On 20 August 2026, Outlook Business reported that New Delhi is weighing digital trade concessions to Washington. They would cover India's data-governance framework and market-access rules for digital services. Outlook Business says no decision has been made and the contours are still being worked out. Commerce Secretary Rajesh Agrawal said both sides are "committed to moving ahead with the framework agreed in February." The report is based on unnamed sources, so this is a negotiating posture and not a policy change. It still raises a real question: which domestic digital rules are bargaining chips, and which are public policy that should be judged on its merits?
What was actually agreed
The February framework is thin on digital detail. The US-India joint statement of 6 February 2026 says both countries "commit to address discriminatory or burdensome practices and other barriers to digital trade." It also says they will "set a clear pathway" toward digital trade rules in a bilateral trade agreement (BTA). In return, the US committed to a reciprocal tariff rate of 18 percent on Indian goods. DGA Group's analysis describes the earlier rate as 50 percent. It also says digital trade "remains largely unresolved."
That gap is where the pressure sits. A tariff cut from 50 to 18 percent is a large and immediate gain for Indian exporters. Digital rules are the sort of concession that is easy to give in a late-stage package and hard to take back.
The strongest case for conceding
The case for flexibility deserves a fair hearing. Fragmented data rules raise compliance costs for every firm, and Indian startups that sell abroad depend on predictable treatment of cross-border data. Digital provisions in trade agreements can lock in openness, bind partners to non-discrimination, and give exporters a treaty-backed remedy. Outlook notes that India has concluded an EU trade agreement with a dedicated digital-trade chapter. According to the report, it covers cross-border data flows, data localisation, e-invoicing, cybersecurity and source-code protection. If India can accept such disciplines with Brussels, it is hard to argue that the same disciplines are unacceptable with Washington.
There is also an innovation argument. Indian developers and enterprises use US cloud and AI services daily. Market-access barriers that raise the cost of those services are a tax on Indian productivity.
Why the sequencing matters
The difficulty is that India's data-governance framework is not finished. The Digital Personal Data Protection Rules were notified on 13 November 2025. Bar & Bench's summary says the core obligations, including notice and consent, security safeguards, children's data and cross-border transfers, carry an 18-month phase-in to 13 May 2027. Rule 13(4) also restricts Significant Data Fiduciaries from transferring certain traffic data abroad. Those rules are not yet enforceable, and the criteria for designating a Significant Data Fiduciary are not defined in the Rules.
A trade commitment negotiated now could therefore pre-empt a regime that has not yet been tested. Regulators would not know what compliance costs, enforcement gaps or user harms the rules produce. Trading away a rule before it has been observed is poor policy in either direction. If the rule is good, India gives up something valuable. If it is flawed, the right fix is a domestic amendment after evidence, not a treaty obligation negotiated under tariff pressure.
The design of the Act matters here too. PRS Legislative Research notes that the 2023 law allows transfers abroad except to countries the central government restricts by notification. This is a negative-list model, which is already more permissive than the 2019 Bill's adequacy approach. India's baseline on data flows is therefore relatively open. The sharper trade questions are the sectoral localisation mandates and the scope of government power to restrict transfers. Those are the items on which a concession would have real consequences.
What a proportionate position looks like
Three principles would let India extract value without surrendering policy space.
- Trade rules should bind process, not outcomes. Commitments that require transparency, notice-and-comment and non-discrimination are compatible with strong privacy law. Commitments that freeze specific regulatory choices are not.
- Keep a security and privacy carve-out that is self-judging but reviewed. Governments need room to restrict transfers for law enforcement, financial stability and national security. Overbroad carve-outs invite abuse, so the exceptions should be narrow and published.
- Treat reciprocity as the test. If India opens digital-service market access, US commitments should cover Indian service exporters. That includes visa treatment and the ability to serve US customers without data-localisation demands.
The stakes are large because the user base is large. TRAI data reported by MediaNama shows India at 1.11 billion internet subscriptions at the end of June 2026, up 21.35 million in a quarter. Rules set in a trade text will govern the digital lives of that population for years. That argues for a public consultation on any digital chapter before signature, with the text shared with Parliament and with industry and civil society groups.
The bottom line
India is right to want a trade deal and right to want cleaner digital rules. It would be wrong to let the tariff clock decide the architecture of its data governance. The better route is to let the DPDP Rules take effect, measure what they do through 2027, and negotiate digital provisions that lock in openness and non-discrimination. India should keep regulatory flexibility in the places where the evidence is still being gathered. A deal that does this serves Indian users, Indian exporters and US platforms better than a rushed trade of rules nobody has yet tested.