Artificial intelligence
Companies building AI products, and businesses adopting AI tools.
In short
Whether you build AI products or use AI tools, you need to know what data can go in, what the licences allow, and who answers for the output.
India does not yet have a dedicated law on artificial intelligence. Businesses that build or use AI rely on existing law instead: the DPDP Act for personal data, copyright law for training material and outputs, the IT Act for platforms, and contracts for most of the rest.
For a company building an AI product, the main questions are what data it can train on, what the licences of any underlying models allow, and what it can promise customers about accuracy and confidentiality. Customers increasingly ask for these answers in writing before they sign.
For a business adopting AI tools, the questions are different: whether customer or employee data can be entered into the tool, whether the vendor may use that data for its own training, and who is responsible if an output is wrong. A clear internal policy on approved tools settles most of them.
What usually comes up
- Rights in training data and model licences
- Liability for outputs and disclosure to users
- Internal AI-use policies
Under the DPDP Act
Personal data used to train or run a model needs a lawful basis for that use. Data collected for one purpose cannot be reused for training without a basis for the new purpose.
What our work involves
- Reviewing model licences and permissions for training data
- AI addenda covering training rights, confidentiality and liability for outputs
- Disclosure, human review and record-keeping for decisions that affect people
- Internal AI-use policies and approved-tool lists
Related areas of work
- Artificial intelligence governance
- Intellectual property and software licensing
- Data protection and privacy
- Product and technology counsel