Telecommunications Regulation and Intellectual Property Rights
Source:The Hindu ↗
Why It Matters
Highlights the ongoing regulatory balancing act between ensuring robust national cybersecurity (vetting hardware and software for backdoors) and protecting corporate intellectual property (IPR) rights like trade secrets. It is highly relevant for GS-3 topics involving internal security challenges in cyberspace, telecommunications infrastructure, and intellectual property.
Summary
The Ministry of Electronics and Information Technology (MeitY) and the smartphone industry body MAIT have denied reports that the government mandated manufacturers to share their operating system source codes. The alarm was triggered by a 2023 draft of the Indian Telecom Security Assurance Requirement (ITSAR) created by the DoT’s National Centre for Communication Security, which sought source code disclosure for security vulnerability tests. After the industry expressed significant concerns regarding intellectual property (IPR) violations, the government amended the guidelines in June 2025. The new rules only require an internal test report outlining vulnerabilities without compromising proprietary IP information. Furthermore, jurisdiction over smartphone security has been shifted from DoT to MeitY.
Key Points
- The IT Ministry (MeitY) and the Manufacturers’ Association for Information Technology (MAIT) have clarified that the government has not demanded source codes of smartphone operating systems.
- Confusion originally stemmed from a 2023 draft of the Indian Telecom Security Assurance Requirement (ITSAR) issued by the Department of Telecommunications (DoT), which included a clause mandating source code disclosure for vulnerability analysis.
- Following industry pushback citing concerns over intellectual property (IP) rights, the clause was amended in June 2025 to remove the source code requirement.
- Under the amended guidelines, manufacturers must submit an internal test report detailing vulnerability assessments, explicitly excluding proprietary IP information.
- Regulatory oversight for smartphone hardware and operating system security has now been transferred from DoT to MeitY.
Important Terms
Indian Telecom Security Assurance Requirement (ITSAR)
Security standards developed by the NCCS (under DoT) to test and certify telecom equipment. They ensure infrastructure resilience against cyber threats and unauthorized vulnerabilities.
UPSC context
GS Paper III: Cyber Security. Tests understanding of regulatory frameworks ensuring the integrity of critical communication infrastructure.
National Centre for Communication Security (NCCS)
A specialized center under the Department of Telecommunications responsible for developing security standards (ITSAR) and certifying telecom products to safeguard national security.
UPSC context
GS Paper III: Security. Relevant for institutional measures against data breaches and supply chain vulnerabilities in telecom.
Ministry of Electronics and Information Technology (MeitY)
The nodal ministry for electronics, IT, and digital governance policy. It spearheads Digital India and regulates cybersecurity through agencies like CERT-In.
UPSC context
GS Paper II: Government Policies. Tests knowledge of nodal agencies driving technological sovereignty and digital regulation.
Manufacturers’ Association for Information Technology (MAIT)
The apex industry body representing India’s IT hardware and electronics sector. It advocates for policy reforms, domestic manufacturing, and IPR protection.
UPSC context
GS Paper II: Pressure Groups/Associations. Exemplifies how industry bodies influence government policy and balance security with business interests.
Department of Telecommunications (DoT)
A department under the Ministry of Communications responsible for telecom licensing, spectrum management, and international coordination in telecommunications.
UPSC context
GS Paper II: Statutory/Regulatory Bodies. Tests understanding of inter-departmental jurisdiction and regulatory shifts in the tech sector.
Prelims Trap
Smartphone manufacturers must share their OS source code with the DoT for security clearances under ITSAR guidelines.
The source code mandate was dropped in June 2025 to protect IPR. Furthermore, smartphone security jurisdiction has shifted from DoT to MeitY.
Static Concepts Connected
How is proprietary software and source code protected in India?
- Copyright Law: Computer programs, including their source codes, are protected as "literary works" under the Copyright Act, 1957.
- Trade Secrets: India lacks a dedicated trade secret statute; protection relies on the Indian Contract Act and common law principles governing breach of confidentiality.
How is cybersecurity jurisdiction divided between DoT and MeitY?
- DoT (Telecom): Secures core telecom networks and equipment. NCCS formulates the Indian Telecom Security Assurance Requirements (ITSAR) for network infrastructure.
- MeitY (IT): Regulates broader cybersecurity (CERT-In), data protection, electronics manufacturing, and oversight for smartphone hardware and operating system security.
Cross-Topic Patterns
Telecom Supply Chain Security
ITSAR requirements link directly to the National Security Directive on Telecommunication Sector (NSDTS), which mandates telco procurement exclusively from designated 'Trusted Sources' to prevent cyber backdoors.
Algorithmic Transparency vs. IPR
The pushback against sharing source code mirrors global AI regulation debates, where states want to audit algorithms for security vulnerabilities while tech companies refuse to expose core intellectual property.
Expect a 2026 prelims statement testing the exact regulatory boundary between DoT (telecom networks) and MeitY (smartphone OS security).
Linked PYQs · 2
Linked PYQs · 2
- 2017MainsGS3
Discuss the potential threats of Cyber attack and the security framework to prevent it.
- 2014MainsGS3
In a globalized world, Intellectual Property Rights assume significance and are a source of litigation. Broadly distinguish between the terms-Copyrights, Patents and Trade Secrets.
