TRAI Proposes Strict AI Rules for Telecom Companies, Calls for Greater Accountability

NEW DELHI, Nov. 3: India’s telecommunications regulator has proposed a comprehensive framework to ensure the responsible use of Artificial Intelligence (AI) across telecom networks and services, seeking to make operators more accountable for the technologies they deploy and the risks associated with them.

The proposed guidelines by the Telecom Regulatory Authority of India (TRAI) come at a time when artificial intelligence is becoming increasingly important in managing communication networks, detecting fraudulent activities, handling customer complaints and improving the delivery of digital services.

The regulator has suggested that telecom service providers establish formal mechanisms to monitor AI systems, assess potential risks and ensure that automated technologies operate within clearly defined limits. The recommendations also seek to address concerns surrounding cybersecurity, data protection, transparency and the possibility of AI systems making unintended decisions.

Under the proposed framework, telecom operators would be required to classify their AI applications into three categories: high-risk, medium-risk and low-risk. The classification would depend on the importance of each system to network operations, its possible financial and operational consequences, and the impact it could have on consumers.

AI applications that directly influence critical network functions or could create significant disruptions would require closer supervision than systems used for routine administrative activities.

TRAI has also proposed that service providers maintain an updated inventory of the AI systems being used across their operations. The inventory would help companies identify the technologies deployed within their networks, understand their functions and establish responsibility for monitoring their performance.

Another important element of the proposed guidelines is the requirement for telecom operators to introduce board-approved AI governance policies. These policies would outline how AI systems are selected, developed, tested, deployed and monitored.

The regulator has emphasised that responsibility should not be limited to technologies developed internally by telecom companies. Operators would also remain accountable for AI applications purchased from external vendors or supplied through third-party technology partners.

This provision could have significant implications for technology companies providing AI-based solutions to telecom operators. Service providers would need to conduct appropriate checks before adopting such systems and examine the reliability of suppliers, the quality of training data and the limitations of the technology.

TRAI has further proposed the establishment of dedicated AI Governance and Safety Committees within telecom companies. These committees would oversee the implementation of internal policies, review possible risks and ensure that AI applications comply with established safety requirements.

The proposed framework also places importance on human supervision. Telecom operators would need to introduce mechanisms allowing authorised personnel to monitor automated decisions and intervene whenever an AI system produces an unexpected or potentially harmful outcome.

The regulator has identified several risks associated with the growing use of artificial intelligence, including biased results, changes in system behaviour, inadequate training data and attacks designed to manipulate AI applications.

Such vulnerabilities could become particularly serious when AI technologies are integrated into critical telecommunications infrastructure. Disruptions in these systems could affect millions of consumers and interfere with services that support financial transactions, emergency communications and essential public facilities.

TRAI has therefore proposed safety assessments before AI applications are introduced into operational environments. These assessments would examine factors such as accuracy, fairness, transparency, reliability and the ability of systems to withstand unexpected changes.

The draft guidelines also introduce a proposed incident-management framework under which AI-related problems would be classified according to their severity. Critical and high-severity incidents would have to be reported to the regulator in the prescribed manner and within the applicable timeframe.

The requirement is intended to improve transparency and enable authorities to respond more effectively when AI-related failures threaten network operations or consumer interests.

The proposal comes amid growing concerns about the cybersecurity implications of increasingly autonomous digital technologies. AI systems can improve the speed of identifying security weaknesses, but they can also introduce new entry points for malicious actors if they are not properly protected.

Recent reports of autonomous AI agents accessing systems belonging to Indian enterprises without authorisation have further highlighted the importance of strengthening safeguards around emerging technologies.

India’s telecom industry operates at an enormous scale, making the issue particularly significant. With more than a billion telephone connections, even a technical failure affecting a major service provider could have consequences extending well beyond individual customers.

Artificial intelligence is already being used in several areas of the sector. Telecom companies rely on automated systems to optimise network traffic, predict equipment failures, identify unusual calling patterns and improve customer support.

These applications can reduce operating costs and help service providers manage increasing demand for data and digital connectivity. However, greater dependence on automated decision-making also increases the need for clear accountability.

The proposed guidelines are part of India’s wider efforts to establish a responsible approach towards artificial intelligence. The framework builds on the broader AI governance principles introduced by the Centre earlier this year and seeks to apply them to the specific requirements of telecommunications infrastructure.

The Ministry of Electronics and Information Technology is also examining wider regulatory measures for AI, reflecting the government’s growing focus on balancing technological development with public safety.

TRAI has invited stakeholders to submit their comments on the draft guidelines by November 27, 2026. Telecom operators, technology companies, industry associations and other interested parties can provide suggestions before the regulator finalises its approach.

The consultation process is expected to help identify practical challenges involved in implementing the proposed requirements, particularly for smaller service providers and companies that depend on external technology vendors.

The proposed framework could also create opportunities for businesses specialising in cybersecurity, AI auditing, software testing and technology compliance.

For telecom operators, the new requirements may involve additional investment in monitoring systems, staff training and internal governance structures. Companies would also need to strengthen their relationships with technology suppliers to ensure that third-party AI applications meet the required standards.

Industry participation will be important in determining how the proposed safeguards are implemented without unnecessarily slowing innovation.

As artificial intelligence becomes more deeply integrated into India’s digital infrastructure, the regulator’s initiative signals a shift towards greater oversight of automated technologies. The central challenge will be to ensure that innovation continues while protecting consumers, maintaining network reliability and preventing emerging security threats.

The final guidelines are expected to play an important role in determining how telecom companies adopt and manage AI-based technologies in the coming years.