9 hours ago
DoT puts out draft rules to enable mobile user validation
The Department of Telecommunications (DoT) on Wednesday published draft notifications that would allow private companies to verify the identity of a phone number's user, whether on their own, or upon receiving an order by the Union or State governments. The draft Telecommunications (Telecom Cyber Security) Amendment Rules, 2025 modify the Telecommunications (Telecom Cyber Security) Rules, 2024 released last year.
''The draft rules introduce a new category called 'Telecommunication Identifier User Entities' (TIUEs), which is so broadly defined that it could apply to almost any company using telecom identifiers such as mobile numbers to identify users or deliver services,' said Sumeysh Srivastava, who analyses the telecom industry for The Quantum Hub think tank.
'For private digital platforms, this could mean mandatory mobile number verification through a new government-run system, which brings added costs and potential technical challenges. What's concerning is that the rules don't clearly limit which types of platforms will be covered. And since many platforms already have their own ways of verifying users, it's unclear whether this added step will actually make the internet safer.'
A senior government official pointed to language in the draft that says that TIUEs 'may' suo motu or upon direction by the government, engage in the validation envisioned in the rules.
Validations would cost State and Union governments nothing, but private firms will be required to pay the government and the telecom operator upwards of ₹3 plus taxes per request.
IMEI database
On top of the groundwork for phone number validation, the draft rules also say that the government would maintain a database of International Mobile Equipment Identity (IMEI) numbers that are restricted, which would be blocked on telecom operators. IMEI numbers are unique serial numbers attached to phones and other personal electronics that use SIM cards.
' A person engaged in the sale and purchase in India of used telecommunication equipment bearing IMEI numbers, shall, prior to such sale or purchase, apply for access to the [said] database … in the form and manner as specified on the portal, along with payment of fees of ten rupees per IMEI, and ensure that it does not, directly or indirectly, undertake sale or purchase of any telecommunication equipment bearing IMEI number that is specified in such database,' the draft rules say. The draft will accept comments until July 24.
