India AI Governance Guidelines

What it is

The India AI Governance Guidelines are the Government of India’s national framework for governing artificial intelligence. The Ministry of Electronics and Information Technology (MeitY) released them on 5 November 2025 under the IndiaAI Mission. A committee chaired by Prof. Balaraman Ravindran of IIT Madras drafted them, working from an earlier draft report that was opened for public consultation.

The guidelines take what MeitY calls a principle-based, techno-legal approach. They do not create new legal duties. The Secretary of MeitY described the focus at launch as using existing legislation wherever possible, and the Principal Scientific Adviser summed up the spirit of the framework as “Do No Harm”.

The document has four parts.

• Seven guiding principles (sutras). Trust is the Foundation, People First, Innovation over Restraint, Fairness and Equity, Accountability, Understandable by Design, and Safety, Resilience and Sustainability.
• Recommendations across six pillars. Infrastructure, Capacity Building, Policy and Regulation, Risk Mitigation, Accountability and Institutions.
• An action plan mapped to short, medium and long-term timelines.
• Practical guidelines for industry, developers and regulators.

Who it applies to

The guidelines are written for anyone involved in developing or deploying AI systems in India, and for the government agencies and sector regulators who set policy. They are technology-agnostic and meant to apply across sectors. Because they are voluntary, they bind nobody on their own. The binding obligations an organisation faces still come from existing law, such as the Information Technology Act 2000, the IT Rules 2021 and their amendments, and the Digital Personal Data Protection Act 2023, plus sector rules from regulators such as the Reserve Bank of India, SEBI and IRDAI.

What it requires

For organisations, the practical guidelines in Part 4 are the operative section. The committee recommends that anyone developing or deploying AI in India should do the following.

• Comply with all Indian laws that may apply to AI systems, including information technology, data protection, copyright, consumer protection and laws on offences against women, children and other vulnerable groups.
• Be able to demonstrate compliance with those laws when a relevant agency or sector regulator asks.
• Adopt voluntary measures (principles, codes and standards) on privacy and security, fairness, inclusivity, non-discrimination and transparency, along with other technical and organisational measures.
• Create a grievance redressal mechanism so people can report AI-related harms and have them resolved within a reasonable time.
• Publish transparency reports that evaluate the risk of harm to individuals and society in the Indian context, sharing sensitive or proprietary content confidentially with regulators.
• Explore techno-legal tools such as privacy-enhancing technologies, machine unlearning, algorithmic auditing systems and automated bias detection.

The pillar recommendations point the same way. Under Risk Mitigation, the committee recommends an India-specific AI risk assessment and classification framework with a focus on vulnerable groups, a national federated AI incident reporting mechanism, proportionate voluntary risk mitigation frameworks, and mandatory human oversight and safeguards against loss of control in sensitive and critical sectors. Under Accountability, it recommends graded obligations and liability proportional to an actor’s function, risk and due diligence, along with transparency reports, audits and self-certification.

For government, the Institutions pillar proposes an AI Governance Group (AIGG) to coordinate policy, a Technology and Policy Expert Committee (TPEC) to advise it, and resourcing for the IndiaAI Safety Institute to develop standards, testing methods and benchmarks.

Key dates

MeitY constituted the drafting committee in July 2025. The final guidelines were released on 5 November 2025, ahead of the India AI Impact Summit 2026. The Press Information Bureau published a backgrounder on 15 February 2026.

The action plan has no fixed calendar dates. Short-term actions include establishing the AIGG and TPEC, developing India-specific risk classification frameworks, a regulatory review, a master circular of applicable regulations and best practices, and groundwork for an AI incident database. Medium-term actions include common standards for content authentication, data integrity, fairness and cybersecurity, a national AI incidents database, legal amendments where needed and regulatory sandboxes in high-risk domains. Long-term actions include ongoing review of the framework and new laws for emerging risks.

How it relates to other frameworks

The guidelines sit above India’s binding rules rather than replacing them. The Digital Personal Data Protection Act 2023 and the DPDP Rules 2025 govern any AI that processes digital personal data, and are the main source of enforceable obligations. In the financial sector, the Reserve Bank of India’s FREE-AI framework uses the same seven sutras and adds sector-specific recommendations such as a board-approved AI policy and an AI inventory.

Outside India, the sutras cover the same ground as the OECD AI Principles and Singapore’s Model AI Governance Framework. An organisation already running a risk-based programme under the NIST AI Risk Management Framework or ISO/IEC 42001 will find most of what the practical guidelines ask for is already in place. What it will need to add are the India-specific pieces, namely a grievance redressal channel for AI harms and transparency reporting on risk in the Indian context.

A note on this page

This is Aicura’s reading of the guidelines, written to help you understand them. It is not legal advice and it is not the guidelines themselves. Read the primary document from MeitY and the IndiaAI Mission, and take advice on how Indian law applies to your organisation.