Is India’s privacy law already outdated? AI thrives on data abundance but we’re aiming for scarcity

What we should have done instead is regulate outcomes. Rather than telling data fiduciaries how to process data, we should have told them that we will hold them accountable for the harms that result from the actions they perform. Rather than specifying the steps they need to take, we should have designed the law to assess, in real time, exactly what their algorithms do, so that when harm occurs, it can be detected early enough to be mitigated.