Yes

>>India plans to introduce a security initiative mandating smartphone makers to submit their source code.

India plans to introduce a security initiative mandating smartphone makers to submit their source code.

crypthub

about 7 hours ago

Policy Overview

The Indian government has introduced the “Indian Telecom Security Assurance Requirements,” a package of 83 standards aimed at strengthening smartphone security. It targets the world’s second‑largest smartphone market to curb fraud and cyber threats. The move is part of Prime Minister Narendra Modi’s broader data‑security agenda.

Key Requirements

Manufacturers must submit proprietary source code to government‑designated labs for vulnerability testing. Phones must limit background access to cameras, microphones and location, show persistent permission notifications, and retain audit logs for twelve months. Additional mandates include periodic malware scans, the ability to remove non‑essential pre‑installed apps, tamper‑detection warnings, anti‑rollback protection, and advance notice before major updates.

Industry Reaction

Apple, Samsung, Xiaomi and Google, represented by MAIT, argue the rules breach secrecy, increase battery drain and exceed device storage capacity. They note no comparable requirements exist in the EU, US, Australia or Africa and claim many controls are technically infeasible. The firms have asked the ministry to withdraw the proposal.

Government Response

IT Secretary S. Krishnan said legitimate industry concerns will be considered and called the debate “premature.” A ministry spokesperson confirmed ongoing consultations with the companies. The government maintains the measures are necessary to protect Indian users.