Nov 6, 2025

India’s AI Disclosure Draft Rules Signal a Major Step Toward Responsible Tech Governance

India’s AI Disclosure Draft Rules mark a significant move toward responsible and transparent AI governance. Learn how these rules aim to ensure accountability, ethical AI development, and compliance with global standards.

The Indian government has released draft amendments to the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, proposing mandatory disclosure and labelling of AI-generated content. The move is widely seen as a proactive step to curb the misuse of generative AI, especially in the wake of rising deepfake incidents and misinformation campaigns. 

The draft rules, issued by the Ministry of Electronics and Information Technology (MeitY), define “synthetically generated information” as any content created, modified, or altered using artificial intelligence or algorithmic tools. Platforms and users posting such content will be required to label it clearly. It covers at least 10% of the screen or the first 10% of an audio clip’s duration. The rules also prohibit platforms from allowing users to suppress or remove these identifiers, ensuring traceability and transparency. 

This regulatory push follows high-profile deepfake cases, including manipulated videos of public figures like Rashmika Mandanna, which sparked public outrage and legal scrutiny. Courts have begun recognising personality rights against AI misuse, and MeitY has issued multiple advisories to social media platforms over the past two years. The draft rules now aim to codify these efforts into enforceable obligations. 

Importantly, the government has invited public feedback on the draft until November 6.  The rules are inspired by similar global efforts, for example, China, which mandates watermarking of AI content, while the EU’s AI Act includes transparency requirements for generative models. 

📰 Mini Headlines 

  • Microsoft Defends Gaming Copilot Privacy Amid Screenshot Data Controversy 

Microsoft is facing backlash over its Gaming Copilot feature, which reportedly captured and analysed in-game screenshots without explicit user consent. Critics raised concerns about hidden data collection and a lack of transparency. Microsoft responded by clarifying that the feature was designed to enhance gameplay assistance and that no personal or sensitive data was stored or shared externally. The company emphasised that users can disable the feature and that privacy settings are clearly documented. 

Data Controversy  

Read More →   https://www.mondaq.com/data-protection/1687008/adgms-new-data-protection-rules-balancing-privacy-and-public-interesthttps://winbuzzer.com/2025/10/26/microsoft-defends-gaming-copilot-privacy-after-backlash-over-hidden-screenshot-data-capturing-xcxwbn/  

  • Apple May Withdraw iPhone Privacy Feature in Europe Over Regulatory Dispute 

Apple has warned it may withdraw its App Tracking Transparency (ATT) feature from iPhones in Europe due to mounting pressure from EU regulators under the Digital Markets Act (DMA). ATT requires apps to obtain user consent before tracking activity across other apps and websites. However, EU authorities argue that Apple’s enforcement of ATT may unfairly restrict third-party developers while favoring its own advertising services. Apple contends that disabling ATT could compromise user privacy and expose consumers to more aggressive tracking. 

User Consent  

Read More →   https://winbuzzer.com/2025/10/24/apple-threatens-to-pull-key-iphone-privacy-feature-in-europe-amid-regulatory-pressure-xcxwbn/   

  • UK Fines Capita £15 Million Over Data Breach Linked to Ransomware Attack 


The UK’s Information Commissioner’s Office (ICO) has fined outsourcing firm Capita approximately £15 million (around $18.8 million) following a major data breach caused by a ransomware attack in 2023. The breach exposed sensitive personal data, including pension records and contact details, affecting hundreds of thousands of individuals. The ICO found that Capita had failed to implement adequate cybersecurity measures and violated UK GDPR obligations.  

Data Breach 

Read More →    https://www.jdsupra.com/legalnews/uk-data-protection-regulator-fines-3281575/   

© 2024-25 GoTrust | Proudly made in India

info@gotrust.tech

India

41, Block A, Industrial Area, Sector 62, Noida, Uttar Pradesh 201301

UAE

DIFC Innovation Hub, Gate Avenue, Zone D, Co-working Space Level 1 Al Mustaqbal St, Dubai

Netherlands

Cuserpark Amsterdam, De Cuserstraat 91, 1081CN, Amsterdam, Netherlands

© 2024-25 GoTrust | Proudly made in India

info@gotrust.tech

India

41, Block A, Industrial Area, Sector 62, Noida, Uttar Pradesh 201301

UAE

DIFC Innovation Hub, Gate Avenue, Zone D, Co-working Space Level 1 Al Mustaqbal St, Dubai

Netherlands

Cuserpark Amsterdam, De Cuserstraat 91, 1081CN, Amsterdam, Netherlands