India's AI Governance Push Excludes Critical Sectors, Raising Security and Ethical Concerns

India's ambitious drive to position itself as a global leader in artificial intelligence is encountering significant governance challenges, with recent policy developments revealing critical gaps in inter-ministerial coordination and sectoral inclusion. These omissions, particularly in foundational areas like education and labor, raise profound questions about the holistic security, ethical implementation, and long-term resilience of AI systems deployed across critical national infrastructure.

The Inter-Ministerial Gap: Missing Voices at the Core

The Ministry of Electronics and Information Technology (MeitY) has recently constituted a high-level inter-ministerial body tasked with shaping India's overarching AI governance framework. This body is designed to coordinate policy across various government arms, ensuring a unified national approach to AI development, regulation, and security. However, a striking omission has drawn immediate scrutiny from policy analysts and cybersecurity experts: the exclusion of the Ministry of Education and the Ministry of Labour & Employment from this core governance structure.

This absence is not merely administrative. From a cybersecurity and risk management perspective, it creates a foundational flaw in the governance model. The education sector is directly responsible for building the nation's pipeline of AI talent—ethically-aware developers, security researchers, and auditors who understand how to build robust and secure systems. Excluding it from governance discussions risks creating a misalignment between the skills being taught and the security standards required by national policy.

Similarly, the exclusion of the labour ministry ignores the profound cybersecurity implications of workforce displacement, job transformation, and the ethical use of automated systems in workplaces. AI-driven surveillance, algorithmic management, and automated decision-making in employment have direct security and privacy ramifications. Governing AI without considering its labor impact is to ignore a major threat vector for social stability and data protection.

Sectoral Silos: The Healthcare AI Policy in Parallel

Concurrent with MeitY's inter-ministerial efforts, the National Health Authority (NHA) has announced it is developing a dedicated National AI Policy for Healthcare. This sector-specific initiative, led by NHA CEO Dr. R.S. Sharma, aims to harness AI for diagnostics, treatment personalization, and administrative efficiency within India's vast public health system.

While a focused policy for a critical sector like healthcare is prudent, its development in parallel—and seemingly disconnected from the broader inter-ministerial body—exemplifies a siloed approach to governance. For cybersecurity professionals, this fragmentation is a red flag. Healthcare represents one of the most sensitive critical infrastructure sectors, handling extremely personal data and controlling life-critical systems. An AI policy developed without strong, formalized links to the central governance body and its security mandates risks creating inconsistent security protocols, data sovereignty rules, and incident response frameworks.

Cybersecurity Implications: Governance Blind Spots as Attack Surfaces

The combined effect of these developments presents a multi-layered risk landscape:

1. Insecure by Design: AI systems developed for healthcare, or any sector, require security and ethics to be baked in from the initial design phase. If the core governance body lacks representation from sectors that understand human-centric impacts (education, labor), the resulting principles and standards may be technically sound but ethically and socially naive. This can lead to public backlash, regulatory failure, and systems that are vulnerable to misuse.

1. Skills Gap as a National Security Risk: The global cybersecurity workforce shortage is acute. AI will both automate some security tasks and create entirely new attack vectors. Without the education ministry at the governance table, national strategies to build AI-red teams, forensic experts for AI incidents, and auditors for algorithmic bias may lack coherence and funding, leaving the nation's digital infrastructure under-protected.

1. Fragmented Incident Response: In the event of a major AI security failure—such as biased algorithms denying medical care, manipulated autonomous systems, or data poisoning attacks—a fragmented governance structure will complicate incident response. Who is accountable? Which ministry's protocol applies? The lack of clear, cross-sectoral coordination channels could delay mitigation and erode public trust.

1. Supply Chain and Vendor Risks: Both the central MeitY body and the NHA's healthcare policy will need to address third-party AI model and service procurement. Inconsistent security requirements across government sectors could create weak links in the national supply chain, allowing vendors with poor security practices to gain a foothold in one sector and later expand to others.

The Path Forward: Integrating Security and Society

For India's AI ambitions to be both innovative and secure, a more integrated governance model is essential. Cybersecurity must not be an afterthought managed solely by MeitY's technical teams; it must be a cross-cutting principle informed by social, educational, and labor perspectives.

Professionals in the cybersecurity community should advocate for:

• Mandatory Inclusion of Education and Labour ministries in the core AI governance dialogue.
• Establishment of a Cross-Sectoral Security Working Group within the inter-ministerial body, tasked with developing minimum security standards applicable to all sectoral AI policies, including healthcare.
• Public-Private-Academic Partnerships that explicitly include cybersecurity ethicists, penetration testers specializing in AI systems, and civil society watchdogs in the policy feedback loop.

The race for AI leadership is not just about algorithms and compute power; it is about building trustworthy, resilient, and secure socio-technical systems. India's current governance gaps present a critical moment for course correction. By integrating human-centric sectors into the core of AI governance and ensuring security is a connective thread across all sectoral policies, India can build a foundation for AI that is not only powerful but also principled and protected.