India’s Ministry of Electronics and Information Technology recently clarified its stance on smartphone regulations, following reports that suggested the government intends to require smartphone manufacturers to share their source code and provide prior notification of software updates. The ministry stated its intent is to establish a mobile security framework through stakeholder consultations, focusing on balancing security needs and international best practices without imposing undue technical burdens.
Despite these assurances, there has been resistance from major smartphone companies such as Apple, Samsung, Google, and Xiaomi. These companies argue that potential requirements to share source code and notify authorities in advance of software updates pose significant risks, including the exposure of proprietary information and the imposition of impractical compliance measures. This pushback highlights industry’s concerns, especially regarding global precedent and the practicalities of such regulations.
Proposed measures reportedly include 83 security standards, which not only seek access to source code but also mandate the ability to uninstall pre-installed applications and require the storage of device logs for a year. Privacy advocates and tech companies have criticized these measures as invasive, suggesting they could lead to surveillance overreach, expose device vulnerabilities, and hinder the timely release of security patches. Concerns have also been raised about the feasibility of maintaining extensive device logs without draining battery life or exceeding device capacity.
The Indian government has a track record of proposing stringent tech regulations but often rolls back these initiatives after industry feedback. This includes past attempts to mandate pre-installed government apps, which were retracted due to public opposition. As consultations continue, it remains to be seen whether these proposed regulations will be adjusted to address the industry’s concerns and align with global standards while ensuring robust mobile security.

Collections

India's Ministry of Electronics and Information Technology proposed mobile security regulations requiring smartphone manufacturers to share source code, notify authorities before software updates, and implement 83 security standards including mandatory device logging and app uninstallation capabilities. Major tech companies including Apple, Samsung, Google, and Xiaomi oppose these measures, citing risks of proprietary information exposure, impractical compliance burdens, surveillance concerns, and delayed security patches. The government claims to balance security with international best practices, though it has historically rolled back similar stringent tech regulations after industry pushback.

India Debates Stringent Smartphone Software Regulations Amid Industry Concerns