Artificial Intelligence (AI) Governance and Regulation
Science & Technology
- PYQs8
- Articles1
Background
AI is a transformative technology with profound implications for economy, society, governance, and national security. UPSC expects candidates to understand its potential, challenges, and the policy responses required for its responsible development and deployment, including ethical considerations and regulatory oversight.
Artificial Intelligence (AI) refers to the simulation of human intelligence in machines programmed to think and learn like humans. Its rapid advancement necessitates robust governance and regulatory frameworks to ensure ethical deployment, mitigate risks, and protect stakeholders across various sectors.
Facts & tables
- Core Focus
- Ensuring ethical, transparent, and explainable adoption of AI tools and models.
- Risk Mitigation
- Addressing data protection, cyber security risks (e.g., automated attacks), and potential challenges to policyholders.
- Regulatory Scope
- Reviewing global regulatory and supervisory approaches and suggesting sector-specific frameworks (e.g., for insurance).
- Accountability
- Prescribing frameworks for implementing security controls, conducting stress tests, and establishing AI audit requirements (pre-deployment and post-deployment).
| Type | Reference |
|---|---|
| Conceptual area | Emerging Information Technologies |
| Body | Role |
|---|---|
| IRDAI | Initiates regulatory framework for insurance sector |
| CERT-In | Provides cybersecurity expertise |
| Reserve Bank Information Technology (ReBIT) | Provides financial technology expertise |
Prelims angle
Prelims angle: Factual recall
Prelims angle: Multi-statement analysis
- Focus on ethical, transparent, and explainable AI.
- Mitigation of data protection and cybersecurity risks.
- Review of global regulatory approaches for AI.
- Development of pre-deployment and post-deployment AI audit frameworks.
- Identification of skill gaps and capacity-building needs.
| Year | Framing tags |
|---|---|
| 2026 | Statement-based questions, Factual recall |
| 2026 | Statement-based questions, Conceptual understanding |
| 2025 | Statement-based questions, Factual recall |
| 2022 | Multi-statement analysis, Conceptual understanding |
| 2020 | Multi-statement analysis, Conceptual understanding |
| 2019 | Conceptual understanding, Multi-statement analysis |
| 2018 | Multi-statement analysis, Policy measures |
| 2017 | Factual recall, Multi-statement analysis |
Timeline
-
Emerging Information Technologies
Conceptual area
-
Prelims 2017
Factual recall, Multi-statement analysis
-
Prelims 2018
Multi-statement analysis, Policy measures
-
Prelims 2019
Conceptual understanding, Multi-statement analysis
-
Prelims 2020
Multi-statement analysis, Conceptual understanding
-
Prelims 2022
Multi-statement analysis, Conceptual understanding
-
Prelims 2025
Statement-based questions, Factual recall
-
Prelims 2026
Statement-based questions, Factual recall
-
Prelims 2026
Statement-based questions, Conceptual understanding
-
IRDAI forms working group on AI
AI governance involves establishing rules, standards, and best practices for the ethical, transparent, and secure development and deployment of AI systems, addressing issues like data privacy, bias, accountability, and cybersecurity risks across various sectors.
See also
No related topics linked yet.
Past papers
2017–2026 · 8 questions
In the news
IRDAI forms working group on AI
AI governance involves establishing rules, standards, and best practices for the ethical, transparent, and secure development and deployment of AI systems, addressing issues like data privacy, bias, accountability, and cybersecurity risks across various sectors.
Try these PYQs
In India, it is legally mandatory for which of the following to report on cybersecurity incidents?
1. Service providers
2. Data centres
3. Body corporate
Select the correct answer using the code given below:
In India, section 70-B of the Information Technology Act, 2000 (the IT Act) gives the Central Government the power to appoint an agency of the government to be called the Indian Computer Emergency Response Team. Further, it is legally mandatory for service providers, data centres and body corporates to report on cybersecurity incidents as outlined in the Information Technology (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013, which were notified under the Information Technology Act, 2000.
Consider the following statements with respect to the AI Impact Summit, 2026 held in New Delhi :
1. The Summit's intellectual framework was based on three foundational Sutras : People, Planning, and Progress.
2. The Preamble of the Summit stresses Democratising AI Resources, which acknowledges the Charter for Democratic Diffusion of AI as a binding framework to support locally relevant innovation and strengthen resilient AI ecosystems while respecting national laws.
3. The New Delhi Declaration on AI Impact was structured around seven Chakras (Pillars), which included Access for Social Empowerment, AI for Science, and Secure and Trusted AI.
Which of the statements given above is/are correct ?
Statement 1 is Incorrect: The Summit's intellectual framework and core philosophy were anchored in three foundational principles (Sutras): People, Planet, and Progress, not People, Planning, and Progress. Statement 2 is Incorrect: The New Delhi Declaration introduced the Charter for Democratic Diffusion of AI to promote affordable access to foundational AI resources, support local innovation, and build resilient AI ecosystems. However, it was established as a voluntary and non-binding framework, respecting national laws, rather than a binding treaty. Statement 3 is Correct: The New Delhi Declaration on AI Impact was structured around seven thematic pillars of action, officially referred to as Chakras. These foundational areas included Access for Social Empowerment, AI for Science, and Secure and Trusted AI, alongside Democratizing AI Resources, Economic Growth & Social Good, Human Capital Development, and Resilient, Efficient & Innovative AI Systems. Therefore, option D is the correct answer.
With reference to Web 3-0, consider the following statements :
1. Web 3-0 technology enables people to control their own data.
2. In Web 3-0 world, there can be blockchain based social networks.
3. Web 3-0 is operated by users collectively rather than a corporation.
Which of the statements given above are correct?
Statement 1 is correct. A key aspect of Web 3.0 is the concept of decentralization, where users have more control and ownership over their personal data, rather than having it stored and controlled by centralized platforms. Statement 2 is correct. Blockchain technology is a core component of Web 3.0, and it can enable the creation of decentralized, user-owned social networks and platforms. Statement 3 is correct. The decentralized nature of Web 3.0 means that it is not controlled by a single corporation or entity, but rather operated and maintained collectively by the users and participants in the network. Therefore, all three statements regarding Web 3.0 are correct.
Consider the following statements regarding AI Action Summit held in Grand Palais, Paris in February 2025:
I. Co-chaired with India, the event builds on the advances made at the Bletchley Park Summit held in 2023 and the Seoul Summit held in 2024.
II. Along with other countries, US and UK also signed the declaration on inclusive and sustainable AI.
Which of the statements given above is/are correct?
✅ Statement I: Correct
*India co-chaired the AI Action Summit in Paris (Feb 2025), continuing efforts from the Bletchley Park (UK, 2023) and Seoul (South Korea, 2024) Summits on AI governance.* ❌ Statement II: Incorrect
*The joint statement on ‘Inclusive and Sustainable AI’ was signed by 58 countries including India and China, but the US and UK did not sign due to concerns about overregulation.* Correct Answer: Only Statement I is correct.
Which of the following statements with regard to Large Language Models (LLMs) used in machine learning is/are correct ?
1. LLMs assign probabilities to the next possible words and then pick the one with the highest probability.
2. LLMs process data through mathematical optimization to minimise prediction errors.
3. LLMs produce unbiased outputs.
Select the answer using the code given below :
Statement 1 is Correct: At their core, Large Language Models (LLMs) function by analyzing input context and calculating a statistical probability distribution for the next possible words (tokens) in a sequence. In their most basic form of text generation (known as "greedy decoding"), they pick the word with the absolute highest probability. While standard applications often introduce controlled randomness (stochastic sampling like *top-k* or *temperature scaling*) to make text more creative, the foundational mechanism relies on assigning probabilities to select the next word. Statement 2 is Correct: LLM training relies heavily on mathematical optimization. Algorithms such as Stochastic Gradient Descent and backpropagation are used to iteratively adjust billions of model parameters. The explicit goal of this process is to minimize a "loss function," which mathematically represents the model's prediction errors compared to the actual training data. Statement 3 is Incorrect: LLMs do not produce inherently unbiased outputs. Because they learn from massive, human-generated datasets scraped from the internet, they are well-documented to inherit, reflect, and sometimes amplify historical and societal biases (e.g., gender, racial, or cultural stereotypes) present in their training data. Therefore, the correct option is B.
Show 3 more PYQs
With the present state of development, Artificial Intelligence an effectively do which of the following?
1. Bring down electricity consumption in industrial units.
2. Create meaningful short stories and songs.
3. Disease diagnosis.
4. Text-to-Speech Conversion.
5. Wireless transmission of electrical energy.
Select the correct answer using the code given below:
* AI is now being used to analyze industrial data, optimize processes, and predict energy usage patterns. This allows for targeted interventions to reduce overall consumption. * AI can now generate more creative and coherent text formats compared to 2020. While still under development, some AI-generated content can be quite engaging, blurring the lines between human and machine creation. * AI has become a powerful tool in medical diagnosis. AI algorithms can analyze vast amounts of medical data, identify complex patterns, and assist healthcare professionals in diagnosis and treatment planning. * Text-to-speech conversion using AI continues to be a well-established technology. AI can now generate natural-sounding speech with various accents and emotions, making it a valuable tool for various applications. * While significant wireless transmission of electricity over long distances remains a challenge, there has been progress in short-range wireless charging and localized energy transfer using AI-powered systems. Note: From the current status of AI development, all the listed applications of AI are feasible. However, this question was asked by the UPSC in 2020 when Generative AI was yet to become mainstream. UPSC's official answer key gave 'B' as the correct answer.
Which of the following is/are the aim/aims of "Digital India" Plan of the Government of India?
1. Formation of India's own Internet companies like China did.
2. Establish a policy framework to encourage overseas multinational corporations that collect Big Data to build their large data centres within our national geographical boundaries.
3. Connect many of our villages to the Internet and bring Wi-Fi to many of our school, public places and major tourist centres
Select the correct answer using the code given below
* Statement 1 is not correct: The formation of India’s own internet companies, similar to China’s approach, is not an aim of the Digital India programme. The initiative focuses on creating digital infrastructure, providing digital services, and promoting digital literacy — not establishing government-backed internet firms. * Statement 2 is not correct: The Digital India plan does not include any policy framework to attract foreign multinational corporations to build data centres in India. While data localisation and data centre policies have emerged later under different frameworks, they are not part of the original Digital India objectives. * Statement 3 is correct: One of the key aims of Digital India is to connect villages through broadband and to provide Wi-Fi access in schools, public places, and tourist centres. This is part of its core pillars like Broadband Highways, Public Internet Access Programme, and Early Harvest Programmes.
With reference to communication technologies, what is/are the difference/differences between LTE (Long-Term Evolution) and VoLTE (Voice over Long-Term Evolution)?
1. LTE is commonly marketed as 3G and VoLTE is commonly marketed as advanced 3G.
2. LTE is data-only technology and VoLTE is voice-only technology.
Select the correct answer using the code given below.
Statement 1 is incorrect: LTE is actually marketed as 4G, not 3G. VoLTE is not marketed as advanced 3G, but rather as an advancement over 4G LTE, allowing for voice calls over the 4G network. Statement 2 is incorrect: LTE does primarily focus on providing high-speed data services, but it's not a data-only technology. VoLTE, on the other hand, is not a voice-only technology. It allows for voice calls to be made over the 4G LTE network, but it doesn't exclude data services. Therefore, both statements are incorrect.