Back to News
PolicyAI Understanding briefing

India releases DEPA framework to enable secure AI training data access

MeitY has introduced a new handbook for the Data Empowerment and Protection Architecture (DEPA) to facilitate secure, privacy-preserving data sharing for AI model training.

4 min readRead the linked source
Source-provided image accompanying India releases DEPA framework to enable secure AI training data access
Source referenceSource recorded
Publisher
thehindubusinessline.com
Source type
Linked source — primary-source status has not been established.
Also cited

Story last revised

ContextUnderstand this in 60 seconds

Key terms

Data Provenance
The documented origin, ownership, and history of a dataset or model artifact.
Robustness
A model's ability to maintain performance under noise, shifts, or adversarial inputs.
Feature
An input variable used by a model to make predictions.

What changed since publication

  1. First published
  2. The Hindu BusinessLine report provides additional context on the launch, specifically detailing the 'model-to-data' technical approach and the involvement of the iSPIRT Foundation, which were not fully elaborated in the initial report.

What happened

The Indian Ministry of Electronics and Information Technology (MeitY) has officially launched the 'Handbook on Data Empowerment and Protection Architecture (DEPA) for AI Training.' Unveiled by MeitY Secretary S. Krishnan in Bengaluru, the framework is designed to resolve long-standing barriers to data sharing, such as intellectual property concerns, privacy risks, and loss of institutional control. Developed with support from the iSPIRT Foundation, the initiative establishes a techno-legal structure that allows AI models to be trained on sensitive datasets without requiring the physical transfer of the underlying data.

The DEPA framework functions as a techno-legal system that combines contractual permissions with privacy-enhancing technologies. By utilizing controlled computing environments, the framework ensures that data remains under the control of the original custodian while still being usable for training purposes.

A core of the architecture is its focus on . The system tracks the origin, permissions, and usage history of datasets throughout the training lifecycle, which is intended to provide transparency and accountability for both data providers and AI developers.

During the launch, Principal Scientific Adviser Ajay Kumar Sood emphasized that the framework shifts the paradigm so that the 'model travels to the data,' rather than the data being transferred to the model. This is intended to mitigate risks associated with data leakage and unauthorized access.

The initiative was developed in collaboration with the iSPIRT Foundation and was presented to a roundtable of stakeholders from government, industry, and academia to encourage broad adoption across the Indian AI ecosystem.

Source details: thehindubusinessline.com

Why it matters

The DEPA framework represents a significant shift in how AI training data is managed by prioritizing a 'model-to-data' approach. By keeping data within its original environment while allowing AI models to access it, the framework addresses the critical tension between the need for massive, high-quality datasets and the necessity of maintaining strict data sovereignty. This is particularly important for sectors like healthcare, finance, and scientific research, where data is often siloed due to privacy regulations. If successfully implemented, this architecture could accelerate the development of robust, domain-specific AI models in India by unlocking previously inaccessible data pools while ensuring accountability through built-in provenance tracking. The government's explicit comparison of this framework to the impact of the Unified Payment Interface (UPI) underscores its ambition to create a standardized, scalable infrastructure for the national data economy.

The framework addresses the 'data bottleneck' that currently limits the performance of AI models in specialized fields. By providing a secure pathway for collaboration, it allows for the creation of more diverse and representative datasets.

By protecting intellectual property and institutional control, the framework incentivizes organizations that were previously hesitant to share data to participate in the broader AI training ecosystem.

The comparison to the Unified Payment Interface (UPI) suggests that the government views this as a foundational 'digital public good' that could standardize data exchange protocols across the country, potentially lowering the barrier to entry for AI startups and researchers.

The framework's emphasis on 'science diplomacy' suggests that India intends to position this architecture as a model for other nations, potentially influencing global standards for responsible and inclusive AI development.

Interactive Mechanism

Interactive Mechanism: How It Actually Works

Explore the underlying technology behind this development interactively.

System Requirements:
Best ArchitecturePure RAGRecommended pattern
Hallucination RiskVery LowGrounding efficacy
Update Cost$0 (Vector sync)Ongoing maintenance
Core takeaway: Fine-tuning teaches models how to speak (form, style, syntax); RAG teaches models what to say (verifiable facts). Never use fine-tuning alone for factual memory.
Interactive Concept Check+10 Points
AI Training Quiz

Which training-log entry describes one completed epoch?

What to watch next

Observers should monitor the practical adoption rates of the DEPA framework across public and private institutions. A key indicator of success will be the development of the 'controlled computing environments' mentioned in the handbook, which are essential for the 'model-to-data' paradigm to function securely. Additionally, it remains to be seen how the framework handles cross-border data collaboration, which officials have identified as a potential use case. The extent to which industry players and academic researchers integrate these protocols into their existing data pipelines will determine whether this policy effectively bridges the gap between data availability and AI innovation.

Watch for the release of technical specifications or software toolkits that will allow developers to implement these 'controlled computing environments' in practice.

Monitor for pilot programs or case studies involving major research institutions or government departments that demonstrate the framework's effectiveness in real-world scenarios.

Assess whether the framework gains traction in cross-border data collaborations, as this will test the of its privacy and security guarantees in an international context.

Look for updates on how the government plans to enforce the 'contractual permissions' aspect of the framework, as this will be critical for maintaining trust among data custodians.

Related guides & quizzes

Updates and corrections

This canonical story is updated in place when the developing event materially changes. Its URL and original publication date never change.

  • The Hindu BusinessLine report provides additional context on the launch, specifically detailing the 'model-to-data' technical approach and the involvement of the iSPIRT Foundation, which were not fully elaborated in the initial report.
See the public corrections log
Found this useful?