{"id":402328,"date":"2026-01-12T04:38:07","date_gmt":"2026-01-12T04:38:07","guid":{"rendered":"https:\/\/www.newsbeep.com\/us\/402328\/"},"modified":"2026-01-12T04:38:07","modified_gmt":"2026-01-12T04:38:07","slug":"indias-proposed-phone-security-rules-that-are-worrying-tech-firms","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us\/402328\/","title":{"rendered":"India’s proposed phone security rules that are worrying tech firms"},"content":{"rendered":"

NEW DELHI, Jan 11 (Reuters) – Below are key security requirements<\/a> India is proposing for smartphone makers like Apple and Samsung, prompting opposition from tech companies, according to four sources, as well as industry and government documents seen by Reuters.<\/p>\n

SOURCE CODE DISCLOSURE:<\/p>\n

Sign up here.<\/a><\/p>\n

Manufacturers must test and provide proprietary source code for review by government-designated labs to identify vulnerabilities in phone operating systems that could be exploited by attackers.<\/p>\n

Industry group MAIT, which represents Apple (AAPL.O), opens new tab<\/a>, South Korea’s Samsung (005930.KS), opens new tab<\/a>, Google (GOOGL.O), opens new tab<\/a>, China’s Xiaomi (1810.HK), opens new tab<\/a>, has told the government this is “not possible” due to corporate secrecy and global privacy policies.<\/p>\n

BACKGROUND PERMISSION RESTRICTIONS:<\/p>\n

Apps cannot access cameras, microphones or location services in the background when phones are inactive. Continuous status bar notifications are required when these permissions are active.<\/p>\n

Manufacturers say this lacks any global precedent and there is no specific test method prescribed.<\/p>\n

PERMISSION REVIEW ALERTS:<\/p>\n

Devices must periodically display warnings prompting users to review all app permissions, with continuous notifications. Companies say notice should be limited to “highly critical” permissions.<\/p>\n

ONE-YEAR LOG RETENTION:<\/p>\n

Devices must store security audit logs, including app installations and login attempts, for 12 months.<\/p>\n

MAIT argues consumer phones lack the storage capacity for a year of data.<\/p>\n

PERIODIC MALWARE SCANNING:<\/p>\n

Phones must periodically scan for malware and identify potentially harmful applications.<\/p>\n

Manufacturers warn that constant on-device scanning significantly drains the battery and slows hardware performance.<\/p>\n

OPTION TO REMOVE PRE-INSTALLED APPS:<\/p>\n

All pre-installed apps bundled with the phone operating system, except those essential for basic phone functions, must be deletable.<\/p>\n

Companies argue many apps are critical system components that cannot be removed.<\/p>\n

INFORMING GOVERNMENT OF MAJOR UPDATES:<\/p>\n

Phone makers must notify a government organisation before releasing any major updates or security patches.<\/p>\n

Manufacturers argue this is “impractical” because security fixes must be released quickly to protect users from active exploits, while government delays could leave users vulnerable.<\/p>\n

TAMPER-DETECTION WARNINGS:<\/p>\n

Devices must detect if phones have been rooted or “jailbroken”, where users bypass built-in security restrictions, and display continuous warning banners to recommend corrective measures.<\/p>\n

Companies say there is no reliable mechanism to detect jailbreaking.<\/p>\n

ANTI-ROLLBACK PROTECTION:<\/p>\n

Phones must permanently block installation of older software versions, even if officially signed by the manufacturer, to prevent security downgrades.<\/p>\n

There is no global standard related to this requirement, manufacturers say.<\/p>\n

Reporting by Munsif Vengattil and Aditya Kalra; Editing by William Mallard<\/p>\n

Our Standards: The Thomson Reuters Trust Principles., opens new tab<\/a><\/p>\n

Purchase Licensing Rights<\/a><\/a><\/p>\n

Based in Bengaluru, Munsif Vengattil leads Reuters’ technology news coverage in India. He tracks themes at the intersection of tech, business, and labor.
\nA reporter for nine years, Munsif has written extensively on India’s electronics manufacturing aspirations and its tech policy space, AI and election interference, satellite internet, streaming wars, and data breaches. His stories also focus on investigating corporate strategies and revealing India-specific initiatives and challenges of the biggest of tech firms – from Apple, Facebook, and Google, to Foxconn, Samsung, and Nvidia.<\/p>\n

<\/a><\/p>\n

Aditya Kalra is the Company News Editor for Reuters in India, overseeing business coverage and reporting stories on some of the world’s biggest companies. He joined Reuters in 2008 and has in recent years written stories on challenges and strategies of a wide array of companies — from Amazon, Google and Walmart to Xiaomi, Starbucks and Reliance. He also extensively works on deeply-reported and investigative business stories.<\/p>\n","protected":false},"excerpt":{"rendered":"NEW DELHI, Jan 11 (Reuters) – Below are key security requirements India is proposing for smartphone makers like…\n","protected":false},"author":2,"featured_media":402329,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[182548,184369,3995,184327,182526,89749,28,16545,184713,183332,182530,23592,182542,184714,183348,184386,183349,184394,183340,183346,183353,183343,183357,184389,183341,184988,191431,183091,183350,184387,183360,183342,183358,183356,194137,183351,183355,184391,184707,88955,184325,184328,184368,184941,187627,182531,23095,417,184753,35946,182549,183075,183076,184748,12074,183077,183078,184750,189763,184592,183080,183083,68437,183084,172,183339,26311,25,183086],"class_list":["post-402328","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-amers","tag-anlins","tag-asia","tag-asxpac","tag-bact","tag-biz","tag-business","tag-civ","tag-clj","tag-cmpelc","tag-cmpny","tag-cn","tag-cprod","tag-crim","tag-destabn","tag-destabx","tag-destafa","tag-destbnx","tag-destcsa","tag-deste","tag-destfun","tag-destg","tag-destgns","tag-destj","tag-destlby","tag-destnoinbsm","tag-destnointim","tag-destoustcm","tag-destpsc","tag-destrast","tag-destrbn","tag-destreulb","tag-destrws","tag-destrwsa","tag-destsns","tag-destu","tag-destucdptest","tag-destz","tag-dip","tag-dli","tag-easia","tag-emrg","tag-erep","tag-exclsv","tag-fraud1","tag-gen","tag-hack","tag-in","tag-kr","tag-lobby","tag-namer","tag-netsv","tag-news1","tag-phne","tag-phones","tag-pol","tag-publ","tag-regs","tag-rsbipolitical-lobbying","tag-sasia","tag-soci","tag-srchen","tag-sustainable-business","tag-swit","tag-tech","tag-teeq","tag-tmt","tag-us","tag-www"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/402328","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/comments?post=402328"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/posts\/402328\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media\/402329"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/media?parent=402328"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/categories?post=402328"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us\/wp-json\/wp\/v2\/tags?post=402328"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}