Digital India & IT Policy

Overview

India's information technology sector is the country's most visible economic success story. From a negligible presence in the 1980s, it grew to become a $250 billion industry employing 5 million people directly and contributing nearly 8% of GDP. Yet this success is narrowly based: India dominates software services and business process outsourcing (BPO) but is almost entirely absent from hardware manufacturing, semiconductor fabrication, and operating system software. The result is a digital economy that is vibrant on the surface but structurally dependent on foreign technology at its foundations.

The Digital India programme, launched in 2015, sought to bridge this gap by building digital public infrastructure (DPI) — Aadhaar, UPI, DigiLocker, Co-WIN — that could leapfrog traditional development stages. These platforms have been genuinely transformative, but they have also raised acute concerns about surveillance, data monopoly, and the privatization of public governance. This page examines both the achievements and the structural vulnerabilities of India's digital economy.

Software Exports

India's IT services industry was born in the 1970s when multinationals began offshoring software development to take advantage of India's English-speaking engineering graduates and low labour costs. By the 2000s, India had become the world's back office.

• Major companies: Tata Consultancy Services (TCS), Infosys, Wipro, HCL Technologies, and Tech Mahindra are the "big five" of Indian IT. TCS is the world's second-largest IT services firm by market capitalization. These companies provide software development, system integration, consulting, and BPO services to Fortune 500 clients globally.
• Export dominance: Over 60% of Indian IT revenue comes from exports, primarily to North America and Europe. The sector survived the 2008 financial crisis, the COVID-19 pandemic (transitioning rapidly to remote work), and the 2023 global tech slowdown, though margin pressure is increasing.
• Employment: The IT-BPM sector employs ~5.4 million people directly and an estimated 10 million indirectly. However, job growth is slowing as automation (AI code generation, robotic process automation) displaces entry-level coding and data entry roles. The sector's hiring has shifted toward specialized skills — cloud architecture, cybersecurity, data science — that India's education system struggles to supply at scale.
• Limitations: Indian IT companies are service providers, not product innovators. They do not build operating systems, databases, search engines, or social media platforms. Their business model is labour arbitrage — billing engineers by the hour — rather than intellectual property creation. This has created wealth but not technological sovereignty.

The Hardware Gap

Despite being a global IT powerhouse, India manufactures virtually none of the hardware on which its digital economy runs. Laptops, servers, smartphones, networking equipment, and semiconductors are almost entirely imported, primarily from China, Taiwan, South Korea, and the US.

• Electronics imports: India imports over $70 billion of electronics annually, making it one of the largest import categories. Smartphones dominate, followed by laptops, servers, and components. The trade deficit in electronics is a structural vulnerability, especially given geopolitical tensions with China.
• Assembly vs. manufacturing: The government's Production Linked Incentive (PLI) schemes for mobile phones attracted Foxconn, Wistron, and Dixon to assemble iPhones and other devices in India. By 2024, India assembled ~25% of global iPhones. However, this is assembly — importing components (chips, displays, cameras, batteries) and putting them together — not genuine manufacturing with domestic supply chains.
• Component ecosystem: India's component ecosystem is minimal. There is almost no domestic production of printed circuit boards (PCBs), display panels, memory chips, or camera modules. The government has announced PLI schemes for components, but building a component industry requires years of capital investment and technical expertise.
• Labour and land: India's hardware manufacturing ambitions are constrained by high logistics costs, unreliable power supply, rigid labour laws, and land acquisition difficulties. States like Tamil Nadu, Karnataka, and Telangana have attracted investment through policy incentives, but they compete with Vietnam, Indonesia, and Mexico, which offer more favourable conditions.

Semiconductor Mission

Semiconductors (chips) are the foundational technology of the modern world — everything from smartphones to missiles requires them. India's Semiconductor Mission, launched in 2021 with an initial outlay of ₹76,000 crore, aims to establish domestic chip fabrication ("fab") and design capabilities.

• Fabrication (fabs): Building a semiconductor fab costs $5–20 billion and requires ultra-pure water, stable power, and a specialized workforce. India had no operational fab as of 2024. The government's PLI scheme attracted proposals from: (1) Vedanta-Foxconn (subsequently collapsed due to partnership disputes and lack of technology partner), (2) ISMC Digital (proposed $3 billion fab in Karnataka, stalled), and (3) Tata Electronics (partnership with Powerchip Taiwan for a fab in Gujarat, announced 2024). These projects are years from production.
• Chip design: India has a stronger position in chip design than fabrication. Companies like Intel, Qualcomm, AMD, and Nvidia have significant design centres in Bengaluru and Hyderabad, employing thousands of Indian engineers. The government's Design Linked Incentive (DLI) scheme supports domestic chip design startups, but none has yet produced a commercially significant processor.
• Strategic imperative: The COVID-19 chip shortage and US-China tensions exposed the risks of semiconductor dependence. The US CHIPS Act, EU Chips Act, and China's massive subsidies have created a global race for chip sovereignty. India's entry is late and underfunded; its success is uncertain but strategically essential.

Data Centres

Data centres are the physical infrastructure of the cloud economy — vast warehouses of servers that store data, run applications, and train AI models. India's data centre market is growing rapidly, driven by data localization requirements and cloud adoption.

• Market growth: India's data centre capacity is expected to double between 2023 and 2026, with investments from Reliance (Jio), Adani, ST Telemedia, Nxtra (Airtel), and global players (Microsoft, Amazon, Google). Mumbai, Chennai, and NCR are the primary hubs due to submarine cable connectivity and power availability.
• Data localization: The Digital Personal Data Protection Act, 2023, and sectoral regulations (RBI for financial data, NPCI for payments data) mandate that certain categories of Indian citizen data be stored within the country. This has driven demand for domestic data centres but also increased costs for global cloud providers.
• Energy and water: Data centres are energy-intensive (cooling servers requires massive electricity) and water-intensive. India's unreliable grid forces data centre operators to invest heavily in backup power (diesel generators) and renewable energy. The environmental footprint of India's digital infrastructure is growing and largely unregulated.

IT Act 2000/2008 and Digital Legislation

India's primary cyberlaw, the Information Technology Act, 2000 (amended in 2008 and 2008), was enacted to provide legal recognition for electronic transactions and to define cybercrimes. It has been supplemented by a rapidly evolving framework of data protection, intermediary liability, and digital content regulation.

• IT Act provisions: The Act criminalizes hacking, identity theft, phishing, and the publication of sexually explicit material. Section 66A, which criminalized "offensive" online messages, was struck down by the Supreme Court in Shreya Singhal v. Union of India (2015) as unconstitutional. However, similar provisions have resurfaced in state-level laws.
• Intermediary liability: Section 79 provides "safe harbour" protection to intermediaries (platforms like Facebook, Twitter, WhatsApp) — they are not liable for user-generated content if they comply with government takedown notices. The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, expanded government power to demand content removal, trace message originators (breaking encryption), and appoint grievance officers. These rules have been challenged in courts but remain in force.
• Digital Personal Data Protection Act, 2023: India's first comprehensive data protection law, modelled loosely on the EU's GDPR but with significant differences. It establishes a Data Protection Board, grants individuals rights over their data, and imposes obligations on data fiduciaries. Critics argue that the Act grants excessive exemptions to government agencies ("reasonable purposes" and "national security" carve-outs) and weakens the right to information by amending the RTI Act to exclude personal data.
• Telecommunications Act, 2023: Replaced the colonial-era Indian Telegraph Act, 1885. It modernizes spectrum allocation (moving toward auctions and administrative assignment), introduces biometric SIM verification, and expands government surveillance powers over telecom networks. The definition of "telecommunication" is broad enough to cover internet-based messaging services, raising concerns about regulatory overreach.

Digital India Programme

Launched in 2015, Digital India is the umbrella initiative to transform India into a digitally empowered society and knowledge economy. Its three pillars are: (1) digital infrastructure as a utility, (2) governance and services on demand, and (3) digital empowerment of citizens.

• Aadhaar: The biometric identity system (1.3 billion enrolled) underpins most digital government services. While it has reduced leakage in welfare programmes, it has also been linked to surveillance concerns, exclusion errors (particularly for manual labourers whose fingerprints degrade), and data breaches. The Supreme Court's Puttaswamy judgment (2017) affirmed privacy as a fundamental right but upheld Aadhaar's constitutionality for limited purposes.
• DigiLocker: A cloud-based document storage system linked to Aadhaar, allowing citizens to access digital versions of driving licenses, academic certificates, and government IDs. Over 150 million users as of 2024.
• Co-WIN: The COVID-19 vaccination platform demonstrated the scalability of Indian DPI, registering 1 billion vaccinations and issuing digital certificates. It was later exported as a model to other countries.
• BharatNet: The rural broadband project aims to connect 250,000 gram panchayats with optical fibre. Progress has been far slower than targets, with significant cost overruns and implementation gaps.

UPI Ecosystem

The Unified Payments Interface (UPI), launched by the National Payments Corporation of India (NPCI) in 2016, is India's most successful digital public infrastructure. It enables real-time, interoperable bank-to-bank transfers using mobile phones.

• Scale: UPI processed over 12 billion transactions per month in 2024, with a total annual value exceeding ₹200 lakh crore. It is the largest real-time payment system in the world by volume, surpassing China's Alipay and WeChat Pay.
• Architecture: UPI is a protocol, not an app. Multiple apps (PhonePe, Google Pay, Paytm, BHIM, bank apps) operate on the UPI rails. Transactions are free for users; merchants pay a small fee (MDR) that was waived for small transactions to drive adoption.
• Financial inclusion: UPI has brought millions of small merchants into the formal financial system. Street vendors, autorickshaw drivers, and kirana stores now accept QR-code payments. The integration with Aadhaar-enabled Payment System (AePS) and RuPay cards creates a layered digital finance ecosystem.
• International expansion: UPI has been linked to Singapore's PayNow, UAE's Instant Payment Platform, and France's Lyra. India is promoting UPI as a model for the Global South, though interoperability and regulatory harmonization remain challenges.
• Concerns: The concentration of UPI transactions in foreign-owned apps (PhonePe, owned by Walmart/Flipkart, and Google Pay dominate market share) raises questions about data sovereignty. NPCI's proposal to cap market share (30% per app) has been delayed. The zero-MDR policy for small transactions has made UPI a loss-leading public utility, requiring cross-subsidization.

Sources