India needs dedicated AI law as current legal framework inadequate to tackle emerging risks: Cyber Expert Pavan Duggal
New Delhi, May 20
India needs a dedicated law on artificial intelligence as existing legal frameworks are not adequate to deal with the risks emerging from AI, cyber law and artificial intelligence law expert Pavan Duggal said on the sidelines of FICCI's CyberComm event in the national capital.
Speaking to ANI, Duggal said India has taken several steps on AI governance, but they are not enough.
"India needs to really wake up to the potential of AI. India is doing quite a lot of work, we have hosted the India AI summit, we have done the IT rules, we have come up with the seven sutras for AI governance, but that is not enough," he said.
Calling for a separate legal framework, Duggal said, "India requires a dedicated law on artificial intelligence."
He said the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, do not adequately cover AI-related concerns.
"The Information Technology Act 2000 is thoroughly inadequate to deal with issues pertaining to artificial intelligence. Even the Digital Personal Data Protection Act 2023 is not at all adequate," Duggal said.
He said India should not blindly follow global regulatory models and must develop its own approach.
"India needs to come up with its own customized approach on artificial intelligence regulation," he said, adding that India's decisions could become a benchmark for the Global South.
Duggal also called for the creation of a National AI Accountability Authority to ensure legal accountability for AI systems.
"We should also come up with the National AI Accountability Authority where we must make all AI algorithms accountable to law and give effective remedies to affected persons who get harmed as a result of acts done by artificial intelligence," he said.
He further said India must frame clear rules on data localisation and ensure that AI systems operating in the country remain subject to Indian law.
"We cannot have Indians' data going outside India to be used against them, to be used against the sovereignty, security, integrity of India," he said.
On the role of industry, Duggal said trade bodies are seeking minimal regulation rather than over-regulation.
"Trade bodies definitely want minimal regulation of AI. Why? Because regulation of AI means more innovation," he said.
He added that industry bodies are also open to self-regulation, but warned that leaving AI entirely to market forces would not be suitable.
"Don't come with over-regulation because over-regulation is going to overkill. But minimal regulation, make the rules of the land very, very clear so that all stakeholders know about it and then enable more innovation to take place," Duggal said.
Speaking on cyber security, Duggal said India also needs a dedicated cyber security law.
"India doesn't have a dedicated law on cybersecurity yet. We had only a national cyber security policy of 2013, but that's remained a mere paper tiger and has not been implemented," he said.
He said India must look at the intersection of AI and cybersecurity to protect critical information infrastructure and build a more resilient digital ecosystem.
Against this backdrop, industry and internet infrastructure stakeholders also highlighted the need for stronger cybersecurity safeguards and proactive monitoring systems as India's digital ecosystem expands rapidly.
Dr Devesh Tyagi, CEO of the National Internet Exchange of India (NIXI), said NIXI is working under the guidance of the Ministry of Electronics and Information Technology to safeguard India's cyberspace.
"We have developed very rapidly and so are the threats, but I think government is aware of that and we are trying, government is taking various steps to mitigate those," Tyagi said.
He said NIXI is working to make India's domain and internet infrastructure safer.
"We at NIXI are also working under guidance of Ministry of Electronics, IT to safeguard our cyberspace," he said.
Tyagi added that NIXI is taking steps to detect fraudulent activities in its domain area.
"We have initiated various tools so that we can detect the fraudulent activities," he said.
— ANI
Reader Comments
Interesting perspective. In the US we often hear about "AI ethics" but little concrete regulation. India has an opportunity to set a global standard, especially for the Global South. The National AI Accountability Authority idea is smart — we need someone to blame when an autonomous vehicle hits a pedestrian. Hope they build something practical, not just a bureaucratic hurdle.
Minimal regulation but clear rules — exactly what we need! Over-regulation will kill our startup ecosystem, but no rules means chaos. Our IT companies are already doing great work in AI, and we need a framework that encourages innovation while protecting citizens. Also appreciate the focus on cybersecurity — the two go hand in hand.
The India AI summit was good, but talk is cheap. We need actual legislation with teeth. The data protection act is a start, but AI is a different beast. I work in tech and see how quickly AI models can generate biased or harmful outputs. India cannot afford to be left behind legally while adopting AI rapidly. Accountability is key.
Duggal makes a good point about not blindly copying Western models. Every country has different challenges — for India, AI in agriculture, healthcare, and education are huge opportunities. But we also need to protect our vast population from algorithmic biases. The industry asking for minimal regulation makes sense, but someone has to watch the watchmen. Hope the government acts fast!
I agree on the cybersecurity law part. India has been growing digitally at breakneck speed — UPI, Aadhaar, Digilocker — but the legal framework hasn't kept up. A dedicated
We welcome thoughtful discussions from our readers. Please keep comments respectful and on-topic.