Telecom Cybersecurity rules, 2024
- ? India has more than 1.2 billion subscribers.
The Hindu - 23.11.2024
Notified by Centre
Empowers the centre or its agencies to seek trafic data and any other data, other than the content of messages from a telecom entity for the purpose of ensuring cyber security
Obligations for telecom companies
Appoint a chief telecommunications security officer
Report security incidents within 6 hours to centre
Within 24 hours of becoming aware of the incident, it is required to furnish the information on Number of users affected Duration Geographical area Extent to which functioning of the network or service is affected Remedial measures taken or proposed to be taken
A manufacturer of equipment that has an International Mobile Equipment Identity (IMEI) number, will register the number of such equipment manufactured in India with the government, before the first sale of such equipment.
December 2025
Sanchar Saathi app
India orders smartphone makers to preload state on cyber safety app.
90 days to implement the order
The November 28th order gives the major smartphone companies, Apple, Samsung, Xiaomi, and Vivo, 90 days to ensure that the app is preinstalled on new mobile phones with the provision that users cannot disable it. For devices already in the supply chain, manufacturers should push the app to phones via software updates.
Companies must submit reports within 120 days.
Authorities worldwide
India is joining authorities worldwide, to frame rules blocking the use of stolen phones for fraud or promoting state backed government service apps.
The DoT’s listing on Google Play states that the app does not collect user data, though the permissions model for the mandatory version remains unclear.
Play Store information shows the app may request access to call logs, SMS, camera, photos, videos, device and network state.
Sanchar Saathi website
The app which was already is in the form of website, launched in January, has helped recover more than 700,000 lost phones including 50,000 in October alone.
The platform receiving 2.48 lakh fraud-related complaints and nearly 2.9 crore requests to check mobile connections linked to users.
CEIR
At the heart of the system is CEIR — the Central Equipment Identity Register, a government database that records legitimate IMEI numbers of all mobile devices.
Users can file a request to block their phone’s IMEI if the device is lost or stolen. CEIR then blacklists the IMEI across all networks, rendering the phone unusable even if the SIM is swapped.
Design of the app
The app is mainly designed to help users block and track lost or stolen mobile phones across all telecom networks using a central registry. It also lets them identify and disconnect fraudulent mobile connections in their name.
The app is essential to combat serious endangerment of telecom cybersecurity from duplicate or spoofed IMEI numbers which can enable scams and network misuse.
Know Your Mobile Connections
The “Know Your Mobile Connections” feature lets users see all active numbers linked to their identity, useful for detecting unauthorised or fraudulently issued SIMs.
International mobile equipment identity (IMEI)
A 14 to 17 digit number unique to each handset, the IMEI or international mobile equipment identity is most commonly used to cut off network access for phones reported to have been stolen.
Russia's Max
Most recently in Russia, In August for a state backed messenger app called Max to be reinstalled on phones.
Apple's internal policy
Apple pre installs its own proprietary apps on the phones, its internal policies prohibit installation of any government or 3rd party app before sale of a smartphone.
