Federal Policy
India Implements AI Data Protection Rules
March 11, 2026
The Indian government, through the Ministry of Electronics and Information Technology (MeitY) and CERT-In, has enacted a comprehensive legal framework to mitigate AI-related harms, particularly focusing on protecting children's data and sensitive personal information. This framework includes the IT Act, 2000, IT Rules, the Digital Personal Data Protection (DPDP) Act, 2023, and the DPDP Rules, 2025, which establish strict content removal timelines, mandate verifiable parental consent via identity and age verification mechanisms, and prohibit behavioral tracking of minors. These regulations create new compliance requirements for technology vendors and service providers operating in India, especially those developing or deploying AI systems that process personal data.
- Why this matters: Procurement professionals and contractors must ensure that AI-related products and services comply with India's evolving data protection and cybersecurity regulations to avoid legal risks and enable market access.
- Organizations providing AI solutions should incorporate mechanisms for parental consent and data protection aligned with DPDP Rules, 2025, including virtual token-based verification.
- This legal framework signals increased government oversight and enforcement, highlighting the need for robust compliance programs and potential demand for cybersecurity and data privacy consulting services.
- Companies should evaluate their data handling and AI development practices to align with India's regulatory environment, which may influence contract requirements and procurement evaluations.
The DPDP Rules, 2025, prescribe the operational mechanisms for enforcing the data protections laid out in the 2023 Act. They act as a primary mechanic for obtaining "verifiable parental consent" through identity and age verification measures, including the use of virtual tokens.
— Government
Agencies
Ministry of Electronics and Information Technology, CERT-In
Locations
Sources
- Lok Sabha: Legal Safeguards Against AI-Related Harms - The Policy Edge · The Policy Edge · Mar 11