Daijiworld Media Network - New Delhi

New Delhi, Jan 12: The Centre’s proposal to mandate stringent new security requirements for smartphones, including sharing of source code with the government, has triggered strong opposition from global technology majors such as Apple and Samsung, according to sources familiar with the matter.

The proposed framework, comprising 83 security standards, also seeks advance intimation to the government on major software updates and patches. The measures form part of Prime Minister Narendra Modi-led government’s efforts to strengthen user data security amid rising cases of online fraud and data breaches in India, which has nearly 750 million smartphone users.

However, industry representatives have conveyed that such requirements have no global precedent and could risk exposure of proprietary and confidential information. According to documents reviewed by Reuters, smartphone makers argue that sharing source code and allowing government-led analysis could compromise secrecy, privacy and innovation.

IT Secretary S Krishnan said that the government would address legitimate industry concerns with an open mind, adding that it was premature to draw conclusions as consultations were still underway. A ministry spokesperson also declined detailed comments, citing ongoing discussions with stakeholders.

The new Telecom Security Assurance Requirements would allow designated Indian labs to access and analyse smartphone source code as part of vulnerability assessments. The proposals also include software changes enabling users to uninstall pre-installed apps and restricting background access to cameras and microphones to prevent misuse.

Industry body Manufacturers’ Association for Information Technology (MAIT), which represents Apple, Samsung, Google and Xiaomi, has raised objections, stating that no major economies in Europe, North America or Australia mandate such measures. In a confidential response, MAIT said that source code review was “not possible” due to secrecy and privacy concerns, and urged the ministry to drop the proposal.

Smartphone manufacturers have also flagged operational challenges, including mandatory periodic malware scanning, which they say could significantly drain battery life, and the requirement to store system logs on devices for at least 12 months, citing storage limitations.

The government has previously faced resistance from tech firms on security-related mandates. While it recently withdrew an order on compulsory installation of a state-run cyber safety app, it has remained firm on other measures such as enhanced testing of security cameras.

Sources said further meetings between government officials and tech executives are scheduled this week as the Centre considers giving legal backing to the draft standards framed in 2023.