06/11/2025
India’s AI Disclosure Draft Rules Signal a Major Step Toward Responsible Tech Governance
India’s AI Disclosure Draft Rules mark a significant move toward responsible and transparent AI governance. Learn how these rules aim to ensure accountability, ethical AI development, and compliance with global standards.
The Indian government has released draft amendments to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, proposing mandatory disclosure and labelling of AI-generated content. The move is widely seen as a proactive step to curb the misuse of generative AI, especially in the wake of rising deepfake incidents and misinformation campaigns.
The draft rules, issued by the Ministry of Electronics and Information Technology (MeitY), define “synthetically generated information” as any content created, modified, or altered using artificial intelligence or algorithmic tools. Platforms and users posting such content will be required to label it clearly. It covers at least 10% of the screen or the first 10% of an audio clip’s duration. The rules also prohibit platforms from allowing users to suppress or remove these identifiers, ensuring traceability and transparency.
This regulatory push follows high-profile deepfake cases, including manipulated videos of public figures like Rashmika Mandanna, which sparked public outrage and legal scrutiny. Courts have begun recognising personality rights against AI misuse, and MeitY has issued multiple advisories to social media platforms over the past two years. The draft rules now aim to codify these efforts into enforceable obligations.
Importantly, the government has invited public feedback on the draft until November 6. The rules are inspired by similar global efforts, for example, China, which mandates watermarking of AI content, while the EU’s AI Act includes transparency requirements for generative models.
📰 Mini Headlines
Microsoft Defends Gaming Copilot Privacy Amid Screenshot Data Controversy
Microsoft is facing backlash over its Gaming Copilot feature, which reportedly captured and analysed in-game screenshots without explicit user consent. Critics raised concerns about hidden data collection and a lack of transparency. Microsoft responded by clarifying that the feature was designed to enhance gameplay assistance and that no personal or sensitive data was stored or shared externally. The company emphasised that users can disable the feature and that privacy settings are clearly documented.
Data Controversy
Read More → https://www.mondaq.com/data-protection/1687008/adgms-new-data-protection-rules-balancing-privacy-and-public-interesthttps://winbuzzer.com/2025/10/26/microsoft-defends-gaming-copilot-privacy-after-backlash-over-hidden-screenshot-data-capturing-xcxwbn/
Apple May Withdraw iPhone Privacy Feature in Europe Over Regulatory Dispute
Apple has warned it may withdraw its App Tracking Transparency (ATT) feature from iPhones in Europe due to mounting pressure from EU regulators under the Digital Markets Act (DMA). ATT requires apps to obtain user consent before tracking activity across other apps and websites. However, EU authorities argue that Apple’s enforcement of ATT may unfairly restrict third-party developers while favoring its own advertising services. Apple contends that disabling ATT could compromise user privacy and expose consumers to more aggressive tracking.
User Consent
UK Fines Capita £15 Million Over Data Breach Linked to Ransomware Attack
The UK’s Information Commissioner’s Office (ICO) has fined outsourcing firm Capita approximately £15 million (around $18.8 million) following a major data breach caused by a ransomware attack in 2023. The breach exposed sensitive personal data, including pension records and contact details, affecting hundreds of thousands of individuals. The ICO found that Capita had failed to implement adequate cybersecurity measures and violated UK GDPR obligations.
Data Breach
Read More → https://www.jdsupra.com/legalnews/uk-data-protection-regulator-fines-3281575/
Next Newsletter
Microsoft Violated EU Privacy Law in Handling Children’s Data, Austrian Regulator Finds
Microsoft has been found violating the EU Privacy Law by mishandling children’s data, according to an Austrian regulator. Discover how this decision impacts Microsoft’s data protection practices and the broader implications for compliance under the EU Privacy Law.
india-finalizes-digital-personal-data-protection-rules-awaits-legal-clearance
India has finalized the Digital Personal Data Protection (DPDP) Rules, moving closer to enforcing a robust data privacy framework. Discover what these new rules mean for compliance, businesses, and data protection in India.




