What are India's proposed new smartphone security rules?

India is considering rules requiring manufacturers to allow government access to source code for vulnerability analysis and to notify them of software updates.

Will India mandate access to smartphone source code?

The Indian government is considering proposals that would require device makers to grant access to their source code for security analysis.

What are the concerns about India's proposed security standards for smartphones?

Industry groups worry that proposed Indian security standards could negatively impact battery life, storage, and the speed of security updates.

Home / Technology / India Considers New Smartphone Security Rules

India Considers New Smartphone Security Rules

12 Jan

•

Summary

India proposes mandatory government access to smartphone source code for analysis.
Device makers must notify government of major software and security updates.
New rules could impact battery life, storage, and update rollout speed.

India Considers New Smartphone Security Rules

India is exploring new security mandates for smartphones, which could compel manufacturers to permit government access to source code for vulnerability assessments. Device makers would also be obligated to inform the government about substantial software and security updates prior to their release. This initiative is part of a larger set of 83 security standards being considered for legal enforcement.

These proposed regulations extend to requiring periodic malware scans and retaining system logs for a minimum of 12 months. Industry groups have voiced concerns that these measures might adversely affect battery performance, lead to storage issues, and potentially slow down the deployment of crucial security patches. The government has reportedly refuted claims of demanding source code handover.

Additional recommendations include limiting app background permissions and offering users the option to uninstall preinstalled applications. Discussions between government officials and industry representatives are scheduled to further address these significant proposals. This follows recent, withdrawn proposals regarding mandatory cybersecurity app preinstallation and constant location services.