As AI moves from assisting business operations to making autonomous decisions, insurers face unprecedented challenges around trust, accountability and data governance, said Kalpesh Doshi, Chief Information Security Officer and Data Protection Officer at HDFC Life Insurance.
Preparing for the Digital Personal Data Protection (DPDP) Act while Shadow AI spreads quickly means organizations must rethink traditional data privacy. Because AI models can infer sensitive insights from scattered data points, strict data minimization and robust enterprise guardrails are now essential.
“When an AI algorithm goes wrong, there is no intent behind what it does, yet the impact can be catastrophic,” Doshi said. “The fundamental challenge for the tech and security community today is defining AI behavior and building elements of true accountability into these models.”
In this video interview with CISONow, Doshi also discussed:
- The shift to autonomous AI decision-making and how to establish algorithmic accountability when systems fail;
- How the DPDP Act pushes organizations toward strict data minimization to prevent unauthorized AI inferences;
- Practical ways for CISOs to enable safe AI experimentation without driving employees to risky Shadow AI shortcuts;
- Combating AI-driven deepfakes, synthetic identities and sophisticated fraud in customer KYC processes.
Kalpesh Doshi is Chief Information Security Officer at HDFC Life Insurance. With more than 25 years of experience across mainframes, data centers, cloud infrastructure and AI governance, he leads enterprise security architecture, regulatory compliance and digital trust initiatives.
