India's proposed framework for auditing artificial intelligence (AI) systems seeks to bring greater accountability to AI developers and organisations deploying the technology. But questions remain over its legal enforceability, particularly when it comes to global technology companies such as OpenAI and Anthropic.
\n\nThe Indian Computer Emergency Response Team (CERT-In) has proposed a security audit framework that requires AI-related security incidents to be reported within six hours. It classifies AI systems as low, moderate, high or critical risk, with critical systems facing continuous monitoring and independent audits by CERT-In-empanelled organisations.
\n\nThe framework also prescribes safeguards for autonomous AI agents, including restrictions on the permissions they can access and a kill switch to shut them down when necessary.
\n\nWhile the proposed measures seek to address emerging cybersecurity risks, their implementation raises several questions. Will foreign AI companies have to submit to security audits in India? Will banks and other businesses using third-party AI tools also face compliance requirements? And could the framework increase costs for Indian AI startups?
\n\nSpeaking to CNBC-TV18, Sudarshan Rajamani, Director, Dexian India, and Virag Gupta, Supreme Court Advocate and Cyber Law Expert, discussed the legal and practical challenges surrounding the proposed framework.
\n\nAre CERT-In's AI security guidelines legally…
Original source: https://www.cnbctv18.com/technology/
