Topics In Demand
Notification
New

No notification found.

Call for Inputs: Draft Telecom Cyber Security Amendment Rules
Call for Inputs: Draft Telecom Cyber Security Amendment Rules

July 14, 2025

14

0

On June 24, 2025, the Ministry of Communications published draft amendments (Draft Amendment) to the Telecommunications (Telecom Cyber Security) Rules, 2024 (Cybersecurity Rules) issued under the Telecommunications Act, 2023 (Telecom Act).

 

These Amendments will introduce significant modifications to Telecommunications (Telecom Cyber Security) Rules, 2024, expanding its scope to include new entities like Telecommunication identifier user entity (‘TIUEs’), strengthening compliance measures, and establishing a mobile number validation mechanism to bolster telecom cyber security.

 

New rules will define the scope and interpretation of several terms to support telecom cyber security enforcement:

  • ‘Licensee’ – means someone who holds a telecom license under the Indian Telegraph Act, 1885.
  • ‘MNV platform’ (Mobile Number Validation platform) — to help verify mobile numbers.
  • ‘TIUE’ – means any organization, other than telecom operators, that uses mobile numbers to identify customers or deliver services.

 

The government intends to set up an MNV platform to check if a mobile number matches the correct user in official records. TIUEs and other approved services will use the MNV platform to check mobile numbers. In some cases, the government may direct them to do so. A small fee will be charged for each request. The Central Government will seek support from manufacturers of telecommunication equipment that carry an International Mobile Equipment Identity (IMEI) number to enforce stricter telecom cyber security safeguards. A national IMEI database will be created to list tampered or blocked identifiers; second-hand mobile resellers will need to check this list before sale, paying ₹10 per IMEI.

 

The compliance framework will include TIUEs alongside traditional telecom operators, ensuring consistent standards across all entities handling telecom identifiers, further supporting telecom cyber security.

 

Companies involved in the sale or purchase of used mobile devices will be applying for access to the IMEI database in a prescribed format and manner, adding a layer of procedural control to prevent unauthorized access or misuse of the database.

 

If this subject is of interest to you, please send us your feedback at vertika@nasscom.in  or sudipto@nasscom.in latest by July 20, 2024. We are also happy to get on a call to discuss your feedback, if required.


That the contents of third-party articles/blogs published here on the website, and the interpretation of all information in the article/blogs such as data, maps, numbers, opinions etc. displayed in the article/blogs and views or the opinions expressed within the content are solely of the author's; and do not reflect the opinions and beliefs of NASSCOM or its affiliates in any manner. NASSCOM does not take any liability w.r.t. content in any manner and will not be liable in any manner whatsoever for any kind of liability arising out of any act, error or omission. The contents of third-party article/blogs published, are provided solely as convenience; and the presence of these articles/blogs should not, under any circumstances, be considered as an endorsement of the contents by NASSCOM in any manner; and if you chose to access these articles/blogs , you do so at your own risk.


Download Attachment

Gazette Notification Draft Telecom Cyber Security Amendment Rules.pdf

images
Vertika Misra
Director - Public Policy

© Copyright nasscom. All Rights Reserved.