ITSAR, India’s Proposed Security Framework for Smartphones
Share on:

By- Paramita Datta

The Union government is considering the legal enforcement of Indian Telecom Security Assurance Requirements (ITSAR) for smartphones, with 83 security standards, which includes  source code disclosure, software control and permission restrictions for users. India is the world’s second largest market for smartphones with nearly 750 million users,  amid rising concern of online fraud, cyber crime and data breaches has evoked the government to take stricter action and strengthen device security.

According to report, the proposed requirements have drawn strong objections from global smartphone manufacturers. Companies like Apple, Samsung, Google, Xiaomi who have market presence in India have argued that several provisions do not align with global standards and could expose sensitive or proprietary technologies. Similar concerns were raised earlier over mandatory cyber safety applications and strict testing norms for security cameras, which were introduced citing national security reasons.

These proposals are in line with PM Narendra Modi’s broader push to enhance digital security and data sovereignty. One of the very sensitive provisions in the updated ITSAR relates to access to source code which allows smartphones to function. Documents suggest that this source code is to be examined and  if necessary, should be evaluated at government sanctioned labs in India.

Tech companies have raised worries in the past regarding regulatory actions implemented by the government. Last month the government canceled a requirement for mobile devices to have a state run cybersecurity app due to worries about possible surveillance. Nonetheless, in spite of the lobbying from companies last year, the government proceeded with stringent testing mandates for security cameras, referencing surveillance concerns associated with Chinese producers.

The security standards were drafted in 2023 and have recently gained renewed attention as the government considers making them mandatory by law. Sources indicated that representatives from the IT ministry and top technology executives are anticipated to convene on Tuesday for additional talks regarding the matter.