Algorithmic Sovereignty Law in India

1. Meaning of Algorithmic Sovereignty

Algorithmic sovereignty is an emerging legal concept concerning a State's authority and capacity to control, regulate, deploy and secure algorithms, artificial intelligence systems, data infrastructures and automated decision-making systems that affect national interests, public administration, citizens and strategic sectors.

It is not presently a separately codified cause of action or standalone branch of Indian law. Instead, algorithmic sovereignty is constructed from existing principles of:

• constitutional sovereignty;
• legislative and executive power;
• data protection;
• privacy;
• cybersecurity;
• national security;
• digital governance;
• public procurement;
• telecommunications;
• financial regulation;
• competition law;
• intellectual property;
• administrative law; and
• strategic technology regulation.

A simplified formulation is:

Algorithmic Sovereignty = State authority over critical data, algorithms, AI infrastructure and automated decision-making necessary to preserve constitutional governance, national security, regulatory autonomy and individual rights.

2. Why Algorithmic Sovereignty Has Become Important

Modern States increasingly depend upon algorithms for:

• taxation;
• welfare distribution;
• policing;
• immigration;
• defence;
• financial regulation;
• healthcare;
• education;
• elections;
• public procurement;
• identity verification;
• cybersecurity;
• telecommunications;
• transportation;
• energy management.

At the same time, many algorithms may be:

• developed by foreign companies;
• hosted on foreign cloud infrastructure;
• trained on foreign-controlled datasets;
• dependent upon foreign chips;
• supplied through international licensing arrangements;
• updated remotely;
• protected as trade secrets; or
• dependent on infrastructure outside India's jurisdiction.

This creates a sovereignty problem.

For example, if a critical government service depends entirely upon a foreign AI provider, India may theoretically possess statutory authority over the service while lacking practical control over the technology supporting it.

3. Algorithmic Sovereignty Is Not the Same as AI Nationalism

Algorithmic sovereignty does not necessarily mean that every algorithm must be developed inside India.

It is better understood as the State's ability to ensure:

1. legal control;
2. regulatory control;
3. data governance;
4. security;
5. auditability;
6. continuity of critical services;
7. strategic technological independence where necessary; and
8. constitutional accountability.

India can therefore use foreign AI technology while still maintaining regulatory sovereignty over its deployment.

4. Constitutional Foundation

The constitutional foundation of algorithmic sovereignty principally arises from:

Article 14

Requires non-arbitrary State action.

Article 19

Protects important freedoms affected by digital and algorithmic regulation.

Article 21

Protects privacy, dignity, autonomy and procedural fairness.

Article 32

Provides constitutional remedies before the Supreme Court.

Article 226

Provides broad judicial-review jurisdiction to High Courts.

Article 73

Defines the executive power of the Union.

Article 246 and the Seventh Schedule

Distribute legislative competence between Union and States.

Article 300A

Protects property against deprivation except by authority of law.

Thus, algorithmic sovereignty cannot be treated as unlimited governmental technological power.

State control over technology remains subject to the Constitution.

5. Sovereignty and the Rule of Law

An important principle is that the State cannot simply claim:

“AI is necessary for national sovereignty.”

The State must still identify:

• statutory authority;
• constitutional authority;
• legitimate purpose;
• appropriate procedure;
• proportionality;
• safeguards;
• accountability.

Consequently:

Sovereignty ≠ unlimited technological discretion.

6. A.K. Kraipak v Union of India

A.K. Kraipak v Union of India, (1969) 2 SCC 262

This case is foundational to Indian administrative law.

The Supreme Court recognised the importance of natural justice and fairness in administrative decision-making.

Relevance to algorithmic sovereignty

Suppose the Indian government uses an AI system to:

• determine security risk;
• classify citizens;
• allocate licences;
• select beneficiaries;
• identify suspicious financial activity.

Governmental sovereignty does not eliminate procedural fairness.

The State must remain accountable for decisions produced through automated systems.

7. E.P. Royappa v State of Tamil Nadu

E.P. Royappa v State of Tamil Nadu, (1974) 4 SCC 3

The Supreme Court connected equality with the prohibition of arbitrariness.

Algorithmic sovereignty relevance

A government cannot defend arbitrary algorithmic decisions merely by describing the system as:

“technologically sophisticated.”

An algorithm used by the State must still comply with Article 14.

For example, an automated system that disproportionately denies government benefits without rational justification could potentially be challenged under Article 14.

8. Maneka Gandhi v Union of India

Maneka Gandhi v Union of India, (1978) 1 SCC 248

The Supreme Court established a close relationship between Articles 14, 19 and 21 and insisted upon fairness and reasonableness in State action.

Algorithmic sovereignty significance

Government use of AI affecting liberty, movement, livelihood or other fundamental interests must satisfy constitutional standards.

For example:

A national-security algorithm cannot automatically convert a person into a legally designated security threat without lawful authority and procedural safeguards.

9. K.S. Puttaswamy v Union of India

K.S. Puttaswamy v Union of India, (2017) 10 SCC 1

This is perhaps the most important constitutional authority for the privacy dimension of algorithmic sovereignty.

The Supreme Court recognised privacy as a fundamental right.

Algorithmic sovereignty issues

A sovereign State may possess legitimate interests in:

• national security;
• crime prevention;
• public health;
• taxation;
• welfare;
• cybersecurity.

But extensive algorithmic surveillance and profiling can interfere with:

• informational privacy;
• bodily privacy;
• decisional autonomy;
• dignity;
• personal liberty.

Therefore, sovereign technological power must satisfy constitutional requirements.

10. K.S. Puttaswamy (Aadhaar) v Union of India

K.S. Puttaswamy (Aadhaar) v Union of India, (2019) 1 SCC 1

The Aadhaar litigation is particularly important for understanding state-controlled digital infrastructure.

It involved questions concerning:

• biometric information;
• authentication;
• identity infrastructure;
• welfare delivery;
• data security;
• exclusion;
• proportionality.

Algorithmic sovereignty significance

A national digital identity infrastructure illustrates both sides of sovereignty:

State interest

The State may need reliable digital infrastructure for effective governance.

Individual interest

Citizens must be protected against:

• excessive surveillance;
• misuse of identity data;
• wrongful exclusion;
• data breaches;
• disproportionate data collection.

Therefore:

Digital sovereignty must coexist with constitutional privacy.

11. Anuradha Bhasin v Union of India

Anuradha Bhasin v Union of India, (2020) 3 SCC 637

The Supreme Court considered restrictions affecting internet access and emphasised constitutional review and proportionality.

Algorithmic sovereignty relevance

The case is significant because modern sovereignty increasingly depends upon digital infrastructure.

The State may regulate digital networks for legitimate purposes such as:

• security;
• public order;
• emergency response.

But restrictions must satisfy constitutional standards.

This principle is particularly important for:

• algorithmic network controls;
• automated blocking;
• digital surveillance;
• content filtering;
• cybersecurity restrictions.

12. Shreya Singhal v Union of India

Shreya Singhal v Union of India, (2015) 5 SCC 1

The Supreme Court struck down Section 66A of the Information Technology Act.

Algorithmic sovereignty relevance

The decision demonstrates that technological regulation must remain consistent with constitutional freedoms.

A government cannot say:

“The internet is technologically different, therefore ordinary constitutional protections do not apply.”

The same principle applies to AI and algorithms.

Technological novelty does not eliminate fundamental rights.

13. Internet and Mobile Association of India v RBI

Internet and Mobile Association of India v Reserve Bank of India, (2020) 10 SCC 274

The Supreme Court considered the legality and proportionality of regulatory restrictions affecting virtual-currency businesses.

Algorithmic sovereignty significance

Digital financial systems demonstrate how sovereignty intersects with:

• monetary regulation;
• financial stability;
• technology;
• private digital platforms.

The State retains regulatory authority over financial technology, but regulatory restrictions remain subject to constitutional review.

This is particularly relevant to:

• algorithmic trading;
• automated financial risk systems;
• digital currencies;
• payment algorithms;
• AI-based financial surveillance.

14. Tata Cellular v Union of India

Tata Cellular v Union of India, (1994) 6 SCC 651

This case established important principles concerning judicial review of government contracts and procurement.

Algorithmic sovereignty relevance

Suppose the government purchases a critical AI system from a foreign corporation.

Questions may arise concerning:

• procurement fairness;
• vendor selection;
• national security;
• technology dependence;
• data localisation;
• audit access;
• source-code or model access;
• termination rights;
• service continuity.

Government procurement of strategic AI infrastructure cannot be treated as an ordinary commercial transaction when public interests are involved.

15. Erusian Equipment & Chemicals Ltd v State of West Bengal

Erusian Equipment & Chemicals Ltd v State of West Bengal, (1975) 1 SCC 70

The Supreme Court recognised constitutional fairness in State contractual dealings.

Algorithmic sovereignty relevance

If the government excludes a technology provider from public procurement because of:

• national-security concerns;
• cybersecurity concerns;
• foreign-control concerns;
• data sovereignty concerns,

the decision must still operate within applicable legal and constitutional principles.

16. State of Orissa v Dr. Binapani Dei

State of Orissa v Dr. Binapani Dei, AIR 1967 SC 1269

The Supreme Court emphasised fairness where administrative action produces civil consequences.

Algorithmic sovereignty application

A sovereign AI system cannot simply make consequential decisions without safeguards.

For example:

Automated security classification → loss of licence → financial loss

could potentially trigger procedural-fairness concerns.

17. S.N. Mukherjee v Union of India

S.N. Mukherjee v Union of India, (1990) 4 SCC 594

The Supreme Court recognised the importance of giving reasons in administrative decisions.

Algorithmic significance

This is crucial for black-box government AI.

A citizen should not necessarily receive merely:

“Rejected by automated risk assessment.”

Where reasons are legally required, the government may need to provide sufficiently meaningful reasons to permit effective challenge.

This does not necessarily require publication of proprietary source code.

18. Algorithmic Sovereignty and Data Sovereignty

Data is one of the most important dimensions of algorithmic sovereignty.

A State may be concerned about:

• where government data is stored;
• who controls it;
• where it is processed;
• who can access it;
• whether foreign governments can compel access;
• whether vendors can reuse it;
• whether it can be transferred outside India;
• whether critical data can be deleted or manipulated.

The legal question is therefore not simply:

“Where is the server?”

It also includes:

Who legally and practically controls the data and the processing infrastructure?

19. DPDP Framework

The Digital Personal Data Protection Act, 2023, together with the subsequent regulatory framework, forms an important part of India's data-governance architecture.

Its relevance to algorithmic sovereignty includes issues concerning:

• processing of personal data;
• consent;
• legitimate uses;
• obligations of Data Fiduciaries;
• security safeguards;
• data principal rights;
• children's data;
• breach response;
• cross-border data flows;
• governmental processing.

However, the DPDP framework should not be treated as a complete “algorithmic sovereignty statute.”

It is principally a personal-data governance framework.

Algorithmic sovereignty is considerably broader.

20. Data Sovereignty vs Algorithmic Sovereignty

The two concepts overlap significantly.

21. Algorithmic Sovereignty and National Security

AI is increasingly relevant to:

• defence;
• intelligence;
• cybersecurity;
• border security;
• surveillance;
• critical infrastructure;
• military logistics;
• cyber operations.

The State has a strong interest in protecting these systems.

But national security does not automatically eliminate constitutional review.

The legal balance is:

National security interest + statutory authority + proportionality + procedural safeguards + accountability.

22. Algorithmic Sovereignty and Foreign AI Companies

Suppose an Indian government department relies upon a foreign AI provider.

Potential sovereignty issues include:

1. Data access

Can the vendor access government datasets?

2. Jurisdiction

Which country's law governs the provider?

3. Remote control

Can the provider suspend the service?

4. Model updates

Can the vendor change the system without government approval?

5. Auditability

Can Indian authorities independently audit the system?

6. Continuity

What happens if sanctions or geopolitical tensions interrupt service?

7. Intellectual property

Who owns:

• model weights;
• fine-tuned models;
• training datasets;
• prompts;
• outputs?

8. Security

Can foreign personnel or foreign governments gain access?

23. Algorithmic Vendor Lock-In

Vendor lock-in can become a sovereignty concern when government systems become dependent on one technology provider.

For example:

Government welfare infrastructure → Vendor A's AI → Vendor-specific API → proprietary model → proprietary data format.

If switching providers becomes practically impossible, governmental technological autonomy is weakened.

Contracts for strategically important AI should therefore consider:

• interoperability;
• data portability;
• exit rights;
• escrow;
• documentation;
• independent audit;
• continuity obligations;
• transition assistance;
• security standards.

24. Government Procurement and Sovereignty

Public procurement contracts involving AI should ideally specify:

Technical requirements

• accuracy;
• uptime;
• latency;
• cybersecurity;
• bias testing;
• explainability;
• auditability.

Sovereignty requirements

• data-control arrangements;
• access restrictions;
• location and transfer requirements where legally applicable;
• government audit rights;
• incident reporting;
• subcontractor restrictions;
• continuity;
• termination rights;
• migration assistance.

Accountability requirements

• human oversight;
• logging;
• model version control;
• documentation;
• incident investigation.

25. Algorithmic Sovereignty and Administrative Law

Government algorithms may be challenged when they:

• exceed statutory authority;
• apply irrelevant criteria;
• ignore relevant considerations;
• produce arbitrary classifications;
• fail to give required reasons;
• deny natural justice;
• are disproportionate;
• are based on inaccurate data.

Thus, traditional administrative law remains extremely important.

A useful principle is:

Automation does not replace administrative law; it operationalises administrative decisions and therefore brings administrative-law standards into the technological system.

26. Algorithmic Sovereignty and Judicial Review

Courts may potentially review:

1. legal authority for deployment;
2. statutory purpose;
3. algorithmic methodology;
4. classification;
5. data quality;
6. discriminatory effects;
7. proportionality;
8. procedural safeguards;
9. reasons;
10. human oversight.

Courts do not necessarily need to become programmers.

Judicial review can focus on:

legality → rationality → fairness → proportionality → accountability.

27. Algorithmic Sovereignty and Intellectual Property

A sovereign government may depend on proprietary AI systems.

This creates tension between:

Government interest

Need for:

• transparency;
• audit;
• security;
• accountability.

Vendor interest

Protection of:

• source code;
• trade secrets;
• model architecture;
• weights;
• proprietary datasets.

The solution need not always be complete public disclosure.

Possible mechanisms include:

• confidential government audits;
• secure inspection;
• independent technical auditors;
• contractual disclosure obligations;
• escrow arrangements;
• controlled access.

28. Algorithmic Sovereignty and Competition Law

If a small number of companies control critical AI infrastructure, competition issues may arise.

Potential concerns include:

• monopolisation;
• discriminatory access;
• exclusive arrangements;
• tying;
• refusal to supply;
• interoperability barriers;
• excessive dependence on dominant providers.

Thus, technological sovereignty and competition policy can overlap.

A sovereign AI ecosystem does not necessarily mean government-owned AI.

It can also mean:

A competitive ecosystem in which the State is not structurally dependent upon one private provider.

29. Algorithmic Sovereignty and Critical Infrastructure

AI may control or assist:

• electricity systems;
• telecommunications;
• banking;
• transport;
• ports;
• airports;
• water systems;
• healthcare;
• defence;
• government databases.

If a foreign-controlled AI system becomes essential to such infrastructure, a cyberattack or service termination could have national consequences.

Therefore, procurement and cybersecurity rules become part of algorithmic sovereignty.

30. Sovereignty vs Individual Rights

One of the most important legal tensions is:

How far can the State use algorithmic power in the name of sovereignty without violating individual rights?

For example:

State interest

Prevent terrorism through predictive analytics.

Individual interest

Protection against:

• wrongful profiling;
• surveillance;
• arbitrary detention;
• privacy invasion;
• discriminatory classification.

The constitutional answer requires balancing legitimate State objectives against fundamental rights.

The jurisprudence of Puttaswamy, Maneka Gandhi and Anuradha Bhasin is particularly important.

31. Algorithmic Sovereignty and Democratic Accountability

Algorithms used in governance can affect millions of people.

A democratic system therefore requires accountability concerning:

• who authorised the system;
• what law authorises it;
• what data it uses;
• what objectives it pursues;
• who audits it;
• who can challenge it;
• who is responsible when it fails.

The fundamental principle is:

A machine cannot be constitutionally accountable in place of the State.

Responsibility ultimately remains with the legally competent institution or actor.

32. Six Major Dimensions of Algorithmic Sovereignty

Algorithmic sovereignty can be divided into six principal dimensions:

1. Regulatory sovereignty

India's ability to regulate AI systems operating within its jurisdiction.

2. Data sovereignty

Control over important government and personal datasets.

3. Infrastructure sovereignty

Control and resilience of cloud, compute, networks and critical digital infrastructure.

4. Model sovereignty

Ability to develop, inspect, modify or independently evaluate strategically important AI models.

5. Decision-making sovereignty

Ability of Indian institutions to make legally effective decisions without surrendering governmental discretion to external automated systems.

6. Constitutional sovereignty

Ensuring that all governmental AI remains subject to the Constitution.

33. Algorithmic Sovereignty Claim: Legal Structure

A potential legal claim can be analysed as:

Government/Private AI System → Exercise of Significant Public/Strategic Function → Legal Authority Question → Data/Technology Control Issue → Constitutional or Statutory Violation → Individual/Public Injury → Judicial/Regulatory Remedy

For a government decision:

Statutory Authority → Purpose → Data → Algorithmic Classification → Proportionality → Natural Justice → Human Review → Reasons → Accountability

34. Potential Remedies

Depending upon the facts, remedies may include:

Constitutional remedies

• writ of mandamus;
• certiorari;
• prohibition;
• declaration;
• quashing of an administrative decision.

Regulatory remedies

• directions by competent regulator;
• compliance orders;
• security requirements;
• data-governance directions.

Contractual remedies

• termination;
• damages;
• specific performance;
• indemnity;
• audit;
• transition assistance.

Individual remedies

• correction of records;
• reconsideration;
• compensation where legally available;
• restoration of benefits;
• procedural review.

35. Important Case-Law List

36. Key Legal Principles

The emerging Indian position can be reduced to the following propositions:

Principle 1

Technology does not itself create governmental authority.

An AI system cannot exercise a power that the government itself does not legally possess.

Principle 2

Outsourcing does not eliminate responsibility.

A government cannot necessarily escape constitutional responsibility by hiring a private AI vendor.

Principle 3

Data sovereignty is only one component of algorithmic sovereignty.

Control over algorithms, infrastructure and decision-making capacity also matters.

Principle 4

Sovereignty is subject to fundamental rights.

National interest cannot automatically justify arbitrary surveillance or discrimination.

Principle 5

High-impact automated decisions require stronger safeguards.

The more serious the consequence, the stronger the case for human review and procedural protection.

Principle 6

Black-box technology does not automatically defeat judicial review.

Courts can examine legality, proportionality, fairness, reasons and consequences even without publicly disclosing source code.

Principle 7

Strategic AI procurement is also a sovereignty issue.

Government contracts should address security, continuity, auditability, data control and vendor dependence.

37. Conclusion

Algorithmic sovereignty law in India is an emerging interdisciplinary field rather than a standalone statutory subject. Its foundations are already present in constitutional law, administrative law, privacy jurisprudence, digital regulation, procurement law, data protection, cybersecurity, financial regulation and national-security law.

The most important judicial authorities are A.K. Kraipak, Binapani Dei, E.P. Royappa, Maneka Gandhi, Erusian Equipment, Mohinder Singh Gill, S.N. Mukherjee, Tata Cellular, Shreya Singhal, Puttaswamy, Puttaswamy (Aadhaar), Anuradha Bhasin and Internet and Mobile Association v RBI.

The central proposition is:

Algorithmic sovereignty means that the Indian State must retain sufficient legal, institutional and technological capacity to govern strategically important AI and automated systems, while exercising that sovereignty consistently with the Constitution, fundamental rights, statutory authority, proportionality, transparency and accountability.

Thus, the future Indian legal question will not simply be “Who owns the algorithm?” It will increasingly be:

Who controls the algorithm, who controls the data, who has legal authority over the decision, who can audit the system, who is responsible for its failure, and what remedies are available to the person affected?