With private firms increasingly building strategic space assets, what governance safeguards are needed for data security and oversight?

Private firms are now building strategic space assets in India. For example, TDB-DST has given ₹64.05 crore of RDI support to Bengaluru's Astrome Technologies for an AI-enabled space-based electronic intelligence (ELINT) constellation [1]. This builds sovereign capability, but it needs safeguards to keep the data secure and the firm accountable.

Why safeguards are needed

• Sensitive data: ELINT records electronic signals over chosen areas, including civilian ones. The release does not say who owns the satellites, who decides what to watch, or who keeps the data [1].
• Shift from state-built assets: EMISAT (2019) was a single satellite built by the government [5]. Strategic assets built by private firms spread responsibility across several hands.
• Policy, not law: The Indian Space Policy 2023 and IN-SPACe set the rules for private space activity [3]. The government can change these on its own, and courts cannot enforce them like a statute.

Safeguards for data security

• Sovereign control clauses: ISRO says the Government will own and control critical national space infrastructure and strategic capabilities [3]. Contracts should therefore give the state exclusive tasking rights, onshore data storage and sole access.
• Cyber-secure architecture: The inter-satellite links and AI ground software [1] should be encrypted, use vetted suppliers and face regular security audits.
• Purpose limitation: Rules on retention, deletion and sharing should keep collection of civilian signals proportionate and lawful.

Safeguards for oversight

• Statutory backing: A space activities law should give IN-SPACe enforceable licensing and penalty powers.
• Funding integrity: The RDI Fund uses disclosure, recusal and supermajority approval in its expert committee [2]. TDB should also publish the Optionally Convertible Debt (OCD) conversion terms and the milestones for each satellite [1], and the projects should be independently audited.
• Parliamentary scrutiny: The Standing Committee on S&T has already flagged the cut in RDI allocation from ₹20,000 crore (BE) to ₹3,000 crore (RE) [4]. It should also track strategic RDI projects.
• Designated end-user: The Ministry of Defence should be named as the user agency before launch. This sets a clear chain of command.

Private innovation and state control can work together. Clear contracts, a statutory regulator and audits that Parliament can check would let India gain from private deep-tech while keeping data and sovereignty secure. This fits the Atmanirbharta (self-reliance) goal set out in the Space Policy 2023.