Machine Learning — Tech Evolutions

Entry	Year	Description	Impact
Information Technology (Amendment) Act, 2008	2008	Introduced Section 43A, which mandates compensation for negligence in implementing and maintaining reasonable security practices and procedures for sensitive personal data or information. It also expanded the scope of cybercrimes and introduced provisions for data protection.	Laid an early legal foundation for data security and liability, indirectly impacting how ML systems handle sensitive data. It emphasized the need for robust security measures, which are critical for ML models that often process large datasets, including personal information.
Digital Personal Data Protection Act, 2023	2023	A comprehensive legislation that establishes a framework for the processing of digital personal data in India. It defines the rights of data principals and the obligations of data fiduciaries, emphasizing consent, data minimization, and purpose limitation.	Directly and profoundly impacts ML deployment by mandating strict adherence to data protection principles. ML models must be designed with 'privacy-by-design' and 'by-default' approaches, ensuring transparency, accountability, and the protection of individual rights, especially when dealing with personal data for training or inference.