Introduction: The Algorithmic Paradox in Indian Financial Markets
The rapid democratisation of Indian financial markets over the past decade has been catalysed by the proliferation of Financial Technology (FinTech) platforms. Driven by cheap data, frictionless UPI integration, and mobile-first trading architecture, millions of retail investors have entered capital markets. However, beneath this technological democratisation lies a structural regulatory hazard: the deployment of artificial intelligence (AI), machine learning algorithms, and automated “robo-advisory” engines that deliver automated investment strategies, quantitative trade signals, and automated portfolio management.
While traditional financial advice in India is bound by strict statutory registration, suitability requirements, and fiduciary obligations under the Securities and Exchange Board of India (SEBI), AI-driven FinTech platforms operate in a regulatory shadow. These platforms routinely disclaim all liability through complex user agreements, asserting that their algorithmic outputs are merely “informational software tools”, “automated analytics”, or “technology services”. When algorithmic models fail—whether due to flawed code, hallucinated market data, black-box trading loops, or systemic market distortion—retail investors bear the full brunt of financial losses, while FinTech entities seek refuge under intermediary liability exemptions.
The existing Indian regulatory paradigm—spanning the SEBI (Investment Advisers) Regulations, 2013, the Information Technology Act, 2000, and standard contract law—remains structurally ill-equipped to address algorithmic negligence and market distortion. Safeguarding market integrity and protecting retail capital therefore requires discarding this soft-touch approach in favour of strict statutory liability, non-excludable fiduciary duties, and mandatory algorithmic audits for all entities deploying AI-driven financial advisory tools.
The Statutory Vacuum and Safe Harbour Misuse
A. The Deficit in SEBI Investment Advisers Regulations
The cornerstone of financial advisory governance in India is the SEBI (Investment Advisers) Regulations, 2013 (IA Regulations). Regulation 2(1)(m) defines an “investment adviser” as any person who, for consideration, is engaged in the business of providing investment advice to clients or other persons or groups of persons. Furthermore, Regulation 2(1)(l) defines “investment advice” as advice relating to investing in, purchasing, selling or otherwise dealing in securities or investment products.
The fundamental flaw in the IA Regulations is that they assume all investment advice is generated by humans. The framework implicitly assumes an advice pipeline generated by a natural or legal person exercising human judgement. FinTech platforms exploit this definition by offering automated trading bots, algorithmic rebalancing, and natural language model advisory, arguing that automated code does not constitute a “person” imparting advice but rather an automated technology infrastructure utilised independently by the user. Although SEBI issued a consultation paper on robo-advisory in 2016 attempting to bring automated tools under the IA regulations, the resulting legal framework remains fragmented. Platforms bypass IA registration entirely by registering as stockbrokers or research analysts or by masquerading as pure technology service providers, thereby avoiding statutory suitability assessments mandated under Regulation 17.
B. Misappropriation of Section 79 Safe Harbour
When algorithmic advice triggers severe financial losses, FinTech platforms consistently invoke Section 79 of the Information Technology Act, 2000. Section 79 grants statutory immunity (“safe harbour”) to network service providers and intermediaries for third-party information, data, or communication links hosted or made available by them. FinTech firms contend that their platforms act as neutral conduits hosting software algorithms and that automated loss-making trade signals do not attract primary liability.
The reliance on Section 79 is legally unsustainable and contradicts established judicial doctrine. The Supreme Court of India in Shreya Singhal v. Union of India (2015) and subsequently in Google India Private Limited v. Visaka Industries (2020) definitively established that safe harbour protection under Section 79 is contingent upon the intermediary maintaining strict neutrality and fulfilling a passive, technical role. Furthermore, in Sabu Mathew George v. Union of India (2017), the Supreme Court affirmed that safe harbour protection cannot be claimed when an intermediary’s automated systems bypass or ignore statutory prohibitions. The moment an intermediary actively processes, curates, modifies, or generates tailored output using proprietary algorithms, its status fundamentally transforms from a passive conduit into an active publisher and service provider.
An AI algorithm that ingests an investor’s risk profile, executes quantitative processing, and outputs a bespoke trade directive is not a passive host of third-party data. It is an active generator of financial content. Consequently, invoking Section 79 to shield platforms from algorithmic advisory errors violates the core principles set down by the Supreme Court in Google India, creating an artificial statutory defence that must be legislatively abolished for financial applications.
Fiduciary Duties and Contractual Liabilities
A. Fiduciary Obligations and Law of Agency
Under Indian commercial jurisprudence, financial advisers stand in a fiduciary capacity to their clients. A fiduciary relationship arises where one party reposes confidence, trust, and reliance in another who possesses superior knowledge, skill, or expertise. The Supreme Court in Central Board of Secondary Education v. Aditya Bandopadhyay (2011) reiterated that the hallmark of a fiduciary relationship is the obligation to act with utmost good faith, loyalty, and due care for the benefit of the beneficiary. Similarly, in Reserve Bank of India v. Jayantilal N. Mistry (2016), the apex court emphasised that financial regulatory entities and advisers are bound by strict obligations of trust and transparency.
FinTech platforms attempt to contract out of this fiduciary obligation by embedding fine-print disclaimers into digital onboarding workflows, asserting that no advisory or fiduciary relationship is established. However, under Section 182 of the Indian Contract Act, 1872, an algorithm functions as an automated agent deployed by the platform (the principal) to engage with the user. The platform cannot benefit from the scale, fees, and user engagement generated by automated agents while simultaneously repudiating the fiduciary duties attached to the agency relationship.
B. Unenforceability of Liability Waivers
The practice of inserting blanket waivers of liability in FinTech terms of service violates fundamental contract law principles laid down by Indian courts. In the landmark decision of Central Inland Water Transport Corporation v. Brojo Nath Ganguly (1986), the Supreme Court held that courts will strike down unconscionable, unfair, and unreasonable clauses in contracts entered into between parties with gross inequality of bargaining power under Section 23 of the Indian Contract Act, 1872, as being opposed to public policy.
This principle was further consolidated in the context of consumer finance and services in Pioneer Urban Land & Infrastructure Ltd. v. Govindan Raghavan (2019), where the Supreme Court ruled that standard-form, one-sided contracts forced upon consumers without room for negotiation constitute unfair trade practices and are legally unenforceable. When a retail investor utilises an AI-driven trading platform, the click-wrap agreement containing total disclaimers for algorithmic error represents classic inequality of bargaining power. Such disclaimers, seeking to contract out of liability for platform negligence, are void under Section 23 of the Contract Act and cannot shield platforms from damages.
C. Systemic Risk and Algorithmic Negligence
Beyond individual investor harm, the unmonitored proliferation of financial AI poses severe systemic threats to capital market stability. When thousands of retail investors rely on identical or correlated deep-learning algorithms, market shocks are magnified through “algorithmic herd behaviour.” Self-learning algorithms can engage in unintended predatory order routing, artificial volume inflation, or flash crash propagation without human intervention.
Under Section 11 of the Securities and Exchange Board of India Act, 1992, SEBI is under a statutory duty to protect the interests of investors in securities and to regulate the securities market by appropriate measures. In SEBI v. Kishore R. Ajmera (2016), the Supreme Court emphasised that in market manipulation and regulatory enforcement, the standard of proof is based on the preponderance of probabilities, considering the degree of risk created for ordinary investors and the duty of market participants to maintain absolute integrity. The failure of a platform to implement systemic circuit breakers, algorithmic stress testing, and real-time oversight constitutes actionable negligence under the regulatory architecture established by the SEBI Act.
Enforcement Precedents and Statutory Crossroads
To appreciate the necessity of statutory reform, one must analyse the trajectory of regulatory enforcement by the Securities Appellate Tribunal (SAT) and SEBI regarding automated systems.
A. Lessons from the NSE Colocation Case
The vulnerabilities inherent in automated market architectures were underscored in the NSE Colocation Case (SEBI Adjudication Order, 2019). SEBI penalised the National Stock Exchange for failure to ensure equal access and robust system architecture in its automated tick-by-tick data dissemination feeds.
The core takeaway from the NSE Colocation proceedings was that market infrastructure institutions and entities operating automated algorithmic pathways owe a non-delegable duty of fairness, transparency, and technical diligence. By extension, commercial FinTech entities offering algorithmic order routing and AI trade recommendations to retail users must be subjected to the same rigorous duty of technical care.
This tension between market infrastructure transparency and private corporate status was recently highlighted in the National Stock Exchange (NSE) litigation. While a Division Bench of the Delhi High Court (2026) held that the NSE operates as a public authority due to pervasive regulatory oversight by SEBI under the SCRA—a decision currently stayed by the Supreme Court (2026)—the judicial debate highlights a fundamental truth: entities managing critical market infrastructure and automated trading pipelines perform public functions. By extension, commercial FinTech platforms that deploy autonomous AI advisory engines into capital markets cannot continue to hide behind purely private, light-touch corporate shields.
B. SEBI’s Crackdown on Unregistered Automated Advisory
In a series of recent enforcement actions, SEBI has began penalizing entities that offered automated algorithmic strategies disguised as “software interfaces.” SEBI held that providing pre-set trading strategies that automatically trigger buy/sell orders in a client’s demat account constitutes unregistered investment advisory and portfolio management services, regardless of whether the execution is fully automated or user-confirmed.
However, these enforcement actions remain ad-hoc and reactive. They target smaller, unregistered algo-vendors while large, well-funded FinTech platforms continue to operate in grey zones by branding their AI advisory engines as “smart portfolio tools” or “educational analytics.”
C. Product Liability Under Consumer Law
A critical, underutilized legal avenue for holding FinTech platforms liable is Chapter VI of the Consumer Protection Act, 2019. Section 83 of the Act establishes strict product liability, making a product manufacturer, product service provider, or product seller liable to compensate a consumer for any harm caused by a defective product or deficient service.
Section 2(11) defines a “deficiency” as any fault, imperfection, shortcoming, or inadequacy in the quality, nature, and manner of performance that is required to be maintained under any law or contract.
When an AI financial platform provides flawed trade execution signals, fails to disclose algorithmic bias, or experiences system outages during high-volatility windows, it commits a statutory “deficiency of service.”
Under Section 85 of the Consumer Protection Act, 2019, a service provider is liable in a product liability action if the service was imperfect, faulty, or inadequate. This statutory right to compensation cannot be waived by digital click-wrap contracts.
The Way Forward: A Strict Liability and Regulatory Framework
To resolve this regulatory failure, India must replace ambiguous guidelines with a comprehensive, statutory enforcement model. The regulatory framework must be built upon four uncompromising pillars:
Pillar 1: Reclassification and Absolute Liability
The SEBI (Investment Advisers) Regulations, 2013, must be statutory amended to explicitly include “Artificial Intelligence, Deep Learning Algorithms, and Automated Decision-Making Engines” under the definition of Investment Advisers.
Any FinTech entity deploying an AI model that generates quantitative financial recommendations, asset allocations, or automated trading signals must be deemed a primary regulated adviser.
Strict Liability Rule
The platform deploying the AI engine must be held strictly liable for all financial losses suffered by retail investors resulting from algorithmic errors, software bugs, data hallucination, or unannounced model updates.
The legal standard must mirror absolute liability: proof of fault or intent shall not be required; proof of causation between the algorithmic failure and the loss shall suffice.
Pillar 2: Safe Harbor Carve-Out
Section 79 of the Information Technology Act, 2000, must be amended by inserting an explicit proviso:
“Provided that safe harbor protection under sub-section (1) shall not apply to any intermediary or platform that deploys automated algorithms, machine learning models, or artificial intelligence engines to generate, process, or curate financial advice, trading signals, or investment allocations for monetary consideration.”
This statutory amendment will extinguish the legal shield currently claimed by FinTech developers, forcing them to assume full commercial and tortious responsibility for their proprietary algorithms.
Pillar 3: Algorithmic Audits and Explainability
SEBI and the Reserve Bank of India (RBI) must establish a joint Algorithmic Regulatory Oversight Cell (AROC). Before any AI financial advisory model is deployed to the public, it must undergo mandatory regulatory sandboxing and auditing:
- Pre-Deployment Stress Testing: Algorithms must be subjected to simulated extreme-market events (black swan scenarios) to ensure they do not default to correlated, destabilizing market sell-offs.
- Explainability Mandate (XAI): FinTech entities must eliminate “black-box” architecture. Platforms must demonstrate the logical parameters, risk variables, and data inputs driving their AI advice to regulators.
- Real-Time Audit Trails: Platforms must maintain immutable, time-stamped logs of every algorithmic output, data feed input, and user execution for a minimum period of eight years, accessible to SEBI investigators upon notice.
Pillar 4: Statutory Compensation Fund and Minimum Capitalization
To ensure that strict liability does not remain a paper remedy against undercapitalized FinTech startups, SEBI must mandate that all entities operating AI-driven advisory engines maintain an Algorithmic Error Guarantee Fund (AEGF).
A fixed percentage of transaction revenue must be escrowed into this fund, dedicated exclusively to compensating retail investors in cases of platform-wide algorithmic failure, system downtime, or flash crash losses.
Conclusion
The promise of FinTech lies in its power to democratize wealth creation and make financial services accessible across the length and breadth of India. However, democratization without regulation is a recipe for systemic exploitation.
Allowing FinTech platforms to operate automated, high-risk AI advisory engines while seeking shelter behind passive intermediary disclaimers subverts the rule of law and exposes millions of vulnerable retail investors to unquantifiable risk.
Indian jurisprudence, rooted in the constitutional imperative of economic justice and the statutory protections of the SEBI Act, Contract Act, and Consumer Protection Act—demands that technological innovation must not outpace legal accountability.
By enforcing strict statutory liability, abolishing safe-harbor misapplication, mandating algorithmic explainability, and holding platforms directly accountable as fiduciaries, India can establish a globally benchmarked regulatory framework.
A financially resilient nation requires a market where technology serves the investor, and where those who build the algorithms remain strictly answerable to the law.
Written By: Rayees, He is an Independent legal researcher and writer.
He can be reached at: [email protected]
