Major smartphone manufacturers such as Apple, Samsung, Google and Xiaomi have expressed resistance to a package of 83 security standards proposed by the Índia government. Essas rules, initially drawn up in 2023, include the possibility of government access to the source code of devices for vulnerability analysis. The impasse came to the fore in January 2026, with meetings scheduled between Ministério of Eletrônica and Tecnologia of Informação (MeitY) and sector executives.

The companies argue that such measures are unprecedented in markets such as União Europeia, América of Norte or Austrália. Elas highlight risks of intellectual property exposure and technical difficulties in implementations such as periodic malware scans. The Indian government justified the proposals by the need to protect user data in a market with around 750 million active devices.

Ministério refuted interpretations that it seeks direct access to the source code, stating that the queries aim to create a robust security framework. Discussões continue to balance consumer protection and technical feasibility.

Among the proposed requirements are:

• Conducting full security assessments with source code review in designated laboratories.
• Prior notification to Centro Nacional from Segurança on Comunicações of important software updates.
• Automatic and periodic malware scanning on devices.
• Storage of system activity logs for at least 12 months.

Detailed proposal requirements

The rules under discussion cover significant changes in the operation of smartphones sold on Índia. Elas include restrictions on background app permissions, such as access to the camera and microphone when the device is inactive.

Another point provides continuous notifications in the status bar whenever sensitive permissions are active. Manufacturers must allow the uninstallation of pre-installed applications, except those essential for basic device operations.

Companies’ arguments against the measures

Apple and Samsung highlighted that complete source code review compromises trade secrets. Elas claim that government laboratories could expose vulnerabilities to malicious actors.

Requiring prior approval for security patches was considered impractical. Atualizações need to be released quickly to fix critical flaws exploited by attackers.

Indian government position

Ministério of Eletrônica and Tecnologia of Informação emphasized that consultations are routine and aim to adopt best international practices. Autoridades denied intentions to force source code sharing, prioritizing the security of more than 750 million users.

The rise in online fraud and data leaks prompted the proposals. Perdas financial institutions with cybercrimes have exceeded tens of billions of rupees in recent years.

Context of the smartphone market in Índia

Índia has consolidated itself as the second largest global smartphone market, with projections of approaching 1 billion users by the end of the decade. Marcas as well as Xiaomi and Samsung dominate significant shares, while Apple grows in premium segments.

The rapid increase in digital penetration has increased the risk of cyber attacks. Incidentes reported have doubled in recent periods, mainly affecting financial transactions via UPI and banking apps.

This scenario has pressured authorities to strengthen specific regulations for mobile devices. Previous Medidas have already included requirements for local language support and electromagnetic compatibility.

History of similar regulations

Manufacturers have refused requests for access to source code in other countries, such as China between 2014 and 2016 and requests from US agencies. Essas refusals were based on protection of intellectual property and user privacy.

At Índia, debates about pre-installed apps and mandatory updates have arisen in previous years. The current package represents expansion of these discussions to broader telecommunications standards.

Technical Implications of Malware Scans

The requirement for automatic periodic scanning for malware raises concerns about battery consumption. Independent Testes indicate that continuous processes reduce autonomy by up to significant percentages on average devices.

Storing logs for 12 months also faces space limitations in capacity-constrained models. Fabricantes point out that adjustments will require redesign of hardware and software in production lines.

Restrictions on background permissions

Apps will no longer be able to access location, camera or microphone without visible user activity. Notificações mandatory periodicals will remember reviews of granted permissions.

These changes aim to reduce spying by malicious applications. Elas are in line with practices already voluntarily adopted in some operating systems.

Unauthorized change detection

Devices will need to identify rooting or jailbreaking and display ongoing alerts. Medidas anti-rollback will prevent installation of old software versions, even officially signed ones.

Such features increase security against known exploits. Elas require deep integration into iOS and Android systems.

Next steps in consultations

Meetings between MeitY and industry representatives take place regularly to refine the proposals. The government has committed to addressing legitimate concerns with an open mind.

Associations such as MAIT asked for the exclusion of items considered unfeasible. The outcome will influence not only the Indian market, but global technological regulation standards.

Indian market in numbers

Xiaomi holds around 19% of sales, followed by Samsung with 15%. Apple represents a smaller but expanding portion of the high-value segment.

The country records hundreds of millions of malware detections annually. Ataques grow with the digitalization of financial and government services.

Practical implementation challenges

Proposed changes require updates to global supply chains. Fabricantes need to adapt specific products for the Indian market, increasing operational costs.

Testing in designated laboratories requires certified infrastructure. The advance notification process for updates may delay urgent security fixes.

Balance between security and innovation

Companies argue that excessive measures inhibit the development of new features. Elas suggest alternatives based on independent certifications and voluntary audits.

The government seeks a framework that protects consumers without compromising competitiveness. Consultas continue to find common points.

The suite of standards ranges from electromagnetic compatibility to Indian language support. The integration of all items into a single regulation represents a complex regulatory challenge.

Manufacturers highlight that current practices already include robust layers of protection. Elas point to regular updates and end-to-end encryption as effective examples.

Industrial sector perspectives

Associations representing local and global producers actively participate in discussions. Elas emphasize the need for alignment with international standards to avoid market fragmentation.

The world’s second largest smartphone market attracts significant investment. Equilíbrio Regulatory influences decisions to expand factories and research centers in the country.