India’s Telecommunications (Telecom Cyber Security) Rules 2024, made under the Telecommunications Act 2023, are notified and come into force today.
Key points
- Telecom entities must appoint a Chief Telecom Security Officer.
- A telecom cyber security policy is required.
- Security incidents must be reported within six hours, with fuller details within 24 hours.
- Specified traffic and security data must be shared with the government on request.
UK telecoms and technology providers operating in India, or supplying Indian telecom entities, need incident response processes that meet the six-hour deadline.
Source: Telecommunications (Telecom Cyber Security) Rules, 2024 (Department of Telecommunications)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
