Adopt the guiding principles and risk-based governance (voluntary)
Download: JSON · MarkdownUnder India AI Governance Guidelines, Guiding principles and recommendations sections
What this label means
- Verified
- — a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
- Pending review
- — linked to the official source and in the queue for a reviewer to confirm.
- Source-linked
- — linked to the official source, not yet confirmed by a reviewer.
On this page 9 sections
In brief
Adopt the guiding principles and risk-based governance (voluntary) is a voluntary measure under the India AI Governance Guidelines in India (Guiding principles and recommendations sections). The guidelines encourage organisations to embed principles such as fairness, accountability, safety and transparency, to classify and mitigate risks proportionately, and to participate in voluntary frameworks and incident reporting.
- Instrument
- India AI Governance Guidelines
- Jurisdiction
- India
- Nature
- Voluntary guidance
- Source reference
- Guiding principles and recommendations sections
- Who it binds
- Provider / developer, Deployer / user organisation
- Evidence examples
- 1
- Framework mappings
- NIST AI Risk Management Framework 1.0
- Controls that meet it
- 2
- Official source
- Open official text
- Verification
- Source-linked
What does it require?
The guidelines encourage organisations to embed principles such as fairness, accountability, safety and transparency, to classify and mitigate risks proportionately, and to participate in voluntary frameworks and incident reporting.
Practical action
Map your existing AI governance programme to the guidelines' principles and note the gaps.
Who does it apply to?
Voluntary for all AI developers and deployers in India.
- Sectors
- Cross-sector / all sectors
- Use cases
- Generative AI and foundation models
Which controls meet this duty?
Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.
-
satisfiesPolicyExecutive sponsor for AI · annualAI governance policy and accountability structure
Serves 16 recorded duties · evidence: AI policy, Board or executive approval of the AI policy, AI governance forum minutes
Embeds the principles and proportionate risk classification in an approved policy.
-
supportsProcessAI system owner · once per ai systemAI risk assessment and lifecycle risk register
Serves 12 recorded duties · evidence: AI system risk assessment, Per-system AI risk register, Residual-risk acceptance
Proportionate risk classification and mitigation per system.
Templates that cover this duty
Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.
- AI System Inventory
Register · XLSX and DOCX · v6
- AI Acceptable Use Policy
Policy · DOCX · v1
- AI Governance Policy and RACI
Policy · DOCX and XLSX · v5
- NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk
Crosswalk · XLSX · v3
What evidence would a reviewer expect?
| Evidence | Type | Notes |
|---|---|---|
| Principles alignment statement | document |
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
See every India duty mapped this way →
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| NIST AI RMF 1.0 | GOVERN and MAP functions | Original editorial mapping. | low |
Frequently asked questions
Is this a legal requirement?
No. It is voluntary guidance under India AI Governance Guidelines; following it is expected or recommended rather than required by law.
Who must comply with this obligation?
Voluntary for all AI developers and deployers in India.
What evidence shows compliance?
A reviewer would expect: Principles alignment statement.
Which frameworks map to this obligation?
It is mapped to NIST AI Risk Management Framework 1.0 GOVERN and MAP functions. These are editorial crosswalks with a stated confidence, not official mappings.
Which controls satisfy this obligation?
AI governance policy and accountability structure; AI risk assessment and lifecycle risk register.
What should an organisation do in practice?
Map your existing AI governance programme to the guidelines' principles and note the gaps.
Cite this record
AIPolicyTracker (2026). “Adopt the guiding principles and risk-based governance (voluntary) (India AI Governance Guidelines)” [AIPT-OBL-0048, verified 26 September 2026 by Bhaskar Bhatt]. https://aipolicytracker.org/id/AIPT-OBL-0048 (accessed 27 October 2026). Data licensed CC BY 4.0.
Permanent id AIPT-OBL-0048: it never changes or gets reused, and its address keeps working if this page moves.
Cite the official text alongside it: India AI Governance Guidelines, Ministry of Electronics and Information Technology, https://indiaai.gov.in/.
BibTeX
@misc{aipolicytracker2026_adopttheguidingprinciple,
author = {{AIPolicyTracker}},
title = {{Adopt the guiding principles and risk-based governance (voluntary) (India AI Governance Guidelines)}},
year = {2026},
howpublished = {\url{https://aipolicytracker.org/obligations/india-ai-guidelines-principles-and-risk-based-governance}},
url = {https://aipolicytracker.org/obligations/india-ai-guidelines-principles-and-risk-based-governance},
urldate = {2026-10-27},
note = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}
Change history
No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.
Similar obligations in other instruments
- Use high-risk AI as instructed, monitor it and inform affected people — EU AI Act, European Union
- Providers must meet the full set of provider duties for high-risk AI — EU AI Act, European Union
- Providers must supply conformity evidence and log access to authorities on request — EU AI Act, European Union
- Non-EU providers must appoint an EU authorised representative for high-risk AI — EU AI Act, European Union
- Deployers, distributors and importers must assume provider duties when they rebrand or substantially modify high-risk AI — EU AI Act, European Union
- Law-enforcement deployers must obtain authorisation for post-remote biometric identification and report annually — EU AI Act, European Union
- Providers of GPAI models must notify the Commission within two weeks of meeting the systemic-risk threshold — EU AI Act, European Union
- Non-EU providers of GPAI models must appoint an EU authorised representative — EU AI Act, European Union
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.