Particle.news
Download on the App Store

India Proposes Sweeping Phone Security Rules Requiring Source‑Code Review

Officials signal openness to revisions, with further consultations scheduled.

Overview

  • An 83-point framework would mandate government-accessible source-code review, pre-notification of major software updates, and the option to delete pre-installed apps.
  • Other proposed requirements include restricting background access to cameras and microphones, periodic malware scanning, one-year on-device log retention, anti-rollback protections, and tamper-detection warnings.
  • Apple, Samsung, Google, Xiaomi, and industry body MAIT object to key measures as unprecedented and commercially sensitive, with MAIT calling source-code review “not possible.”
  • The IT ministry is weighing whether to make the standards legally binding, and officials and company executives are slated to meet on Tuesday for further talks.
  • IT Secretary S. Krishnan says legitimate concerns will be considered, as the government cites rising fraud and data breaches in a market with nearly 750 million phones.