India’s Smartphone Security Plan Sparks Privacy Concerns
The Indian government has proposed new smartphone security rules that could require companies to share source code and retain phone logs for a year. The plan has faced backlash from privacy experts and technology firms over fears of increased surveillance.
Tech Companies Push Back
Apple and Samsung have reportedly raised objections to the proposal, according to confidential government and industry documents reviewed by Reuters. The companies worry that giving the state access to source code could compromise user trust and device security.
Government Response
India’s IT Ministry said it will address legitimate concerns from the industry through ongoing consultations. It also denied plans to demand source code but did not comment on the documents cited by Reuters.
Privacy Advocates Speak Out
The Internet Freedom Foundation strongly rejected the proposed rules. The group argued that they give the state excessive control over how users interact with their own devices, creating risks for privacy and free speech.
Conflict of Interest Concerns
The ministry recently canceled a meeting with tech firms meant to discuss feedback. Critics warn that requiring companies to notify officials before releasing security updates could allow the state to act both as regulator and potential exploiter of software vulnerabilities.
Legal Experts Weigh In
Akash Karmakar, a technology law partner at Panag & Babu, said that seeking source code “is a massive step backward” for trust and ease of doing business in India. Similarly, Raman Jit Singh Chima of Access Now warned that the proposal creates a clear conflict of interest, as the state could exploit vulnerabilities for surveillance purposes.
A Pattern of Controversy
This proposal follows a previous order that required a state-run cybersecurity app on phones. India revoked that order last month after strong opposition from privacy groups and lawmakers.
