India is having a quiet but consequential argument with itself about who actually controls the internet its citizens use every day. A recent in-depth report from Open Magazine, titled 'The Sovereign and the Server,' traces this struggle across four fronts: constitutional court battles, internet shutdowns, dominant foreign tech platforms, and fast-moving AI regulation. Together, these threads reveal a country trying to assert digital sovereignty while its population's data, apps, and even AI tools remain deeply dependent on companies and infrastructure it does not control.

The stakes are not abstract. India is one of the largest internet markets in the world, and decisions made in its courts and ministries ripple out to hundreds of millions of users. Understanding this landscape matters for anyone who cares about digital freedom in India, whether you live there or simply use services built on Indian infrastructure.

From Section 66A to the Shutdown Era

The report starts with a legal marker that still shapes Indian internet policy: Section 66A of the IT Act, a provision once used to criminalize vague categories of 'offensive' online speech before India's Supreme Court struck it down for violating free expression. That ruling was celebrated as a win for digital rights, but the report argues the underlying tension it exposed, the state's desire to control online speech versus citizens' right to it, never really went away.

Instead, that tension resurfaced in a different form: internet shutdowns. Rather than prosecuting speech after the fact, authorities in various regions have increasingly opted to cut access altogether during periods of unrest or sensitive events. This is a pattern seen well beyond India. Russia, for instance, has moved toward a national 'whitelist' system that determines what citizens can access at all, a shift documented in Russia's Internet Whitelist: Why VPNs Matter More Than Ever. When governments block the internet rather than argue over specific content, the effect on ordinary users, students, small businesses, journalists, is often broader and harder to challenge in court than a single bad law.

The report frames Net Neutrality as the quieter cousin of this debate: a principle meant to ensure that internet service providers treat all traffic equally, without favoring certain apps, platforms, or content. Where net neutrality erodes, so does a citizen's practical ability to access information on their own terms, even without an outright shutdown.

Facial Recognition and the New Surveillance Layer

Beyond speech and access, the report highlights a growing layer of biometric surveillance: facial recognition systems being adopted by Indian authorities for law enforcement and public security purposes. This is presented not as a single dramatic policy but as an incremental expansion, cameras and matching systems deployed piece by piece, often without the kind of public debate that accompanied earlier fights like the Section 66A case.

The concern raised is a familiar one in privacy circles: once biometric identification infrastructure exists at scale, it tends to expand in scope over time, and it is difficult to meaningfully consent to or opt out of. For everyday Indians, this means an increasing share of public life, walking through a train station, attending a rally, moving through a city, can be logged and matched against a database without their direct knowledge.

Foreign AI Models and the Question of Data Sovereignty

The report's final and perhaps most forward-looking thread concerns artificial intelligence. Much of the AI infrastructure Indian citizens and businesses now rely on, from chatbots to recommendation engines, is built and controlled by companies headquartered outside India. This raises a sovereignty question distinct from traditional censorship debates: if the models shaping information, hiring decisions, or financial services are trained and governed by foreign entities, how much control does India actually retain over its own digital environment?

This is part of why India is now moving to develop AI-specific regulation, though the report notes this effort is still emerging rather than settled. The core tension is the same one running through the entire piece: a government trying to assert sovereignty over a digital space that is, by design, built on globally distributed infrastructure and platforms it does not own.

What This Means For You

If you live in India or rely on Indian digital services, this report is a reminder that digital freedom in India is not decided by one law or one court case. It is shaped continuously by overlapping decisions about speech, access, surveillance, and AI governance. Practically, that means:

  • Internet access itself can become a variable, not a constant, during politically sensitive periods.
  • Biometric data collection is expanding quietly and may not require your active participation to affect you.
  • The AI tools you use daily may be governed by foreign company policies rather than Indian law, at least for now.

None of this is unique to India. Countries from Russia to France are wrestling with similar questions about who controls digital infrastructure, as seen in incidents like the breach claims against France's government messaging app Tchap, which underscore that even sovereign, government-built platforms carry real security risk.

Takeaways

Stay informed about local internet access conditions, especially if you travel to or operate a business in regions with a history of shutdowns. Understand what biometric data your government or employer may be collecting and whether opt-out mechanisms exist. Read the privacy policies of AI tools you rely on, and where possible, favor services that are transparent about data handling and jurisdiction. Digital freedom in India, as this report makes clear, is an ongoing negotiation, not a fixed status, and staying informed is the first step toward protecting your own place within it.