India plans tighter AI incident reporting rules

MeitY plans to tighten requirements for reporting AI-related incidents, including deadlines, scope and content of disclosures. Under CERT-In's 2022 directions, companies must report specified cyber incidents, including attacks on AI and machine learning systems, within six hours.

• MeitY to tighten timeframe, content and norms for AI incident reports
• CERT-In requires incident reporting within six hours
• ICT system logs must be retained for 180 days
• 2025 AI Governance Guidelines adopt OECD definition of AI incident