What happened
The Telecom Regulatory Authority of India (TRAI) issued draft guidelines governing the use of artificial intelligence in telecommunications networks. The proposal mandates that operators establish board-approved AI Governance and Safety Committees, classify AI systems into high, medium, and low-risk categories, and report critical or major AI incidents to the regulator within specified timeframes. A centralized repository for industry-wide AI incident data is also proposed.
The Telecom Regulatory Authority of India (TRAI) has released draft guidelines aimed at governing the responsible use of artificial intelligence across telecommunications networks and services. The framework places enhanced accountability on operators for operational risks, technical failures, and consumer protection. A key provision makes human oversight mandatory for automated systems and requires operators to evaluate the impact of machine learning tools on subscribers, operational stability, and internal commercial processes.
Under the draft, telecommunications licensees must constitute an AI Governance and Safety Committee with formal board approval. This committee, led by senior executives and drawing representation from network architecture, customer service, IT, data administration, and regulatory compliance, will be responsible for identifying operational risks and establishing internal controls. TRAI has outlined a three-tier model that separates AI systems into high-risk, medium-risk, and low-risk brackets based on their potential to disrupt connectivity, compromise sensitive data, or adversely impact users.
The regulatory draft also establishes a four-tier incident reporting framework, classifying AI events into critical, major, moderate, and minor severity levels. Operators will be obligated to maintain comprehensive logs of all operational incidents, including algorithm malfunctions and unexpected model behavior. For incidents designated as critical or major, operators must report details to the regulator within specified timeframes to enable the detection of systemic technical vulnerabilities across Indian telecommunications infrastructure.
To strengthen collective digital resilience, TRAI has proposed a centralized repository to track industry-wide operational failures. This shared registry will compile standardized technical records regarding system breakdowns, algorithmic distortions, and cyber vulnerabilities observed across participating carriers. The consultation draft is available on TRAI's official portal, with a deadline of November 27, 2026, for industry stakeholders, technology experts, and the public to submit feedback.
Why it matters
This draft represents a significant step in regulatory oversight of AI in critical infrastructure, specifically the telecommunications sector. By mandating human oversight and structured incident reporting, TRAI aims to mitigate operational risks and protect consumers from AI-driven service disruptions. The guidelines introduce a formal accountability framework that could serve as a model for other sectors or jurisdictions considering AI regulation in essential services.
The draft guidelines mark a concrete move by a national regulator to integrate AI risk management into the operational compliance framework of a critical infrastructure sector. By mandating board-level governance and specific incident reporting protocols, TRAI is shifting AI oversight from voluntary best practices to regulatory requirements.
The three-tier risk and four-tier incident reporting structure provide a standardized approach to managing AI-specific risks, such as algorithmic malfunctions and unexpected model behavior. This structured approach allows regulators to distinguish between minor technical glitches and critical failures that could compromise network stability or consumer data.
The proposed centralized repository for AI incident data is a notable feature that could enhance transparency and enable industry-wide trend analysis. This data pool would assist regulators in refining threat detection protocols and supervising the deployment of commercial algorithms, potentially setting a precedent for cross-industry AI incident sharing.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
Why can ethical evaluation not be reduced to one model score?
What to watch next
Stakeholders should monitor the public consultation period ending November 27, 2026, for feedback from industry players and experts. The finalization of these guidelines will determine the specific compliance requirements and reporting timelines for Indian telecom operators. Additionally, the implementation of the centralized incident repository will be a key indicator of the regulator's capacity to enforce these standards.
The public consultation period, which closes on November 27, 2026, will be a critical juncture for shaping the final guidelines. Feedback from telecom operators, technology experts, and consumer advocacy groups will likely influence the specific compliance requirements and reporting timelines.
The finalization of the guidelines will determine the operational burden on telecom operators, particularly regarding the establishment of AI Governance and Safety Committees and the implementation of technical audits for high-risk AI systems.
The development and deployment of the centralized incident repository will be a key indicator of the regulator's capacity to enforce these standards and monitor industry-wide AI risks.