to any personal data used to train or run AI. The older Information Technology Act, 2000 and the 2021 IT Rules cover intermediary liability and have driven MeitY advisories requiring labelling of AI-generated and deepfake content. A promotion-first IndiaAI Mission and NITI Aayog's voluntary 'Responsible AI' principles guide policy, and a 'Digital India Act' to replace the IT Act has been signalled but is not yet law.
Recent developments: