The Rules Europe Wrote to Constrain India's AI Industry Are the Market India Should Capture

Europe's AI Law Was Built for the Wrong Industry

• and That's India's Opening Europe's AI Act was written with a specific picture in mind: software built once, tested once, approved once and sold as a finished product. India's technology industry has never worked that way. Large IT services firms and the global capability centres in Bengaluru and Hyderabad run on continuous, client-specific adaptation - updates that respond to a customer's shifting needs, not a fixed product roadmap frozen at launch. Under the Act's Article 43, any "substantial modification" to a high-risk AI system after its initial conformity assessment triggers a fresh one and a firm that substantially modifies someone else's system can inherit that system's entire compliance burden. For an industry whose selling point is responsive, on-demand improvement, this is a genuine structural mismatch, not a minor compliance inconvenience. The instinct in most coverage of this story has been to frame it as a threat: Indian IT now faces new friction in its largest AI-adjacent export market. That framing is not wrong, but it stops one step too early. The same mismatch that creates friction also creates demand - and demand, for an industry built on service delivery, is a market. High-risk compliance under the Act is operationalised entirely through paperwork and proof: governance documentation, testing regimes, technical assessment records, all of it required in volume, against harmonised standards still being finalised. Someone has to produce that documentation at scale for thousands of AI deployments across Europe. India's professional services firms already do exactly this kind of work in data protection, financial regulation and technical assurance for global clients. The compliance apparatus the EU has built for itself is, in effect, a large recurring services contract that hasn't been assigned to a vendor yet. What makes this more than a services opportunity is a specific legal detail buried in the Act: it creates a pathway for conformity assessment bodies established in third countries to be formally recognised as notified bodies, performing the same regulatory functions as EU-based assessors - where a treaty enables it. India signed exactly that treaty in January. The India-EU Free Trade Agreement includes standing regulatory cooperation machinery that could carry this recognition, if India negotiates the specific institutional arrangements to use it. That would move India from selling compliance labour to becoming a formally recognised participant inside the EU's own regulatory apparatus - assessing, not just assisting. This is the real stake in how India responds over the next two years, before the December 2027 and August 2028 compliance deadlines for high-risk systems arrive. Treating the Act purely as a market-access obstacle to be managed invites a defensive posture - compliance checklists, legal risk audits, damage control. Treating it as a services and treaty opportunity invites an offensive one - training conformity assessors now, building the technical documentation capability at scale now and pushing the FTA's regulatory cooperation clauses toward actual mutual recognition before European firms build that capacity domestically instead. The Act's mismatch with India's business model is real. Whether it becomes India's cost or India's export is still being decided and the window to decide it is not open indefinitely.