India may legislate AI separately: the founder documentation checklist before MeitY's draft lands
Updated: 10 Jul 2026 · For: AI and infrastructure founders shipping in India
What changed
In early July 2026, MeitY Secretary S. Krishnan stated that India should move toward a dedicated regulatory framework for artificial intelligence — that existing IT rules have handled initial deepfake and synthetic-content concerns, but 'additional regulation or law may be needed' as harms evolve. IT Minister Ashwini Vaishnaw has separately indicated the pre-AI IT Act may require a new legal framework, with industry consultation aimed at balancing innovation and regulation. India has already amended IT Rules to define AI-generated and synthetic content, impose faster takedowns for deepfakes flagged by authorities, and propose continuous labelling for synthetically generated visual information.
What the law is (plain English)
Today, AI products sit under a patchwork: IT Act and Intermediary Rules (content takedown, due diligence), DPDP Act (training data, notices, children's data), sector regulators (RBI for lending AI, SEBI for market comms), and contract. A standalone AI law would likely formalise risk tiers, documentation, human oversight, and liability allocation for deployers and importers — areas where EU AI Act and UK/US debates are already shaping enterprise procurement. Until a bill is tabled, amended IT Rules on labelling and takedown are the enforceable floor; DPDP governs personal data in training and inference.
What it means in practice
GCCs, AI SaaS, and consumer apps will face the same question in every enterprise security review: 'Where is your India AI dossier?' Teams that only have a US policy will lose pilots to competitors with model cards, bias tests, and incident playbooks mapped to Indian law. SB Tech Associates advises AI founders on product-level governance — not slide-deck ethics — because India's direction is legislation, not guidance notes.
What founders should do this week
- Create an AI system register: model name, version, training data categories, Indian users affected, and human-in-the-loop points
- Implement synthetic-media labelling on outputs now — align with amended IT Rules before a standalone Act hardens requirements
- Document vendor chains for embeddings, fine-tuning, and inference — DPAs must cover subprocessors and government takedown SLAs
- Run a deepfake/incident tabletop: three-hour takedown path when a competent authority flags content
- Brief investors and board on India AI legislation risk — cap tables and R&D roadmaps should not assume a permanent IT-Rules-only regime
What can wait
- Full conformity assessment akin to EU high-risk AI until MeitY publishes a draft
- Re-architecting models not deployed or sold in India
When to call counsel
- You sell agentic workflows into BFSI, health, or government — sector law plus future AI Act exposure needs a joined-up opinion
- A pilot contract requires 'India AI Act ready' warranties and you cannot produce documentation today
- Your training pipeline uses scraped or licensed third-party data without a clear Indian lawful basis
Founder FAQ
Is there an AI Act in force in India today?
Not a standalone AI Act yet — but IT Rules on synthetic content, DPDP on personal data, and sector circulars already bite. Krishnan's remarks signal legislation is in active preparation.
Do small startups need AI governance if MeitY targets big tech?
Enterprise buyers and government RFPs already flow down documentation duties. Early-stage teams that cannot answer training-data and takedown questions lose deals regardless of company size.
How is this different from DPDP?
DPDP governs personal data. A dedicated AI law would likely address system risk, transparency, and harm from automated decisions — even where personal data is minimal. You need both lenses.
SB Tech Associates: General information only — not legal advice. Verify the official notification and obtain counsel for your facts before acting.
Source: ETV Bharat →
Topics: AI law India startup, India AI regulation 2026, MeitY AI legislation, AI compliance India founders, deepfake IT Rules India, generative AI governance India
This publication is for general information only and does not constitute legal advice. Regulatory positions evolve; verify current notifications and obtain counsel before acting. © 2026 SB Tech Associates.