DoT Unveils Stricter Cybersecurity Regulations for Enhanced Digital Safety

The Department of Telecommunications (DoT) in India has unveiled a significant proposal aimed at enhancing the country’s telecom cybersecurity framework. This initiative seeks to establish a centralized platform for mobile number and identity verification, targeting online fraud and spoofing. The draft notification outlines the creation of a ‘Mobile Number Validation’ (MNV) system, which will be accessible to telecom operators and various authorized entities, including banks and e-commerce platforms, for a fee.

Proposed Mobile Number Validation Platform

The DoT’s draft notification for the amended Telecommunications (Telecom Cyber Security) Rules, 2024, introduces the MNV platform as a key component in combating cyber threats. This platform will allow authorized stakeholders to verify users’ mobile numbers, thereby enhancing security measures across digital transactions. Telecom operators, banks, financial institutions, and e-commerce companies will have access to this service, which is designed to streamline the verification process. The proposed fee structure includes a charge of Rs 1.5 per verification request for government-authorized entities, while others will incur a fee of Rs 3.

The MNV platform is part of a broader strategy to bolster telecom security. The government plans to establish this system either directly or through an authorized agency. Additionally, device manufacturers may be required to assist in identifying tampered devices that use duplicate IMEI numbers, contributing to a more secure telecommunications environment.

Immediate Suspension of Mobile Numbers

One of the notable provisions in the draft rules allows the government to suspend a mobile number without prior notice if deemed necessary for public interest. This measure aims to provide law enforcement agencies and authorized government bodies with the ability to act swiftly in response to potential security threats. Furthermore, the rules empower these entities to collect transaction histories involving mobile numbers from non-telecom organizations, enhancing their ability to investigate fraudulent activities.

The introduction of a new category, ‘Telecommunication Identifier User Entities’ (TIUEs), is also significant. This category encompasses all businesses and platforms that utilize mobile numbers for customer authentication, such as banks verifying UPI-linked numbers. This classification aims to ensure that all entities involved in mobile number verification adhere to the new cybersecurity standards.

Implementation and Pilot Programs

As part of the rollout of the MNV system, at least one major bank has already begun piloting the platform. This pilot program focuses on flagging mobile numbers associated with fraudulent transactions, leading to a temporary deactivation period of 90 days. After this period, the history of the flagged number will be deleted to prevent complications for future users. This proactive approach is expected to enhance the overall security of digital transactions and reduce instances of fraud.

The DoT’s proposed changes have sparked discussions regarding their potential impact on data privacy and compliance costs, particularly for smaller digital platforms and startups. Experts acknowledge the importance of strengthening cybersecurity but caution that operationalizing such a system may present challenges, including integration complexities and the need for robust data protection measures.

Public Feedback and Future Considerations

The DoT has opened the floor for public comments on the draft rules, allowing stakeholders to voice their opinions and concerns within 30 days of publication. This feedback period is crucial for refining the proposed regulations and ensuring that they effectively address the challenges posed by online fraud while balancing the need for data privacy.

As the digital landscape continues to evolve, the DoT’s initiative represents a significant step toward securing India’s telecommunications infrastructure. However, the successful implementation of these rules will depend on collaboration among various stakeholders, including telecom operators, financial institutions, and regulatory bodies, to create a secure and efficient verification system that protects users from cyber threats.

Observer Voice is the one stop site for National, International news, Sports, Editor’s Choice, Art/culture contents, Quotes and much more. We also cover historical contents. Historical contents includes World History, Indian History, and what happened today. The website also covers Entertainment across the India and World.

Follow Us on Twitter, Instagram, Facebook, & LinkedIn