Strengthening Cyber Security and Data Validation in the Telecom Sector
The Ministry of Communications, Department of Telecommunications, has officially notified the Telecommunications (Telecom Cyber Security) Amendment Rules, 2025, under the Telecommunications Act, 2023 (44 of 2023). These amendments aim to enhance cyber security measures, improve validation processes for telecom identifiers, and establish new regulatory mechanisms for data integrity across telecom entities.
Background and Objective
The draft version of the rules was first published on 24 June 2025 (G.S.R. 411(E)) for public consultation. After considering the feedback received, the Central Government finalized the amendments to strengthen the Telecom Cyber Security Rules, 2024. The updated framework focuses on mitigating cyber threats, preventing identity misuse, and enforcing stricter control on telecom identifiers and equipment.
Key Amendments and Definitions Introduced
Several important definitions have been added under Rule 2 of the principal rules:
- Licensee: A person holding a license to provide telecommunication services under the Indian Telegraph Act, 1885.
- MNV Platform: The Mobile Number Validation platform established under Rule 7A for validating whether telecom identifiers correspond to actual users in databases of authorized entities or licensees.
- TIUE (Telecommunication Identifier User Entity): Any entity other than a licensee or authorized entity that uses telecom identifiers for identifying its customers or providing services.
Inclusion of TIUEs in Cyber Security Framework
The amendments extend the responsibilities and oversight of cyber security provisions to TIUEs, ensuring that all entities using telecom identifiers for communication or service delivery adhere to security standards. The Central Government can now direct both telecom entities and TIUEs to suspend or restrict the use of identifiers in case of cyber threats or misuse.
Establishment of MNV Platform for Validation
A new Rule 7A mandates the creation of a centralized Mobile Number Validation (MNV) Platform by the Central Government or an authorized agency. This platform allows:
- TIUEs and government agencies to validate telecom identifiers against authorized databases.
- Fee-based access for validation services, shared between the government and participating telecom entities.
- Strict compliance with applicable data protection laws during validation processes.
IMEI Number Regulation and Tracking
The amended Rule 8 introduces stringent provisions for monitoring and controlling International Mobile Equipment Identity (IMEI) numbers. Key measures include:
- Manufacturers are prohibited from assigning IMEIs already in use within Indian telecom networks.
- A centralized database will track tampered or restricted IMEIs.
- Sellers and buyers of used telecom equipment must verify IMEI authenticity through this database before transactions.
- Manufacturers and importers must comply with all Central Government directions regarding IMEI assignment and validation.
Enhanced Enforcement Powers
The amended rules empower the government to take immediate action in public interest without prior notice, allowing temporary or permanent suspension of telecom identifiers when cyber security risks are detected. TIUEs and telecom operators must comply with such orders promptly.
Implementation and Compliance
The Telecommunications (Telecom Cyber Security) Amendment Rules, 2025 come into effect from the date of their publication in the Official Gazette. They form part of the government’s broader efforts to secure India’s digital communications infrastructure against increasing cyber threats.
Conclusion
By expanding the scope of cyber security obligations and establishing systems like the MNV platform and IMEI tracking, the Government of India aims to safeguard telecom networks, protect users from fraud, and strengthen accountability among telecom-related entities. These amendments mark a significant step towards a more secure and transparent telecommunications ecosystem.
Keyword: Telecom Cyber Security Amendment Rules 2025
Meta Description: The Ministry of Communications has notified the Telecommunications (Telecom Cyber Security) Amendment Rules, 2025, introducing new measures for telecom identifier validation, IMEI tracking, and expanded cyber security oversight.