CENTRE SEEKS ACCESS TO PHONE SOURCE CODES

NEWS: The Government of India (Centre) is considering new cybersecurity rules for smartphones sold in India. The smartphone manufacturers may be required to share their “source code” with the government or allow it to be examined in Indian labs. This proposal is part of the Indian Telecom Security Assurance Requirements (ITSAR) drafted in 2023

“source code”

• It is the core programming instructions that make a phone’s software (like iOS or Android) work.
• It reveals how the system functions internally

Under the proposed rules

• Vulnerability Analysis-detect hidden vulnerabilities, malware, or backdoors
• Mandatory Security Measures on Phones-Phones must store activity logs for at least 12 months, Govt can test updates before public rollout

SIGNIFICANCE

• Rising digital threats
• India is the world’s 2nd largest smartphone market: Any vulnerability affects national security + citizens’ privacy
• Policy intent: To reduce digital crime, protect user data

Why are tech companies opposing it?

• No global precedent: EU, US, Australia, Africa do not mandate source code access
• Source code review: Risks exposure of encryption & architecture
• Practical issues: Government approval for updates could delay urgent security patches
• Surveillance fears: Earlier, Centre mandated Sanchar Saathi app
• Withdrawn after backlash over surveillance concerns, tech firms fear similar misuse