← Resources · November 04, 2026
Science & Technology GS2GS3 4 min read

DEPA for AI Training: Government Handbook on Sharing Hospital, Bank and Government Data to Train AI Models

What happened
01

The Ministry of Electronics and Information Technology (MeitY) released a handbook called Data Empowerment and Protection Architecture (DEPA) for AI Training at a roundtable in Bengaluru at the end of October 2026. It is open for public suggestions.

02

It sets out how institutions that hold data, such as hospitals, banks and government agencies (called Training Data Providers), can share datasets with startups, researchers and companies (Training Data Consumers) that want to train AI models. Intermediaries called Data Collabs can pool data from many sources for a sector.

03

In a section titled "Beyond Individual Consent", the handbook says taking each person's consent is "impractical at this scale" for training. People's interests are to be protected through governance rules and technical safeguards instead.

04

It separates training (building a model from large, combined data) from inference (using a model on one person's data, like checking a loan application). For inference, consent-based systems like the Account Aggregator still apply.

05

Proposed safeguards: data must be de-identified before sharing, models are trained inside secure data environments where developers cannot see raw data, and differential privacy (adding statistical "noise") is used so individuals cannot be traced from a model.

06

Ideas by sector: link TB data from the Nikshay portal with e-Sanjeevani telemedicine data for disease early-warning; train credit models on de-identified GST and utility payment data; and build "skills passports" linked to the Academic Bank of Credits. A government authority would certify models as "fit for use". Pilots, regulatory sandboxes and royalty or access-fee models for data providers are planned.

Static topic 1 of 3 · Science & Technology

Data Empowerment and Protection Architecture (DEPA): India's Consent-Based Data Sharing Framework

The Data Empowerment and Protection Architecture, or DEPA, is India's framework for letting people and institutions share data safely, with control. Its basic idea is simple: data about you should work for you. You should be able to send your data from one institution to another (say, from your bank to a lender) only when you agree, only for a stated purpose and only for a limited time. DEPA is often called the "consent layer" of India Stack, the set of digital public building blocks that also includes Aadhaar and UPI.

Connection to this news

The new handbook takes DEPA from one person sharing their own data to whole institutions sharing data to train AI. Its statement that individual consent is "impractical" for training is the biggest shift from the original DEPA idea, and its safeguards will decide whether privacy holds up at this scale.

Static topic 2 of 3 · Science & Technology

Digital Personal Data Protection (DPDP) Act, 2023

The DPDP Act, 2023 is India's first full law to protect personal data in digital form. It says who can collect and use a person's data, on what grounds, and what rights the person has. It sets up a Data Protection Board of India to handle breaches and impose penalties.

Connection to this news

The handbook does not say whether AI training under DEPA will rely on the Section 17(2)(b) research exemption, which takes effect only in May 2027. How the two fit together will shape the legal safety of such data sharing.

Static topic 3 of 3 · Science & Technology

IndiaAI Mission: India's National AI Programme

The IndiaAI Mission is the Government of India's main programme to build a complete AI system inside the country: computing power, datasets, home-grown AI models, skills and safe AI. It was approved by the Union Cabinet in March 2024 with an outlay of about ₹10,372 crore over five years, and is run by MeitY through an independent business division called IndiaAI.

Connection to this news

Good data is the biggest bottleneck for Indian AI. The DEPA for AI Training handbook is meant to unlock data held by hospitals, banks and government agencies, adding to what the IndiaAI Mission's datasets pillar can offer.

Key facts & data
  • Handbook: DEPA for AI Training, released by MeitY in Bengaluru, end of October 2026; open for public suggestions
  • Roles: Training Data Providers, Training Data Consumers, Data Collabs
  • Handbook's position: individual consent "impractical at this scale" for training
  • Safeguards: de-identification with pseudonymised keys, secure data environments, differential privacy
  • Health ideas: link Nikshay (TB) and e-Sanjeevani (telemedicine) data
  • Finance ideas: credit models from de-identified GST and utility payment data
  • Education ideas: "skills passports" linked to the Academic Bank of Credits
  • DPDP research and statistics provisions apply from May 2027
  • NITI Aayog DEPA draft: August 2020; Account Aggregator live: September 2021
Read it? Now lock it in. The quiz for this day’s brief covers this story.
Take the quiz