India may require smartphone manufacturers to disclose source code

According to information provided to Reuters, India is considering a new security requirement that could require smartphone manufacturers to share their source code with the state. The proposal is part of a package of 83 security standards designed to strengthen protection against data breaches and fraud.

The requirements include that manufacturers must allow Indian authorities to review the source code in special test labs and notify the government before major software updates are released. Manufacturers must also allow pre-installed apps to be removed, apps to be blocked from using the camera and microphone in the background, and logs of system activity to be stored for at least one year.

The industry organization MAIT, which represents companies such as Apple, Samsung, Google, and Xiaomi, is reported to have told the authorities that it is not possible for them to review the source code. In a comment to Reuters, India’s IT department says it is currently in dialogue with the industry. At the same time, the department denies that the government is formally considering requiring access to source code.

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts