ArdorComm Media Group

Thursday, January 1, 2026 3:36 PM

data protection

India Introduces AI Governance Guidelines to Ensure Safe and Responsible Adoption

The Indian government has unveiled its first set of Artificial Intelligence (AI) governance guidelines, outlining a framework for the safe, transparent, and ethical use of AI technologies. The non-binding rules, released on Wednesday, are expected to shape India’s long-term vision for AI regulation ahead of the IndiaAI Impact Summit scheduled for February next year. Developed under the Ministry of Electronics and Information Technology (MeitY), the guidelines recommend potential amendments to the Information Technology (IT) Act to better classify AI systems and define liability across the AI value chain. The document highlights that the current definition of “intermediary” under the IT Act — covering telecom operators, search engines, and even cyber cafés — is outdated in the context of autonomous AI systems capable of generating data independently. Principal Scientific Adviser Ajay Sood noted that the new framework aims to provide clarity on responsibilities of AI developers and deployers, while also ensuring accountability. He added that the framework could serve as a model for AI governance in the Global South, especially for countries with limited regulatory resources. The guidelines also propose an India-specific AI risk assessment framework based on real-world harm evidence, along with a national database of AI incidents to track misuse, bias, and potential threats. This centralised repository will collect data from smaller regional databases managed by sectoral regulators, helping policymakers better understand the societal and security implications of AI technologies. The framework further recommends establishing new institutions to oversee AI policy, including an AI Governance Group—a permanent inter-ministerial body responsible for coordination and policy development—and leveraging the newly formed AI Safety Institute as the lead authority for ensuring safe and trusted AI use in India. Other key proposals include adopting regulatory sandboxes to allow innovation in controlled environments with limited legal exposure, and mandating accessible grievance redressal mechanisms through the existing Grievance Appellate Committee process. The guidelines also stress the need to update copyright laws to support large-scale AI model training and clarify digital platform classifications. MeitY Secretary S. Krishnan said the government is committed to acting when necessary to ensure AI is developed responsibly and ethically. The document, shaped after studying AI policies in the US, European Union, and China, and informed by over 2,500 submissions from stakeholders including academia, industry, and government bodies, marks a significant step in India’s effort to build a robust governance ecosystem for emerging technologies. Source: Economic Times

India Introduces AI Governance Guidelines to Ensure Safe and Responsible Adoption Read More »

Cybersecurity in Education: Protecting Students in the Digital World

As classrooms evolve from chalkboards to Chromebooks, the education sector is increasingly vulnerable to one of the most pressing threats of the 21st century—cyberattacks. With institutions rapidly adopting digital platforms for learning, administration, and communication, safeguarding the digital safety of students, teachers, and institutional data has become more crucial than ever. The Rise of Cyber Threats in Education Educational institutions are gold mines for cybercriminals. They store vast amounts of sensitive data—from student records and academic histories to biometric information and financial details. According to reports, the education sector is among the top five most targeted industries globally for cyberattacks. Common cyber threats include: Phishing Emails: Deceptive emails tricking students or staff into revealing personal information or login credentials.  Ransomware: Malicious software that locks data until a ransom is paid.  Data Breaches: Unauthorized access to student records and research data.  DDoS Attacks: Distributed Denial-of-Service attacks that crash school websites or learning management systems.  Why Are Educational Institutions Targeted? Low Security Infrastructure: Many institutions, especially in developing countries, operate on outdated systems and lack dedicated IT teams.  Human Error: Students and faculty often lack training in identifying cyber threats, making them easy targets.  High-Value Data: Student identity information can be used for identity theft, while research data is valuable for industrial espionage.  Impact on Students and Learning Cybersecurity lapses in education don’t just compromise data—they disrupt learning and psychological well-being. For example: School closures due to ransomware attacks can lead to missed classes and exams.  Loss of personal data can lead to identity theft and long-term emotional distress.  Exposure to inappropriate or harmful online content through unsecured platforms can impact student safety and mental health.  Protective Measures for Institutions To build a digital fortress around education, institutions must adopt a multi-layered approach: 1. Invest in Cybersecurity Infrastructure Upgrade legacy systems and software regularly.  Use firewalls, antivirus software, and encryption protocols.  Implement Multi-Factor Authentication (MFA) for all user accounts.  2. Conduct Regular Training and Awareness Organize workshops for students, faculty, and staff on recognizing phishing, handling passwords, and reporting suspicious activity.  Encourage cyber hygiene practices such as not sharing credentials or clicking unknown links.  3. Secure Learning Management Systems (LMS) Opt for reputable and secure platforms.  Regularly audit permissions and user access levels.  4. Develop and Test Incident Response Plans Have a clear strategy for identifying, reporting, and recovering from cyber incidents.  Run simulation drills to ensure readiness.  5. Foster a Culture of Digital Responsibility Include digital citizenship and online safety in school curricula.  Promote ethical tech use and respect for privacy among students.  Role of Government and Policy Several governments are waking up to the urgency of cybersecurity in education: In India, initiatives like Cyber Surakshit Bharat and Digital India aim to promote safe digital practices.  The U.S. K-12 Cybersecurity Act provides funding and guidance to public schools for cybersecurity preparedness.  The European Union’s GDPR has raised awareness about data protection responsibilities in educational institutions.  Collaboration is Key Cybersecurity is not just the IT department’s job. It requires a collaborative effort between: School management to fund and prioritize digital safety.  Teachers and students to remain vigilant.  Parents to reinforce safe practices at home.  EdTech providers to build privacy-first platforms.  Looking Ahead: A Secure Digital Future for Learning Education is the cornerstone of progress—and its digital transformation must be safeguarded. As we embrace online learning, AI tools, and smart classrooms, cybersecurity can no longer be an afterthought. It’s time to put student safety at the heart of digital innovation. By integrating robust cybersecurity strategies, raising awareness, and encouraging a culture of digital responsibility, we can create safe, inclusive, and future-ready learning environments—where education flourishes without fear.  

Cybersecurity in Education: Protecting Students in the Digital World Read More »

EU Initiates Complaints Against Microsoft’s 365 Education Suite Over Privacy Concern

Microsoft is currently facing two complaints in the European Union (EU) regarding its online education software, 365 Education. According to a report by Reuters, the latest charges against the US-based tech giant have been brought to the Austrian privacy watchdog by the privacy advocacy group NOYB. The group has urged the Austrian Data Protection Authority to investigate these complaints and potentially impose a fine on Microsoft. What is Microsoft 365 Education Suite? During the COVID-19 pandemic, online educational programs gained popularity as schools transitioned to remote teaching. Microsoft’s 365 Education suite offers various tools for students, including Word, Excel, Microsoft Teams, PowerPoint, and Outlook. Complaints Against Microsoft’s 365 Education Suite First Complaint: The advocacy group NOYB alleged that Microsoft shifted the burden of complying with EU data privacy laws (GDPR) onto schools. According to NOYB, schools cannot adequately manage student data under these regulations. NOYB lawyer Maartje de Graaf stated: “Under the current system that Microsoft is imposing on schools, your school would have to audit Microsoft or give them instructions on how to process pupils’ data. Everyone knows that such contractual arrangements are out of touch with reality. This is nothing more but an attempt to shift the responsibility for children’s data as far away from Microsoft as possible.” Second Complaint: The second complaint centers around cookies installed in Microsoft’s 365 Education suite that advertisers use to track consumers. NOYB lawyer Felix Mikolasch expressed concerns: “Our analysis of the data flows is very worrying. Microsoft 365 Education appears to track users regardless of their age. This practice is likely to affect hundreds of thousands of pupils and students in the EU and EEA (European Economic Area).” EU’s Previous Warnings to Microsoft Last month, the EU warned Microsoft that it could impose a fine of up to 1% of its global annual revenue if it fails to provide requested information about the risks associated with its generative AI tools in the Bing search engine. In March, the EU asked tech giants, including Microsoft, to provide details on how they manage risks from AI tools. Microsoft has been accused of dodging questions about its “Copilot in Bing” and “Image Creator” features, which the EU fears may violate new laws by spreading misinformation and manipulating voters.  

EU Initiates Complaints Against Microsoft’s 365 Education Suite Over Privacy Concern Read More »

Singapore-London Partnership Secures $15M to Bolster Healthcare Cybersecurity in APAC

Article

Singapore is taking proactive measures to address the escalating cybersecurity concerns associated with the integration of medical devices into its health system. Concerns about the growing risks have led to a significant development—a $20 million grant from the National Research Foundation (NRF), Singapore. The grant has been awarded to Nanyang Technological University (NTU), Singapore, and Imperial College London for collaborative research aimed at enhancing the protection of health data and wearable devices. Imperial’s newly established overseas research center, Imperial Global: Singapore, is partnering with NTU researchers on the IN-CYPHER program. The initiative focuses on tackling existing security challenges and safeguarding emerging sensing technologies and their data from potential compromises. The four-year grant, totaling $15 million, aims to position Singapore as a global leader in health cybersecurity and AI for healthcare. Professor Anil Anthony Bharath from Imperial, co-leading the IN-CYPHER program with Professor Liu Yang of NTU Singapore, highlighted the need for heightened cybersecurity measures as healthcare embraces more data and technology. The research will specifically address security concerns related to various medical devices, including continuous glucose monitors, smart electronic skin patches, and activity monitors. With around 15% of medical devices in Singapore’s public health facilities connected to networks, the increased connectivity raises cybersecurity risks, potentially compromising patient data and disrupting treatment protocols. To counteract these risks, Singapore’s Cyber Security Agency introduced the Cybersecurity Labelling Scheme for Medical Devices, encouraging a security-by-design approach among manufacturers. A recent report by the Asia Pacific Medical Technology Association and L.E.K. Consulting emphasized the importance of a customized assessment of medical devices for remote care based on their risk level. The cybersecurity landscape in the Asia-Pacific region is evolving, prompting the need for tailored frameworks to support remote care management and protect patient data. The market for cybersecurity in medical devices is anticipated to grow, projected to reach $1.1 billion by 2027. Meanwhile, the IN-CYPHER program marks a significant step for Imperial Global: Singapore, contributing to the rapid scaling of scientific breakthroughs and technology for commercialization across Southeast Asia. The research center builds on the longstanding partnership between NTU Singapore and Imperial College London, further strengthening academic ties in healthcare and technological innovation.

Singapore-London Partnership Secures $15M to Bolster Healthcare Cybersecurity in APAC Read More »