The draft calls for board-approved AI policies, risk classification and human oversight. Operators would remain accountable for outcomes even when a third party supplies the system.
Critical and high-severity incidents would require reporting. Notification formats and deadlines remain unspecified. The proposals, set out in the draft and examined by Business Standard, are not yet final obligations.