Nurturing digital adoption with light-touch regulation

India’s approach to digital regulation and AI governance reflects deliberate policy to foster innovation and regulate with precision as the ecosystem grows. For global and domestic businesses alike, this translates into a structured yet not unnecessarily prescriptive compliance landscape, an important factor in assessing the ease of doing business in a rapidly digitising economy.

At the centre of India’s emerging AI framework lies a principle-based, non-binding architecture called the “Seven Sutras”. Rather than rigid AI legislation, India consciously adopts a light-touch, guidance-oriented model. This emphasises ethical AI, accountability and inclusivity – most notably through the concept of “human-in-the-loop” oversight – without constraining technological development.

Multinationals face clear, manageable compliance

Businesses, particularly multinationals aligned with global standards and accustomed to stringent safety-by-design obligations, may not find India’s framework cumbersome. Compliance expectations are clear in direction, but not complex in execution.

This voluntary-first posture signals regulatory confidence in industry-led best practices, while preserving the government’s ability to intervene where risks materialise. In practical terms, companies entering India can deploy AI with a reasonable degree of autonomy, provided they align with globally accepted standards of fairness, transparency and accountability.

This balance between innovation and oversight enhances investor confidence and reduces regulatory friction during market entry.

DPDP Act enables trusted innovation

In parallel, India’s Digital Personal Data Protection Act, 2023 reinforces this facilitative framework, adopting a risk-based model of compliance anchored in user consent, limitation of purpose and lawful processing. Importantly, the act relaxes obligations for certain classes including startups. The exception is particularly noteworthy – underscoring India’s intent to foster innovation by reducing the early-stage compliance burden, without compromising core data protection principles.

For AI-driven businesses, the act provides a clear legal basis for training and deploying models using personal data, subject to informed consent and legitimate use. From a foreign investor’s perspective, India is not only open to digital innovation but equally committed to a secure and trustworthy ecosystem.

Since regulatory certainty in data governance is increasingly decisive in cross-border investment decisions, India’s framework compares favourably.

Tech-enabled compliance, fewer minor penalties

Recent regulatory development further illustrates the government’s effort to modernise compliance. Requirements around identifying and labelling AI-generated or synthetic content – particularly deepfakes – are often viewed through a restrictive lens. However, when considered in context, the measures represent a shift towards technology-enabled compliance.

Instead of relying on legacy mechanisms, the focus is now on embedding compliance within digital systems themselves. Authentication tools and traceability solutions, for instance, allow businesses to meet regulatory expectations in real time, reducing administrative overheads while addressing emerging risks.

Equally relevant is the broader legislative trend towards decriminalisation of minor economic offences, reflected in recent reforms. By replacing penal consequences with monetary penalties for procedural non-compliances, India is recalibrating its enforcement philosophy.

For technology companies, this reduces the spectre of criminal liability for inadvertent lapses, aligning enforcement with the realities of digital business operation.

Safe harbour supports predictable AI growth

Finally, India’s intermediary liability framework continues to provide a robust safe harbour regime. Digital platforms acting as intermediaries are allowed conditional immunity from liability for third-party content, subject to compliance with due diligence.

For businesses building platforms, marketplaces or AI-enabled services, the availability of safe harbour significantly mitigates legal risk and supports scalable operations.

Taken together these developments point to a coherent regulatory philosophy that prioritises the ease of doing business without diluting accountability, an ecosystem neither laissez-faire nor overbearing but calibrated, adaptive and increasingly aligned with global expectations. For businesses navigating the intersection of AI, data and digital platforms this creates a landscape that is both enabling and predictable – an essential combination for sustained investment and innovation.

Probir Roy Chowdhury and Sajai Singh are partners at JSA