Data governance, not AI, is Indian startups' top regulatory worry: Survey

Indian startups have a bigger compliance problem than artificial intelligence rules. A survey by Oxford Economics for Digital Prosperity Asia found 44% of 350 startups, 100 venture capital firms and 100 incubators named data governance and digital trust regulations their primary headache. That is nearly double the 23% who pointed to AI regulations. Cybersecurity came third at 20%. Platform rules drew 13%.

The numbers get worse. 88% of startups said digital regulations have created operational constraints. More than a third called the impact major or severe. 75% of startups reported higher compliance spending. More than half now allocate over 5% of operating expenses to compliance. Many have hired specialised legal, cybersecurity and data governance staff.

The cost is not just in budgets. 72% of startups and investors said resources are being shifted from research and product development toward meeting regulatory requirements. Nearly two-thirds reported product launch delays and longer innovation cycles. Compliance has become part of business operations, not a back-office function.

Investor sentiment is taking a hit. 68% of startups and venture capital firms said digital regulations have increased uncertainty around investment returns. Fundraising has become harder. If regulations tighten further, the share of startups expecting investment growth would drop from 43% to 20%, according to the survey. Venture firms said they would strengthen due diligence, demand more compliance readiness and reduce exposure to higher-risk ventures.

Talent is another pressure point. More than half of startups reported rising costs for professionals with compliance, cybersecurity and data governance expertise. 63% said regulations reduced their ability to hire foreign talent or outsource work internationally. Many also struggled to attract skilled domestic workers.

Not all effects are negative. 42% of startups said regulations increased customer confidence, especially cybersecurity rules. That trust gain matters. For early-stage firms, though, the immediate compliance costs outweigh the benefit, the report found.

The report argues India's current framework is broadly supportive compared with stricter jurisdictions, particularly through its principles-based approach to AI. It warns against expanding fragmented or overlapping compliance requirements, especially in data governance where sector-specific data localisation rules pile up.

Oxford Economics ran the numbers. If India's digital regulatory environment becomes substantially more restrictive, the country could see 2,130 fewer startup formations annually between 2026 and 2035. Venture capital investment would fall 25%, or about ₹91,500 crore each year. On the flip side, a more enabling approach – assurance-based data governance rather than extensive localisation – could generate 700 additional startups annually, attract an extra ₹30,400 crore in VC and support 80,000 more startup jobs by 2035.

The design of regulation matters more than the volume. Coherent, proportionate rules coordinated across agencies can strengthen trust without killing innovation. That is the line Indian policymakers will have to walk. For investors tracking the startup ecosystem, compliance costs and regulatory uncertainty are now a first-order risk. The stock market analysis page tracks how broader market sentiment responds to shifts in Indian regulatory policy.