India Considers New Smartphone Security Rules

India is exploring new security mandates for smartphones, which could compel manufacturers to permit government access to source code for vulnerability assessments. Device makers would also be obligated to inform the government about substantial software and security updates prior to their release. This initiative is part of a larger set of 83 security standards being considered for legal enforcement.

These proposed regulations extend to requiring periodic malware scans and retaining system logs for a minimum of 12 months. Industry groups have voiced concerns that these measures might adversely affect battery performance, lead to storage issues, and potentially slow down the deployment of crucial security patches. The government has reportedly refuted claims of demanding source code handover.

Additional recommendations include limiting app background permissions and offering users the option to uninstall preinstalled applications. Discussions between government officials and industry representatives are scheduled to further address these significant proposals. This follows recent, withdrawn proposals regarding mandatory cybersecurity app preinstallation and constant location services.