In a significant move to enhance telecommunications cybersecurity, the Indian government has introduced the Telecommunications (Telecom Cyber Security) Rules, 2024, mandating mobile manufacturers and importers to register the International Mobile Equipment Identity (IMEI) numbers of all devices with the Union government.

According to the newly notified rules, manufacturers must register the IMEI numbers of phones produced in India before their first sale. Similarly, importers are required to register IMEI numbers prior to bringing devices into the country, whether for sale, testing, research, or any other purpose.

“The registration must be completed on a designated portal in the form specified by the Central Government,” the rules state.

The rules also empower the government to direct telecommunications entities to block devices with tampered IMEI numbers from accessing telecom networks or services. This measure is expected to deter the use of tampered devices in criminal activities, which has been a recurring issue.

Telecom operators must report cybersecurity incidents affecting their networks or services to the government within six hours of detection. Detailed reports—including the number of affected users, the duration and geographical scope of the incident, and remedial measures—must be submitted within 24 hours.

If deemed necessary for public interest, the government may disclose such incidents or instruct telecom entities to do so.

The rules also authorize the government or its agencies to request traffic data and other non-content information from telecom entities to safeguard cybersecurity. Such data may be shared with law enforcement or security agencies for related activities.

The comprehensive measures reflect the government’s heightened focus on cybersecurity in the telecom sector amid rising threats and vulnerabilities. By enforcing stricter IMEI regulations and requiring swift reporting and mitigation of security incidents, the new rules aim to bolster trust and resilience in India’s telecommunications infrastructure.

These regulations are expected to impact manufacturers, importers, and telecom operators, who will now need to adhere to stricter compliance standards to operate within the country.