Article summary
Abstract
This study analyses the interplay between artificial intelligence deployment and data pro
tection within India's cyber legal framework, identifying gaps, tensions, and opportunities for
governance. The research problem centres on how existing statutes, regulatory guidelines, and
jurisprudence address AI-enabled data processing, privacy rights, and accountability in a rapidly
digitizing economy. A mixed-method approach combines doctrinal analysis of statutes such as
the Information Technology Act, the Personal Data Protection Bill proposals, and sectorial regu
lations with empirical examination of case law, regulatory guidance, and stakeholder interviews.
Findings indicate persistent ambiguities in consent, purpose limitation, data minimization, and
cross-border data transfers, alongside evolving obligations for data fiduciaries and AI service
providers. The study also illuminates the role of supervisory authorities, redress mechanisms,
and risk-based compliance frameworks in promoting responsible AI. The conclusion argues for
a coherent, principle-based regulatory architecture that harmonizes innovation with privacy
protections, enhances transparency, and strengthens accountability to bolster public trust and
sectorial resilience in India’s digital future.