AI policy updates, November 2025

European Commission proposes Digital Omnibus adjustments to AI Act timelines

The Commission proposed a "Digital Omnibus" package that would, among other changes, link the application of certain high-risk obligations to the availability of standards and support tools, with later backstop dates. This is a proposal and requires adoption by the European Parliament and Council.

Practical impact: High-risk timelines may move; organisations should keep planning against Article 113 dates until an amendment is adopted.

Kazakhstan signs Central Asia's first law on artificial intelligence

The President signed the Law on Artificial Intelligence, introducing a risk-based classification, duties for owners and operators of AI systems, labelling of AI-generated content and a national AI platform.

Practical impact: Companies deploying AI in Kazakhstan should classify systems and prepare labelling and risk-management documentation; confirm the in-force date on the official legal database.

India notifies the Digital Personal Data Protection Rules, 2025

The DPDP Rules were notified with phased commencement, starting the countdown for consent, notice, security and breach-notification obligations under the DPDP Act 2023.

Practical impact: Organisations using personal data of Indian residents in AI should plan compliance against the phased dates.

MeitY releases India AI Governance Guidelines under the IndiaAI Mission

Milestone recorded for IndiaAI Mission (India): MeitY releases India AI Governance Guidelines under the IndiaAI Mission. Recorded from the official source listed; details to be expanded by a reviewer.

MeitY releases the India AI Governance Guidelines

The guidelines set out principles, an institutional framework and recommendations favouring existing-law enforcement, voluntary commitments and risk-based oversight over a new AI statute.

Practical impact: Indian AI developers and deployers have a reference for regulator expectations; no new binding duties.