India to come up with AI Regulation Framework

Introduction

The Senate bill introduced on 19 March 2024 in the United States would require online platforms to obtain consumer consent before using their data for Artificial Intelligence (AI) model training. If a company fails to obtain this consent, it would be considered a deceptive or unfair practice and result in enforcement action from the Federal Trade Commission (FTC) under the AI consumer opt-in, notification standards, and ethical norms for training (AI Consent) bill. The legislation aims to strengthen consumer protection and give Americans the power to determine how their data is used by online platforms. 

The proposed bill also seeks to create standards for disclosures, including requiring platforms to provide instructions to consumers on how they can affirm or rescind their consent. The option to grant or revoke consent should be made available at any time through an accessible and easily navigable mechanism, and the selection to withhold or reverse consent must be at least as prominent as the option to accept while taking the same number of steps or fewer as the option to accept.

The AI Consent bill directs the FTC to implement regulations to improve transparency by requiring companies to disclose when the data of individuals will be used to train AI and receive consumer opt-in to this use. 
The bill also commissions an FTC report on the technical feasibility of de-identifying data, given the rapid advancements in AI technologies, evaluating potential measures companies could take to effectively de-identify user data.

The definition of ‘Artificial Intelligence System’ under the proposed bill

ARTIFICIALINTELLIGENCE SYSTEM- The term artificial intelligence system“ means a machine-based system that—

1. Is capable of influencing the environment by producing an output, including predictions, recommendations or decisions, for a given set of objectives; and
2. 2. Uses machine or human-based data and inputs to

(i) Perceive real or virtual environments;

(ii) Abstract these perceptions into models through analysis in an automated manner (such as by using machine learning) or manually; and

(iii) Use model inference to formulate options for outcomes.

Importance of the proposed AI Consent Bill USA

1. Consumer Data Protection: The AI Consent bill primarily upholds the privacy rights of an individual. Consent is necessitated from the consumer before data is used for AI Training; the bill aims to empower individuals with unhinged autonomy over the use of personal information. The scope of the bill aligns with the greater objective of data protection laws globally, stressing the criticality of privacy rights and autonomy.

2. Prohibition Measures: The proposed bill intends to prohibit covered entities from exploiting the data of consumers for training purposes without their consent. This prohibition extends to the sale of data, transfer to third parties and usage. Such measures aim to prevent data misuse and exploitation of personal information. The bill aims to ensure companies are leveraged by consumer information for the development of AI without a transparent process of consent.

3. Transparent Consent Procedures: The bill calls for clear and conspicuous disclosures to be provided by the companies for the intended use of consumer data for AI training. The entities must provide a comprehensive explanation of data processing and its implications for consumers. The transparency fostered by the proposed bill allows consumers to make sound decisions about their data and its management, hence nurturing a sense of accountability and trust in data-driven practices.

4. Regulatory Compliance: The bill's guidelines call for strict requirements for procuring the consent of an individual. The entities must follow a prescribed mechanism for content solicitation, making the process streamlined and accessible for consumers. Moreover, the acquisition of content must be independent, i.e. without terms of service and other contractual obligations. These provisions underscore the importance of active and informed consent in data processing activities, reinforcing the principles of data protection and privacy.

5. Enforcement and Oversight: To enforce compliance with the provisions of the bill, robust mechanisms for oversight and enforcement are established. Violations of the prescribed regulations are treated as unfair or deceptive acts under its provisions. Empowering regulatory bodies like the FTC to ensure adherence to data privacy standards. By holding covered entities accountable for compliance, the bill fosters a culture of accountability and responsibility in data handling practices, thereby enhancing consumer trust and confidence in the digital ecosystem.

Importance of Data Anonymization

Data Anonymization is the process of concealing or removing personal or private information from the data set to safeguard the privacy of the individual associated with it. Anonymised data is a sort of information sanitisation in which data anonymisation techniques encrypt or delete personally identifying information from datasets to protect data privacy of the subject. This reduces the danger of unintentional exposure during information transfer across borders and allows for easier assessment and analytics after anonymisation. When personal information is compromised, the organisation suffers not just a security breach but also a breach of confidence from the client or consumer. Such assaults can result in a wide range of privacy infractions, including breach of contract, discrimination, and identity theft.

The AI consent bill asks the FTC to study data de-identification methods. Data anonymisation is critical to improving privacy protection since it reduces the danger of re-identification and unauthorised access to personal information. Regulatory bodies can increase privacy safeguards and reduce privacy risks connected with data processing operations by investigating and perhaps implementing anonymisation procedures.

The AI consent bill emphasises de-identification methods, as well as the DPDP Act 2023 in India, while not specifically talking about data de-identification, but it emphasises the data minimisation principles, which highlights the potential future focus on data anonymisation processes or techniques in India.

Conclusion

The proposed AI Consent bill in the US represents a significant step towards enhancing consumer privacy rights and data protection in the context of AI development. Through its stringent prohibitions, transparent consent procedures, regulatory compliance measures, and robust enforcement mechanisms, the bill strives to strike a balance between fostering innovation in AI technologies while safeguarding the privacy and autonomy of individuals.

References:

• https://fedscoop.com/consumer-data-consent-training-ai-models-senate-bill/#:~:text=%E2%80%9CThe%20AI%20CONSENT%20Act%20gives,Welch%20said%20in%20a%20statement
• https://www.dataguidance.com/news/usa-bill-ai-consent-act-introduced-house#:~:text=USA%3A%20Bill%20for%20the%20AI%20Consent%20Act%20introduced%20to%20House%20of%20Representatives,-ConsentPrivacy%20Law&text=On%20March%2019%2C%202024%2C%20US,the%20U.S.%20House%20of%20Representatives
• https://datenrecht.ch/en/usa-ai-consent-act-vorgeschlagen/
• https://www.lujan.senate.gov/newsroom/press-releases/lujan-welch-introduce-billto-require-online-platforms-receive-consumers-consent-before-using-their-personal-data-to-train-ai-models/

‍

Introduction‍

In a significant step, the Indian Army beefed up its information warfare capacity on June 25, 2026, with the operationalisation of @MythbusterXX, its dedicated fact-checking handle designed to counter any form of misinformation, disinformation, malinformation, and deepfakes on the army swiftly. Adopting the motto 'Verify Before You Amplify,' the service seeks to pivot from reactive statements to active cognitive warfare. In a milieu where manipulated narratives can be as decisive in shaping public perception as kinetic force is on the battlefield, truth itself has transformed into a critical national security objective. 

This is clear proof that protecting India’s digital battleground will from now on be defined not just by troop deployments but also by its institutional verification capacities, swift attribution mechanisms, and public awareness.

‍

When the Battlefield Went Digital‍

Today warfare extends to timelines, group chats, and prime-time graphics packages. The distinction between misinformation , disinformation , and malinformation is crucial to operations. After all, they necessitate different types of counters. Generative AI just exponentially increased their velocity, cost, and the creepy believability of synthesized audio, video, and images. Operation Sindoor, India's May 2025 military response to a Pahalgam terror attack, provides a blueprint for just how large it can get.

According to the fact-checking site BOOM, 68% of fact checks in May related to Operation Sindoor, describing the campaign as a misinformation superspreader, and, more directly, India's Chief of Defence Staff General Anil Chauhan lamented at last year’s Shangri-La Dialogue that roughly 15% of his military’s operational time was spent on countering false news. New Delhi matched this response level; the Ministry of Information and Broadcasting had blocked over 1,400 URLs, many bearing false information or communally inciteful narratives from accounts in Pakistan. These challenges won't be vanishing any time soon. Microsoft's July 2025 Digital Defence Report lists India among the top countries targeted for AI-powered state-backed hacking, noting the automation of attacks and generation of fake content used to influence opinion.

CyberPeace's regulatory tracking also indicates steps toward building infrastructure to mitigate this,  a Rule 7 complaint system for deepfakes, and efforts to foster local detection capabilities under the IndiaAI mission signal it's now an infrastructural threat.

‍

Why the Army Chose to Speak First

‍

On 1 June 2026, the Indian government’s official fact-checking unit debunked a deepfake of former Army Chief General Dhiraj Seth talking about India’s engagement with the Taliban that emanated from Pakistan-affiliated propaganda sources, appearing within days of a change of military command. Barely days after General Dhiraj Seth was elevated to Chief of Army Staff, the 31st person to hold the post, another fabricated deepfake used spliced authentic footage with AI-cloned audio to falsely allege he had blamed the past army leadership for hiding the bodies of soldiers to protect their image.

Such a dual targeting of India’s army chiefs with deepfakes in such close succession is a testament as to why an authoritative, constantly running fact-check machine isn’t an optional extra but a strategic must-have.

Architecture is as important as architecture itself. India tried a statutory fact-checking model with a government-owned Fact Check Unit under the Information Technology (IT) Rules of 2023 through the Press Information Bureau (PIB). It had to retreat from the edge of the constitutional cliff. In September 2024, when the Bombay High Court struck down key provisions of these rules. It ruled it unconstitutional to empower the state to declare digital content relating to the state itself as fake, false, or misleading. A similar reading of the analysis by CyberPeace found that digital speech should be given the same protections as offline speech, and this should be the benchmark for any counter-misinformation policy.

MythbusterXX carefully avoids the constitutional controversy by acting as an institutional avenue that produces verified information and rebuttals in response to disinformation. There is a profound distinction between answering falsehoods with factual, credible speech versus shutting them down with state power, the very proportionality that civil libertarians have said must govern a democracy's approach to online misinformation.

‍

Platforms as Accelerants, Not Just Conduits

‍

Part of the issue lies upstream, with the algorithms and broadcasters that favor speedy falsehood over careful confirmation. A month’s supply of “false and misleading stories,” the Reuters Institute for the Study of Journalism observed, streamed online within hours of Operation Sindoor's onset: one fact-checker identified approximately seventy false claims by the close of day one. Meanwhile, on the small screen, graphics depicting escalating conflicts were being televised, with broadcasters forced to scramble under 24/7 competition.

Amplified manipulation of the crisis narrative is also a factor; studies show that thousands of accounts have been reposting exactly the same party content for three years, making crisis-induced viral narratives predictable rather than organic phenomena. For the most part, the platforms that manage these narratives and the algorithms that direct content on both sides of the divide are not just innocent delivery systems.

‍

Digital Literacy as the First Line of Defence

‍

Institutional rebuttals only go so far if citizens lack the reflex to pause before sharing, which is where CyberPeace's own work becomes directly relevant. Through a multi-year, Google.org-backed initiative, CyberPeace Foundation aims to reach over 40 million Indian internet users, including 9 million underserved beneficiaries, through a multilingual resource centre offering 650 hours of content, state-level helplines, and quick-response teams staffed by digital forensics and fact-checking experts. Longer-running efforts such as the Digital Shakti campaign and the annual eRaksha competition, run with NCERT, have built a culture of responsible digital citizenship among young and first-time internet users since 2019, while CyberPeace Corps, the foundation's volunteer arm, carries the same message into classrooms and campuses through cyber-awareness sessions run with universities and school networks nationwide. Notably, CyberPeace's own research on children's online safety had already flagged manipulated Army-related videos as a category of digital manipulation designed to cast doubt on official military positions, well before @MythbusterXX existed. The Army's tagline and CyberPeace's mission converge on the same insight: verification is a civic skill, not merely an institutional service.

‍

A Season of Deepfakes

‍

The history book of compromised defence material in the past year alone would be edifying. The International Federation of Journalists recorded one such deepfake widely circulated that relied on AI voice cloning and lip-sync tools to present the Pakistani PM conceding defeat, though the video actually contained his praise for the Pakistani air force’s performance following Operation Sindoor. 

Other similar videos featured the Indian Prime Minister, External Affairs Minister, and Home Minister allegedly apologising to Pakistan and a deepfake with a foreign head of state in voice-cloned style applauding India’s armed forces. None needed a state’s resources, but just a laptop, voice cloning available readily, and a citizenry ready to spread rather than confirm the authenticity of any such sensational information before spreading it on to the masses.

‍

Building the Verification Reflex

‍

A resilient information ecosystem needs different actors playing complementary roles:

1. Citizens: Do not equate virality with credibility. Verify all national security-related information through official sources, such as @MythbusterXX, before reposting or forwarding it.
2. Journalists: Apply rigorous verification standards to live broadcasts, war-room graphics, and breaking reports, just as you would to print journalism, and avoid speculation during fast-moving military operations.
3. Researchers and fact-checkers: Use open-source forensic and AI-detection technologies to authenticate questionable material. BOOM researchers, for instance, used Deepfake-o-meter to scrutinize misleading videos of political leaders before fact-checking and publishing them.
4. Policymakers: Favored constitutionally proportional and carefully tailored regulations over broad-based takedown mandates. While the 2026 IT Amendment Rules require platforms to shift their obligations from compliance with takedowns towards preventive diligence on synthetic media, implementation should continue to be informed by judicial protections afforded to freedom of speech and due process.

‍

Cyber Resilience Is National Security Now

‍

Legal scholars examining Operation Sindoor have drawn a useful distinction between coordinated information warfare, which is strategic and intentional, and the diffuse, uncoordinated mis/disinformation that dominated timelines during the conflict, cautioning that disproportionate state responses to the latter can compromise citizens' right to know just as much as the falsehoods themselves. Getting that balance right, between speed and due process, between institutional voice and censorship, is the real test facing India's information ecosystem, in defence and far beyond it. CyberPeace has made a related argument in its own work on AI-enabled espionage: institutions such as the National Critical Information Infrastructure Protection Centre and the Defence Cyber Agency are already folding AI-based monitoring into their processes, yet no amount of institutional surveillance substitutes for a citizenry trained to spot manipulation on sight.

@MythbusterXX will not end deepfakes, and no single handle can. But it signals something CyberPeace has argued for years: resilience against synthetic and manipulated media requires authoritative institutional voices, digitally literate citizens, forensically equipped researchers, and proportionate policy, all pulling in the same direction. "Verify before you amplify" is not just an Army campaign. It is the operating discipline a democracy needs to protect its own information age.

‍

Conclusion

‍

@MythbusterXX can't possibly kill deepfakes and disinformation, but this marks a milestone shift towards developing an institutional resilience for India's info battlefield. For, after all, national security in the age of info warfare depends less on tech and more on robust institutions, constitutional balance in policymaking, responsible social platforms, and a citizenry that clicks "forward" only after clicking "verify."

* * * * *

This piece is part of CyberPeace's ongoing work on misinformation, disinformation, and digital citizenship in India. For more on CyberPeace's initiatives in digital literacy and cyber resilience, visit cyberpeace.org.

‍

Key Sources

‍

• Dynamite News, "Indian Army launches fact-check push against deepfake videos and fake military claims" (June 2026)
• ADG PI – Indian Army, official announcement on X (@adgpi)
• Press Information Bureau, Government of India, press release on countering misinformation during Operation Sindoor
• Reuters Institute for the Study of Journalism, "Truth is the casualty: How Indian fact-checkers debunked false claims during the India-Pakistan crisis"
• International Federation of Journalists, "AI, Deepfakes, and the Fog of War" and "Operation Sindoor and the Two Wars" (June 2025)
• Republic World, "Operation Sindoor Haunts Pakistan: Islamabad's Latest AI Deepfake Bid Against Indian Army Chief General Dhiraj Seth Exposed" (July 2026)
• TechPolicy Press, "Sanity Prevails as Bombay High Court Strikes Down India Government's Fact Check Unit", and LiveLaw, coverage of the tie-breaker verdict, on the IT Amendment Rules, 2023 (Fact-Check Unit)
• Dark Reading, "Indian Army Propaganda Spread by 1.4K AI-Powered Social Media Accounts"
• Inforrm, "(Dis)information warfare and the right to know: lessons from Operation Sindoor"
• CyberPeace Foundation, initiatives page and The CyberPeace Initiative (Google.org-backed digital literacy programme)
• CyberPeace Foundation, "AI-Powered Espionage: How India's Cybersecurity Strategy Must Evolve"
• CyberPeace Foundation, "From Deepfakes to Due Diligence – Decoding India's IT Amendment Rules"
• Wikipedia, CyberPeace Foundation (background on Digital Shakti and eRaksha)

‍

Executive Summary:

‍
Following India’s heavy defeat to South Africa in the T20 World Cup 2026, the team has been facing intense trolling on social media. Amid this backdrop, a video of Indian cricket team head coach Gautam Gambhir has gone viral. In the clip, Gambhir can be heard saying,“Even people who have nothing to do with cricket have made comments. An IPL owner also wrote about split coaching. It’s surprising. People must stay in their own domain. If we don’t interfere in someone else’s domain, they have no right to interfere in ours.”The video is being shared with the claim that Gambhir made these remarks recently in response to trolling after India’s loss to South Africa in the T20 World Cup 2026. However, research by the CyberPeace found the claim to be misleading. The viral video is not related to the T20 World Cup 2026. It is from December 2025 and pertains to India’s Test series defeat against South Africa. An old video is being circulated with a misleading context.

‍

Claim

‍

An Instagram user, ‘rns_news200’, shared the viral video on February 23, 2026, claiming that after the loss to South Africa, head coach Gautam Gambhir issued a stern warning to Indian fans. The caption stated that Suryakumar Yadav was heavily trolled on social media after the match, and Gambhir responded strongly, saying players should not be unfairly targeted and the team deserves support, especially during difficult times.

• https://www.instagram.com/reels/DVF8zg7jBVd/
• https://archive.ph/bbCuG 

‍

Fact Check

‍

To verify the claim, we conducted a keyword search on Google. We found the same video on the official X (formerly Twitter) account of sports journalist Vikrant Gupta. The video was posted on December 7, 2025. According to the caption, Gambhir was expressing dissatisfaction following India’s performance.

• https://x.com/vikrantgupta73/status/1997389406777290815?s=20

‍

‍

We also found the longer version of the video on the official website of the Board of Control for Cricket in India (BCCI), where it was published on December 6, 2025. In the full video, Gambhir is clearly seen speaking about India’s defeat to South Africa in a Test match. The specific segment that went viral appears around the 1 minute 58 second mark.

• https://www.bcci.tv/video/5567723/its-important-that-young-boys-are-grabbing-their-opportunities-gautam-gambhir 

Conclusion

‍

Our research  found that the viral claim about Gautam Gambhir’s video being linked to trolling after the T20 World Cup 2026 is misleading. The clip is from December 2025 and relates to India’s Test series defeat against South Africa — not the T20 World Cup 2026.An old video is being reshared with a false and misleading context.

‍