Key Details
The 12 August 2026 Lok Sabha reply confirms that India is presently addressing AI risks through governance institutions, platform obligations and existing cyber and criminal laws rather than a standalone AI statute. It also exposes a significant information gap: the scale and outcomes of AI-enabled misuse are not separately reported.
AI governance: The India AI Governance Guidelines were issued in November 2025. An inter-ministerial group, expert committee and AI Safety Institute have subsequently been initiated.
Synthetic-content rules: The IT Rules were amended in February 2026 to cover deepfakes and other synthetically generated information.
Platform obligations: Permissible synthetic content must carry labels and traceable metadata, while platforms must deploy appropriate measures against unlawful AI-generated material.
Faster action: Compliance with a valid government or court removal direction was reduced from 36 hours to three hours. The response period for specified sensitive grievances was reduced from 24 hours to two hours.
Evidence gap: Although the parliamentary question sought five years of misuse cases and action taken, the reply provides no year-wise figures or enforcement outcomes.
India Is Building a Distributed AI-Regulation Framework
The Government has not announced a dedicated AI law. Instead, different parts of the regulatory system address different risks:
The IT Act covers identity theft, online impersonation, privacy violations and unlawful electronic content.
The Bharatiya Nyaya Sanhita covers cheating by personation, electronic forgery and false information capable of causing public mischief.
The IT Rules impose due-diligence, grievance and content-moderation duties on online intermediaries.
The February 2026 amendments added explicit requirements for synthetically generated information, including labelling, traceable metadata and stronger detection and removal obligations.
Broader oversight is being developed through the AI Governance and Economic Group, Technology and Policy Expert Committee and AI Safety Institute. The reply says these mechanisms have been initiated, but does not explain their present operational status, membership or division of responsibilities.
Enforcement Data Remains the Missing Link
Cybercrime can be reported through the National Cyber Crime Reporting Portal or helpline 1930. The Indian Cyber Crime Coordination Centre supports national coordination, while States and Union Territories remain responsible for investigation and prosecution.
However, the reply does not identify:
how many complaints involved deepfakes or other AI-generated content;
how many resulted in platform removal or account action;
how many were converted into FIRs; or
how many led to prosecution or conviction.
AI-enabled incidents may currently be recorded under broader categories such as impersonation, forgery or cyber fraud. Without separate classification, the Government cannot show whether the problem is growing or whether the stronger rules are reducing harm.
Policy Relevance
The regulatory architecture is developing faster than its evidence base: India now has AI-governance institutions and specific platform duties, but no consolidated measure of the harms they are expected to address.
Existing laws provide coverage but fragment the data: Recording incidents under different offences may support prosecution while obscuring the overall scale of AI-enabled misuse.
Platform compliance should be measured through outcomes: Removal times are important, but reporting should also cover repeat circulation, FIRs, financial recovery, prosecutions and convictions.
Centre-State coordination determines whether national rules produce enforcement: Platforms and I4C may detect or receive complaints, but State police remain responsible for most investigations and prosecutions.
Institutional mandates need greater visibility: Public information on the roles and outputs of the three new AI-governance mechanisms would help distinguish strategic coordination, technical advice and safety evaluation.
Relevant Question for Policy Stakeholders: Can India assess the adequacy of its AI safeguards without systematically tracking the scale, investigation and outcomes of AI-generated harms?
Follow the Full Parliamentary Reply Here: Regulation and Misuse of Artificial Intelligence