Skip to content
Session 07 / 08· Know the law

The Law of Using AI — India First

Where the law stands, dated: authentication, the judiciary's rules and drafts, professional duty, data protection, privilege. India first.

  • 90 min
  • 60 taught + 30 lab
  • The law, and the work product
  • Mirror · experiment on the class
  • Your laptop · free tier

The lab · 30 min · Statute-in-the-window

The Authentication Note. Statute-in-the-window demonstrated: the verified pack loaded, an artefact walked through it, the five-line authentication note drafted and corrected.

The full lab plan

The hook

“You will misjudge at least one of the six images you are about to see; the room always does. Now imagine that image is Exhibit C, and you must keep it out, or get it in. India has built law for this moment: a new certificate regime, a Supreme Court order on who signs it, platform labelling rules in force since February, a judiciary writing rules for itself. This hour is that law, dated and precise.”

What you'll be able to do

  • State what authenticating an electronic record requires: BSA s.63(4) and the Schedule's certificate with hash value and expert signature, the Anvar–Arjun Panditrao primary/secondary line as the working assumption, and the Supreme Court's 2026 clarification of who counts as the expert.
  • Map the regulatory position, register by register: what the White Paper recommends versus directs, what the draft AI-in-Courts Regulations would require, what the IT Rules now mandate for synthetic media, what the DPDP Act makes you, and what remains unsettled.
  • Apply the professional frame: the Advocates Act and BCI Rules' duties on AI use, the misconduct line after Pooja Ramesh Singh, and privilege under BSA ss.132–134 as construed in In Re: Summoning Advocates, including the in-house counsel gap.
  • State your own position as a student today: the academic-integrity layer, what a defensible record of AI use contains, and how to check any of this session's claims when they move, because they will.

On the syllabus

  • Real or AI? The confidence gap, then evidence
  • Authentication: BSA s.63(4), the case line, synthetic media and labelling
  • The regulatory ladder: White Paper, draft Regulations, what binds
  • The profession: BCI duties, Pooja, DPDP, privilege
  • The student's layer: academic integrity, disclosure, the record

The session

Where Indian law stands on AI. Authentication of electronic and AI-generated evidence under the BSA, the labelling rules for synthetic media, the courts' White Paper and draft regulations, professional duties after the 2026 misconduct ruling, data protection, privilege, and the rules that apply to students now.

Why it matters

You can answer the questions your seniors are googling: what does authenticating a WhatsApp video now take, what may I paste where, must I disclose AI use to this court, what does the misconduct line cover, what changed last quarter. Being the junior who states the register correctly (holding, draft, recommendation) is a professional identity.

What you can do on Monday

Write a paragraph answering 'can we use this screen-recording in evidence?' for a digital artefact (what s.63(4) requires, who signs, what you would challenge) and file your three-line AI-use rule (never paste; always verify; always disclose) where you will see it.

What you leave with

The skill

State the Indian position, dated and by register (authentication, platform rules, court rules, professional duty, data protection, privilege), and re-verify it each time before you rely on it.

The insight

Provenance replaced plausibility as the ground of trust, and every register of Indian law is converging on the same demand from different directions: show where it came from, show who checked it, and keep the record that shows you did.

The moment you'll remember

The confidence-gap reveal, turning professional. Image by image the room commits (real or AI, and how sure) and the tally lands: scored like a coin toss, confident like experts. The laugh is at ourselves. Then one slide: 'Exhibit C. You are counsel for the defence.' The laugh stops, and forty minutes of statute and doctrine are received as survival equipment (the certificate, the hash, the expert, the label), because everyone has just failed the alternative, which was trusting their eyes.

In this session

  1. 01

    The opening experiment re-framed in one slide: the room's real-or-AI score, reliably worse than its confidence, is the factual premise of modern evidence law. If trained eyes cannot tell, authenticity must rest on provenance rather than plausibility: where the file came from, who can speak to it, what the hash and metadata show. Every doctrine in this hour is the legal system converting that premise into procedure.

  2. 02

    Authentication, the current Indian frame: electronic records come in under s.63 of the Bharatiya Sakshya Adhiniyam 2023, with the s.63(4) certificate in the Schedule's form (Part A disclosing the record's hash value, Part B signed by an expert, alongside the person in charge of the device). The case law: Anvar (certificate mandatory for secondary electronic evidence, overruling Navjot Sandhu) and Arjun Panditrao (mandatory for secondary; not required where the original is produced), both decided under the old s.65B, their carry-over to the BSA a working assumption of practice rather than a settled holding, and flagged as such.

  3. 03

    The 2026 authority Session 4's bundle-builders have met: Pune Bar Association v. Union of India (SC, 22 May 2026): a three-judge order rejecting a constitutional challenge to s.63(4), holding the hash-value requirement rationally connected to integrity ('an electronic fingerprint'), and clarifying that Part B's 'expert' is not confined to examiners notified under s.79A of the IT Act: qualified cyber-forensic professionals may sign, subject to the court's satisfaction. The order names artificial intelligence and deepfake technology as why the safeguards matter. It is an order disposing of a petition without notice, not a judgment after contest, the kind of distinction this course trains students to state.

  4. 04

    Synthetic media's two-front pressure, named precisely: fabricated evidence that must be kept out, and the liar's dividend (genuine evidence dismissed as fake) that must be defended against; both are provenance problems, and the second is the more corrosive because it taxes every authentic record. India's answer at the platform layer arrived in force on 20 February 2026: the amended IT Rules define 'synthetically generated information', require prominent labels and embedded provenance metadata on it, oblige platforms to prevent unlawful synthetic content, and compress takedown clocks to hours.

  5. 05

    Two boundaries matter to lawyers: the definition covers audio-visual material and not text (an AI-drafted pleading is not 'SGI'), and a platform label is a new species of provenance evidence whose absence is now itself a signal. No Indian court has yet ruled on the admissibility of a contested deepfake; the personality-rights docket (chatbot impersonation in Sonakshi Sinha, voice cloning in Arijit Singh) is a stream of interim injunctions, remedies rather than evidence law, and the course says so.

  6. 06

    The White Paper, by register: it recommends. Its firm lines are Guidelines 12 (no confidential or privileged information into any AI tool), 14 (independent verification before reliance), 15 (no AI verifying AI) and 18 (responsibility stays with the human). It contains no cloud restriction and no approved-tools regime, whatever summaries claim.

  7. 07

    The draft Regulations for Use of AI in Courts (June 2026), by register: they would bind if notified. Fifty-seven regulations, including permitted judicial uses, an absolute bar on AI deciding, risk-scoring or credibility assessment (reg. 20(d), India's structural answer to the Loomis problem), reg. 43(3)'s requirement that lawyers certify disclosure of AI assistance in prepared material, and reg. 49's mandatory AI training for advocates; a sixteen-hour course like this one is reg. 49 arriving early. Publicly opposed in part by the advocates-on-record association, judicially doubted in speeches, and, as of the date on this slide, a draft.

  8. 08

    The judiciary's own stack, and the first binding instrument: SUPACE, SUVAS, TERES, LegRAA, e-filing AI; Adalat AI transcription mandatory in one state's district courts; and the Kerala High Court's 2025 policy for its district judiciary, the first binding Indian AI-use instrument for judges. What is notified changes; the ladder's registers do not.

  9. 09

    The profession's frame, with the pinpoints this course checked: the BCI Rules (Part VI, Chapter II) duties: Rules 3 and 4 on conduct toward the court, Rules 15, 17, 19 and 24 on the client, including the confidentiality rule that still cites the repealed Evidence Act section whose successor is BSA s.132, enforced through s.35 of the Advocates Act's misconduct jurisdiction. No BCI rule yet mentions technology or competence, which is why Pooja Ramesh Singh matters structurally: it converts 'cite it unverified' into misconduct within the existing rules and directs the BCI to frame AI-specific guiding principles (no committee reported constituted as of the date checked).

  10. 10

    The BCI's July 2026 circular on digital ethics (reproduced but not readable at the original) reaches students directly: undertakings on deepfake and digital conduct at admission and before internships. And the DPDP Act, dated honestly: enacted, Rules notified, but the substantive obligations commence 13 May 2027. Today the binding grounds for the never-paste rule are privilege and the professional rules; the fiduciary-and-processor structure with its ₹250-crore penalties is the frame you are training for. Re-checked each cohort.

  11. 11

    Privilege, as construed now: ss.132–134 BSA carry the advocate-client privilege forward; In Re: Summoning Advocates (2025 INSC 1275) holds the privilege is the client's, invocable by the advocate on the client's behalf; sharply limits summoning the accused's advocate; protects the advocate's devices with court-supervised procedures mindful of other clients' confidences; and places in-house counsel outside s.132, with only s.134's narrower protection. The AI consequences: a consumer chatbot is nobody's advocate; a paste is a disclosure the client did not authorise; and the in-house gap means a company's legal team has less privilege cover than external counsel for the material likeliest to end up in productivity tools.

  12. 12

    Comparative, as contrast and in three sentences each. The EU AI Act classifies AI for judicial decision-support as high-risk, its obligations phasing in with dates that have themselves moved; the direction is architecture and conformity rather than case-by-case duty. The United States has fragmented into judge-by-judge standing orders, over a hundred requiring disclosure or certification, with no national rule; India's draft reg. 43 would be the opposite design, one rule for every court.

  13. 13

    England and Wales has judicial guidance whose updated text says lawyers need not disclose responsible AI use (the opposite of draft reg. 43), alongside a High Court decision referring fake citations to the regulators and a fresh solicitors'-regulator warning notice; it is the common-law cousin whose case law the Indian Supreme Court itself cited in Pooja. The pattern across all three: verification duties converge; disclosure and institutional design diverge. A student who can state which jurisdiction requires what, as of when, is ahead of most of the profession.

  14. 14

    The student's own layer, today, and the warning this course owes you: the institutional landscape is uneven. One NLU has a published AI-content policy; another's examination regulations make 'use of any means of artificial intelligence' in assessed projects serious academic malpractice; the flagship student journal permits disclosed assistive use but bans generative drafting and AI-supplied citations; the leading international moot's rules are silent, leaving its work-product rule to do the work; and the BCI's digital-ethics push reaches students directly, with undertakings at admission and before internships.

  15. 15

    So the rule of rules: this course requires AI use under its own assessment scheme; your other subjects are governed by your university's regulations, and in some of them the same conduct is a disciplinary offence. Know your institution's rule before you rely on a tool for assessed work; disclose per the rule, and where none exists, disclose anyway in the form Session 8 drills; keep the prompt log and verification trail as your record; and never let a detection tool's verdict, in either direction, substitute for that record.

The mirror

Run on the class, then on the machine.

An experiment on the class, the same effect explained in the model, a live demonstration on a real tool, and a named takeaway skill.

Real or AI? — the confidence gap

Experiment on the class

On the class

Six images and clips, one by one: the room commits real-or-AI on their phones, plus a confidence score. The tally lands both numbers side by side: accuracy near chance, confidence nowhere near it.

In the model

Generative models produce artefacts optimised to be indistinguishable; that is the training objective working as designed. Detection tools chase a moving target and mislabel in both directions.

Live on the model

The answers reveal one at a time; then the pivot slide: the best-scoring fake reappears as 'Exhibit C', and the room is asked what, now, could establish it either way, which is the word 'provenance' arriving under its own weight.

The skill

Your eyes are not an authentication method. Demand provenance to match the stakes (file, source, hash, chain, label) and doubt the genuine article too.

The certificate, walked through

Demonstration

The room predicts

A concrete artefact (a WhatsApp video forwarded to a witness's phone), and the room votes on what its admission now requires: nothing special / a certificate / a certificate plus an expert / it depends on original versus copy.

What is going on

No model in this move; the machine here is the statute: s.63(4), the Schedule's two-part certificate, the hash value, and the primary/secondary line the case law drew.

Shown live

The Schedule's form goes on screen and is filled in against the artefact, field by field, and the room watches the 2026 clarification matter in practice: who, in this fact pattern, can sign Part B?

The skill

Read the form rather than the folklore: hash in Part A, expert in Part B, and the Anvar–Arjun Panditrao line deciding whether a certificate is needed.

The register drill — holding, draft, recommendation

Demonstration

The room predicts

Five one-line claims about Indian AI law go up ('the Supreme Court has banned…', 'lawyers must now disclose…', 'the White Paper prohibits…'), and the room sorts each on their phones: holding / interim order / draft / recommendation / false.

What is going on

This is the Ladder applied to legal-regulatory claims: the register of an instrument is the kind of nuance that summaries, human and machine, flatten first.

Shown live

Each claim resolves on screen against its primary source, register named and dated, including at least one claim that a chatbot, asked live, states in the wrong register with full confidence.

The skill

Never repeat a rule without its register and date. 'Draft reg. 43 would require' and 'reg. 43 requires' are different sentences, and the difference is your credibility.

The lab · 30 minutes · demonstrated in class, repeated on your own

Technique: Statute-in-the-window

The Authentication Note

Statute-in-the-window demonstrated: the verified pack loaded, an artefact walked through it, the five-line authentication note drafted and corrected. Afterwards, students take a different artefact and submit their note.

1 · The demonstration

In class, on one realistic task.

On

Gemini or ChatGPT (free tier, temporary chat); the supplied text pack: BSA s.63 with the Schedule, and the operative paragraphs of Anvar, Arjun Panditrao and Pune Bar Association

The exact prompt

The text between the markers contains s.63 of the Bharatiya Sakshya Adhiniyam 2023 with its Schedule, and operative extracts of three Supreme Court decisions. Using only this text: for the artefact described below, state (1) whether a s.63(4) certificate is required, and why, citing the provision or paragraph; (2) exactly what the certificate must contain and who must sign each part; (3) the two strongest objections opposing counsel could raise to the artefact's authenticity. Artefact: a video received on WhatsApp, downloaded to counsel's laptop, to be tendered from that laptop; the original sender's phone is unavailable. If the supplied text does not resolve a point, say so rather than answering from memory. === TEXT BEGINS === [pack] === TEXT ENDS ===

Point at

Point at three things: whether it correctly reaches 'secondary — certificate required' on these facts; whether the certificate answer includes both Part A's hash and Part B's expert (the detail most human summaries drop); and how it handles the sender's-phone problem; the honest answer flags what the pack cannot resolve.

What comes back

A sound skeleton note citing the provision and paragraphs, usually correct on the certificate's contents, and, usefully for the reveal, often glossing the expert requirement or overstating how settled the BSA carry-over is. Its errors are the teaching material; the students' job is to catch them against the pack.

If it misbehaves

The pre-captured demo note (fallback folder, S7). The text pack is the fallback for everything else: if all AI tools are down, the lab runs entirely on the pack and paper; statute-reading needs no tokens.

2 · Afterwards, on your own

The same technique on a task of your own; the deliverable goes to the platform.

Afterwards, on your own: draw one of the four artefacts in the set (a DVR export, a WhatsApp voice note, a screen-recording of a vanished story, a platform-labelled video), load the pack, run the method with pinpoints demanded, and draft your own five-line note, correcting the model where you catch it. The note is the platform submission.

Step by step

  1. 01Draw your artefact card: the wiped-DVR CCTV clip, the family-group voice note, the vanished-story screen recording, or the platform-labelled video.
  2. 02In a temporary chat, load the text pack (document first) and put your artefact's facts to it: certificate required and why, contents and signatories, the two strongest authenticity objections, with pinpoints demanded and 'not in the pack' respected.
  3. 03Read the model's answer against the pack: did it hold the primary/secondary line, include Part A's hash and Part B's expert, and stay inside the supplied text?
  4. 04Draft your own five-line authentication note: requirement, contents, signatories, your challenge, and the one point the pack cannot resolve.
  5. 05Correct the model's gloss in your note wherever you caught it; your note is the deliverable.

Tools · free tier

  • Gemini or ChatGPT (free tier, temporary chat)
  • The verified text pack: BSA s.63 + Schedule; operative extracts of Anvar, Arjun Panditrao, Pune Bar Association
  • The four artefact cards

Free tier

One pack-paste and three or four prompts, inside every free window (the pack is sized to fit; hence extracts rather than full judgments). No accounts beyond the usual; under-18s on Gemini/ChatGPT. If rate-limited, draft the note from the pack directly; the statute needs no subscription.

If the free tier locks you out

Draft the note directly from the pack on paper; the statute needs no subscription, and the method survives the outage.

3 · The reveal

The room commits on the demo artefact before the method runs: certificate required or not, and who signs? The reveal is the statute answering, at the pinpoint.

Deliverable

A five-line authentication note for your artefact (requirement, contents, signatories, challenge, unresolved point), with the corrected model transcript attached. The evaluation session's applied question is this artefact class; this note is your revision material.

See how the work is graded

Run of show · 30 minutes

  1. 0–18 min — The demonstration: the artefact through the statute-in-the-window method, the room committing on the certificate questions first.
  2. 18–26 min — The note: drafted, read against the pack, the model's gloss caught and corrected.
  3. 26–30 min — The assignment: a different artefact through the same method, due before Session 8; questions.

Verification checklist

  • The analysis ran from the supplied texts, with pinpoints, and 'not in the pack' was respected.
  • The note states the certificate position on the artefact's facts, with primary versus secondary addressed.
  • Part A's hash value and Part B's expert signature both appear where a certificate is required.
  • The model's gloss was checked against the pack and corrected in your own words.
  • The unresolved point is named honestly rather than papered over.
Course team · sign-in required Present Run the lab PDF Handout
For the instructor · before the session

Why this shape

The real-or-AI confidence gap is a designed moment that must open this session: the room needs to feel its own inability to spot synthetic media in the minute before it studies the law built to manage that inability. The hour that follows is the course's densest law, taught the way the course teaches everything, with every claim dated and every register precise: a holding is not an observation, a draft is not a rule, a recommendation is not a restriction.

  • Assemble and verify the text pack: s.63 + Schedule against the Gazette-checked text, and the operative extracts of the three cases against the reports; the pack is a teaching document; it goes in the codebook.
  • Curate the real-or-AI set fresh each cohort (last year's fakes are this year's obvious); pre-test the quiz link and keep local copies of every item.
  • Check the regulatory ladder's status the week of the session: draft Regulations notified? BCI committee reported? DPDP phase-in reached? The register drill's answers are re-dated each run.
  • Pre-run the demo prompt; capture the note and its characteristic gloss for the fallback.
  • Print the four artefact cards (or post them); each carries its fact pattern in three lines.
  • Launch the Session 7 poll deck: the real-or-AI commits, the certificate vote, the register drill, and the lab tallies.

Key sources & cases

  • Bharatiya Sakshya Adhiniyam, 2023, s.63 and the Schedule; Anvar P.V. (2014) 10 SCC 473; Arjun Panditrao (2020) 7 SCC 1

    The authentication frame: s.63(4)(c)'s certificate signed by the person in charge and an expert, in the Schedule's form (Part A hash value, Part B expert); Anvar's mandatory-certificate rule for secondary evidence; Arjun Panditrao's primary/secondary line. Carry-over to the BSA taught as a working assumption, not a holding; commentary contests parts. Verified 2026-08-26 (codebook).

  • Pune Bar Association v. Union of India, W.P. (C) No. 599/2026 (SC, 22 May 2026, Surya Kant CJI, Bagchi and Pancholi JJ.)

    Challenge to s.63(4) rejected: hash value rationally connected to integrity; Part B's 'expert' not confined to s.79A-notified examiners; AI and deepfake technology expressly named as what accentuates the authenticity problem. Read to the signed order 2026-08-27. An order without notice, not a contested judgment; teach the register.

  • IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 — G.S.R. 120(E), 10 Feb 2026; in force 20 Feb 2026

    India's synthetic-media regime: 'synthetically generated information' defined (audio-visual; text excluded; good-faith drafting and research carve-outs); prominent labels and embedded provenance metadata required; platforms must prevent unlawful SGI; takedown clocks compressed to hours. Text read from MeitY's consolidated Rules 2026-08-27; the commencement date rests on MeitY's FAQ; confirm the Gazette line before academic-council use.

  • Supreme Court of India: White Paper on AI and Judiciary (Nov 2025); draft Regulations for Use of AI in Courts, 2026 (June 2026)

    The ladder's two upper rungs, by register: the White Paper recommends (Guidelines 12/14/15/18 quotable; no cloud restriction, no approved-tools regime, both misattributions corrected in the codebook); the draft Regulations would bind (permitted uses, decision and risk-scoring bars, reg. 43 party disclosure), a contested draft as of 2026-08-27. RE-CHECK notification each cohort.

  • Pooja Ramesh Singh, 2026 INSC 668; Advocates Act 1961, s.35 with BCI Rules Part VI Ch. II; BCI circular of 17 July 2026

    The professional-duty stack: the duties (court, client, candour, confidentiality) under the Rules; s.35's misconduct jurisdiction as the enforcement path; Pooja's holding placing unverified AI citation inside it and directing BCI guiding principles (committee status re-checked each cohort); the BCI's digital-ethics circular known from reproductions; the original was unreadable at checking, so VERIFY before quoting its text.

  • Digital Personal Data Protection Act, 2023 + DPDP Rules, 2025 (G.S.R. 846(E), 13 Nov 2025)

    The data-protection frame, dated honestly: fiduciary/processor structure, breach duties, penalties to ₹250 crore, with substantive obligations commencing 13 May 2027, so taught as the incoming frame rather than today's binding ground (today's grounds: BSA s.132 privilege and the BCI Rules). Rules' number and phase-in read from MeitY/PIB documents 2026-08-27; lawyer-specific section pinpoints flagged VERIFY TO SOURCE.

  • In Re: Summoning Advocates, 2025 INSC 1275 (SC, 31 Oct 2025); BSA ss.132–134

    Privilege as construed: the client's privilege, invocable by the advocate; summons to defence counsel confined to s.132's exceptions with senior-officer satisfaction and judicial review; device productions court-supervised with other clients' confidences protected; in-house counsel outside s.132, s.134 only. Verified 2026-08-26 against the official PDF; add the SCC parallel citation at teaching time.

  • Comparative set: EU AI Act (Reg. (EU) 2024/1689), Annex III pt. 8; US judge standing orders (trackers, 2026); England & Wales — judicial guidance (2025), Ayinde [2025] EWHC 1383 (Admin), SRA warning notice (Aug 2026); Cork v. Smith [2026] EWHC 1199 (Ch)

    Contrast only: EU architecture with phased (and shifting) dates; US fragmentation (tracker counts rather than official figures; cite as such); England's guidance-plus-referral approach, whose Cork decision the Indian Supreme Court cites in Pooja. ABA Formal Opinion 512 could not be verified at checking and is not taught until it is. Every claim carries its date.

  • MIT Media Lab Detect Fakes (the real-or-AI test); Chesney & Citron, 'Deep Fakes' 107 Cal. L. Rev. 1753 (2019)

    The opening experiment's instrument, and the liar's dividend's source; attribute the term to Chesney & Citron. Both carried over from the earlier design; verification status per codebook (capture exists; confirm the quiz's current URL at teaching time).

Readings

  • BSA 2023, s.63 with the Schedule — the section and the form; twenty minutes, and the core of the session
  • Arjun Panditrao (2020) 7 SCC 1 — the primary/secondary paragraphs (re-read from Session 4's bundle)
  • Pune Bar Association v. UOI (SC, 22 May 2026) — the order, seven pages
  • In Re: Summoning Advocates, 2025 INSC 1275 — the directions in para 67, and the in-house counsel passage
  • White Paper (Nov 2025) — Guidelines 12–18; draft AI-in-Courts Regulations (June 2026) — reg. 43 and the definitions; Chesney & Citron (2019) — the liar's-dividend section

Sixteen hours, one professional discipline.

Craft, competence and verification, practised until they are habits you could defend in court.