Lok Sabha Question No. 1632 (UNSTARRED), answered on 2025-07-30
Subject: Guidelines for Use of Generative AI
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: Shri Amrinder Singh Raja Warring

## GOVERNMENT OF INDIA

## MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY

## LOK SABHA UNSTARRED QUESTION NO. 1632

TO BE ANSWERED ON: 30.07.2025

## GUIDELINES FOR USE OF GENERATIVE AI

## 1632.    SHRI AMRINDER SINGH RAJA WARRING:

Will the Minister of ELECTRONICS AND INFORMATION TECHNOLOGY be pleased to state:

- (a) whether the Government has developed ethical guidelines for the use of generative Artificial Intelligence (AI) in public services;
- (b) the details of the progress on setting up AI research hubs under Digital India Programme;
- (c) whether the startups in Tier 2/3 cities receiving support under MeitY's innovation funds;
- (d) if so, whether any data protection audit been conducted for citizen services like DigiLocker or Unified Mobile Application for New-age Governance (UMANG); and
- (e) the status of National Data Governance Framework implementation?

## ANSWER

MINISTER OF STATE FOR ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI JITIN PRASADA)

(a) to (c):  The government has taken an inclusive and innovation-friendly approach to Artificial Intelligence (AI) governance. It is backed by an institutional setup to protect citizens' rights, ensure data privacy, and promote innovation.

The Government, through CERT-In, has issued several advisories to ensure the secure use of AI. These include:

- Advisory on Security Implications of AI Language-Based Applications (9th May 2023)
- Advisory on Best Practices Against Vulnerabilities in Generative AI Solutions (26th March 2025)
- Technical Guidelines for Bill of Materials (BoM) for Software, Hardware, AI, and Quantum and Cryptography requirement (9th July 2025)

Additionally, CERT-In has launched the Certified Security Professional in Artificial Intelligence (CSPAI)  program.  It  equips  cybersecurity  professionals  with  the  skills  to  secure  AI  systems, address AI-related threats, and ensure the trustworthy deployment of AI.

An Advisory Group on AI, chaired by the Principal Scientific Advisor to the Prime Minister, has also been constituted to develop an India-specific regulatory framework for AI.

The government has established 25 Technology Innovation Hubs (TIHs) in reputed institutes under the National Mission on Interdisciplinary Cyber-Physical Systems. Hubs at IIT Kharagpur, IIIT Hyderabad and IIT BHU are working in the field of Artificial Intelligence and Data Science.

Under  the  Gen-Next  Support  for  Innovative  Startups  (GENESIS)  scheme,  support  is  being provided to about 1,600 technology startups in tier II and tier III cities.

(d):      DigiLocker has undergone ISO 27001:2022 Information Security Management System (ISMS) audit. It has been duly certified in accordance with the prescribed standards, security policy and applicable regulatory and contractual requirement.

Regular annual internal audit is carried out for UMANG. In additional, a separate cybersecurity audit is also conducted by STQC. UMANG does not store any user data except for the mobile number. All data transfers are carried out through encrypted APIs, ensuring secure communication.

(e):   Government published the Draft National Data Governance Framework Policy on 26 th  May 2022 for public consultation.  After deliberations, it was decided that the sharing of non-sensitive data  would  continue  to  be  governed  by  the  National  Data  Sharing  and  Accessibility  Policy (NDSAP), 2012.

*******