{ "name": "India Digital Regulation Dataset", "publisher": "India AI Rulebook", "url": "https://indiaairulebook.com", "license": "CC-BY-4.0", "license_url": "https://creativecommons.org/licenses/by/4.0/", "attribution": "Data from India AI Rulebook (indiaairulebook.com), CC BY 4.0", "version": "1.1.3", "generated": "2026-10-09", "disclaimer": "Educational use only, not legal advice. Re-verify against the Gazette of India before relying on any entry.", "last_checked_note": "last_checked reflects the date the corresponding page on indiaairulebook.com was last updated. It is not a record of an independent re-verification against the source on that date.", "type_field_note": "The 'type' field is derived from each instrument's name. It is not an official classification and does not appear on the site.", "instruments": [ { "id": "article-21-right-to-life-personal-liberty", "name": "Article 21 · Right to Life & Personal Liberty", "type": "constitutional_provision", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "26 January 1950", "authority": null, "source_url": "https://www.indiacode.nic.in/handle/123456789/15240", "rulebook_url": null, "last_checked": null, "notes": "Source of the fundamental right to privacy." }, { "id": "dpdp-act-2023", "name": "Digital Personal Data Protection Act, 2023", "type": "act", "status": "in_force", "enforceable": false, "assent_date": "2023-08-11", "effective_text": "Phased; full enforcement by 13 May 2027", "authority": "MeitY", "source_url": "https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf", "rulebook_url": "https://indiaairulebook.com/learn/data-privacy", "last_checked": "2026-10-09", "notes": "Primary framework for personal data. Transitional while SPDI Rules remain in force." }, { "id": "information-technology-act-2000", "name": "Information Technology Act, 2000", "type": "act", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "17 October 2000", "authority": null, "source_url": "https://www.indiacode.nic.in/handle/123456789/1999", "rulebook_url": "https://indiaairulebook.com/learn/platforms-internet/it-act-2000", "last_checked": "2026-10-05", "notes": null }, { "id": "telecommunications-act-2023", "name": "Telecommunications Act, 2023", "type": "act", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "Phased from 26 June 2024", "authority": null, "source_url": "https://www.indiacode.nic.in/handle/123456789/20101", "rulebook_url": "https://indiaairulebook.com/learn/platforms-internet/telecom-act-2024", "last_checked": "2026-08-17", "notes": null }, { "id": "consumer-protection-act-2019", "name": "Consumer Protection Act, 2019", "type": "act", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "20 July 2020", "authority": null, "source_url": "https://www.indiacode.nic.in/handle/123456789/15256", "rulebook_url": null, "last_checked": null, "notes": null }, { "id": "bharatiya-nyaya-sanhita-2023-bns", "name": "Bharatiya Nyaya Sanhita, 2023 (BNS)", "type": "act", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "In force 1 July 2024", "authority": null, "source_url": "https://www.indiacode.nic.in/bitstream/123456789/20062/1/a202345.pdf", "rulebook_url": null, "last_checked": null, "notes": "If an AI product can impersonate a person, forge documents, or defraud, those uses are criminal offences under the BNS — independent of any platform safe-harbour protection." }, { "id": "dpdp-rules-2025", "name": "DPDP Rules, 2025", "type": "rules", "status": "notified", "enforceable": false, "assent_date": null, "effective_text": "Phased; notified 13 November 2025 (G.S.R. 846(E); Gazette publication ID CG-DL-E-14112025-267650, published 14 November 2025)", "authority": "MeitY", "source_url": "https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf", "rulebook_url": "https://indiaairulebook.com/learn/data-privacy/dpdp-rules-2025", "last_checked": "2026-10-06", "notes": "Rule 15 lets the Central Government set requirements for making personal data available to a foreign State or its agencies. The power to restrict transfers to a named country is in Section 16(1) of the DPDP Act. No such notification has been found." }, { "id": "promotion-and-regulation-of-online-gaming-rules-2026", "name": "Promotion and Regulation of Online Gaming Rules, 2026", "type": "rules", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "1 May 2026 (rule 1(2))", "authority": "MeitY", "source_url": "https://www.meity.gov.in/static/uploads/2026/04/7e0b02d37fd07f81fa48578a9996aa85.pdf", "rulebook_url": "https://indiaairulebook.com/learn/platforms-internet/online-gaming-act-2025", "last_checked": "2026-10-09", "notes": "Sets up the Online Gaming Authority of India, how games are checked and registered, user complaints and penalty inquiries. Made under the Online Gaming Act, 2025, which bans online money games." }, { "id": "spdi-rules-2011-under-it-act-section-43a", "name": "SPDI Rules, 2011 (under IT Act Section 43A)", "type": "rules", "status": "transitional", "enforceable": null, "assent_date": null, "effective_text": "11 April 2011 — sunsets at full DPDP enforcement", "authority": null, "source_url": "https://www.indiacode.nic.in/ViewFileUploaded?path=AC_CEN_45_76_00001_200021_1517807324077%2Frulesindividualfile%2F&file=GSR313E_10511%281%29_0.pdf", "rulebook_url": null, "last_checked": null, "notes": "The SPDI Rules keep applying to sensitive personal data until DPDP is fully in force." }, { "id": "it-intermediary-guidelines-rules-2021", "name": "IT (Intermediary Guidelines) Rules, 2021", "type": "rules", "status": "notified", "enforceable": null, "assent_date": null, "effective_text": "25 February 2021", "authority": "MeitY", "source_url": "https://www.meity.gov.in/static/uploads/2026/02/550681ab908f8afb135b0ad42816a1c9.pdf", "rulebook_url": "https://indiaairulebook.com/learn/platforms-internet/intermediary-rules-2021", "last_checked": "2026-10-05", "notes": null }, { "id": "it-intermediary-guidelines-digital-media-ethics-code-amendment-rules-2026", "name": "IT (Intermediary Guidelines & Digital Media Ethics Code) Amendment Rules, 2026", "type": "rules", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "In force 20 February 2026", "authority": "MeitY", "source_url": "https://www.meity.gov.in/static/uploads/2026/02/550681ab908f8afb135b0ad42816a1c9.pdf", "rulebook_url": "https://indiaairulebook.com/learn/platforms-internet/it-rules-updates-2025-2026", "last_checked": "2026-10-05", "notes": "Covers AI-made or AI-altered audio and video that looks real ('synthetically generated information', Rule 2(1)(wa)); plain text is not covered. Platforms must block banned kinds, label the rest and add metadata where feasible (Rule 3(3)); large social media platforms must collect and verify user declarations (Rule 4(1A)). Takedown after an order cut from 36 hours to 3 hours (Rule 3(1)(d))." }, { "id": "cert-in-directions-2022", "name": "CERT-In Directions, 2022", "type": "directions", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "28 June 2022", "authority": "CERT-In", "source_url": "https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf", "rulebook_url": null, "last_checked": null, "notes": "6-hour cyber-incident reporting; 180-day log retention." }, { "id": "guidelines-for-prevention-and-regulation-of-dark-patterns-2023-ccpa", "name": "Guidelines for Prevention and Regulation of Dark Patterns, 2023 (CCPA)", "type": "guidelines", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "In force 30 November 2023", "authority": null, "source_url": "https://www.pib.gov.in/PressReleasePage.aspx?PRID=2134765", "rulebook_url": null, "last_checked": null, "notes": "If your interface uses deceptive or manipulative design that pushes users into choices they didn't intend, it can be treated as an unfair trade practice under consumer-protection law." }, { "id": "ai-governance-guidelines-2025", "name": "AI Governance Guidelines, 2025", "type": "guidelines", "status": "guideline", "enforceable": false, "assent_date": null, "effective_text": "Non-binding guidance", "authority": "IndiaAI (MeitY)", "source_url": "https://indiaai.gov.in/article/india-ai-governance-guidelines-empowering-ethical-and-responsible-ai", "rulebook_url": "https://indiaairulebook.com/learn/ai-policy/india-ai-governance-guidelines-2025", "last_checked": "2026-10-05", "notes": null }, { "id": "indiaai-mission-2024", "name": "IndiaAI Mission, 2024", "type": "programme", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "7 March 2024 (Cabinet approval)", "authority": "IndiaAI (MeitY)", "source_url": "https://indiaai.gov.in/", "rulebook_url": "https://indiaairulebook.com/learn/ai-policy/indiaai-mission-2024", "last_checked": "2026-10-09", "notes": "Over Rs 10,300 crore programme (exact outlay Rs 10,371.92 crore over five years; same March 2024 approval, PIB) covering compute, datasets, and safe & trusted AI." }, { "id": "mohfw-health-data-management-policy", "name": "MoHFW Health Data Management Policy", "type": "policy", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "14 December 2020", "authority": "ABDM", "source_url": "https://abdm.gov.in/publications/health_data_management_policy", "rulebook_url": "https://indiaairulebook.com/learn/sector-rules/healthcare-and-health-tech", "last_checked": "2026-08-17", "notes": "Ayushman Bharat Digital Mission — consent and federated architecture." }, { "id": "rbi-free-ai-framework-2025", "name": "RBI FREE-AI Framework, 2025", "type": "framework", "status": "guideline", "enforceable": false, "assent_date": null, "effective_text": "Report released August 2025 (advisory, non-binding)", "authority": "RBI", "source_url": "https://rbidocs.rbi.org.in/rdocs/PublicationReport/Pdfs/FREEAIR130820250A24FF2D4578453F824C72ED9F5D5851.PDF", "rulebook_url": null, "last_checked": null, "notes": "If you build AI for banking, lending, payments or fintech, treat this as RBI's expected direction — board-level AI governance and independent model validation — even though it isn't yet mandatory." }, { "id": "market-study-on-artificial-intelligence-and-competition-2025-cci", "name": "Market Study on Artificial Intelligence and Competition, 2025 (CCI)", "type": "study", "status": "guideline", "enforceable": false, "assent_date": null, "effective_text": "Published 6 October 2025 (market study, advisory — not an enforcement instrument)", "authority": "CCI", "source_url": "https://www.cci.gov.in/images/marketstudie/en/market-study-on-artificial-intelligence-and-competition1759752172.pdf", "rulebook_url": null, "last_checked": null, "notes": "If your AI influences pricing or market conduct, algorithmic coordination — even without human intent — can attract competition-law scrutiny. No new obligations: the study is advisory." }, { "id": "sebi-intermediaries-amendment-regulations-2025-regulation-16c", "name": "SEBI (Intermediaries) (Amendment) Regulations, 2025 — Regulation 16C", "type": "regulation", "status": "in_force", "enforceable": null, "assent_date": null, "effective_text": "In force 10 February 2025 (notified 6 February 2025; commencement is the date that matters)", "authority": "SEBI", "source_url": "https://www.sebi.gov.in/legal/regulations/feb-2025/securities-and-exchange-board-of-india-intermediaries-amendment-regulations-2025_91809.html", "rulebook_url": "https://indiaairulebook.com/learn/sector-rules/sebi-ai-cybersecurity", "last_checked": "2026-10-09", "notes": "If you are SEBI-regulated and you use AI anywhere in your stack, you own the outcome. Outsourcing the model to a vendor does not outsource the liability. This is the binding layer — distinct from SEBI's June 2025 AI/ML consultation paper, which is still only a proposal." } ], "deadlines": [ { "id": "dpdp-phase-1", "instrument_id": "dpdp-act-2023", "date": "2025-11-13", "date_disputed": false, "dispute_note": null, "description": "Definitions, the Board sections, and some general sections started on this date. The rule-making Rules 1, 2 and 17 to 21 also started.", "source_url": "https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf", "rulebook_url": "https://indiaairulebook.com/learn/data-privacy/dpdp-deadlines-2026-2027", "last_checked": "2026-10-05" }, { "id": "dpdp-consent-manager-registration", "instrument_id": "dpdp-act-2023", "date": "2026-11-13", "date_disputed": false, "dispute_note": null, "description": "The Consent Manager sections and Rule 4 (Consent Manager registration) start.", "source_url": "https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf", "rulebook_url": "https://indiaairulebook.com/learn/data-privacy/dpdp-deadlines-2026-2027", "last_checked": "2026-10-05" }, { "id": "dpdp-full-enforcement", "instrument_id": "dpdp-act-2023", "date": "2027-05-13", "date_disputed": true, "dispute_note": "The Rules are dated 13 November 2025 and were published in the Gazette on 14 November 2025. Some sources therefore give 14 May 2027. We use 13 May 2027; see Methodology.", "description": "Most duties start. This covers notice, consent, security, breach reports, children's data, rights, cross-border transfers, penalties and the change to the IT Act.", "source_url": "https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf", "rulebook_url": "https://indiaairulebook.com/learn/data-privacy/dpdp-deadlines-2026-2027", "last_checked": "2026-10-05" } ], "pending": [ { "id": "online-gaming-act-text", "title": "Online Gaming Act, 2025: Act text and registration notices", "description": "The Online Gaming Rules, 2026 are in force from 1 May 2026. We have not yet opened the Act's own text, so its definition of an online money game is not quoted here. Registration of social games applies only if the government names a category in a notice (rule 12(1)).", "government_status": "pending", "verification_status": "unconfirmed", "unconfirmed_note": "We have not opened the Act's text. India Code and eGazette did not load for us on 9 October 2026.", "source_urls": [ "https://www.meity.gov.in/static/uploads/2026/04/7e0b02d37fd07f81fa48578a9996aa85.pdf" ], "rulebook_url": "https://indiaairulebook.com/learn/platforms-internet/online-gaming-act-2025", "last_checked": "2026-10-09" }, { "id": "sdf-criteria", "title": "Significant Data Fiduciary (SDF) criteria", "description": "The government can designate certain large or higher-risk data fiduciaries as 'Significant', which triggers extra duties — appointing a DPO, independent audits, and data protection impact assessments. The criteria for who qualifies have not been notified yet.", "government_status": "pending", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf" ], "rulebook_url": "https://indiaairulebook.com/learn/data-privacy/significant-data-fiduciary", "last_checked": "2026-08-17" }, { "id": "childrens-data-lowered-age", "title": "Lowered age for children's data (Section 9(5))", "description": "Section 9(5) of the DPDP Act lets the government notify a Data Fiduciary as able to process a child's personal data at an age below 18, where it is satisfied that fiduciary's processing is verifiably safe. That power has not been exercised. The age threshold therefore remains 18 for everyone. Note that this is narrower than it sounds: it is a per-fiduciary designation, not a general lowering of the age.", "government_status": "pending", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf" ], "rulebook_url": "https://indiaairulebook.com/learn/data-privacy/childrens-data", "last_checked": "2026-08-17" }, { "id": "restricted-country-list", "title": "Section 16(1) restriction notification (cross-border transfers)", "description": "Section 16(1) of the DPDP Act lets the government restrict transfers of personal data to a named country by notification. We have found no such notification, so no country is off-limits under Section 16(1). Rule 15 of the DPDP Rules is different: it lets the government set requirements for making data available to a foreign State.", "government_status": "pending", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.meity.gov.in/static/uploads/2024/06/2bf1f0e9f04e6fb4f8fef35e82c42aa5.pdf", "https://pib.gov.in/PressReleasePage.aspx?PRID=2190655" ], "rulebook_url": "https://indiaairulebook.com/dpdp-vs-gdpr-ai", "last_checked": "2026-08-17" }, { "id": "dpb-appointments", "title": "Data Protection Board — established in law, not yet staffed", "description": "The Board is established in law (DPDP Act s.18; G.S.R. 843(E)). As notified, it has a Chairperson and four Members, to be appointed through a Search-cum-Selection Committee (Government reply, Lok Sabha Unstarred Question 3960, 12 August 2026). The posts were advertised in Employment News on 6 June 2026. The reply does not report any appointment. We have found no appointment order since. Last checked 6 October 2026.", "government_status": "pending", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.meity.gov.in/static/uploads/2026/05/cd481c027470b420b4cb85fb40a91c53.pdf" ], "rulebook_url": "https://indiaairulebook.com/government/data-breach-response", "last_checked": "2026-10-06" }, { "id": "consent-manager-regime", "title": "Consent Manager regime", "description": "The Consent Manager registration system (Rule 4) is set to commence on 13 November 2026. Consent Managers will register with the Board and take on defined obligations. It is not operational yet.", "government_status": "scheduled", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.meity.gov.in/static/uploads/2025/11/53450e6e5dc0bfa85ebd78686cadad39.pdf", "https://pib.gov.in/PressReleasePage.aspx?PRID=2190655" ], "rulebook_url": "https://indiaairulebook.com/learn/data-privacy/consent-manager", "last_checked": "2026-08-17" }, { "id": "supreme-court-challenge", "title": "Constitutional challenge in the Supreme Court", "description": "Writ petitions challenge parts of the DPDP Act — chiefly Section 44(3), which amended the RTI Act, plus Sections 17(1)(c), 17(2), 33(1) and 36, and Rules 17 and 23(2) of the DPDP Rules. On 16 February 2026 the Supreme Court issued notice, referred the questions to a larger bench, and declined to stay the framework. There is no stay — the DPDP framework operates as normal while this runs.", "government_status": "under_challenge", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.sci.gov.in/case-status-case-no/" ], "rulebook_url": "https://indiaairulebook.com/pending", "last_checked": "2026-09-02" }, { "id": "bank-fraudulent-transaction-framework-2027", "title": "New fraudulent-transaction framework for banks", "description": "RBI has published a framework on fraudulent electronic banking transactions. We have not read the final text, so we do not state its start date, limits or compensation amounts.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "We have not retrieved the RBI Directions from rbi.org.in. They are cited by name and date only.", "source_urls": [], "rulebook_url": "https://indiaairulebook.com/learn/finance-fintech/fraud-disputes-and-chargebacks", "last_checked": "2026-10-09" }, { "id": "rbi-department-of-supervision-consolidation", "title": "RBI Department of Supervision consolidation", "description": "After the Department of Regulation consolidated its circulars in November 2025, the Department of Supervision began the same exercise for supervisory instructions — organising them into entity-specific Directions covering functions such as the compliance function and concurrent audit. This is a second wave, separate from the November 2025 one.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "We have not traced this second consolidation wave to an RBI notification. Treat it as a watch item, not a confirmed change.", "source_urls": [], "rulebook_url": "https://indiaairulebook.com/pending", "last_checked": "2026-09-02" }, { "id": "draft-ppi-directions-2026", "title": "Draft PPI Directions, 2026", "description": "The RBI published a draft replacement for the wallet rulebook on 22 April 2026, and took comments until 22 May 2026. It has not been finalised, so the Master Direction of 27 August 2021 is still the rule.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "We have not retrieved the draft from rbi.org.in. It is cited by name and date only.", "source_urls": [], "rulebook_url": "https://indiaairulebook.com/learn/finance-fintech/payments-and-wallet-data", "last_checked": "2026-10-09" }, { "id": "rbi-model-risk-management-draft-2026", "title": "RBI Draft Guidance on Regulatory Principles for Model Risk Management, 2026", "description": "Draft guidance that brings AI and machine-learning models into a board-owned Model Risk Management Framework. It covers banks, NBFCs, all-India financial institutions, asset reconstruction companies and credit information companies. It expects a board-approved framework, risk-based model tiering, a model inventory, independent validation, explainability, human-in-the-loop and kill-switch controls, and accountability for third-party models. Released 24 June 2026 (Press Release 2026-2027/528). Comments closed 24 July 2026. Not final as of 6 October 2026. Once final, it replaces RBI's 2002 guidance on credit risk models.", "government_status": "watch", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.rbi.org.in/scripts/BS_PressReleaseDisplay.aspx?prid=63006" ], "rulebook_url": "https://indiaairulebook.com/learn/ai-policy/rbi-model-risk-management-2026", "last_checked": "2026-10-06" }, { "id": "sebi-ai-tools-advisory-2026", "title": "SEBI — Advisory on Emerging Advanced AI Tools for Vulnerability Detection", "description": "SEBI issued an advisory on 5 May 2026 about advanced AI tools used to find security weaknesses. The circular page has been verified, but the advisory PDF has not yet been read, so its exact requirements are not yet known.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "We have logged the SEBI circular but not yet read what it requires.", "source_urls": [ "https://www.sebi.gov.in/legal/circulars/may-2026/advisory-on-emerging-advanced-artificial-intelligence-ai-tools-for-vulnerability-detection_101270.html" ], "rulebook_url": "https://indiaairulebook.com/learn/sector-rules/sebi-ai-cybersecurity", "last_checked": "2026-10-09" }, { "id": "standalone-ai-law", "title": "A standalone AI law for India", "description": "In November 2025 MeitY said a separate AI law was not needed. By mid-2026 that had shifted. The IT Minister said on 10 June 2026 that a new AI law is required, and press reports date a MeitY Secretary statement to early July 2026 (3 or 9 July) saying drafting would begin soon. There is no draft Bill, no consultation paper, and no timeline. Nothing binds anyone today.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "Both statements are press reports. No primary transcript or ministry document has been retrieved.", "source_urls": [], "rulebook_url": "https://indiaairulebook.com/learn/ai-policy", "last_checked": "2026-10-09" }, { "id": "draft-it-rules-second-amendment-2026", "title": "Draft IT Rules Second Amendment, 2026", "description": "MeitY published a draft Second Amendment to the IT Rules in March 2026. It would make platforms follow MeitY's written advisories, directions and codes as part of their due diligence (proposed Rule 3(4)). It would apply the news-content oversight rules to news posted by ordinary users, not only publishers (proposed Rule 8(1)). It would let the oversight committee hear matters the Ministry refers to it (proposed Rule 14), and keep other data-retention laws in force alongside Rule 3(1)(g) and (h). It does not add new rules on AI-made content. It has no G.S.R. number and no start date.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "The draft PDF on meity.gov.in leaves the day blank (\"____th March, 2026\"), so we do not state an exact release date.", "source_urls": [ "https://www.meity.gov.in/static/uploads/2026/03/30591fc6e322dcbcc9dae84a0f02e9e7.pdf" ], "rulebook_url": "https://indiaairulebook.com/learn/platforms-internet/it-rules-updates-2025-2026", "last_checked": "2026-10-05" }, { "id": "sc-ai-in-courts-regulations-2026", "title": "Draft Regulations for Use of AI in Courts, 2026", "description": "Reports say a Supreme Court committee published draft rules in June 2026 on how courts may use AI. We have not found the draft on the Supreme Court's website, so we do not describe its contents.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "Reported, not confirmed. No document found on sci.gov.in.", "source_urls": [], "rulebook_url": "https://indiaairulebook.com/learn/ai-policy", "last_checked": "2026-10-09" }, { "id": "ai-ethics-accountability-bill-2025", "title": "AI (Ethics and Accountability) Bill, 2025", "description": "Reported to be a Private Member's Bill (a bill from an MP, not the government). Such bills rarely pass. It creates no obligation.", "government_status": "watch", "verification_status": "unconfirmed", "unconfirmed_note": "Reported, not confirmed. Search results list it as Lok Sabha Bill No. 59 of 2025. We could not open the bill record on sansad.in or loksabha.nic.in (5 October 2026).", "source_urls": [], "rulebook_url": "https://indiaairulebook.com/learn/ai-policy", "last_checked": "2026-10-09" }, { "id": "edpb-scraping-anonymisation-2026", "title": "EDPB web scraping and anonymisation guidelines", "description": "The EDPB adopted two draft guidelines on 7 July 2026: one on anonymisation, and one on web scraping for generative AI. Both are drafts, and both are open for comment until 30 October 2026.", "government_status": "watch", "verification_status": "confirmed", "unconfirmed_note": null, "source_urls": [ "https://www.edpb.europa.eu/system/files/2026-07/edpb_guidelines_2020603_webscraping_v1_en_0.pdf" ], "rulebook_url": "https://indiaairulebook.com/dpdp-vs-gdpr-ai", "last_checked": "2026-08-17" } ] }