India: New Technology

With the advent of Artificial Intelligence (“AI”) enabled tools, industries throughout the world are witnessing a stark shift in their operations and increasingly trying to harmonize the operations of their enterprises with AI led efficiencies. Even Global Capability Centres (“GCCs”) in India are making significant investments in AI with EY India GCC Pulse Survey 2025 estimating that 83% of GCCs already operating in India have invested in GenAI, and 58% of GCCs operating in India already investing in Agentic AI.

Instagram's 2026 policy shift introduces mandatory AI-generated profile labels and penalties for non-disclosure, creating new compliance challenges at the intersection of platform governance and India's statutory framework for synthetically generated information. How do these overlapping regimes affect brands, influencers, and content creators operating in India's digital ecosystem?

Artificial intelligence and machine learning systems depend heavily on data, raising important questions about privacy compliance. Businesses must navigate the Digital Personal Data Protection Act, 2023 alongside information technology laws, contractual obligations, and sector-specific regulations when deploying AI systems that collect, analyze, or generate information relating to identifiable individuals.

The rapid adoption of artificial intelligence (“AI”) has brought data protection considerations into the design, training and deployment of AI systems. AI models may be trained using datasets containing names, images, text, identifiers, behavioural information or other data that can relate to identifiable individuals. AI systems may also process personal data when they are deployed for purposes such as recruitment, credit assessment, insurance, healthcare, customer profiling or content moderation.

On 24 June 2026, actor Cate Blanchett and director Steven Soderbergh addressed the European Parliament in Brussels to announce the launch of the Human Consent Registry, an initiative of RSL Media, the non-profit co-founded by Blanchett. The Registry provides any individual — not only public figures — with a mechanism to record whether their image, voice, and identity may be used by artificial intelligence systems, and if so, under what conditions.

Cybersecurity regulation in India has, until now, largely spoken to the entity that suffers the breach. The 2022 CERT-In Directions issued under Section 70B of the Information Technology Act, 2000 fixed a six-hour reporting clock on the organisation that detects an incident. The new Guidelines flip the lens onto the entity upstream of that breach, the OEM or technology provider that built the product in the first place. For the first time, vendors supplying software, firmware, cloud platforms, or APIs into India carry direct, time-bound, and independently verifiable obligations of their own and not obligations that are merely passed through a customer contract, but obligations CERT-In itself may enforce.

The character of Dr. Ian Malcolm in the 1993 movie titled, “Jurassic Park”, perhaps put it most succinctly when he spoke about the adaptability of life. Change is constant, and like any other living organism, humans are remarkably proficient at adapting to their ever-changing surroundings.

The India–UK Comprehensive Economic and Trade Agreement (“CETA” or the “India–UK FTA”) is frequently discussed in the context of goods like automobiles, whisky, textiles and engineering products. Yet one of the sectors that stands to benefit most from the strengthening India-UK economic relationship is technology.

Generative Artificial Intelligence (“AI”) has transformed the way content is created across industries, enabling users to generate text, images, music, software code and audiovisual content within seconds. While these technological advancements have unlocked new opportunities for businesses and creators, they have also raised fundamental questions concerning copyright ownership, authorship and the use of copyrighted works for training AI models.