India Cracks Down: Government Bans Unapproved AI Tools for Official Work

The Modi government has just issued internal directives prohibiting its departments from using unapproved external Artificial Intelligence (AI) tools for official duties, a critical move aimed at bolstering cybersecurity across government operations. This restriction, which applies to processing or sharing official, confidential, or sensitive data, comes hot on the heels of a fresh advisory from the Indian Computer Emergency Response Team (CERT-In) flagging increased cyber risks from advanced AI models. While not a blanket ban on generative AI, the directive underscores India's escalating concern over algorithmic vulnerabilities and data leakage in its digital bureaucracy. The timing isn't random; CERT-In April advisory warned that frontier AI models can automate sophisticated cyberattacks, drastically shortening the window for vulnerability remediation. This directive builds on India's broader 'techno-legal' approach to AI governance, outlined in the India AI Governance Guidelines unveiled by the Ministry of Electronics and Information Technology (MeitY) in November 2025. These guidelines, reinforced by the Digital Personal Data Protection Act (DPDP Act) 2023 and the IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, prioritize innovation while mandating accountability, data privacy, and strict safeguards against deepfakes and algorithmic bias. Looking ahead, this signals a major push for secure, possibly indigenous, AI solutions within government, fostering demand for 'sovereign AI' platforms and services. Departments are now tasked with immediate cybersecurity reviews, stricter multi-factor authentication, regular vulnerability assessments, and robust incident reporting. This pivot demands a cultural shift within India's vast administrative machinery, emphasizing careful digital workflows and likely accelerating investments in secure, local AI development to protect sensitive national data.