Region
India has binding rules on synthetic content but no comprehensive AI statute. National guidelines are voluntary and principles-based, while binding duties come through the IT rules and the Digital Personal Data Protection Act. Financial regulators have their own AI expectations.
For reference purposes only. Not legal advice.
Snapshot
Partly
Voluntary national guidelines, with binding duties through IT rules and data protection law, plus sector regulators.
MeitY, Data Protection Board of India, RBI, SEBI
13 Nov 2026 and 13 May 2027: DPDP phases
Last reviewed 2 Oct 2026.
How to read this page
India: AI-specific binding law is "Partly". Voluntary national guidelines, with binding duties through IT rules and data protection law, plus sector regulators. This page lists 6 main instruments and 3 key dates, names the regulators to watch, and ends with questions to put to counsel. Each record carries a certainty label and a review date; treat anything marked Verify or Unsettled as a prompt to check the primary source.
IN timeline
Status tags are computed against today's date in your browser, so a card flips from Upcoming to In effect on its own.
Rules on synthetically generated information apply since 20 Feb 2026 (notified 10 Feb 2026).
In effect since 20 Feb 2026
Consent manager provisions of the DPDP Rules apply from 13 Nov 2026 (12 months after notification).
Reported by secondary summaries
In 41 days
Most remaining DPDP duties (notice and consent, security safeguards, breach intimation, retention and Significant Data Fiduciary obligations) apply from 13 May 2027 (18 months after notification).
Reported by secondary summaries
In 222 days
Dates are a summary. Confirm them with qualified counsel for your own case.
Instruments
| Instrument | Type | Status | Applies to | Key duties | Dates |
|---|---|---|---|---|---|
India AI Governance Guidelines (MeitY)Primary source ↗ · Checked 2 Oct 2026 VerifyPlain-language summaryNational principles for responsible AI. Voluntary, but a useful basis for your own policy. SimplifiedDPDP Rules phase dates, IT Rules takedown timelines and sector proposals from SEBI, ASCI and RBI are still developing. Check the primary source for the current position. | Guidance | Voluntary guidance | AI developers and deployers | National principles and governance approach. | Released 5 Nov 2025 |
IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026Primary source ↗ · Checked 3 Oct 2026 VerifyPlain-language summaryThe main binding AI-specific rules. Labelling, provenance metadata and short takedown deadlines are reported by law-firm summaries; read the Rules for scope and exact wording, and check for further amendments. Not settledDate, labelling and takedown timelines are reported by law-firm summaries. Primary text not read; check for further amendments. | Rules under the IT Act 2000 | In force | Intermediaries that host or enable synthetic content for users in India | Defines synthetically generated information; intermediaries must label it prominently, embed persistent provenance metadata, and act on takedown notices within short deadlines (reported as 3 hours for court- or government-flagged unlawful content, and 2 hours for complaints about non-consensual sexual imagery). | Notified 10 Feb 2026 (G.S.R. 120(E)); in force since 20 Feb 2026 |
Digital Personal Data Protection Act 2023 and DPDP Rules 2025Primary source ↗ · Checked 3 Oct 2026 VerifyPlain-language summaryApplies whenever AI uses digital personal data. Duties phase in over 18 months from the Rules; the dates shown are reported by secondary summaries. Not settledPhase dates (13 Nov 2026 and 13 May 2027) are reported by secondary summaries. Primary text not read; confirm the rule-by-rule dates. | Law and rules | In force, phased | Data fiduciaries processing digital personal data in India | Notice and consent, purpose limits, security, breach notification, rights of data principals, extra duties for Significant Data Fiduciaries. | Rules notified 14 Nov 2025; Data Protection Board constituted immediately; consent manager provisions from 13 Nov 2026; most remaining duties from 13 May 2027 |
RBI framework for responsible AI in the financial sector (FREE-AI, 2025)Primary source ↗ · Checked 2 Oct 2026 VerifyPlain-language summaryRecommendations for regulated entities. Check current status and any directions issued. Not settledCurrent status and any directions issued were not checked. | Sector guidance | Voluntary guidance | Regulated financial entities | Governance, risk and consumer protection expectations for AI in banking and finance. | |
SEBI responsible AI/ML proposalsPrimary source ↗ · Checked 2 Oct 2026 VerifyPlain-language summaryA consultation. Check the final status. Not settledFinal status was not checked. | Sector proposal | Proposed | Regulated entities in securities markets | Expectations for AI in securities markets. | Consultation (2025) |
ASCI draft guidelines on labelling AI-generated advertisingPrimary source ↗ · Checked 2 Oct 2026 VerifyPlain-language summaryA draft. Check the final status. Not settledFinal status was not checked. | Self-regulatory guidance | Proposed | Advertisers | Disclosure labels for AI-created ads. | Draft, May 2026 |
Enforcement
IT rules and national AI policy.
Enforces the DPDP Act.
Banking and finance.
Securities markets.
Penalty amounts are not stated here because they have not been verified from the primary source.
Actions
Not settled
Official answers
These bodies can give official guidance. ClearPath is for reference only.
Sources
Partly. There are binding rules on synthetic content and personal data, but no comprehensive AI statute as of the review date.
Reviewed 2 Oct 2026.
Was this page useful? Tell us what is missing or wrong ↗ · Report a correction