Key Facts and Data Points
- No disclosure mandate: The government and MAIT refuted reports of any requirement for smartphone manufacturers to reveal source code.
- Source code definition: Set of programmed instructions governing OS, hardware functions, and applications.
- Open‑source vs proprietary: Android has open‑source components; manufacturers add proprietary modifications.
- Regulatory timeline:
- Indian Telecom Security Assurance Requirements (ITSAR), 2023 – initially mentioned source‑code disclosure; amended in 2025 to remove the provision.
- Mandatory Testing and Certification of Telecommunication Equipment (MTCTE) – governed by the Indian Telegraph (Amendment) Rules, 2017; smartphones were later excluded.
- Telecommunications Act, 2023 – led DoT and MeitY to shift smartphone certification to Bureau of Indian Standards (BIS) standards.
- Current security review: Requires internal test reports; IP and source code remain confidential.
Background and Context
- Global practice: Full source‑code disclosure is rare, limited to defence contracts. Companies like Apple keep source code private.
- India's tech sovereignty drive: Emphasis on building indigenous capabilities while safeguarding commercial secrets.
- MAIT’s role: Apex body representing India's electronics & ICT hardware sector; acts as a liaison between industry and government.
Significance for India / Governance / Policy
- Cybersecurity: Keeping source code confidential reduces attack surface and prevents exploitation.
- Ease of Doing Business: Non‑intrusive regulatory approach encourages investment and innovation.
- Intellectual Property Protection: Aligns with global IP norms, fostering R&D.
- Policy balance: Harmonises security reviews with industry concerns, supporting India's ambition for technological self‑reliance.
Related Constitutional / Legal Provisions
- Information Technology Act, 2000 – provides framework for cybersecurity and data protection.
- Telecommunications Act, 2023 – empowers DoT and MeitY to frame security standards.
- Indian Telegraph (Amendment) Rules, 2017 – basis for MTCTE regime (now largely superseded for smartphones).