India's Stringent Phone Security Rules Alarm Global Tech Firms | Quick Digest

India's Stringent Phone Security Rules Alarm Global Tech Firms | Quick Digest
India's proposed smartphone security rules, including demands for source code access and other stringent software changes, are causing significant concern among major tech firms like Apple, Google, and Samsung. The government aims to enhance user data security, but companies argue the measures lack global precedent and risk exposing proprietary technology.

India proposes new phone security rules impacting smartphone manufacturers.

Rules include demands for source code access and pre-release update alerts.

Tech firms like Apple, Google, and Samsung express strong opposition.

Companies cite concerns over corporate secrecy and global privacy policies.

Government aims to boost user data security amidst rising online fraud.

Previous reports suggested easing of blanket source code demands, but concerns persist.

India is advancing a comprehensive set of new phone security regulations that are generating considerable apprehension among leading global smartphone manufacturers, including Apple, Google, and Samsung. The proposed rules, highlighted in a recent Reuters report, mandate requirements such as the disclosure of proprietary source code for review by government-approved labs in India. Additionally, manufacturers would need to notify the government before releasing major software updates or security fixes, with the National Centre for Communication Security having the right to test these updates first. Other stipulations include restrictions on background app permissions, periodic user alerts for permission reviews, one-year retention of security audit logs, and tamper-detection warnings. Tech firms, represented by industry groups like MAIT, are vocally opposing these measures, contending that they have no global precedent and could compromise corporate secrecy and sensitive intellectual property. Apple, for instance, has historically resisted similar demands in other countries. While India's IT Secretary has indicated a willingness to address legitimate industry concerns, the proposals are viewed by companies as impractical and potentially exposing their technology to risks. The Indian government asserts that these rules are crucial for enhancing the security of user data and combating the increasing incidence of online fraud and data breaches in the country's vast smartphone market, which boasts nearly 750 million users. Although some reports from mid-2025 suggested a relaxation in the blanket requirement for source code submission, shifting towards self-declaration and requests only in exceptional circumstances, the continued emphasis on source code disclosure in recent reports indicates that this remains a contentious 'flashpoint' for the industry.
Read the full story on Quick Digest