Overview

Artificial Intelligence has moved from research labs to everyday life -- powering search engines, medical diagnostics, autonomous vehicles, and judicial assistants. Yet the rapid deployment of AI raises profound governance questions: Who is accountable when an algorithm discriminates? How should governments regulate systems that evolve faster than legislation? Can AI-generated deepfakes undermine democracies? For UPSC, AI governance spans GS3 (Science & Technology, Economic Development) and GS4 (Ethics) -- questions test understanding of regulatory frameworks, India's policy approach, ethical implications, and global comparisons.

This chapter goes deep into AI governance, ethics, and India's policy architecture -- distinct from the broad overview of emerging technologies covered in Chapter 5.


AI Landscape — Key Concepts

Types of AI

TypeDescriptionCurrent Status
Narrow AI (ANI)Designed for a specific task -- image recognition, language translation, chessAll current AI systems are narrow AI; this is the only type that exists today
General AI (AGI)Hypothetical AI with human-level cognitive abilities across all domains -- reasoning, learning, creativityDoes not exist; remains a research aspiration; timelines debated (decades to never)
Super AI (ASI)Hypothetical AI surpassing human intelligence in every domainPurely theoretical; raises existential risk debates (Bostrom, Russell)

Key AI Technologies

TechnologyWhat It Does
Machine Learning (ML)Algorithms that learn patterns from data without being explicitly programmed; includes supervised, unsupervised, and reinforcement learning
Deep LearningSubset of ML using artificial neural networks with multiple layers; powers image recognition, speech processing, and language models
Generative AIAI that creates new content -- text (ChatGPT, Gemini), images (DALL-E, Midjourney), code, music -- based on patterns in training data
Natural Language Processing (NLP)Enables machines to understand, interpret, and generate human language
Computer VisionEnables machines to interpret visual information from images and videos

The AI Governance Challenge

Why AI Needs Governance

ChallengeDetail
Algorithmic biasAI systems trained on biased data reproduce and amplify societal inequalities -- in hiring, lending, criminal justice, and healthcare; Amazon's AI recruiting tool (scrapped 2018) penalised resumes containing the word "women's"
Transparency / Black box problemDeep learning models often cannot explain their decision-making process; a doctor or judge cannot understand why the AI reached a particular conclusion
Accountability gapWhen an AI system causes harm (misdiagnosis, wrongful denial of loan, autonomous vehicle accident), legal liability is unclear -- is it the developer, deployer, or user?
PrivacyAI systems require massive datasets, often including personal data; facial recognition, surveillance, and behavioural profiling raise fundamental privacy concerns
DeepfakesAI-generated synthetic media (video, audio, images) can impersonate real people, spread disinformation, manipulate elections, and enable fraud
Job displacementAutomation threatens jobs across sectors -- manufacturing, customer service, data entry, content creation; McKinsey estimates 400-800 million workers globally could be displaced by 2030
Autonomous weaponsLethal Autonomous Weapons Systems (LAWS) that can select and engage targets without human intervention raise fundamental ethical and legal questions

For Mains: AI governance is not just a technology question -- it is a governance, ethics, and rights question. The challenge is to regulate AI without stifling innovation. India's approach of "light-touch regulation" contrasts with the EU's comprehensive legislation. Discuss the merits and risks of each approach.


Global AI Regulatory Approaches

EU AI Act, 2024

FeatureDetail
AdoptedJune 2024; entered into force 1 August 2024; full applicability by 2 August 2026
ApproachRisk-based classification -- the first comprehensive AI-specific legislation globally
Unacceptable risk (banned)Social scoring by governments, real-time remote biometric identification in public spaces (with limited exceptions), manipulation of vulnerable groups, emotion recognition in workplaces/schools
High risk (regulated)AI in critical infrastructure, education, employment, law enforcement, migration, justice; must meet transparency, data governance, human oversight, and accuracy requirements
Limited risk (transparency)Chatbots, deepfakes -- users must be informed they are interacting with AI or viewing AI-generated content
Minimal risk (unregulated)AI-enabled video games, spam filters -- the majority of current AI applications
PenaltiesUp to EUR 35 million or 7% of global annual turnover for violations

US Approach

FeatureDetail
Executive Order 14110Signed by President Biden on 30 October 2023 -- the most comprehensive US government AI governance action; required safety testing, red-teaming, and reporting for powerful AI models
StatusRescinded by President Trump on 20 January 2025; replaced with Executive Order emphasising deregulation and US AI leadership
ApproachSectoral regulation rather than a single comprehensive law; agencies like FDA, FTC, and EEOC apply existing frameworks to AI within their domains
Blueprint for an AI Bill of RightsReleased 2022 -- non-binding principles: safe systems, algorithmic discrimination protection, data privacy, notice and explanation, human alternatives

China's AI Regulations

RegulationYearKey Provisions
Administrative Provisions on Deep SynthesisJanuary 2023Regulates deepfakes and synthetic content; requires labelling and traceability
Interim Measures for Generative AI ServicesAugust 2023First binding regulation for generative AI globally; requires security assessments, algorithm filing with the Cyberspace Administration of China (CAC), content moderation, and adherence to "socialist core values"
AI Content Labelling MeasuresSeptember 2025Mandatory "Generated by AI" labels on all AI-generated content
ApproachTechnology-specific regulations rather than a single comprehensive law; prioritises state control over content and data

For Prelims: EU AI Act = risk-based framework, 4 categories (unacceptable/high/limited/minimal risk), entered into force August 2024. US Biden EO 14110 on AI safety was rescinded by Trump in January 2025. China was the first country with binding generative AI regulations (August 2023).


India's AI Policy Framework

IndiaAI Mission

FeatureDetail
Approved7 March 2024 by Union Cabinet
OutlayRs 10,372 crore for 5 years
Implementing bodyIndiaAI Independent Business Division (IBD) under Digital India Corporation (DIC), Ministry of Electronics and IT (MeitY)
Compute infrastructureRs 4,563 crore for scalable AI computing; 10,000+ GPU capacity for startups, researchers, and government
Innovation CentreRs 1,971 crore for IndiaAI Innovation Centre (IAIC) -- R&D hub for foundational AI models
Startup financingRs 1,943 crore for AI startup ecosystem development
FutureSkillsRs 883 crore for AI talent development and skilling programmes
Datasets platformIndiaAI Datasets Platform to unify non-personal government datasets for AI training
AI safetyIndiaAI Safe AI pillar -- guidelines for responsible AI deployment

NITI Aayog — Responsible AI for All (#AIForAll)

DocumentDateKey Content
National Strategy for AIJune 2018Identified 5 focus sectors: healthcare, agriculture, education, smart cities, smart mobility
Responsible AI Part 1: PrinciplesFebruary 20217 principles derived from Constitutional values: (1) inclusive growth, non-discrimination and equity; (2) safety and reliability; (3) privacy and data protection; (4) transparency and explainability; (5) accountability and auditability; (6) human oversight; (7) social and environmental well-being
Responsible AI Part 2: OperationalisationAugust 2021Framework for implementing the 7 principles in practice -- sector-specific guidance

India's Global AI Engagement

InitiativeDetail
GPAI (Global Partnership on AI)India is a founding member (June 2020); served as Council Chair in 2022; hosted the GPAI Summit in New Delhi, December 2023
AI Safety SummitIndia participated in the Bletchley Park AI Safety Summit (November 2023, UK) and Seoul AI Safety Summit (2024)
ApproachIndia favours innovation-friendly, risk-proportionate regulation rather than prescriptive legislation; no dedicated AI law as of March 2026; regulation through existing frameworks (IT Act, DPDP Act 2023, sector-specific rules)

For Mains: India's approach to AI regulation is distinct from the EU (comprehensive law) and the US (sectoral regulation). India relies on existing legal frameworks, voluntary guidelines (NITI Aayog), and mission-mode programmes (IndiaAI Mission). Critically evaluate whether this "light-touch" approach is adequate given AI's rapid proliferation and the risks of algorithmic bias, deepfakes, and job displacement in a country with India's demographic profile.


AI in Indian Governance

Key Applications

ApplicationSystem / InitiativeDetail
JudiciarySUPACE (Supreme Court Portal for Assistance in Courts Efficiency)Launched April 2021; AI-assisted tool for case management -- extracts facts, chronology, and precedents from case files; does NOT take decisions; assists judges and researchers
AgricultureAI-powered crop advisoryICAR and state governments deploying AI for pest prediction, yield estimation, and soil analysis
HealthcareeSanjeevani CDSSAI-based Clinical Decision Support System integrated into India's telemedicine platform; covers 300 symptoms with branching logic
Tax administrationProject InsightAI-based data analytics for identifying tax evasion patterns
Smart citiesICCC (Integrated Command & Control Centres)AI-powered surveillance, traffic management, and civic service delivery in 100 smart cities
e-Courts Phase IIIAI and blockchainRs 53.57 crore allocated for AI/ML in judicial domain under eCourts Phase III (2023--2027)

Deepfakes — Regulation and Risks

The Deepfake Challenge

AspectDetail
WhatAI-generated synthetic media -- realistic but fake videos, audio, and images of real people
TechnologyGenerative Adversarial Networks (GANs) and diffusion models enable increasingly convincing deepfakes
RisksElection manipulation, non-consensual intimate imagery, financial fraud (CEO voice cloning), erosion of trust in authentic media
ScaleIndia ranks among the top 6 most deepfake-susceptible nations; incidents involving political leaders and celebrities have surged

India's Regulatory Response

MeasureDetail
IT Rules Amendment (2025)Amended the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021; came into force 15 November 2025; defines "synthetically generated information" (SGI); mandates 3-hour takedown for flagged deepfake content (down from 36 hours)
MeitY AdvisoriesMultiple advisories to social media intermediaries reminding them of due diligence obligations regarding AI-generated content
Section 66D, IT ActPunishment for cheating by personation using a computer resource -- applicable to deepfake-based fraud
Existing criminal lawIPC/BNS provisions on defamation, obscenity, and impersonation apply to harmful deepfakes

Autonomous Weapons — The LAWS Debate

AspectDetail
What are LAWSLethal Autonomous Weapons Systems -- weapons that can select and engage targets without meaningful human control
UN processGroup of Governmental Experts (GGE) under the Convention on Certain Conventional Weapons (CCW) has been discussing LAWS since 2014
UNGA Resolution (December 2024)Adopted with 166 votes in favour, 3 against (Belarus, DPRK, Russia), 15 abstentions; called for urgent action towards a binding instrument
Key positionsProhibitionists: ban all LAWS (Campaign to Stop Killer Robots); Regulators: new treaty with prohibitions + restrictions; Traditionalists: existing IHL is sufficient
TimelineUN Secretary-General and ICRC call for treaty negotiations to conclude by end of 2026
India's positionIndia participates in CCW GGE discussions; supports human control over the use of force; has not committed to a binding ban

For Mains: "The development of Lethal Autonomous Weapons Systems raises fundamental questions about the ethics of delegating life-and-death decisions to machines." Discuss India's position and the prospects for an international treaty.


AI and Intellectual Property

IssueDetail
AI-generated worksCan AI-generated art, music, or text be copyrighted? Most jurisdictions (including India) require a human author; Copyright Act 1957 protects works by "authors" -- AI is not an "author"
AI and patentsDABUS (an AI system) was denied patent inventorship by courts in the US, UK, and Australia; only natural persons can be "inventors" under most patent laws
Training dataAI models trained on copyrighted material raise infringement questions; ongoing lawsuits (New York Times v. OpenAI) globally
India's positionNo specific legislation; existing IP framework applies; Parliamentary Standing Committee has recommended a review of IP laws in the context of AI

AI Ethics — Key Philosophical Frameworks

FrameworkCore IdeaApplication to AI
UtilitarianismMaximise overall well-being; actions are judged by their outcomesAI should be deployed where it maximises net benefit to society; but whose well-being counts, and who decides?
Deontological (Kantian)Actions must respect universal moral rules and human dignity regardless of consequencesAI must never treat humans merely as means to an end; informed consent, transparency, and respect for autonomy are non-negotiable
Virtue ethicsFocus on the character and intentions of the moral agentAI developers and deployers must cultivate responsibility, honesty, and fairness; "ethical AI" requires ethical humans
Rights-basedCertain fundamental rights (privacy, non-discrimination, due process) cannot be violated even for greater goodAI must not infringe on fundamental rights regardless of efficiency gains; basis of the EU AI Act's approach
Justice as fairness (Rawlsian)Inequalities are acceptable only if they benefit the least advantaged members of societyAI systems must be evaluated by their impact on the most vulnerable; bias that disproportionately harms marginalised groups is unjust

For Mains (GS4 Ethics): AI ethics is not merely a technical problem -- it raises foundational questions about moral agency, accountability, justice, and what it means to be human. The "trolley problem" in autonomous vehicles (whom should the car save in an unavoidable accident?) illustrates how AI forces us to make explicit the moral choices that humans make implicitly every day.


AI and Data Protection — The DPDP Act Connection

FeatureDetail
Digital Personal Data Protection Act, 2023India's first comprehensive data protection law; governs collection, processing, and storage of personal data
Relevance to AIAI systems depend on massive datasets, often containing personal data; DPDP Act imposes consent requirements, purpose limitation, and data minimisation -- directly affecting AI training and deployment
Data Principal rightsRight to access, correction, erasure of personal data; right to grievance redressal -- AI systems must respect these rights
Automated decision-makingThe DPDP Act does not explicitly address algorithmic decision-making rights (unlike EU GDPR Article 22); this is a gap in India's framework
Cross-border dataData can be transferred to countries not on the government's restricted list; enables AI model training on global cloud infrastructure
AI-specific gapNo right to explanation for AI-driven decisions; no mandatory algorithmic impact assessment; these may need to be addressed through sectoral regulations

AI, Jobs, and the Future of Work

AspectDetail
Displacement riskRoutine cognitive tasks (data entry, bookkeeping, basic coding, customer service) most vulnerable; ILO estimates generative AI could automate tasks in ~300 million jobs globally
AugmentationAI augments professionals -- doctors (diagnostics), lawyers (research), teachers (personalised learning) -- rather than fully replacing them
India's challengeIndia's demographic dividend depends on job creation; if AI automates service sector jobs (IT, BPO) before manufacturing absorbs surplus labour, the employment challenge intensifies
Policy responsesReskilling programmes (IndiaAI FutureSkills), social safety nets, education reform to emphasise creativity, critical thinking, and human skills that AI cannot replicate

Comparison of Global AI Governance Models

ParameterEUUSAChinaIndia
ApproachComprehensive, risk-based legislationSectoral regulation (no single AI law)Technology-specific regulations; state-directedLight-touch; existing frameworks + voluntary guidelines
Key instrumentEU AI Act (2024)Executive Orders (rescinded); sector-specific rulesGenerative AI Measures (2023); Deep Synthesis Provisions (2023)IndiaAI Mission (2024); NITI Aayog principles (2021); IT Act/Rules; DPDP Act 2023
EnforcementStrong -- up to EUR 35 million / 7% turnoverVaries by sector; FTC, FDA enforcementCAC enforcement; algorithm filing; content controlThrough existing regulators; no AI-specific enforcement body
Innovation stanceRegulation-first; may slow innovationPro-innovation (post-2025); minimal regulationState-guided innovation; control over contentInnovation-first; regulation later
Bias/fairnessMandatory bias audits for high-risk AINo binding requirementLimited provisionsVoluntary (NITI Aayog principles)
TransparencyMandatory for high-risk and limited-risk AIVariesMandatory labelling for AI-generated contentEmerging (IT Rules Amendment on deepfakes)

UPSC Relevance

Prelims Focus Areas

  • IndiaAI Mission: approved March 2024; Rs 10,372 crore; 5 years; MeitY
  • EU AI Act: risk-based framework; 4 categories; entered into force August 2024
  • NITI Aayog Responsible AI: 7 principles (February 2021); #AIForAll
  • GPAI: India founding member (2020); Council Chair (2022); hosted Summit December 2023
  • SUPACE: launched April 2021; AI-assisted tool for Supreme Court case management
  • Deepfake regulation: IT Rules Amendment 2025; 3-hour takedown; SGI definition
  • LAWS: UNGA resolution December 2024 -- 166 in favour

Mains Focus Areas

  • AI governance models -- EU (comprehensive), US (sectoral), China (state-directed), India (light-touch)
  • Algorithmic bias and discrimination -- implications for social justice and constitutional values
  • Deepfakes and the integrity of democratic processes
  • AI in governance -- potential and limitations (SUPACE, eSanjeevani CDSS, smart cities)
  • Job displacement vs augmentation -- India's demographic dividend at risk?
  • Autonomous weapons -- ethics of delegating lethal force to machines
  • Balancing innovation with regulation -- India's approach

Recent Developments (2024–2026)

IndiaAI Mission — ₹10,372 Crore Framework and Governance Guidelines 2024–2025

The IndiaAI Mission was formally launched in March 2024 with a ₹10,372 crore outlay, operating across seven pillars: Compute Capacity (deploying 18,000+ GPUs via public-private partnerships), Innovation Centre, Datasets Platform, Application Development, FutureSkills, Startup Financing, and Safe & Trusted AI. India established an AI Compute infrastructure at a national scale, providing access to high-performance computing to startups and researchers at subsidised rates — a critical enabler for domestic AI model development.

On 5 November 2025, MeitY unveiled the India AI Governance Guidelines, taking a "lightweight" adaptive approach rather than a standalone AI law. The guidelines established seven principles — Trust as Foundation, People First, Innovation over Restraint, Fairness & Equity, Accountability, Transparency, and Privacy — and proposed new institutional bodies: the AI Governance Group (AIGG), Technology & Policy Expert Committee (TPEC), and an IndiaAI Safety Institute. India explicitly chose not to introduce a new standalone AI regulation, instead leveraging the DPDP Act 2023 and existing IP laws to govern AI — contrasting with the EU's comprehensive AI Act approach.

UPSC angle: IndiaAI Mission (₹10,372 crore, 7 pillars, March 2024), India AI Governance Guidelines (November 2025, lightweight approach, AIGG/TPEC), and India's regulatory philosophy (innovation-first vs EU prescriptive) are Prelims and Mains GS-3 content.


Digital Personal Data Protection — DPDP Rules 2025 and AI Implications

India's long-awaited Digital Personal Data Protection Act, 2023 (DPDPA) received its implementing rules on 13 November 2025, covering ~800 million internet users (15% of global digital population). The rules take full effect from 13 May 2027 (18-month transition). For AI-driven organizations, the rules mandated Data Protection Impact Assessments (DPIAs), audits for Significant Data Fiduciaries, and systematic identification of algorithmic bias risks before deployment.

IT (Amendment) Rules 2025 separately mandated labelling of synthetic/AI-generated content and verification protocols — directly targeting deepfakes and AI misinformation. India's approach to AI content regulation bypasses a standalone AI law and instead amends existing IT Rules, reflecting MeitY's stated preference for adaptive regulation rather than comprehensive legislation. The proposed Digital India Act (to replace the 22-year-old IT Act 2000) remains under consultation as of 2026, expected to address AI, blockchain, and new-age platform governance.

UPSC angle: DPDP Rules 2025 (13 November 2025, effective 13 May 2027, DPIA mandate), IT Amendment Rules 2025 (synthetic content labelling), Digital India Act (proposed replacement for IT Act 2000), and India's AI regulatory philosophy are Mains GS-2/GS-3 and Prelims content.


EU AI Act 2024 — Global Benchmark for Risk-Based AI Regulation

The European Union's AI Act entered into force on 2 August 2024 — the world's first comprehensive legally binding AI regulation, applying a risk-based tiered framework. Unacceptable risk AI (e.g., social scoring, real-time public biometric surveillance) is prohibited. High-risk AI (medical devices, critical infrastructure, education, law enforcement) requires mandatory conformity assessments, human oversight, and transparency. Limited-risk AI (chatbots) requires transparency disclosures. General-purpose AI models (GPAIs like GPT-4) require technical documentation and copyright compliance.

The EU AI Act applies extraterritorially — any AI system used in the EU market must comply, regardless of where the developer is located. This has major implications for Indian IT companies exporting AI products to Europe. India's IT industry (₹224 billion exports FY25) must now align with EU AI Act compliance requirements. NASSCOM began AI Act compliance frameworks for Indian exporters in 2024. The Act also bans predictive policing AI and emotion recognition in workplaces — areas where India's own DPDP Act remains silent, creating regulatory divergence.

UPSC angle: EU AI Act (2 August 2024, risk-based tiers, world's first comprehensive AI law), prohibited AI categories, GPAI provisions, extraterritorial scope affecting Indian IT exports, and India-EU regulatory divergence are Mains GS-3 and essay content.


Vocabulary

Algorithmic Bias

  • Pronunciation: /ˌalgəˈrɪðmɪk ˈbaɪəs/
  • Definition: Systematic and repeatable errors in an AI system's outputs that create unfair outcomes for particular groups, arising from biased training data, flawed model design, or unrepresentative datasets -- resulting in discrimination in areas such as hiring, lending, criminal sentencing, and healthcare.
  • Origin: From Arabic al-khwarizmi (after the 9th-century mathematician whose name gave us "algorithm") + Old French biais ("oblique, slant"); the concept gained prominence in the 2010s as AI systems were deployed at scale in high-stakes decision-making, exposing how historical inequalities embedded in training data are reproduced and amplified by machine learning models.

Deepfake

  • Pronunciation: /ˈdiːpfeɪk/
  • Definition: Synthetic media -- typically video, audio, or images -- created using deep learning techniques (especially Generative Adversarial Networks and diffusion models) that realistically depict a person saying or doing something they never actually said or did, posing risks to democratic integrity, personal reputation, and information ecosystems.
  • Origin: A portmanteau of deep learning + fake; coined in 2017 by a Reddit user who used AI to superimpose celebrity faces onto videos; the technology has since advanced rapidly, making detection increasingly difficult and regulatory intervention urgent.

Key Terms

IndiaAI Mission

  • Pronunciation: /ˈɪndiə eɪˈaɪ ˈmɪʃən/
  • Definition: India's flagship national programme for artificial intelligence, approved by the Union Cabinet on 7 March 2024 with an outlay of Rs 10,372 crore over 5 years, comprising seven pillars -- compute infrastructure (10,000+ GPUs), innovation centre, datasets platform, application development, FutureSkills (talent development), startup financing, and safe AI -- implemented by the IndiaAI Independent Business Division under Digital India Corporation, MeitY.
  • Context: India's approach to AI differs from the EU's regulation-first model; the IndiaAI Mission prioritises building foundational infrastructure (compute, data, talent) to enable India's AI ecosystem, while governance relies on existing legal frameworks and voluntary principles rather than a dedicated AI law.
  • UPSC Relevance: GS3 (Science & Technology, Economic Development). Prelims: budget (Rs 10,372 crore), approval date (March 2024), implementing body (MeitY/DIC). Mains: evaluate India's AI strategy in the context of global competition, the need for responsible AI, and the challenge of ensuring AI benefits reach all sections of society (#AIForAll).

EU AI Act

  • Pronunciation: /ˌiː ˈjuː eɪˈaɪ ækt/
  • Definition: The European Union's Artificial Intelligence Act, adopted in June 2024 and entered into force on 1 August 2024, establishing the world's first comprehensive, legally binding regulatory framework for AI based on a risk classification system -- prohibiting unacceptable-risk AI practices, imposing strict obligations on high-risk AI systems, requiring transparency for limited-risk systems, and leaving minimal-risk AI unregulated.
  • Context: The EU AI Act serves as a global benchmark for AI regulation, similar to how GDPR set the standard for data protection; it has extraterritorial application -- any AI system affecting EU citizens must comply, regardless of where the developer is based; penalties reach up to EUR 35 million or 7% of global turnover.
  • UPSC Relevance: GS3 (Science & Technology). Prelims: risk-based framework, 4 categories, entry into force (August 2024). Mains: compare India's light-touch approach with the EU's comprehensive regulation; discuss whether prescriptive AI legislation would help or hinder India's AI ambitions.

Sources: pib.gov.in (IndiaAI Mission, March 2024), NITI Aayog (Responsible AI #AIForAll, February 2021; August 2021), indiaai.gov.in, European Commission (EU AI Act, 2024), White House Archives (Executive Order 14110, October 2023), Cyberspace Administration of China (Generative AI Interim Measures, 2023), MeitY (IT Rules Amendment 2025 on deepfakes), Supreme Court of India (SUPACE), UNODA (LAWS GGE), UNGA Resolution 78/241 (December 2024)