The Government of India is considering standalone legislation to govern Artificial Intelligence (AI). Pressure on the AI supply chain is already being felt from the European Union's AI Act, which entered into force in August 2024 and became applicable on August 2, 2026. The Act takes a risk-based approach: it prohibits certain AI systems, regulates high-risk ones, and imposes lighter checks on limited-risk use cases. Beyond the compliance checklist, the Act assumes software is sold as a finished product, an assumption that does not match how India's technology industry actually works.

Why Does the EU AI Act's 'Substantial Modification' Rule Matter for India?

  1. Conformity Assessment Requirement: Before a high-risk AI system used for hiring or education can enter the European market, Article 43 requires it to clear an assessment on testing, documentation, and human oversight.
  2. Mostly Self-Assessed: Most providers assess their own system against the Act's criteria and sign a self-declaration. Only a narrow set of tools, mainly biometric ones, need an independent body's check.
  3. Substantial Modification Trigger: A change not contemplated at the original assessment, one that affects compliance or alters intended purpose, forces the entire conformity assessment to be repeated.
  4. Eased Timeline: In June 2026, the EU pushed the compliance deadline to December 2027 for standalone high-risk AI systems, and to August 2, 2028 for high-risk AI embedded in regulated products.
  5. Grandfathering Clause: Systems already on the market before the deadline stay exempt from the Act's obligations until they are substantially modified.
  6. Edge for Standardised Products: Providers of standardised AI products can assess planned upgrades during the initial assessment, an advantage bespoke, client-adaptive service providers may struggle to match.

How Does India's Adaptive Tech Model Collide With the Act's Structure?

  1. Adaptive Business Model: India's technology industry, from large IT services firms to global capability centres in Bengaluru and Hyderabad, runs on continuous, responsive adaptation of client systems.
  2. Inherited Liability: A firm that substantially modifies someone else's high-risk AI system may be treated as its provider, inheriting every one of the original maker's obligations.
  3. Improvement-on-Demand Risk: For an industry whose core promise is improvement on demand, an unplanned change that alters an AI system's intended purpose can trigger a fresh regulatory exercise.
  4. Demand for Compliance Work: High-risk compliance requires governance measures, technical documentation, and testing regimes to be produced in volume, creating demand for legal and technical professionals.
  5. India's Existing Track Record: Indian professional-services firms already support clients across data protection, financial regulation, and technical assurance, and can extend this capability to the AI Act.

Can the India-EU Trade Agreement Open a Bigger Opportunity?

  1. Third-Country Recognition Pathway: The Act lets conformity assessment bodies in third countries be recognised as notified bodies where the EU has concluded an appropriate agreement.
  2. India-EU FTA: The India-EU Free Trade Agreement, concluded in January, includes standing machinery and regulatory cooperation provisions that could carry this recognition.
  3. From Service Provider to Ecosystem Participant: Securing institutional arrangements under the FTA could let India become a participant in the EU's conformity assessment ecosystem, not just a compliance-services supplier.

Conclusion

Europe has written itself a mountain of compliance work, and India has the capacity to take it on. There is a version of this future where the rules India fears become the work it sells. Which version arrives is still being decided, and not for much longer.

Mains Angle

GS Paper III – Science and Technology: Issues relating to artificial intelligence regulation, India's technology services industry, and trade agreements as instruments of market access. Practice Question: "The European Union's Artificial Intelligence Act could become either a compliance burden or a business opportunity for India's technology industry. Discuss, with reference to the India-EU Free Trade Agreement." (250 words)