India: Cybersecurity

India is well-positioned to capitalise on the growth and transformative potential of artificial intelligence ("AI"). With over six million people employed across the technology and AI ecosystem, over USD 1.1 billion in proposed Government investment, and a projected economic contribution of USD 1.7 trillion by 2035, India is poised to become a key driver in the global AI economy.

The protection of trade secrets, which contain proprietary business data that provides competitive advantages through its formulas, processes and design specifications, needs to be maintained because its disclosure threatens cybersecurity systems with both financial losses and reputational harm.

On 26 April 2026, the Indian Computer Emergency Response Team (CERT-In) issued an advisory titled, “Defending Against Frontier AI Driven Cyber Risks” (Advisory), categorised as high severity. While framed as an advisory, it reflects a clear regulatory shift. Artificial Intelligence (AI) incident preparedness is no longer a matter of best practice, it is increasingly a baseline compliance expectation against which organisational readiness may be assessed.

India's insurance sector has grown rapidly over the past two decades, with various reports indicating a compounded annual growth rate of approximately 17% during this period

The rapid growth of deepfakes and other AI generated media is no longer only a content moderation problem, it is increasingly a litigation and evidence problem for Indian courts.

The Indian Computer Emergency Response Team (CERT-In), under the Ministry of Electronics and Information Technology (MeitY), in collaboration with SatCoM Industry Association (SIA-India) released the Cyber Security Framework and Guidelines for Space including Satellite Communication (Framework) on 26 February 2026.

At the heart of India's digital journey lie three interconnected pillars shaping its future. AI Innovation → Encouraging growth of AI technologies through missions like IndiaAI Mission...

Rule 7A(5) and Rule 5 (6) of The Amendment Rules authorize the Central Government to access telecom identifier-related data from TIUEs and direct suspension or deactivation of identifiers without prior notice to the user, ostensibly to curb cyber fraud

In an era defined by an escalating digital evolution and intricate cyber threats, the Reserve Bank of India ("RBI") is progressively tightening the cyber resilience criteria for financial entities, which encompass scheduled commercial banks, non-banking financial companies ("NBFCs"), and other regulated institutions.