बेबाक · Editorial
India's digital build-out needs rules as sturdy as its satellites and server halls
From NavIC to data centres to AI training data, India is building fast; its safeguards for citizens, children and remote states must be built at the same speed.
The hardware is arriving
India's digital infrastructure is being built on several fronts at once. ISRO's NVS-03 satellite has reached its orbit. The mission could help restore the functioning of NavIC, India's regional satellite navigation system, whose development began after the 1999 Kargil War, when the United States reportedly clamped down on access to GPS data. In Telangana, the Fire Services Department has issued special fire and life safety guidelines for data centres. MeitY has proposed a consent-based framework to facilitate data sharing for training AI models in India. The ambition is clear. Whether rules, oversight and reach are keeping pace with it is far less settled.
Speed against safeguards
The core tension is familiar. Infrastructure brings investment and strategic autonomy, and delay costs both. Safeguards cost time, but without them the citizen carries the risk. Telangana's guidelines show this need not be a zero-sum choice. Their stated purpose is to speed up provisional Fire NOC processing, and they cover detection, suppression, battery rooms, fuel storage, ventilation and emergency provisions. Writing the standard down in advance replaces case-by-case negotiation with a known benchmark. That is how safety can make approvals faster. Much of the rest of the digital economy has not yet reached that level of clarity.
Both cases, fairly put
The case for building fast is strong. The NavIC story is a reminder that a country which depends on another nation's systems can be denied them at the worst possible moment. Data centres and domestic AI capacity follow the same logic, and a consent-based data framework could make more Indian data available for training AI models in India. The case for caution is also serious. One report flags a mismatch between the country's hyperscaler build-out and domestic demand for AI servers, which raises the risk of capacity built ahead of need. Building quickly is wise. Building without measuring demand, or without protecting the people whose data and attention feed these systems, is not.
Where the gaps show
The evidence shows where protection falls short. AU Small Finance Bank has reported a likely breach of customer data involving a third-party software platform. Reports say a dedicated ₹100-crore cyber insurance cover means the bank is expected to see only a minimal financial impact, but that cover protects the institution's balance sheet, not the customers whose data may be exposed. A test by NDTV suggests YouTube's existing child-safety safeguards are struggling to keep explicit AI-generated music away from minors. TRAI data shows Nagaland's internet subscriptions fell by around 12% and telephone subscriptions by 5.2% in 2025-26, even as both indicators grew nationally. A digital nation is only as strong as its weakest-served state.
The verdict
Building is necessary and welcome. NVS-03 deserves recognition as part of a long effort to reduce strategic dependence, though claims of an end to reliance on GPS should wait for evidence that NavIC is fully restored. However, infrastructure without enforceable accountability simply moves risk onto the citizen. A bank that is insured while its customers are not, a platform whose safeguards struggle to protect children, and a state losing subscribers while national figures rise are not separate stories. Each shows the same gap: India is measuring what it builds far more carefully than it measures who is protected and who is left out.
A practical way forward
Four steps are feasible now. First, other states should adapt the Telangana Fire Services Department's data centre guidelines into a common model code, so that safety and speed travel together. Second, MeitY's AI data framework should include independent audits of consent and a public record of who receives data and for what purpose. Third, financial regulators should require lenders to disclose third-party vendor breaches to affected customers promptly, alongside any insurance claim. Fourth, TRAI should examine why Nagaland's subscriptions fell and publish its findings. ISRO, for its part, should publish NavIC's service status regularly, because public trust in strategic systems depends on transparency.
Sovereignty is not only a satellite in orbit; it is a citizen in Nagaland who can get online, and a child in any town who is not served explicit content.
What this editorial rests on
Drawn from our live multi-newsroom feed — read the reporting at source.
An editorial is the considered opinion of the Aad Tak desk, argued from the sourced reporting above and written under our published persona, बेबाक. We name institutions, not parties. If we are wrong, we will say so. How we work →