Abstract
Artificial intelligence is increasingly being used in India in areas ranging from financial services and healthcare to education, advertising, policing and content creation. The legal difficulty is that AI systems do not fit neatly within one existing legal category. They may process personal data, generate content, influence decisions, create cybersecurity risks and cause harm without a clear human actor at the point where the harm occurs. India currently addresses these issues through a combination of general statutes, sectoral regulation, judicial principles and policy initiatives rather than through one comprehensive AI statute. This paper examines the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, constitutional rights, intellectual property, intermediary responsibility, contractual and consumer liability, deepfakes and automated decision-making. It argues that although India's existing legal framework can address many individual harms, important questions concerning accountability, transparency, attribution and human oversight remain without a single, predictable legal standard.