AI's Data Feast vs India's Privacy Chains: Is Our Law Already Obsolete?

Law vs Reality Clash

India's DPDP Act enforces strict consent, data minimization, and purpose limitation, but AI thrives on massive datasets for training generative models. Critics highlight gaps in addressing algorithmic bias, automated decisions, and scraping public data, potentially stifling innovation while global peers balance privacy with AI growth.​

Key Highlights

Core Tension: DPDP mandates data scarcity via minimization; AI requires vast, diverse data for accuracy and bias reduction.​

Regulatory Gaps: No AI-specific rules for transparency, audits, or high-risk processing; relies on non-binding NITI Aayog guidelines.​

SDF Obligations: Significant Data Fiduciaries face DPIAs and audits, but exemptions for research remain limited.​

Global Context: Contrasts EU AI Act's risk tiers; India's draft rules add compliance burdens without enabling abundance.​

Path Forward

Upcoming Digital India Act may bridge gaps, but experts urge AI-tailored reforms for ethical abundance.

Sources: Mondaq, Economic Times, Grant Thornton.