Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{187674,
        author = {Ananthika GP and Dhanashree R},
        title = {Cyber Attacks on Autonomous Vehicles and the Adequacy of India’s Legal Framework},
        journal = {International Journal of Innovative Research in Technology},
        year = {2025},
        volume = {12},
        number = {6},
        pages = {6452-6467},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=187674},
        abstract = {Artificial intelligence (AI) and complex interconnected system enable autonomous vehicle (AVs) which are transforming international transportation. However, their implementation in India is still in its infancy and it is limited by legal infrastructure and technical issues. This research frames AVs are sophisticated computer networks and cyber physical system which falls under definition of computer, computer network, computer system and resources stated in Section 2(1)(i), 2(1)(j), 2(1)(k) and 2(1)(l) of Information technology Act of 2000. Continuous data exchange facilitates navigation, hazard identification and traffic control and also makes AVs vulnerable to cyber threats like remote hacking, unauthorized access and misuse of operational or personal information. This research integrates the effectiveness of India’s existing legal framework in IT Act 2000 and DPDP Act 2023 handling cyber security and data privacy issues. Best practices and new regulatory trends are highlighted from countries like US and EUframework including NHTSA’s safety standards and GDPR data protection principles. The need for robust legal and technical protections such as secures software development, intrusion detection and prevention system are underscored by numerous AV cyber security incidents. This study ultimately argues that India does not need a new AV- specific legislation; instead, it requires a limited amendment under Section 43A and Section 70B IT Act, enhanced cyber resilience measures and a need for implementation of AIS 189 guidelines which currently remain non-mandatory and lack binding certification timelines and safety-disclosure obligations.},
        keywords = {Autonomous vehicle, AIS 189, Cyber security, IT Act 2000},
        month = {November},
        }