India, US talk framework for cross-border data transfer at recent ICT meet

The working group’s next full meeting is expected later this year, although plans are still fluid

At a recent meeting of the US-India Information and Communication Technology (ICT) Working Group, frameworks such as the Cross-Border Privacy Rules (CBPR) were discussed as possible mechanisms to support data transfers between the two countries, people familiar with the discussions told Moneycontrol.

The talks were held against the backdrop of concerns that India's draft Digital Personal Data Protection (DPDP) rules could open the door for new localisation requirements.

The Cross-Border Privacy Rules (CBPR) system is an international framework to help businesses transfer personal data between countries in a secure and accountable way. It aims to align different privacy laws and make cross-border data flows smoother while protecting individual rights.

While the DPDP Act, passed last year, steers clear of restricting cross-border data flows, attendees said the draft rules introduced by the government have stirred some unease within industry circles.

"The act is clear, but unless the rules reaffirm that position, businesses are left guessing," a source close to the matter said.

Conversations also touched on emerging areas of cooperation, particularly around artificial intelligence. Participants discussed ideas such as developing shared AI infrastructure and examining policies that could enable greater access to datasets — including possible exceptions for text and data mining.

Government officials on both sides have passively been listening, with no formal commitments during the session, said multiple attendees.

Telecom security standards, including India’s Telecommunications Security Assurance Requirements (ITSARs), came up briefly, in the broader context of digital trust and compliance frameworks.

The working group’s next full meeting is expected later this year, although plans have not been finalised. Some expect it to be held either in Washington or New Delhi, depending on how trade negotiations between the two countries unfold.

A high-level summit is also being tentatively discussed for September, but sources said hat several moving pieces still need to fall into place for that to happen.

Officials from both governments, including a representative from the US State Department's Bureau of Cyberspace and Digital Policy, were present during the meeting. Their interventions, however, were limited, with the focus largely on gathering feedback.