Bangladesh · India — an assembled comparison from each country's own governance data.
Bangladesh and India illustrate different points on the AI governance spectrum. Bangladesh's approach — Draft risk-based national AI policy atop a newly enacted data-protection law, carried across a 2026 change of government; India's approach — Non-binding guidelines currently in force; officials have signaled intent to move toward a binding, risk-based AI law.
On trajectory: Bangladesh is tightening its regulatory grip; India is tightening its regulatory grip. Most recent tracked marker for each: Bangladesh — "The Personal Data Protection Act, 2026 comes into force (reported around 15 April 2026), replacing the 2025 Ordinance to become…" (2026-04-15); India — "India's private-sector AI-infrastructure build-out accelerates: Reliance announced (February 2026 AGM) a reported ₹10 lakh crore (~$110B)…" (2026-06).
A risk-based National AI Policy 2026-2030 still in draft, sitting atop a newly enacted Personal Data Protection Act 2026 and a 2025 Cyber Security Ordinance
Officials have signaled intent to draft a binding, risk-based AI law; IT Rules already binding for synthetic content
Bangladesh (tightening): Bangladesh appears to be moving from having essentially no dedicated AI or data-governance framework toward one: a first comprehensive data-protection law is now in force, a reformed cyber ordinance has replaced the 2023 Act, and a risk-based national AI policy sits in advanced draft. The direction is therefore toward more formal regulation, but implementation is genuinely uncertain — the coordinating AI agency the policy envisages does not yet exist, the AI policy is unadopted, and the whole agenda has just passed from an interim government to a newly elected one whose priorities are still being set out. Its clearest legislative marker on file is "Personal Data Protection Act, 2026" (in force). India (tightening): Officials' public rhetoric has moved from 'no separate AI law needed' toward openness to drafting one within eight months, with a senior MeitY official using hedged language about timing and no draft bill yet published. Reporting indicates the government is also weighing emergency shutdown powers for high-risk AI systems, a notably assertive tool most peer jurisdictions haven't proposed — though the specific scope and design of any such power remain unconfirmed. Its clearest legislative marker on file is "IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules 2026" (in force).
Leans on a very large IT-freelancer/BPO workforce and 'Digital/Smart Bangladesh' branding, with nascent Bengali-language-model and data-centre ambitions
IndiaAI Mission subsidised compute (38,000+ GPUs onboarded) supporting startups pursuing lower-cost ('frugal') AI approaches
Bangladesh: Moderate — the ICT Division and a2i drive digital-government and AI policy, but a dedicated AI regulator (the proposed NDGIA) does not yet exist and the national AI policy remains a draft (notable named developers: Hishab Technologies, Intelsense AI). India: Rising — from voluntary guidelines toward signaled intent to draft binding legislation, though no formal proposal has been published (notable named developers: Krutrim, Sarvam AI).
UNESCO AI-readiness assessment and long-running UNDP support for a2i; the draft policy signals an intention to accede to the Council of Europe Framework Convention on AI
AI Impact Summit host; engages G20 and UN AI governance processes
Both have live "security" debates on file (Bangladesh: "Data-protection and cyber laws that critics argue protect the state more than citizens"; India: "IT Rules 2026 takedown triggers criticised as overbroad by digital-rights groups"), suggesting overlapping strategic anxieties rather than fully independent postures.
Finalising and implementing the National AI Policy 2026-2030 while operationalising the Personal Data Protection Act 2026
High-risk-sector AI safety (banking, finance, health, critical infrastructure) is among the areas officials have flagged for a possible future law
Where each government is actually spending its attention right now — not a statement of law, but of priority.
4 tracked measures (2 proposed, 2 in force)
3 tracked measures (1 proposed, 2 in force)
Bangladesh tracks 6 government AI institutions; India tracks 1 government AI institution. Raw counts aren't a maturity score by themselves — a single binding statute can matter more than five proposals — but they mark how much formal apparatus each country has stood up so far.
Frontier-model developers, Dedicated AI regulator/institute, Adopted AI-specific law, Compute and hardware
AI-focused think tanks
The gaps recorded for each country don't overlap — each is missing something different, which is a weaker signal than a shared gap but still worth reading as "not present as of the most recent research," not "definitively absent forever."
Shared
Bangladesh
India
Bangladesh and India each describe their own state's role differently: Bangladesh — "Moderate — the ICT Division and a2i drive digital-government and AI policy, but a dedicated AI…"; India — "Rising — from voluntary guidelines toward signaled intent to draft binding legislation, though no…". Layered onto trajectory (Bangladesh tightening, India tightening), the open question this comparison actually poses is how much of each country's AI trajectory is being steered by the state versus left to market and research actors — and, for whichever side is tightening, whether that steering is increasing or easing right now.