The integration of artificial intelligence (AI) into telecommunications infrastructure introduces novel risks, such as algorithmic bias and unpredictable system behavior, that fall outside the scope of traditional cybersecurity and data protection frameworks. This paper introduces a precise definition and a detailed typology of telecommunications AI incidents, establishing them as a distinct category of risk that extends beyond conventional cybersecurity and data protection breaches. It argues for their recognition as a distinct regulatory concern. Using India as a case study for jurisdictions that lack a horizontal AI law, the paper analyzes the country's key digital regulations. The analysis reveals that India's existing legal instruments, including the Telecommunications Act, 2023, the CERT-In Rules, and the Digital Personal Data Protection Act, 2023, focus on cybersecurity and data breaches, creating a significant regulatory gap for AI-specific operational incidents, such as performance degradation and algorithmic bias. The paper also examines structural barriers to disclosure and the limitations of existing AI incident repositories. Based on these findings, the paper proposes targeted policy recommendations centered on integrating AI incident reporting into India's existing telecom governance. Key proposals include mandating reporting for high-risk AI failures, designating an existing government body as a nodal agency to manage incident data, and developing standardized reporting frameworks. These recommendations aim to enhance regulatory clarity and strengthen long-term resilience, offering a pragmatic and replicable blueprint for other nations seeking to govern AI risks within their existing sectoral frameworks.
翻译:人工智能(AI)与电信基础设施的融合引入了算法偏见和系统行为不可预测等新型风险,这些风险超出了传统网络安全和数据保护框架的范畴。本文提出了电信AI事件的精确定义和详细类型学,将其确立为超越传统网络安全和数据泄露的一类独立风险,并主张将其作为独立的监管议题予以关注。以缺乏横向AI法律的印度作为案例,本文分析了该国关键的数字监管法规。分析表明,印度现有的法律工具(包括《2023年电信法》、CERT-In规则和《2023年数字个人数据保护法》)主要关注网络安全和数据泄露,对AI特有的运行事件(如性能降级和算法偏见)存在显著的监管空白。本文还探讨了信息披露的结构性障碍以及现有AI事件数据库的局限性。基于这些发现,本文提出了以将AI事件报告纳入印度现有电信治理体系为核心的政策建议。关键建议包括:强制要求报告高风险AI故障、指定现有政府机构作为管理事件数据的节点机构,以及开发标准化报告框架。这些建议旨在提升监管清晰度并增强长期韧性,为其他寻求在现有行业框架内治理AI风险的国家提供了务实且可复制的蓝图。