India DPDP
Sets the data-side boundary conditions for AI in the world's largest market by users. Significant data fiduciaries (large AI platforms will qualify) face algorithmic due-diligence duties — India's primary lever over AI behavior absent an AI act.
What it is
India's data-protection regime became operational with the November 2025 rules: consent-manager infrastructure, breach notification, children's data rules and significant-data-fiduciary obligations — the legal foundation for AI training and deployment involving Indians' data.
Rules notified 14 Nov 2025; substantive obligations phase in over 12-18 months.
Who is affected
Sets the data-side boundary conditions for AI in the world's largest market by users. Significant data fiduciaries (large AI platforms will qualify) face algorithmic due-diligence duties — India's primary lever over AI behavior absent an AI act.
Key obligations
- Consent-based processing with consent-manager ecosystem
- Significant data fiduciaries: DPIAs, audits, algorithmic due diligence
- Phased compliance through 2026-27
Recent signals
India hosts the AI Impact Summit in New Delhi
The summit series' fourth leader-level meeting centers inclusive development and Global South priorities — continuing the drift from safety-first framing.
India notifies DPDP Rules, activating its data-protection regime
Phased obligations begin for consent management, breach notification and significant data fiduciaries — the data foundation for AI governance in India.
India publishes AI Governance Guidelines, opting against a standalone AI act
MeitY's framework applies existing law through principles, institutions and voluntary commitments — a landmark pro-innovation choice by the world's most populous nation.
Related instruments
- INIndia AI GuidelinesMeitY's governance framework opts against a standalone AI act: it applies existing law through seven sutras (principles), an AI Go…
- EUGDPR × AIThe EU's data-protection regime remains a primary AI constraint: legal bases for training data, automated-decision rights (Art. 22…
- USTAKE IT DOWN ActRare bipartisan federal AI statute criminalizing publication of non-consensual intimate images, including AI-generated deepfakes, …
- US-STCalifornia AB 2013Requires developers of generative AI systems made available in California to publish documentation of training datasets — sources,…
- US-STUtah AI Policy ActAn early, light-touch state law: companies cannot blame generative AI for consumer-protection violations, regulated professions mu…